last executing test programs: 2.518103876s ago: executing program 3 (id=1729): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="3019", 0x2}], 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x9, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x1, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0x100, 0x2, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xffff, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x3, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x28, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x15) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd6000004000442f00fc000000000000000000000000000001242081000000000000000800000086dd080088be86ddffef10000000010000000000000008000000010000012000e0000200000000000000000700000800655800000000"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 2.220549074s ago: executing program 3 (id=1733): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0xc, 0x0, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.725118241s ago: executing program 3 (id=1738): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000004c0)={0x969c, {{0xa, 0x4e21, 0x5, @loopback, 0x2}}, {{0xa, 0x4e21, 0x3, @private1, 0xa9e}}}, 0x108) (async) listen(r1, 0x0) (async, rerun: 64) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r7, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) (async, rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3e84}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44090) (async, rerun: 64) accept4(r1, 0x0, 0x0, 0x80800) 1.61036822s ago: executing program 2 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x4, 0x4) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r4, 0xffffffffffffffff, r4, r4], 0x0, 0x10, 0xc}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x84f}]}}}]}, 0x3c}}, 0x0) sendto$inet(r5, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@delqdisc={0x24, 0x25, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0x9, 0xffff}, {0x7ff7, 0x10}}}, 0x24}}, 0x20040054) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe8c}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r1, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 1.516462588s ago: executing program 1 (id=1741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffe}]}]}]}}]}, 0x44}}, 0x4004002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) 1.503306526s ago: executing program 4 (id=1742): r0 = socket(0x10, 0x5, 0x40000026) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4, @ANYRES16=0x0, @ANYBLOB="50bdcbb9509d00000000000000005c003f80110001"], 0x7c}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.443295723s ago: executing program 3 (id=1743): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfa, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x7c}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r3, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0], 0x3ffffe17, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000001, 0x12) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r10, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3}, {}, {0x400000, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) 1.343604886s ago: executing program 4 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xef, 0xc, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x18, &(0x7f0000000800)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendto$inet6(r1, &(0x7f0000000140)="fbe5277325cb04583d6060d80a3ee1724cf7bd7f8a814c819417809a41762b19a9e9dc6e4c55d206fc957118434df96923357f860a9756f2f00c7097b79c75a29e60470f82d8a7743f098d97673167207df5467bd007df5094ec6b8b428c51b69a1525977c3700b84ffa61dd28b83b38c2a93b95ec5875071c0e3b12d35a647413ba56fd013abae5238d9ae5719a1d44fc9d402fe85561cc40017661a9c08f6d747013c94ee10368634a9ff703e50dc36ba3dce58ee800ed88f48891a78f64ee", 0xc0, 0x4000, &(0x7f0000000200)={0xa, 0x4e22, 0xebe0e08, @private0, 0x2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0xfffffffff7087adc}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) ioctl(r1, 0x7, &(0x7f00000002c0)="2bd4ea7911d3e436325b437380cfd06a9b2398898b257b27751410fd46e538e7bb3b3c0c5e050f856487c985f0ccae5edc72fe5ae53bcb5ebc01a383aec91a3227") 942.805222ms ago: executing program 4 (id=1746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000940000000a7080004400000000008000340000000000900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010"], 0x78}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000140)}, 0x20) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000280)=r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x3, 0xfff1}, {0x4, 0xa}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x44040) 940.768581ms ago: executing program 0 (id=1747): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 802.887921ms ago: executing program 0 (id=1748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x20000022) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) socket(0xa, 0x1, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0x4) r9 = accept$alg(r3, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050022bd7000ffdbdf2507000000", @ANYRES32=r11], 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000040) sendmmsg$alg(r9, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r9, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000001d40)=""/4100, 0x1004}, {&(0x7f0000003e40)=""/4080, 0xff0}, {&(0x7f0000005700)=""/4094, 0xffe}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f00000008c0)=""/122, 0x7a}], 0x5}, 0x0) 767.828919ms ago: executing program 1 (id=1749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) syz_emit_ethernet(0x1f1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000180c20000008100450086dd605a0f6501b7f1fefe8000000000000000000000000000422904040280600200fe880000000000000000000000000001fc02000000000000000000000000000032050000000000000401f9040107c910fe80000000000000000000000000002ac910fc000000000000000000000000000001000000000000000b461ee70b519853d7ccbc7343f4e87a3a105fb6c8de39df97eb1bdec71e8cc41a45a25541401fa444745c5657f37bef244a4cbf5985271005465d28af771db3963f5796ab962c57c910fe8000000000000000000000000000bb0101000401003c140000000000000103000000070800000003008003000502040104010204010001080000000000000000007569d2e539d3fd0c16c36a5fa14a5d7a56915cd364d4d9ae9f95791cd691dcecea444ec2a59971a04178ed6a4f1fd5e3d1a5e5b36830e9bac795af647878ca743a3cd4affc01ab791c493350bc485d0d43f334bb4d34fb858b426f7197609fd8ffabd1911d86fc05a59b49f8c8566c619008826ec733c20400000347e600000000000000e63a9376481f0b789d119d3d455c8bda51e650a4d3fad8593e2dc40f7f4bed82c9a0a5b889d870cb17587105ed74d1bb82ec355c5400b1dadab83f6cff65cc00000000000000"], &(0x7f0000000500)={0x0, 0x4, [0xda5, 0xf4f, 0xfbd, 0x30b]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x4, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x4, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x6, 0x2000}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x20004810) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x368b9971cc074dae, 0x1010, r1, 0x8a4b5000) 666.880532ms ago: executing program 1 (id=1750): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) getsockopt$inet_opts(r1, 0x0, 0x5e, 0x0, &(0x7f0000002e40)) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000200)=0x30) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r8, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000007}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x84) write$bt_hci(r9, &(0x7f00000000c0)=ANY=[@ANYRES64=r9], 0x6) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYRES16=r8, @ANYRES8=r4, @ANYRESHEX=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4048004) write$cgroup_subtree(r0, &(0x7f0000000700)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xa3, &(0x7f0000000340)=""/163, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0}, 0x94) ioctl$int_out(r4, 0x2, &(0x7f0000000240)) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r11, 0x107, 0x6, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000200"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, r0, 0x8, 0x0, 0xff45}, 0x94) 654.757372ms ago: executing program 2 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 607.977603ms ago: executing program 4 (id=1752): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="504ae68e"], 0x8) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="504ae68e"], 0x8) shutdown(r0, 0x1) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x138, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 582.151788ms ago: executing program 0 (id=1753): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c80)={&(0x7f0000000480), 0xc, &(0x7f0000000c40)={&(0x7f0000000900)={0x308, 0x14, 0x10, 0x70bd25, 0x25dfdbfb, {0x18, 0xde}, [@INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "b35fde447f2fd415be3b334631b51684a042d4a50cb14c770a2daae5bf89e8889cc6561f49aac01d7ca763e52bfb86fe03a4cf56fdaa48b347a920f16a98a1207f1a7b622c023f1274bad0"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "3df2b347a74a2d742d9a8442648908f73538218669df21b23e428c58d50b27c27dfa7bb207d3de1e57d844ec2859c31b00a270d254c24f9eece560f0c4ddc393237eedf222686685baed9086121db4f847af51a39eabf78639afa9c6e8d448c2076806c6dabe9e6d7a89d8e7c4a15afd1d909bc467b53f62770e298aa94e72065c03448c273eabfabae6f9772ae259"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "8da6d5b4cd75f7c66e1f3456d8ac48d8f7f89c74e0dffa"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "d4d677999d3a25c049dd444e9b9e62ededce72c9d53bf7ced963f491308599865ccc19bf9a7b5641276a2cc45021482795f87d7d5bb2213edd92a2748a1ab37157b89aac0d569953e021dd0712"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "f94e0d1f546ae09dc2f6763dcdce86a0ec4458af9ac281a76ed1501ad22e6779d52adbe3450f064169d1fd7c56abda35cdfcf01dab071ec2832ecbf5313a64cf3db8220b5dade5472d1d4c75eaf6a2cbf84e34d9d203137243c66e7de0de2602d0c06a4b5ca6985cf25084e10e016d265771549104c5fe3c0f7f4f3b6d811fe007f9f908174aceee6a13792823d9ac6f6c35db5ae9ec92f4a64ecaf63305d574cc69630f016d96889ba849ee"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "aef8dd905d15f1c093d6b6e975ae57206a70aaa332d95025503a7a43ee3a8cc6cf6d3303936dbceed19a1daf75ad35a547abd72919bf6e9dd21c73cb29c2fc59ed68de4d4be42db65550157dd3fcd4e557152bdd816729ba72adb0fe957bc2b88a4065861ff72263394be2da80d217f7720295594b692f0a97a73a1bd8279651d23fc9710a8c406d75ccd2535523e915a5100e169fbfe2034946585d3da4e2b172f204c7eee8"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "9dedf86c7ccf5e14689d7b3bfba79e6747052383ffadd8b47ca483b5ce7e5dc109410576c82cd5f0ed58002b7ff1ab40d5e1"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "0eacb2fe36f715"}]}, 0x308}, 0x1, 0x0, 0x0, 0x4}, 0x4044010) r1 = socket(0x10, 0x2, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x974) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) shutdown(r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x38, r3, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x23}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x310}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x10) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x8}}], 0x1, 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 462.786795ms ago: executing program 2 (id=1754): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x2010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="880000000001010400000000000000000200080001007f00000200050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001400000000008000340000000000800024000"/136], 0x88}}, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4090) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) (rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0x7}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_cbq={{}, {0x0, 0x2, [@TCA_CBS_PARMS={0x0, 0x1, {0x8c, '\x00', 0x2, 0x8, 0x8000, 0x8}}, @TCA_CBS_PARMS={0x0, 0x1, {0x6c, '\x00', 0x3, 0xb03, 0x6, 0x9}}, @TCA_CBS_PARMS={0x0, 0x1, {0x0, '\x00', 0xfffffff9, 0x100, 0xfffffffc, 0x7}}, @TCA_CBS_PARMS={0x0, 0x1, {0x8, '\x00', 0x4, 0x1, 0x7fffffff, 0x1}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) (async) r7 = socket$unix(0x1, 0x5, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x44, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4028, 0x77}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x400, 0x8, 0x401, 0x9, 0x3, 0x6, 0x8]}}]}]}]}, 0x44}}, 0x640d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r11, 0x0, 0xcd, &(0x7f0000000700)={@rand_addr=0x64010101, @multicast2, 0x0, "056b506b0404f8b41e8e0a8efb24fc4bfb515813976ecb846448b43ea2abc741", 0x8001, 0x9, 0xfffffff7, 0x3ff8000}, 0x3c) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="e03f030041000b05d25a806c8ce684c622284d535976e1f5ff2c6394f90324cadb50f3f41faa7e7829773d964afc60100000000a000200053582c1", 0x3b}, {&(0x7f0000000440)="990c1f7603f1a3be8c9f41154ccd7e118d6c90416459e2788937a985264022e8e4b2e2cb564f456f386a026a84cb7b9544a27cdf9f4191caa50e110d72f82fa09c5708529e92e17841352226331ad5f16370c30330092388b365f3cdacfb6108a51040a7e0a0e50b72ee7aab9bcb010b4365ea844dbb035ef13cd0e063f5402e930d72894c7340e169d7c2356f66cf1e3731a394542b27e5627650782ffb9aaaf66c7e6c98981a2df7623020938761d860e60291d3781e3b85fa", 0xba}, {&(0x7f0000000500)="d3c4e2719d32131282b659bab9b6f633fcb4d72650f8748a0cb9da4f0545a9b64ad0fd2b9798142b18a5995e225fcbce", 0x30}, {&(0x7f0000000540)="2752f97c1fa7575946bb21d9acd1179d8c0d8da57c53a431a593b140bd75b6d0c5e1ef88d007253567aa5d4305bc9ca981c8de5a9ebc2165fc0354385506d5b15c978fb1131ba5eba699ff2173c95ed913c95f2975198dd1e0c4137fa440b84bf3206ad9e1a5bc14fc8d5efac3a139a8245f55cfed2a25dcbb33ea9f0a774d27e4144c0176009ea9ed167c0f6f87e2f060b47bfbb8151631b805548d9c233753861570613fa8184e", 0xa8}, {&(0x7f0000000600)="4a0c12a0fddb52c5f1f766ca371ad249ad901b710cad9ac89dda6e745625d23d3527b363cdb88ebb7105000000a850850a81e1da17713b2892192dd2a0c0bca48c5996f8259d50d4673a4dbdaf4d0b158575c18bee3ec111da026138019f17", 0x5f}], 0x5}, 0x4040) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 462.286311ms ago: executing program 0 (id=1755): r0 = socket(0x1e, 0x1, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'hsr0\x00', {0x1}, 0xd}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000fc0)={&(0x7f0000000100)=0x4000000000000003, 0x292c4, &(0x7f0000002140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000f80)}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4, 0x3}}, 0x2e) listen(r4, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d700020000280080002400000001b0c00038005000100ef000000080001400000000f0900010073797a300000"], 0xcc}}, 0x0) 441.395021ms ago: executing program 3 (id=1756): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000020020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) 440.912655ms ago: executing program 4 (id=1757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xbc, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0xa1, 0x1, 0x0, 0x1, [@generic="2c7c1454a9a72411127773771690d00facf9f93c8b02aa9c75f893ab868b53e9179102245545087857a12981bbb987b3fcfd46473efb0a2f4f5512ccdd9b90e9a7d2b68d64d844bcd2b6c24bc3f9bead7e56c1c12dcdb6cc4a9259bc004092020d66ee58fee5e4da167fa34516723287a4b74516fb8815b31ca9fcb9ccf489db54d2d8e9a73e4b1f172372f5a3ffd621b32c98e4efd88e3dcff11eb676"]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x20, r5, 0x400, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)="27033000bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57757889329065584abc5c24f06a9aacb41b94bfa8791938ca3f957c4e1cc4103c44d2df92ed94c0811439b445170c9444f1d5cf152d88ec04922505d5ee0412b2d7b2b0f732fc50438cb5f8225d82a50000000000000000", 0x94}, {&(0x7f0000000200)="8bfda0fae4fcd4a9de55ad3b1c2d1fdee363ddc06dfda6f2edea373945", 0x1d}, {&(0x7f0000000240)="5e82ef7627234e55062c4c902b6fddb40d2a73b0394dc7f1eedb60de68c183e13eff48d039321926dacb4db2728458d7947bf7dbf748f38c3c4573303d8e742bd9d60dc9ab48e0561c3f5f17bc661582113d687bc8cb8dc28ecd3963b80f16af4bc1cf1c38d08332c86308b3f75aeb1148", 0x71}, {&(0x7f00000002c0)="6e53a24a72ed7c399a6d988520a67c260c93b7f99fd0c890646db95b326077f3cc59744b885bffbfb776ff7e8a0cc9934ed8b017f286080756c3a32b05cb39c4e3391ea559e10279c094afdc10176e4e13a513c5650b8915a29e5fa6acda018ff4c2d7eba173aaeeced07b02bad4bfd3a4b628d14f73d47cfc1e3a0003e1f0b1f235042213032073decdc41fb0e2c1bf17abd87e9a15bb74f24f7d3c811e4768ce72a07a4e55d48a2b6d655dc8d5f13461f27341a2c571865d1c", 0xba}, {&(0x7f00000018c0)="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", 0xd7e}], 0x5}, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140100003a00010325bd7200fcffffff10000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 369.109126ms ago: executing program 2 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0xf87, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a60f510000fc020000000000000000000000000000ff0200000000000000000000000000018400"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff97ec3251}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffd}]}, 0x8c}, 0x1, 0x0, 0x0, 0x150}, 0x4000000) 271.402089ms ago: executing program 0 (id=1759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="baccbc8d220f86c5525f5709e195e57ff5f0", 0x12}], 0x1, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x24, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x6, 0x1, 0xb, 0xfffffffffffffffc, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x33, &(0x7f0000000500)=""/51, 0x40f00, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r0, r0, r0, r0], &(0x7f00000005c0)=[{0x0, 0x5, 0x4, 0x2}, {0x3, 0x4, 0x0, 0x3}, {0x2, 0x5, 0x2, 0x4}, {0x3, 0x5, 0xe, 0x4}, {0x2, 0x3, 0x5, 0x5}], 0x10, 0x2}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0xc00) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x43, 0x20, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0xffffffffffffff07}, 0x1, 0x0, 0x0, 0x48815}, 0xc800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 270.562166ms ago: executing program 1 (id=1760): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001a0004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$rose(r0, 0x104, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x44, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r5}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r6}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000002000000229bd7000fedbdf250220200305000003080000000c001400", @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="08192575919514aa0c000c400000fffe00000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, r9, 0x303, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb0}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_IE={0x12d, 0x2a, [@mic={0x8c, 0x10, {0x788, "1e28e60b270b", @short="4b56bf93bc3bba7e"}}, @rann={0x7e, 0x15, {{0x1}, 0x6, 0x9, @device_a, 0x0, 0x8, 0x5}}, @rann={0x7e, 0x15, {{0x0, 0x5e}, 0x7f, 0xb8, @device_a, 0x5bd, 0x9, 0xfd}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x7, 0x0, {0x7f, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0xffffffff, 0x14}}, @ibss={0x6, 0x2, 0x4}, @peer_mgmt={0x75, 0x6, {0x1, 0xff, @void, @val=0x3b, @void}}, @measure_req={0x26, 0xb7, {0x4, 0xe6, 0x5, "ee84d1c0ead7dbf378b8351006716ddeb7cc6ff6172912fe82dad6758bc4ce9ea5f090b0415e58abd1716ba0c000ef640077f15e3ee197bba8b09f9940ab99700547eafc476a829546a49a5c537ed9008288c9cc80c451350381b0daedac48fda61401aaf6e460d477ee1117c64fc4164f5b1beba19eee93baa4aa2c784eb5bc85b67de0195cf5175f716272e63ccdca98432d0998d31ee7248d134ec243f38059ee819392e054e6fe5718dc110ed875fd61e7d1"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) 192.017916ms ago: executing program 0 (id=1761): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf25180000000c0006000100000001000000280030801c0001800c00050099ef000000000000080001000000000079adbd040400038005000200"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000f14010027bd7000fcdbdf25080001000011000008000300"], 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x44000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3) socket(0x23, 0x80805, 0x0) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44005) 147.839389ms ago: executing program 3 (id=1762): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x8000, 0x1, 0x4, 0x3}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x8000, 0x1, 0x4, 0x3}, 0x10) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) 91.349977ms ago: executing program 2 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x102, 0xcc, &(0x7f0000000800)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf4d2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="9c9e0049211150fed4172766b76aac474df1cc46416134c32b4624885ac3138053702237d4a6b2185cebd4c45e1e41e125bf5d59ae3a8ec886fd1a8e1a939d73602282e6a3361e5c5af8c7fba7364adaab91748489e7350be303bf868c2c1d4d28f8b91667ebba319780d09ae6e60112a26e0bd824df35fe1fcfb9c9d319ca1cfc16c8c7034d0d0f5024", 0x8a}], 0x1, &(0x7f0000001300)=[{0x1010, 0x1, 0x8, "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"}], 0x1010}, 0xa2933f3a951eb846) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r10, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) recvmmsg(r10, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x20, 0x435, 0x9, 0xf315, 0x3002, r1, 0x0, '\x00', r9, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000004800010000000000004bee139d7775f2df2c56a67f52487edd0000000a0000000000000006b4e98914c92d99a48074684f66a2c8085a73db670e28cc451faf63384cc6c1a9b12b817f51c91133c092d400cd9090b32dc42bb657777da2a156"], 0x18}}, 0x0) 89.392703ms ago: executing program 1 (id=1764): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) (async) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) (async) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x8, 0xbd, 0xffffffff, @vifc_lcl_ifindex=r10, @multicast1}, 0x10) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 88.562052ms ago: executing program 4 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=@newtfilter={0x12b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1280, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x751}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7ff}, @TCA_FLOW_EMATCHES={0x63c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7f}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x40, 0x2, 0x2}, {0x9, 0x9, 0x1, "20c2ce1519d1e49a27"}}}, @TCF_EM_U32={0x1c, 0xf41, 0x0, 0x0, {{0x3314, 0x3, 0x4}, {0x8, 0x3, 0x9, 0x81}}}, @TCF_EM_IPT={0xa4, 0x7, 0x0, 0x0, {{0x1, 0x9, 0xe4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x6c, 0x5, "4f6000fe0fa780d97754eb5911045ba59ae6155e2405b0863083351fa040ed556d0aaa92c6354000cbc530d98fe1fa253c4222c10b5fc3a5a1fb7766cfe006f75d3afd07826324aa619ee8cbf6b3cb32e8aef709187661a1afc7861741c80baa24a9049687d644fe"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x1ff, 0x2, 0x3}, {0x80a, 0xa, 0x1, "40fdf5eb8830a0f4861a"}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x36cb}, {0x9, 0x7, 0x2, "be140047bccb89"}}}]}, @TCA_EMATCH_TREE_LIST={0x318, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x70, 0x2, 0x0, 0x0, {{0x80, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x45, 0x5, "9a8369a2676e01aacde43c8de8f2b6a43025844cb9208b4b511cc464e9c9b771a20aa00c7c830fa8617647882cd386c30ca146141a40b7549d3be5f08fa06fecfe"}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x8a}, {0xfffff867, 0x7fffffff, 0x7ff, 0x0, 0x2, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x7}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="291b6a2916b5eb", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='O', @TCF_META_TYPE_VAR="ae86640224accdd4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="49912062d7c9a3f8"]}]}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x5, 0x4, 0xfffe}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xd2, 0xcc97c5bc9c2d705f}, {0x8000}}}]}}, @TCF_EM_IPT={0x4c, 0x3, 0x0, 0x0, {{0x401, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0x38, 0x5, "1558dc880f54f9308b3630c4a1a258151c53e88c475dd1bbc0673ec94ce330006bdcda41e7728e923c835f6ba6959d52188cb6ae"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_META={0x11c, 0x1, 0x0, 0x0, {{0x9, 0x4, 0xfff7}, [@TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="afd3dc17f37065163baa", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e3325e7d93705a2b1d", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="9fcf51b338", @TCF_META_TYPE_VAR="8906c0cc055caa8e86"]}, @TCA_EM_META_LVALUE={0x32, 0x2, [@TCF_META_TYPE_VAR="087801ac8ec63b9f88c4", @TCF_META_TYPE_VAR="e8", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="6047ec", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="e2ca46cd993d74f821ae", @TCF_META_TYPE_VAR="4ef277c7b95192", @TCF_META_TYPE_VAR="91e144c643bdb9"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x33, 0x2, [@TCF_META_TYPE_VAR="a327183ab8168dd6bdbf", @TCF_META_TYPE_VAR="3eecf296155e09", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="b99e9b927510a2", @TCF_META_TYPE_VAR="712aefafff1c687b6a", @TCF_META_TYPE_VAR='fL', @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ebb416a5"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="5fb6ec", @TCF_META_TYPE_VAR="1bd94ab82cc0b3", @TCF_META_TYPE_VAR="1195acfb"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="c3e91408618e", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="9453d3a0aa75c4f1", @TCF_META_TYPE_VAR="cd8854f0bcc5", @TCF_META_TYPE_VAR="5bfca5ee83"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0xcc}, {0x9, 0x3, 0x2}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="9c0556c20d", @TCF_META_TYPE_VAR="5582374b2d", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e18a"]}]}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x7}, "b72f6e750b73d6f514870c0ca91d6f1ac6337d87ec9b627d932a7b8e3f4db2747a6824fe112546a960f1802c4ba5cada23579dc5717a89b6afafb1a8d0c6db5baa2a794f1411a446c48f48158da6e1ac90712619b1dce94b17f532cdba1e42fc5d9c4553e37c5e0c4ddc7f25386c0d4dae56be571d50bc8655a4c1120d0e2dc45622bc6c71e654d3b19958d86406c1f8599d77bf6c57a5a4f51a46"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x8000}, {0x2ab4, 0x3, 0x7f, 0x6, 0xd, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x7}, {0xffffffffffffffff, 0x2, 0x6}}}, @TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0xee9, 0x9, 0xfffc}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x5}, {0x9, 0x7, 0x2, "10982e67a2e2fc"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x2, 0x3, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0xa, 0x0, 0x766b}, "3ffa55b5922e79cc608edc05ef5895db00a76dac2c0a551d638c56d66871516da577d0b7db81501f81db9967165a809072bd76c17d447d6cc2e322eb600ae9b45b8cd94b389a593e4daab24520b48daf9de24f0efb986128bc6c1b03281ef5e1344442ce08f3b27831e559c715d66644ac7f4fb085217f069719dc5c5ea4b7"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x101, 0x2, 0xe}, {0x6, 0x9, 0x1, "2ada3486223d813551"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x3}, {0x9, 0x2, 0x7, "a4b8"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x7}, {0xfffffff7, 0x2, 0x3, 0x4, 0x0, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x1000, 0x2, 0x7}, {0x0, 0x9, 0x1, "bcf07631bba2e0939a"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x80}, {0xa, 0xea, 0xc5, 0x6}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x3}, {{0x3, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}]}, @TCA_FLOW_POLICE={0xc28, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4613d44f, 0x1, 0xa, 0x7f, 0x5800000, 0xf, 0xa, 0x2, 0x7, 0xf, 0x1, 0xe, 0xd531, 0x7, 0x7fffffff, 0x6, 0x1, 0x3, 0x7, 0x1, 0x8, 0x100, 0x7, 0x6, 0x8, 0x4, 0x9, 0x6, 0x2, 0x5f61, 0x4, 0x2, 0xc, 0x0, 0x101, 0x1, 0x81, 0x7, 0x1e7f, 0x6, 0x8, 0x2, 0xa, 0x2, 0x2, 0x6, 0x3, 0x8, 0x7, 0x0, 0x0, 0x10, 0x4, 0x9, 0x4, 0x7c, 0x5, 0x1, 0x2, 0xf444, 0xd, 0x5, 0x64, 0xdd, 0x1, 0xfffffffa, 0x6, 0x80000000, 0x7f, 0x2, 0x100, 0x8000, 0x2cb9, 0x4, 0xa3f1, 0x32b, 0x80, 0x7, 0xda6, 0x9, 0xc4, 0x4, 0x5, 0x80, 0x7, 0x2, 0xd798, 0x3, 0x2, 0x9, 0xb28, 0xb180, 0xbf93, 0x0, 0x40, 0x7fff, 0x693, 0x8000000, 0x432b, 0x9e, 0x6c, 0x3, 0x47d8, 0x2, 0x4, 0x8, 0x0, 0x6, 0x9, 0x6, 0xd73, 0x5, 0xffff8000, 0x8, 0x7, 0x0, 0x9, 0x83, 0x4, 0x8505, 0xffff, 0x8, 0x3ff, 0x2, 0x85, 0xee6, 0x1, 0x10000, 0x400, 0x2, 0x1, 0x0, 0x3152, 0x6, 0x2e9, 0xc, 0x80000000, 0xb, 0x24b, 0x8000, 0x2, 0x14fe1f76, 0xdca, 0x9, 0x81, 0x9, 0x5, 0xd, 0x18000000, 0x3, 0x1, 0x3, 0x2, 0xa13, 0x2, 0x0, 0x8, 0x101, 0x9, 0x3, 0x29e7cd0a, 0x2, 0x6, 0x4, 0x5, 0x750, 0x5, 0x8, 0xfffffffa, 0x8, 0x1, 0x400, 0x9, 0x999, 0x3, 0x1b1968a7, 0x9, 0x8, 0x1, 0x1, 0x3, 0x505ed693, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1, 0x9, 0x2, 0x1000006, 0x2, 0x0, 0x296, 0x4cb2, 0x8000, 0x80000001, 0x401, 0x81, 0xfc85, 0x8000, 0x7, 0x6, 0xfc, 0x3, 0x3ff, 0x8, 0x3a77a9c2, 0x9, 0x7, 0xd, 0x2686, 0xc, 0x4, 0x5, 0xd3de, 0x5, 0x7, 0xfffffffc, 0x87, 0x3, 0x3, 0x1, 0x3, 0xb, 0x5140, 0x0, 0x3, 0x5, 0xd8000000, 0x800, 0x3, 0x9, 0x63, 0x4, 0xfffff801, 0x2, 0x0, 0x8, 0x2, 0x1, 0x7fffffff, 0xffffffff, 0x47, 0x9, 0x0, 0x8, 0xc, 0x3, 0x3ff, 0x200, 0x1, 0x2f, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x6, 0x6, 0x7a8e, 0x1, 0x10000, 0x5, 0xb742, 0x0, 0x9, 0x3, 0x17, 0xd, 0x401, 0x9, 0x8, 0xa6b, 0x1, 0xf, 0xe0000000, 0x0, 0x4f, 0x1, 0x80, 0x2, 0x1, 0x0, 0x4, 0x9, 0x8000, 0x4, 0x2053f547, 0x6a, 0x0, 0x5, 0xb, 0x1, 0xe, 0x2a32, 0x8, 0xf, 0x9, 0x9, 0x4, 0x9, 0x32, 0x0, 0x72290edd, 0x1, 0x1, 0x7ff, 0x7, 0x7ff, 0x0, 0x1, 0x2e56e900, 0x7, 0xfff, 0x3, 0x0, 0x5, 0x76, 0x2b24, 0x1, 0x6, 0xfffffe01, 0x1, 0x4, 0x8, 0x7fff, 0x5, 0x5, 0x10, 0x1000, 0x10, 0x1, 0x5, 0x71cd, 0x9, 0x4, 0xfff, 0x0, 0x7, 0x4, 0xec, 0x3, 0x3, 0x4, 0x2, 0x0, 0xe0000, 0x478, 0xdba6, 0x7f, 0x0, 0x200, 0x4, 0xfffffffe, 0x2, 0x0, 0x34, 0x84, 0x9, 0x9725, 0x3, 0x7fff, 0x4, 0x9, 0x10, 0x10000, 0xd, 0x7fffffff, 0x80000001, 0x6, 0x5, 0x200, 0x1000, 0x3231, 0xfffffff9, 0x7, 0x400, 0x1000, 0x7ff, 0x1, 0x0, 0x0, 0xfffffffb, 0x9, 0xf, 0x81, 0x800, 0x3, 0x3f5c, 0x8, 0x5, 0x8001, 0xa07, 0x1, 0x7ff, 0x235, 0xffffffff, 0x1, 0x200, 0x101, 0x2, 0x2, 0x2, 0x100, 0x5, 0xff, 0xfffffff7, 0x6, 0x7, 0x4, 0x200, 0x1, 0xfffffffa, 0x401, 0x10001, 0x8, 0x4, 0x5, 0x1, 0x1, 0x7, 0x6, 0x46d4, 0x3, 0x9, 0x44, 0x2, 0x89, 0x5, 0x2, 0xb, 0x7fffffff, 0x56e0, 0x400, 0x3, 0x0, 0xfffffcb5, 0xe, 0x3, 0x1, 0x5, 0x9, 0x1ff, 0x0, 0xe15b, 0x8001, 0xc, 0xa, 0x5, 0x400, 0x2, 0xffffcee9, 0xa, 0xf2cf, 0x3, 0xfffffffd, 0x8001, 0x7ffffeff, 0x2, 0x5, 0x597e, 0x7, 0xfffff000, 0x9, 0x400, 0x6, 0x7ff, 0x9, 0x8f, 0xfff, 0x3, 0x2, 0x7, 0x8, 0x6, 0x9238, 0x8e72, 0x7, 0x9, 0x8, 0x80000001, 0x1, 0x10, 0x101, 0x5b3, 0x400, 0x400, 0x0, 0x8, 0x9, 0x4, 0x4, 0x3, 0xff, 0x3, 0x4, 0x9ccf, 0x8, 0xffffffff, 0x1ff, 0x2, 0x2, 0x0, 0x3, 0x80000000, 0x5, 0x7, 0x6, 0x5, 0x5, 0xfffffffc, 0xe9c]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x18a0}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x4, 0x3ff, 0x3ff, 0x0, 0x401, 0x1, 0x0, 0x333, 0xfffffffd, 0x2, 0x9, 0x8, 0x6eb, 0x4, 0x9, 0x206b, 0x80000000, 0xa, 0xc, 0x5, 0x1, 0x3, 0xf, 0x2, 0x5, 0x3, 0x2, 0x9, 0x40, 0x0, 0x8, 0x6, 0x8, 0xfffffff9, 0x100c00, 0x1, 0x800, 0xe2, 0x40, 0x5, 0xff, 0x710, 0xfffffffe, 0x8, 0x400, 0x9, 0x994c, 0x8, 0x3734, 0xfffffbff, 0x1, 0x3, 0x6, 0x5, 0xfffffe5e, 0x8001, 0x4, 0xffff, 0x2c3a, 0x6189, 0x2, 0xd, 0xd22a, 0x3ff, 0x7, 0xffff, 0x5, 0x1, 0x8, 0x401, 0x8, 0x1, 0xfff, 0xf3, 0x9, 0x9, 0x4, 0x8001, 0x2, 0x3, 0xba2, 0x8, 0xff88, 0x4ca710e, 0x4, 0xe6, 0x5, 0x9, 0x10000, 0xa9c043e, 0xfffffff7, 0x3, 0xfc7f, 0x4, 0x4, 0x1, 0xd42b, 0x0, 0x7fff, 0x80, 0x9, 0xfff, 0x0, 0x65e2, 0xa1, 0x7, 0xffffffff, 0x0, 0x9, 0x2, 0x5, 0x7, 0x9, 0x0, 0x8, 0x0, 0xe, 0xe2, 0x4, 0xfffff801, 0x8, 0x7fff, 0x1ff, 0xfff, 0x80000000, 0x2c6, 0x5, 0x5, 0x8, 0x3, 0x6, 0x3, 0x5, 0x81, 0x4, 0x5, 0x8, 0x200, 0x8000, 0x100, 0x1, 0x3, 0x8, 0x8, 0x9, 0x1, 0x4, 0x3, 0x4, 0x100, 0x68, 0x3ff, 0x80000000, 0x8001, 0x5, 0xfffffff7, 0x3a0a, 0x42e5, 0x8, 0x9, 0x4, 0xfffffffb, 0x9, 0xcec, 0x100, 0x7fff, 0x10, 0x9, 0x0, 0x7f, 0x20, 0x3, 0x3ff, 0x7, 0x9, 0x0, 0xf8, 0x7fffffff, 0x9, 0x7, 0x400, 0x1e2, 0x9, 0x6b6, 0x34, 0x2905, 0x2, 0xceb8, 0x2, 0x5, 0x7, 0x0, 0x5, 0x400, 0x310, 0xe6, 0x6, 0xfffffff8, 0x6, 0xa11f, 0x1, 0x0, 0x0, 0x7, 0x0, 0xb4fb, 0x3, 0x10000, 0x5b, 0x1ff, 0x8, 0x6, 0xd, 0x9, 0x7, 0x5, 0x8, 0x531, 0x9, 0x8, 0x3, 0x7, 0x81, 0x1, 0x4, 0x9, 0x1, 0x7, 0xacb6, 0x5, 0x80000001, 0xf2cd, 0x7ff, 0x8, 0x2, 0x0, 0x5, 0xa18a, 0x3, 0xfffffffa, 0x3ec89db4, 0xd, 0x1, 0x0, 0x0, 0x7, 0x1, 0x4, 0x2, 0x8000, 0x5, 0x1, 0xfffffffe, 0x6]}]}]}}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r8, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000080000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d616373656300f6170002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000740000b7050000080000004608f0ff760000005d9800030000000000000000000000008500000005000000b70000000000f7009500000000970000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r6, 0x13, 0x1, 0xd, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000005c0)=@deltfilter={0x314, 0x2d, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0x3, 0x7}, {0x2, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_u32={{0x8}, {0x2e0, 0x2, [@TCA_U32_SEL={0x2d4, 0x5, {0xe, 0x9, 0x4f, 0x0, 0x2, 0x2, 0x2, 0x4, [{0x3, 0x10, 0x8, 0x7}, {0x4, 0x0, 0xffffffff, 0xffff8001}, {0x3ed, 0x9, 0x7, 0x8}, {0x9e, 0x0, 0x6, 0x4}, {0x0, 0x6, 0x8, 0xd7d}, {0x0, 0x1, 0xffff0000, 0xff}, {0x0, 0x81, 0x6, 0x32e}, {0xff, 0x4, 0x5, 0x3}, {0x0, 0x8000, 0x9}, {0xf2c8, 0x8, 0xc, 0x4}, {0x5, 0xee, 0xa28, 0xfff}, {0x7, 0x0, 0x800}, {0x8, 0x5, 0x85, 0x71}, {0x1, 0x2, 0x8768, 0x5}, {0x2, 0x4, 0x7, 0x3}, {0x1ff, 0xfff, 0x80, 0x7}, {0x6, 0x400, 0x7fff, 0x9}, {0x0, 0x9, 0x75, 0xfffffffd}, {0x7fff, 0x3, 0x9, 0x2}, {0x8, 0x0, 0x7}, {0xc480, 0x7b, 0x7f, 0x3}, {0xffffff00, 0x2708, 0x2}, {0xfff, 0x1000, 0x4, 0x196}, {0x9, 0x2e, 0x2, 0x5}, {0x6, 0x1, 0x12000000}, {0x2a, 0x4, 0x3, 0x5}, {0x80000000, 0x3ffc0, 0x9, 0x4}, {0x81, 0x5, 0x101, 0x2}, {0x5, 0x3e800, 0x0, 0x1}, {0x552, 0x0, 0x400, 0x2}, {0x5, 0x7ff, 0x56, 0x81}, {0x4, 0x7, 0x6, 0x1000}, {0x47, 0x4, 0xd1f}, {0x7, 0x55b, 0x710, 0x2}, {0xa038, 0x2, 0x433, 0x7}, {0x8, 0x4, 0x8, 0x2}, {0xfffff7a0, 0xe3, 0x9, 0x7}, {0x5, 0x0, 0x5, 0x1}, {0xffffff81, 0xe, 0x5}, {0xffffffff, 0x8001, 0x0, 0xb949}, {0x9, 0x200, 0x7, 0x3}, {0x5, 0x8000, 0x100, 0x101}, {0xfff, 0x9, 0xfffffffd, 0x10001}, {0x81, 0x7fff, 0x1, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008000) listen(r2, 0x8001) 41.398031ms ago: executing program 1 (id=1766): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) r1 = socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x4e20, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x8, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) 0s ago: executing program 2 (id=1767): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (rerun: 32) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x6, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0x0, 0x5ef, 0x9, 0x6, 0xfffffff8, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x2, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0xb, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x0, 0x10000, 0x8001, 0x9, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10000, 0x6, 0x3180, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x9, 0x8, 0x9, 0x9fa0, 0x3, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0x8, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x1, 0x1, 0x401, 0xfffffffc, 0x7, 0x6a8, 0x1, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x80000000, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x7fff, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x3, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 65.209050][ T5806] cgroup: Unknown subsys name 'net' [ 65.315553][ T5806] cgroup: Unknown subsys name 'cpuset' [ 65.323741][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.697628][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.542247][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.561262][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.569438][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.577834][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.585806][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.662187][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.670290][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.678487][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.686970][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.695440][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.729533][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.747105][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.757226][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.766905][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.775654][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.781455][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.783176][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.797913][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.805950][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.813996][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.822408][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.828507][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.837626][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.838271][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.853128][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.040578][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 69.243323][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.251146][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.258387][ T5818] bridge_slave_0: entered allmulticast mode [ 69.265640][ T5818] bridge_slave_0: entered promiscuous mode [ 69.275274][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.282465][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.290298][ T5818] bridge_slave_1: entered allmulticast mode [ 69.297517][ T5818] bridge_slave_1: entered promiscuous mode [ 69.342959][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.382450][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.448113][ T5818] team0: Port device team_slave_0 added [ 69.459560][ T5818] team0: Port device team_slave_1 added [ 69.581269][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.588347][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.615222][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.633536][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 69.658753][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.674142][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.681191][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.707547][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.723476][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 69.877760][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 69.894100][ T5818] hsr_slave_0: entered promiscuous mode [ 69.900476][ T5818] hsr_slave_1: entered promiscuous mode [ 69.974459][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.981722][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.988999][ T5823] bridge_slave_0: entered allmulticast mode [ 69.996132][ T5823] bridge_slave_0: entered promiscuous mode [ 70.029919][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.037137][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.045820][ T5821] bridge_slave_0: entered allmulticast mode [ 70.052941][ T5821] bridge_slave_0: entered promiscuous mode [ 70.060811][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.068702][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.076121][ T5823] bridge_slave_1: entered allmulticast mode [ 70.083210][ T5823] bridge_slave_1: entered promiscuous mode [ 70.090036][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.097459][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.104880][ T5825] bridge_slave_0: entered allmulticast mode [ 70.111987][ T5825] bridge_slave_0: entered promiscuous mode [ 70.134592][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.141725][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.148879][ T5821] bridge_slave_1: entered allmulticast mode [ 70.155999][ T5821] bridge_slave_1: entered promiscuous mode [ 70.172359][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.179729][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.187011][ T5825] bridge_slave_1: entered allmulticast mode [ 70.194078][ T5825] bridge_slave_1: entered promiscuous mode [ 70.274047][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.286392][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.297949][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.336563][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.356858][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.372388][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.379737][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.387057][ T5824] bridge_slave_0: entered allmulticast mode [ 70.394563][ T5824] bridge_slave_0: entered promiscuous mode [ 70.403702][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.434954][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.442281][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.449426][ T5824] bridge_slave_1: entered allmulticast mode [ 70.456608][ T5824] bridge_slave_1: entered promiscuous mode [ 70.474237][ T5823] team0: Port device team_slave_0 added [ 70.507400][ T5825] team0: Port device team_slave_0 added [ 70.524235][ T5823] team0: Port device team_slave_1 added [ 70.539161][ T5821] team0: Port device team_slave_0 added [ 70.547262][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.563974][ T5825] team0: Port device team_slave_1 added [ 70.589913][ T5821] team0: Port device team_slave_1 added [ 70.597751][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.601884][ T5143] Bluetooth: hci0: command tx timeout [ 70.685474][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.692547][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.718611][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.732068][ T5824] team0: Port device team_slave_0 added [ 70.738794][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.745958][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.772023][ T5143] Bluetooth: hci1: command tx timeout [ 70.778015][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.789623][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.796837][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.822971][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.840430][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.847522][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.873528][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.886681][ T5824] team0: Port device team_slave_1 added [ 70.905825][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.912891][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.939172][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.939291][ T5830] Bluetooth: hci3: command tx timeout [ 70.955962][ T5820] Bluetooth: hci2: command tx timeout [ 70.962212][ T5143] Bluetooth: hci4: command tx timeout [ 70.975604][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.982919][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.009140][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.029098][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.036269][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.062489][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.089453][ T5821] hsr_slave_0: entered promiscuous mode [ 71.096801][ T5821] hsr_slave_1: entered promiscuous mode [ 71.103070][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 71.108874][ T5821] Cannot create hsr debugfs directory [ 71.134049][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.141236][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.167333][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.245099][ T5823] hsr_slave_0: entered promiscuous mode [ 71.251836][ T5823] hsr_slave_1: entered promiscuous mode [ 71.257912][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 71.263800][ T5823] Cannot create hsr debugfs directory [ 71.295795][ T5825] hsr_slave_0: entered promiscuous mode [ 71.302153][ T5825] hsr_slave_1: entered promiscuous mode [ 71.308476][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 71.314431][ T5825] Cannot create hsr debugfs directory [ 71.362158][ T5824] hsr_slave_0: entered promiscuous mode [ 71.368565][ T5824] hsr_slave_1: entered promiscuous mode [ 71.375521][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 71.381310][ T5824] Cannot create hsr debugfs directory [ 71.409853][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.416959][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.534921][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.546031][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.586662][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.595807][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.634237][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.644110][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.677122][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.687033][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.862955][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.878056][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.888644][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.899913][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.908273][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.918599][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.935324][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.944569][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.022930][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.034794][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.043096][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.052650][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.067467][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.076896][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.085077][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.094533][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.176007][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.200785][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.212411][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.220099][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.231511][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.254183][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.264059][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.272553][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.281679][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.305612][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.368361][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.388683][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.409716][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.419740][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.430773][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.437997][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.448420][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.455614][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.468106][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.475327][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.489757][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.501310][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.509075][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.518909][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.527080][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.538133][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.579992][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.587541][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.615780][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.681324][ T5143] Bluetooth: hci0: command tx timeout [ 72.697145][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.742219][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.749467][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.796180][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.803382][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.841417][ T5143] Bluetooth: hci1: command tx timeout [ 72.884404][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.960168][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.003838][ T5143] Bluetooth: hci4: command tx timeout [ 73.006827][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.009372][ T5143] Bluetooth: hci3: command tx timeout [ 73.022217][ T5830] Bluetooth: hci2: command tx timeout [ 73.052563][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.059734][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.079216][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.098133][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.105465][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.142647][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.205056][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.212847][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.249341][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.256811][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.280443][ T5821] veth0_vlan: entered promiscuous mode [ 73.297300][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.349895][ T5821] veth1_vlan: entered promiscuous mode [ 73.434697][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.492781][ T5821] veth0_macvtap: entered promiscuous mode [ 73.506986][ T5821] veth1_macvtap: entered promiscuous mode [ 73.543621][ T5818] veth0_vlan: entered promiscuous mode [ 73.596175][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.612459][ T5818] veth1_vlan: entered promiscuous mode [ 73.633361][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.647587][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.694683][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.712463][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.774367][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.791041][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819886][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.852242][ T5823] veth0_vlan: entered promiscuous mode [ 73.934190][ T5823] veth1_vlan: entered promiscuous mode [ 73.956978][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.978185][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.992866][ T5818] veth0_macvtap: entered promiscuous mode [ 74.046165][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.047216][ T5818] veth1_macvtap: entered promiscuous mode [ 74.055985][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.094696][ T5823] veth0_macvtap: entered promiscuous mode [ 74.144514][ T5823] veth1_macvtap: entered promiscuous mode [ 74.156514][ T5825] veth0_vlan: entered promiscuous mode [ 74.165399][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.177612][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.187409][ T5825] veth1_vlan: entered promiscuous mode [ 74.235184][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.254592][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.267560][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.292497][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.321121][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.340423][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.389790][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.398823][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.416972][ T5824] veth0_vlan: entered promiscuous mode [ 74.439477][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.450088][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.488208][ T5824] veth1_vlan: entered promiscuous mode [ 74.523083][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.555114][ T5825] veth0_macvtap: entered promiscuous mode [ 74.599796][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.625581][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.627355][ T5825] veth1_macvtap: entered promiscuous mode [ 74.693727][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.712978][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.746127][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.761059][ T5143] Bluetooth: hci0: command tx timeout [ 74.788073][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.807760][ T5824] veth0_macvtap: entered promiscuous mode [ 74.822871][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.832869][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.839455][ T1089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.853093][ T1089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.875306][ T5824] veth1_macvtap: entered promiscuous mode [ 74.892264][ T1089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912873][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.932435][ T5143] Bluetooth: hci1: command tx timeout [ 74.941907][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.952020][ T1089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.967677][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.006367][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.026726][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.084090][ T5143] Bluetooth: hci3: command tx timeout [ 75.089531][ T5143] Bluetooth: hci2: command tx timeout [ 75.095955][ T5820] Bluetooth: hci4: command tx timeout [ 75.107188][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.126170][ T5941] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.145114][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.166170][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.166410][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.331679][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.346081][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.472734][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.487933][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.575214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.604157][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.790032][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.804434][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.816726][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 75.993869][ T5975] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13'. [ 76.028671][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 76.071866][ T5975] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13'. [ 76.097606][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 76.115265][ T5975] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13'. [ 76.437044][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18'. [ 76.514681][ T6002] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 76.777464][ T6016] openvswitch: netlink: IP tunnel TTL not specified. [ 76.799396][ T6021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.841347][ T5143] Bluetooth: hci0: command tx timeout [ 77.011205][ T5143] Bluetooth: hci1: command tx timeout [ 77.044611][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 77.056859][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 77.069611][ T6039] Zero length message leads to an empty skb [ 77.152357][ T6039] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 77.162796][ T5820] Bluetooth: hci2: command tx timeout [ 77.163815][ T5830] Bluetooth: hci4: command tx timeout [ 77.168213][ T5143] Bluetooth: hci3: command tx timeout [ 77.191868][ T6039] bond1 (unregistering): Released all slaves [ 77.236877][ T6048] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 77.405094][ T6039] tap0: tun_chr_ioctl cmd 2148553947 [ 77.925805][ T6080] netlink: 'syz.0.39': attribute type 3 has an invalid length. [ 78.011940][ T6080] netlink: 'syz.0.39': attribute type 5 has an invalid length. [ 78.080125][ T6087] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 78.235762][ T6095] tipc: Enabling of bearer rejected, failed to enable media [ 81.441267][ T6118] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 81.468469][ T6118] __nla_validate_parse: 5 callbacks suppressed [ 81.468487][ T6118] netlink: 224 bytes leftover after parsing attributes in process `syz.1.50'. [ 81.513310][ T6120] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 81.967849][ T6146] syzkaller0: entered promiscuous mode [ 82.013465][ T6149] batadv0: entered promiscuous mode [ 82.031326][ T6156] netlink: 72 bytes leftover after parsing attributes in process `syz.2.58'. [ 82.039673][ T6149] macsec1: entered promiscuous mode [ 82.056203][ T6149] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 82.092577][ T6149] batadv0: left promiscuous mode [ 82.131880][ T6163] netlink: 'syz.0.61': attribute type 5 has an invalid length. [ 82.153059][ T6163] netlink: 140 bytes leftover after parsing attributes in process `syz.0.61'. [ 82.227925][ T6168] sock: sock_set_timeout: `syz.2.63' (pid 6168) tries to set negative timeout [ 82.360240][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 82.432657][ T6177] Bluetooth: MGMT ver 1.23 [ 82.742213][ T1089] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.050650][ T6217] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 83.072868][ T6219] netlink: 52 bytes leftover after parsing attributes in process `syz.0.77'. [ 83.337118][ T6229] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.370818][ T6229] IPVS: length: 24 != 12312 [ 83.649718][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 84.332360][ T6259] netlink: 13 bytes leftover after parsing attributes in process `syz.1.86'. [ 84.835404][ T6239] warning: `syz.0.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.075648][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 85.108846][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.91'. [ 85.165271][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 85.171437][ T6266] syzkaller0: entered promiscuous mode [ 85.179510][ T6266] syzkaller0: entered allmulticast mode [ 85.470028][ T6277] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 86.589386][ T6293] syzkaller0: entered promiscuous mode [ 86.595747][ T6293] syzkaller0: entered allmulticast mode [ 86.614643][ T6287] macvtap1: entered promiscuous mode [ 86.620252][ T6287] macvtap1: entered allmulticast mode [ 86.626591][ T6287] veth1_vlan: entered allmulticast mode [ 86.634124][ T6311] __nla_validate_parse: 1 callbacks suppressed [ 86.634139][ T6311] netlink: 80 bytes leftover after parsing attributes in process `syz.4.95'. [ 86.649792][ T6311] netlink: 80 bytes leftover after parsing attributes in process `syz.4.95'. [ 86.774063][ T796] cfg80211: failed to load regulatory.db [ 87.018902][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 87.092209][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'. [ 87.179753][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'. [ 87.275944][ T6361] netlink: 92 bytes leftover after parsing attributes in process `syz.0.104'. [ 87.742313][ T6368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.781909][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.918770][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.925985][ T6384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.010669][ T6396] netlink: 'syz.3.111': attribute type 4 has an invalid length. [ 88.050988][ T6396] netlink: 152 bytes leftover after parsing attributes in process `syz.3.111'. [ 88.119140][ T6396] .`: renamed from bond0 (while UP) [ 88.417950][ T6421] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 88.437810][ T6424] netlink: 104 bytes leftover after parsing attributes in process `syz.3.115'. [ 88.609920][ T6434] netlink: 300 bytes leftover after parsing attributes in process `syz.3.118'. [ 88.631195][ T6435] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 88.698791][ T6438] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20001 [ 88.741411][ T6438] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20002 [ 88.797077][ T6438] x_tables: duplicate underflow at hook 1 [ 88.915818][ T6449] netlink: 104 bytes leftover after parsing attributes in process `syz.2.123'. [ 88.966979][ T6449] openvswitch: netlink: Unknown key attributes 2 [ 89.009178][ T6457] IPVS: length: 239 != 24 [ 89.124138][ T6461] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 89.418235][ T6473] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 89.472550][ T6476] netlink: 'syz.2.133': attribute type 11 has an invalid length. [ 89.535938][ T6480] Cannot find set identified by id 0 to match [ 90.068166][ T6511] syzkaller1: entered promiscuous mode [ 90.091188][ T6511] syzkaller1: entered allmulticast mode [ 91.242775][ T6577] nbd: must specify a size in bytes for the device [ 91.347728][ T6581] syzkaller0: entered promiscuous mode [ 91.353803][ T6581] syzkaller0: entered allmulticast mode [ 91.392753][ T6587] vlan2: entered allmulticast mode [ 91.427519][ T6587] bond0: entered allmulticast mode [ 91.450245][ T6587] bond_slave_0: entered allmulticast mode [ 91.459998][ T6587] bond_slave_1: entered allmulticast mode [ 91.647359][ T6599] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 91.987914][ T6626] __nla_validate_parse: 11 callbacks suppressed [ 91.987932][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 92.062492][ T6626] syzkaller1: entered allmulticast mode [ 92.467980][ T6658] netlink: 'syz.2.179': attribute type 2 has an invalid length. [ 92.509814][ T6658] netlink: 'syz.2.179': attribute type 2 has an invalid length. [ 92.519485][ T6660] : renamed from vxcan1 (while UP) [ 92.528686][ T6664] netlink: 'syz.2.179': attribute type 27 has an invalid length. [ 92.541422][ T6658] netlink: 'syz.2.179': attribute type 27 has an invalid length. [ 92.675685][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 92.753600][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 93.015628][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 93.449496][ T6700] netlink: 64 bytes leftover after parsing attributes in process `syz.1.194'. [ 93.454924][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 93.617456][ T6710] sctp: [Deprecated]: syz.1.197 (pid 6710) Use of int in max_burst socket option. [ 93.617456][ T6710] Use struct sctp_assoc_value instead [ 93.645008][ T6710] netlink: 280 bytes leftover after parsing attributes in process `syz.1.197'. [ 93.822994][ T6719] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.199'. [ 94.354208][ T6748] netlink: 64 bytes leftover after parsing attributes in process `syz.0.208'. [ 94.738635][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 95.104324][ T6787] xt_l2tp: wrong L2TP version: 0 [ 95.370090][ T6804] netlink: 'syz.2.220': attribute type 4 has an invalid length. [ 95.433667][ T6804] netlink: 'syz.2.220': attribute type 4 has an invalid length. [ 95.654536][ T6818] netlink: 'syz.1.223': attribute type 13 has an invalid length. [ 95.677328][ T6816] netlink: 'syz.1.223': attribute type 13 has an invalid length. [ 95.855621][ T6831] netlink: 'syz.3.229': attribute type 15 has an invalid length. [ 96.013902][ T6829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.022959][ T6829] bridge0: port 3(bond2) entered blocking state [ 96.029484][ T6829] bridge0: port 3(bond2) entered disabled state [ 96.036805][ T6829] bond2: entered allmulticast mode [ 96.045590][ T6829] bond2: entered promiscuous mode [ 96.052185][ T6829] bridge0: port 3(bond2) entered blocking state [ 96.058850][ T6829] bridge0: port 3(bond2) entered forwarding state [ 96.084023][ T6831] netlink: 'syz.3.229': attribute type 15 has an invalid length. [ 96.200475][ T3006] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 96.210630][ T3006] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 96.263107][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 96.312856][ T6843] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 96.322201][ T6843] team0: Failed to send options change via netlink (err -105) [ 96.329817][ T6843] team0: Port device batadv1 added [ 96.336444][ T3006] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 96.350630][ T1089] bridge0: port 3(bond2) entered disabled state [ 96.522923][ T6857] sctp: [Deprecated]: syz.1.233 (pid 6857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.522923][ T6857] Use struct sctp_sack_info instead [ 96.600142][ T6862] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 96.685138][ T6862] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.704153][ T6862] gretap1: entered promiscuous mode [ 96.709409][ T6862] gretap1: entered allmulticast mode [ 97.045258][ T6896] __nla_validate_parse: 15 callbacks suppressed [ 97.045275][ T6896] netlink: 4464 bytes leftover after parsing attributes in process `syz.0.241'. [ 97.101769][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.241'. [ 97.131628][ T6900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.241'. [ 97.142613][ T6896] ip6tnl0: Caught tx_queue_len zero misconfig [ 97.185372][ T6899] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 97.208304][ T6899] bond0: (slave wlan1): Opening slave failed [ 97.482942][ T6914] x_tables: duplicate underflow at hook 2 [ 97.497815][ T6913] xt_hashlimit: overflow, rate too high: 0 [ 97.773514][ T6923] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 97.783854][ T13] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 97.837971][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.841863][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 97.856594][ T6923] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 97.919375][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.252'. [ 97.946218][ T6942] bridge0: port 4(gretap0) entered blocking state [ 97.952946][ T6942] bridge0: port 4(gretap0) entered disabled state [ 97.959866][ T6942] gretap0: entered allmulticast mode [ 97.974528][ T6942] gretap0: entered promiscuous mode [ 97.986256][ T6942] bridge0: port 4(gretap0) entered blocking state [ 97.992886][ T6942] bridge0: port 4(gretap0) entered forwarding state [ 98.015786][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.025766][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.054080][ T6940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.354720][ T6965] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 98.422608][ T6968] netlink: 'syz.3.260': attribute type 17 has an invalid length. [ 98.448218][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 98.471252][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'. [ 98.509470][ T6968] erspan0: entered promiscuous mode [ 98.518235][ T6968] erspan0: left promiscuous mode [ 98.612374][ T6980] netlink: 'syz.2.265': attribute type 30 has an invalid length. [ 98.639720][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 98.833451][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 98.852496][ T6989] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.268'. [ 99.182527][ T7011] xt_ecn: cannot match TCP bits for non-tcp packets [ 99.500832][ T7028] team_slave_1: Caught tx_queue_len zero misconfig [ 99.508490][ T7032] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 99.521436][ T7028] sit0: Caught tx_queue_len zero misconfig [ 99.533465][ T7028] netlink: 'syz.1.284': attribute type 8 has an invalid length. [ 99.566110][ T7028] bond0: entered promiscuous mode [ 99.571408][ T7028] bond_slave_0: entered promiscuous mode [ 99.577436][ T7028] bond_slave_1: entered promiscuous mode [ 99.586913][ T7028] gretap0: entered promiscuous mode [ 99.594375][ T7028] ip6gretap0: entered promiscuous mode [ 99.603092][ T7028] hsr1: entered promiscuous mode [ 99.843137][ T7054] sctp: [Deprecated]: syz.4.289 (pid 7054) Use of int in maxseg socket option. [ 99.843137][ T7054] Use struct sctp_assoc_value instead [ 99.987892][ T7054] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.007351][ T7063] sctp: [Deprecated]: syz.0.291 (pid 7063) Use of int in maxseg socket option. [ 100.007351][ T7063] Use struct sctp_assoc_value instead [ 100.037649][ T7054] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 100.051712][ T7064] sctp: [Deprecated]: syz.0.291 (pid 7064) Use of int in maxseg socket option. [ 100.051712][ T7064] Use struct sctp_assoc_value instead [ 100.080272][ T7054] bond1: (slave vxcan3): making interface the new active one [ 100.091177][ T7054] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 100.119484][ T7062] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 100.135442][ T7062] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 100.510096][ T7091] can: request_module (can-proto-0) failed. [ 101.227661][ T7121] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.266399][ T7121] xt_SECMARK: invalid mode: 9 [ 101.299673][ T7120] xt_l2tp: v2 sid > 0xffff: 1114112 [ 101.567160][ T7138] geneve2: entered promiscuous mode [ 101.582179][ T7138] geneve2: entered allmulticast mode [ 101.608599][ T1089] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 101.638802][ T1089] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 101.670068][ T1089] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 101.688447][ T7148] delete_channel: no stack [ 102.047934][ T7166] openvswitch: netlink: IP tunnel dst address not specified [ 102.199845][ T7172] nftables ruleset with unbound set [ 102.256501][ T7172] bond3: option miimon: invalid value (18446744073709551585) [ 102.264099][ T7172] bond3: option miimon: allowed values 0 - 2147483647 [ 102.293307][ T7172] bond3 (unregistering): Released all slaves [ 102.401462][ T7180] atomic_op ffff888057c79198 conn xmit_atomic 0000000000000000 [ 102.498798][ T7160] __nla_validate_parse: 14 callbacks suppressed [ 102.498818][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.319'. [ 102.534387][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.319'. [ 102.598936][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 102.629151][ T7192] openvswitch: netlink: Flow actions attr not present in new flow. [ 102.672197][ T7200] netlink: 248 bytes leftover after parsing attributes in process `syz.1.329'. [ 102.722352][ T7192] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 102.862733][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 102.912976][ T7206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.331'. [ 102.948792][ T1089] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.975228][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 102.986787][ T1089] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.010755][ T7206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.331'. [ 103.020194][ T1089] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.044549][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 103.044771][ T1089] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.066664][ T7216] F: renamed from erspan0 (while UP) [ 103.096822][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 103.110065][ T7216] F: entered allmulticast mode [ 103.323402][ T7235] syzkaller1: entered promiscuous mode [ 103.334561][ T7235] syzkaller1: entered allmulticast mode [ 103.349394][ T7233] ip6tnl0: Caught tx_queue_len zero misconfig [ 103.536857][ T7244] validate_nla: 1 callbacks suppressed [ 103.536879][ T7244] netlink: 'syz.4.346': attribute type 28 has an invalid length. [ 103.553706][ T7244] netlink: 'syz.4.346': attribute type 3 has an invalid length. [ 103.582560][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.590996][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.671454][ T5900] IPVS: starting estimator thread 0... [ 103.692732][ T7254] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 103.771095][ T7252] IPVS: using max 33 ests per chain, 79200 per kthread [ 103.800602][ T7264] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 103.909881][ T7264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.085733][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.117922][ T7269] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 104.141233][ T7269] bond1: (slave vcan1): Error -95 calling set_mac_address [ 104.325432][ T7303] netlink: 'syz.1.359': attribute type 10 has an invalid length. [ 104.333636][ T7303] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 104.381180][ T7303] bond0: Caught tx_queue_len zero misconfig [ 104.634120][ T7311] "syz.4.361" (7311) uses obsolete ecb(arc4) skcipher [ 104.748076][ T7330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.847864][ T7338] netlink: Conntrack attr has 4 unknown bytes [ 104.954742][ T7343] netlink: 'syz.2.369': attribute type 2 has an invalid length. [ 104.980169][ T7341] syzkaller0: entered promiscuous mode [ 105.005977][ T7350] netlink: 'syz.2.369': attribute type 2 has an invalid length. [ 105.030212][ T7341] syzkaller0: entered allmulticast mode [ 105.473327][ T7377] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 106.354882][ T7410] syzkaller0: entered promiscuous mode [ 106.375312][ T7410] syzkaller0: entered allmulticast mode [ 106.585608][ T7424] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 106.623793][ T7424] bond2: entered promiscuous mode [ 106.635283][ T7424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.691904][ T7428] bond2: (slave bridge2): making interface the new active one [ 106.699715][ T7428] bridge2: entered promiscuous mode [ 106.707025][ T7428] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 106.736273][ T7430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.822561][ T7430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.851936][ T7448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.864365][ T7449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.927840][ T7430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.976952][ T7453] bond3: option fail_over_mac: invalid value (16) [ 106.986185][ T7453] bond3 (unregistering): Released all slaves [ 107.323091][ T7468] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 107.548686][ T7477] __nla_validate_parse: 18 callbacks suppressed [ 107.548707][ T7477] netlink: 44 bytes leftover after parsing attributes in process `syz.1.409'. [ 107.569027][ T7477] netlink: 43 bytes leftover after parsing attributes in process `syz.1.409'. [ 107.593665][ T7477] netlink: 'syz.1.409': attribute type 5 has an invalid length. [ 107.602713][ T7477] netlink: 43 bytes leftover after parsing attributes in process `syz.1.409'. [ 107.766655][ T7484] syzkaller0: entered promiscuous mode [ 107.772537][ T7484] syzkaller0: entered allmulticast mode [ 107.878932][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'. [ 107.921266][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'. [ 108.254682][ T7510] netlink: 256 bytes leftover after parsing attributes in process `syz.2.418'. [ 108.265392][ T7510] netlink: 256 bytes leftover after parsing attributes in process `syz.2.418'. [ 109.985413][ T7552] syzkaller0: entered promiscuous mode [ 110.011037][ T7552] syzkaller0: entered allmulticast mode [ 110.046316][ T7552] tipc: Started in network mode [ 110.052517][ T7552] tipc: Node identity 4, cluster identity 4711 [ 110.058713][ T7552] tipc: Node number set to 4 [ 110.077807][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.430'. [ 110.108017][ T7565] netlink: 168 bytes leftover after parsing attributes in process `syz.4.430'. [ 110.130381][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.430'. [ 110.317984][ T7576] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 110.936120][ T7602] syzkaller0: entered promiscuous mode [ 110.966399][ T7602] syzkaller0: entered allmulticast mode [ 111.133656][ T7615] mac80211_hwsim hwsim3 : renamed from wlan1 [ 111.146600][ T7620] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 111.172641][ T7620] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 111.350830][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a37a000: rx timeout, send abort [ 111.851669][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a379c00: rx timeout, send abort [ 111.860023][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a37a000: abort rx timeout. Force session deactivation [ 112.360004][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a379c00: abort rx timeout. Force session deactivation [ 112.555831][ T7648] __nla_validate_parse: 7 callbacks suppressed [ 112.555851][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.451'. [ 112.760559][ T7666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.779802][ T7665] gre1: entered promiscuous mode [ 112.805489][ T7665] gre1: entered allmulticast mode [ 112.855167][ T7671] netlink: 'syz.4.456': attribute type 8 has an invalid length. [ 112.874076][ T7671] netlink: 516 bytes leftover after parsing attributes in process `syz.4.456'. [ 112.968317][ T7673] openvswitch: netlink: Missing key (keys=40, expected=100) [ 113.104555][ T7678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.454'. [ 113.114698][ T7678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.454'. [ 113.184296][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 113.214285][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 113.241967][ T7682] netlink: 'syz.4.460': attribute type 15 has an invalid length. [ 113.300403][ T37] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 113.301823][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 113.313805][ T37] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 113.320956][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 113.339346][ T7682] netlink: 'syz.4.460': attribute type 15 has an invalid length. [ 113.347732][ T37] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 113.361177][ T37] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 113.494197][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 113.910504][ T7719] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.471'. [ 114.000587][ T5810] block nbd64: NBD_DISCONNECT [ 114.066582][ T5808] block nbd64: NBD_DISCONNECT [ 114.260401][ T7738] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 114.331506][ T7738] wlan1: mtu less than device minimum [ 114.336934][ T7738] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 114.348460][ T5808] udevd[5808]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.519539][ T7758] netlink: 'syz.4.481': attribute type 10 has an invalid length. [ 114.568272][ T7764] pim6reg1: entered promiscuous mode [ 114.580055][ T7764] pim6reg1: entered allmulticast mode [ 114.588983][ T7767] wireguard: wg2: Could not create IPv4 socket [ 114.596116][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.789400][ T7786] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 114.813022][ T7786] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 114.833697][ T7786] NCSI netlink: No device for ifindex 0 [ 115.326452][ T7822] syzkaller0: entered promiscuous mode [ 115.346223][ T7822] syzkaller0: entered allmulticast mode [ 115.390586][ T7825] sit2: entered promiscuous mode [ 115.427854][ T7825] sit2: entered allmulticast mode [ 115.559580][ T5976] IPVS: starting estimator thread 0... [ 115.599909][ T7842] x_tables: unsorted underflow at hook 1 [ 115.662836][ T7843] IPVS: using max 37 ests per chain, 88800 per kthread [ 115.755927][ T7855] netlink: 'syz.3.511': attribute type 1 has an invalid length. [ 115.829982][ T5143] Bluetooth: hci4: link tx timeout [ 115.838430][ T5143] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.851976][ T7855] bond2: entered promiscuous mode [ 115.858725][ T7855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.880770][ T7856] bond2: (slave bridge1): making interface the new active one [ 115.891065][ T7856] bridge1: entered promiscuous mode [ 115.902742][ T7856] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 115.928008][ T7862] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 115.936672][ T7862] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 116.110838][ T7821] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 116.124350][ T7821] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 116.386391][ T7891] batman_adv: batadv0: Adding interface: dummy0 [ 116.392862][ T7891] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.437758][ T7891] batman_adv: batadv0: Interface activated: dummy0 [ 116.480441][ T7890] netlink: 'syz.4.521': attribute type 16 has an invalid length. [ 116.716187][ T7921] openvswitch: netlink: IP tunnel dst address not specified [ 116.724355][ T7919] netlink: 'syz.3.526': attribute type 4 has an invalid length. [ 116.733357][ T7921] openvswitch: netlink: IP tunnel dst address not specified [ 116.770467][ T7922] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 116.783762][ T7922] bond3 (unregistering): Released all slaves [ 117.022598][ T7937] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20004 [ 117.155541][ T5830] Bluetooth: hci4: link tx timeout [ 117.160726][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.511341][ T5830] Bluetooth: hci4: link tx timeout [ 117.516510][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.569164][ T7969] x_tables: duplicate underflow at hook 2 [ 117.864713][ T7990] x_tables: duplicate underflow at hook 1 [ 117.881003][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 117.933013][ T7994] validate_nla: 1 callbacks suppressed [ 117.933031][ T7994] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 118.005363][ T7995] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 118.066934][ T8000] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 118.086254][ T7994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.212759][ T8001] bond3: (slave veth3): Enslaving as an active interface with a down link [ 118.265393][ T8009] "syz.0.554" (8009) uses obsolete ecb(arc4) skcipher [ 118.925337][ T8051] __nla_validate_parse: 19 callbacks suppressed [ 118.925355][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 119.152122][ T8064] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 119.260225][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 119.775707][ T8104] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.574'. [ 119.789509][ T8104] netlink: Conntrack attr has 3 unknown bytes [ 119.800057][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 119.815576][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.574'. [ 119.825075][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.574'. [ 120.187777][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 120.228005][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 120.465047][ T8140] team0: No ports can be present during mode change [ 120.735960][ T8172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'. [ 120.978982][ T8183] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 121.021349][ T8183] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 121.277266][ T8198] netlink: 'syz.0.592': attribute type 21 has an invalid length. [ 121.291232][ T8198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.592'. [ 123.445314][ T8166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.223396][ T8270] lo: Caught tx_queue_len zero misconfig [ 124.237471][ T8241] Cannot find add_set index 0 as target [ 124.506098][ T8282] pimreg: entered allmulticast mode [ 124.858066][ T8304] __nla_validate_parse: 2 callbacks suppressed [ 124.858083][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.617'. [ 125.352146][ T8326] bridge0: port 4(gretap0) entered disabled state [ 125.467263][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.475011][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.670113][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.687509][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.946219][ T7915] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.966566][ T7915] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.978288][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.018104][ T8363] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 126.049898][ T7915] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.059045][ T7915] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.092853][ T7915] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.114882][ T7915] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.169130][ T8366] ipvlan2: entered allmulticast mode [ 126.176983][ T8366] batadv_slave_1: entered allmulticast mode [ 126.185985][ T8366] batman_adv: batadv0: Adding interface: ipvlan2 [ 126.192939][ T8366] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.222961][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 126.251076][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.274601][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.288646][ T8366] batman_adv: batadv0: Interface activated: ipvlan2 [ 126.319280][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.326496][ T7910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.375023][ T7915] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.386389][ T7915] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.608409][ T8373] syzkaller0: entered promiscuous mode [ 126.614110][ T8373] syzkaller0: entered allmulticast mode [ 126.716472][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'. [ 126.741781][ T8404] openvswitch: netlink: Flow key attr not present in new flow. [ 127.007536][ T8381] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 128.131479][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 128.155365][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 128.172864][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'. [ 128.278018][ T8438] netem: change failed [ 128.351623][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 128.435588][ T8442] netlink: 184 bytes leftover after parsing attributes in process `syz.0.647'. [ 128.457998][ T8449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.644971][ T8455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.652565][ T8455] IPv6: NLM_F_CREATE should be set when creating new route [ 128.772625][ T8463] netlink: 'syz.2.655': attribute type 29 has an invalid length. [ 128.823432][ T8466] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 128.914336][ T8473] bridge1: entered promiscuous mode [ 128.919766][ T8473] bridge1: entered allmulticast mode [ 128.968848][ T8473] team0: Port device bridge1 added [ 128.976468][ T8476] bridge0: port 3(team0) entered blocking state [ 128.985080][ T8476] bridge0: port 3(team0) entered disabled state [ 128.992405][ T8476] team0: entered allmulticast mode [ 128.997548][ T8476] team_slave_0: entered allmulticast mode [ 129.008793][ T8476] team_slave_1: entered allmulticast mode [ 129.017687][ T8476] batadv1: entered allmulticast mode [ 129.084318][ T8476] team0: entered promiscuous mode [ 129.099255][ T8476] team_slave_0: entered promiscuous mode [ 129.108232][ T8483] netlink: 548 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.126971][ T8476] team_slave_1: entered promiscuous mode [ 129.133844][ T8476] batadv1: entered promiscuous mode [ 129.140457][ T8476] bridge0: port 3(team0) entered blocking state [ 129.146457][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 129.147125][ T8476] bridge0: port 3(team0) entered forwarding state [ 129.171062][ T8482] bond0: Caught tx_queue_len zero misconfig [ 129.416116][ T8504] netlink: 'syz.0.668': attribute type 21 has an invalid length. [ 129.461639][ T7905] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 129.471442][ T7905] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 130.388879][ T8535] gre1: entered promiscuous mode [ 130.454315][ T8577] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 130.499121][ T8577] netlink: 'syz.2.686': attribute type 3 has an invalid length. [ 130.532816][ T8586] netlink: 'syz.0.688': attribute type 6 has an invalid length. [ 130.551046][ T8577] __nla_validate_parse: 5 callbacks suppressed [ 130.551064][ T8577] netlink: 172 bytes leftover after parsing attributes in process `syz.2.686'. [ 130.603240][ T8577] NCSI netlink: No device for ifindex 813332851 [ 130.818442][ T8603] veth0_to_bridge: entered promiscuous mode [ 130.839502][ T8602] veth0_to_bridge: left promiscuous mode [ 130.944942][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 131.114604][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 131.133755][ T8616] netlink: 104 bytes leftover after parsing attributes in process `syz.4.700'. [ 131.169156][ T8615] hsr_slave_1 (unregistering): left promiscuous mode [ 131.525723][ T8642] netlink: 'syz.4.708': attribute type 32 has an invalid length. [ 131.605846][ T8649] mac80211_hwsim hwsim6 : renamed from wlan1 [ 131.733210][ T8655] xt_socket: unknown flags 0xe4 [ 131.769622][ T8663] Cannot find del_set index 4 as target [ 131.838639][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 131.894910][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 131.987606][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 132.090787][ T8686] bond0: entered promiscuous mode [ 132.129653][ T8686] bond_slave_0: entered promiscuous mode [ 132.178394][ T8686] bond_slave_1: entered promiscuous mode [ 132.251641][ T8704] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 132.403478][ T8711] bond2: (slave vxcan7): The slave device specified does not support setting the MAC address [ 132.417272][ T8711] bond2: (slave vxcan7): Error -95 calling set_mac_address [ 132.446335][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.724'. [ 132.644342][ T8704] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 132.697577][ T8711] macvlan3: entered promiscuous mode [ 132.707569][ T8711] macvlan3: entered allmulticast mode [ 132.716059][ T8711] bond2: entered promiscuous mode [ 132.722811][ T8711] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 132.749698][ T8711] bond2: left promiscuous mode [ 132.779162][ T8733] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 132.798800][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 132.845679][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.061756][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 133.066641][ T8754] lo speed is unknown, defaulting to 1000 [ 133.096173][ T8754] lo speed is unknown, defaulting to 1000 [ 133.137507][ T8754] lo speed is unknown, defaulting to 1000 [ 133.490638][ T8777] syzkaller1: entered promiscuous mode [ 133.502403][ T8754] infiniband syz2: set down [ 133.508964][ T8754] infiniband syz2: added lo [ 133.519414][ T8777] syzkaller1: entered allmulticast mode [ 133.554162][ T10] lo speed is unknown, defaulting to 1000 [ 133.636333][ T8754] RDS/IB: syz2: added [ 133.656894][ T8754] smc: adding ib device syz2 with port count 1 [ 133.670686][ T8754] smc: ib device syz2 port 1 has no pnetid [ 133.679694][ T5976] lo speed is unknown, defaulting to 1000 [ 133.711501][ T8754] lo speed is unknown, defaulting to 1000 [ 133.873844][ T8793] xt_hashlimit: size too large, truncated to 1048576 [ 134.044084][ T8808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.118162][ T8811] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 134.328536][ T8817] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 134.441222][ T8817] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 134.451416][ T8754] lo speed is unknown, defaulting to 1000 [ 134.596452][ T8825] veth1_macvtap: renamed from veth0_vlan [ 134.626187][ T8801] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 134.647311][ T8801] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 135.035703][ T8847] bond0 (unregistering): left promiscuous mode [ 135.057764][ T8847] bond_slave_0: left promiscuous mode [ 135.064633][ T8847] bond_slave_1: left promiscuous mode [ 135.094009][ T8847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.124002][ T8847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.171776][ T8847] bond0 (unregistering): Released all slaves [ 135.212228][ T8754] lo speed is unknown, defaulting to 1000 [ 135.392081][ T8867] syzkaller0: entered promiscuous mode [ 135.419024][ T8867] syzkaller0: entered allmulticast mode [ 135.608854][ T8887] bond4: Invalid ad_actor_system MAC address. [ 135.625903][ T8887] bond4: option ad_actor_system: invalid value (1) [ 135.647695][ T8887] bond4 (unregistering): Released all slaves [ 136.953651][ T8893] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 137.006511][ T8886] syzkaller0: entered promiscuous mode [ 137.012250][ T8886] syzkaller0: entered allmulticast mode [ 137.020530][ T5488] veth1_macvtap: left promiscuous mode [ 137.047325][ T5488] veth1_macvtap: entered promiscuous mode [ 137.056273][ T8754] lo speed is unknown, defaulting to 1000 [ 137.444950][ T8927] __nla_validate_parse: 4 callbacks suppressed [ 137.444970][ T8927] netlink: 64 bytes leftover after parsing attributes in process `syz.3.777'. [ 137.530668][ T8931] x_tables: duplicate entry at hook 3 [ 138.442475][ T8908] IPv6: sit1: Disabled Multicast RS [ 138.448347][ T8908] sit1: entered allmulticast mode [ 138.477289][ T8922] vlan2: entered allmulticast mode [ 138.486646][ T8754] lo speed is unknown, defaulting to 1000 [ 139.119801][ T8971] netlink: 36 bytes leftover after parsing attributes in process `syz.3.789'. [ 139.152391][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 139.414738][ T8983] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 139.429379][ T8983] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 139.560366][ T8997] xt_hashlimit: size too large, truncated to 1048576 [ 139.696343][ T9006] netlink: 'syz.1.798': attribute type 8 has an invalid length. [ 139.851460][ T9016] netlink: 'syz.4.800': attribute type 1 has an invalid length. [ 139.907957][ T9016] bond3: entered promiscuous mode [ 139.914642][ T9016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.934681][ T9016] syzkaller1: entered promiscuous mode [ 139.940198][ T9016] syzkaller1: entered allmulticast mode [ 139.955889][ T9016] netlink: 56 bytes leftover after parsing attributes in process `syz.4.800'. [ 140.176580][ T9028] H: renamed from dummy0 (while UP) [ 140.202195][ T9030] netlink: 68 bytes leftover after parsing attributes in process `syz.4.805'. [ 140.343063][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 140.494230][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 140.532854][ T9044] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 140.548744][ T9044] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 140.563802][ T9044] gretap1: entered promiscuous mode [ 140.577048][ T9044] gretap1: entered allmulticast mode [ 140.888965][ T9065] Bluetooth: MGMT ver 1.23 [ 141.025995][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.819'. [ 141.105858][ T9081] syzkaller0: entered promiscuous mode [ 141.120334][ T9081] syzkaller0: entered allmulticast mode [ 141.139530][ T9075] tipc: New replicast peer: 255.255.255.255 [ 141.146302][ T9075] tipc: Enabled bearer , priority 10 [ 141.599480][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 141.633371][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.832'. [ 141.651857][ T9108] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 141.664769][ T9115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.712769][ T9115] xt_hashlimit: size too large, truncated to 1048576 [ 141.757270][ T9117] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 143.602569][ T9154] syz.3.843: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 143.708631][ T9154] CPU: 0 UID: 0 PID: 9154 Comm: syz.3.843 Not tainted syzkaller #0 PREEMPT(full) [ 143.708654][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.708671][ T9154] Call Trace: [ 143.708679][ T9154] [ 143.708686][ T9154] dump_stack_lvl+0xe8/0x150 [ 143.708724][ T9154] warn_alloc+0x249/0x340 [ 143.708746][ T9154] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.708773][ T9154] ? __pfx_warn_alloc+0x10/0x10 [ 143.708797][ T9154] ? kasan_save_track+0x4f/0x80 [ 143.708815][ T9154] ? kasan_save_track+0x3e/0x80 [ 143.708831][ T9154] ? __kasan_kmalloc+0x93/0xb0 [ 143.708849][ T9154] ? __kmalloc_cache_noprof+0x31c/0x660 [ 143.708867][ T9154] ? xskq_create+0x56/0x170 [ 143.708887][ T9154] ? xsk_setsockopt+0x54c/0x990 [ 143.708904][ T9154] ? do_sock_setsockopt+0x17c/0x1b0 [ 143.708923][ T9154] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 143.708955][ T9154] ? do_syscall_64+0x14d/0xf80 [ 143.708981][ T9154] __vmalloc_node_range_noprof+0x132/0x1730 [ 143.709029][ T9154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.709055][ T9154] ? __kasan_kmalloc+0x93/0xb0 [ 143.709080][ T9154] vmalloc_user_noprof+0xad/0xe0 [ 143.709108][ T9154] ? xskq_create+0xbf/0x170 [ 143.709130][ T9154] xskq_create+0xbf/0x170 [ 143.709153][ T9154] xsk_init_queue+0x8a/0xe0 [ 143.709177][ T9154] xsk_setsockopt+0x54c/0x990 [ 143.709199][ T9154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.709219][ T9154] ? __pfx_aa_sk_perm+0x10/0x10 [ 143.709247][ T9154] ? aa_sock_opt_perm+0xff/0x1a0 [ 143.709267][ T9154] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 143.709287][ T9154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.709309][ T9154] do_sock_setsockopt+0x17c/0x1b0 [ 143.709335][ T9154] __x64_sys_setsockopt+0x13d/0x1b0 [ 143.709362][ T9154] do_syscall_64+0x14d/0xf80 [ 143.709383][ T9154] ? trace_irq_disable+0x3b/0x150 [ 143.709398][ T9154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.709415][ T9154] ? clear_bhb_loop+0x40/0x90 [ 143.709437][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.709454][ T9154] RIP: 0033:0x7f85b859c819 [ 143.709478][ T9154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.709492][ T9154] RSP: 002b:00007f85b94e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.709512][ T9154] RAX: ffffffffffffffda RBX: 00007f85b8815fa0 RCX: 00007f85b859c819 [ 143.709525][ T9154] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 143.709535][ T9154] RBP: 00007f85b8632c91 R08: 0000000000000004 R09: 0000000000000000 [ 143.709546][ T9154] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.709556][ T9154] R13: 00007f85b8816038 R14: 00007f85b8815fa0 R15: 00007ffeee8a27c8 [ 143.709585][ T9154] [ 143.709596][ T9154] Mem-Info: [ 143.815496][ T9167] __nla_validate_parse: 1 callbacks suppressed [ 143.815514][ T9167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.846'. [ 143.825817][ T9154] active_anon:7200 inactive_anon:0 isolated_anon:0 [ 143.825817][ T9154] active_file:3207 inactive_file:39956 isolated_file:0 [ 143.825817][ T9154] unevictable:768 dirty:67 writeback:0 [ 143.825817][ T9154] slab_reclaimable:11224 slab_unreclaimable:101959 [ 143.825817][ T9154] mapped:29502 shmem:2537 pagetables:1215 [ 143.825817][ T9154] sec_pagetables:0 bounce:0 [ 143.825817][ T9154] kernel_misc_reclaimable:0 [ 143.825817][ T9154] free:1318197 free_pcp:14277 free_cma:0 [ 144.049461][ T9154] Node 0 active_anon:24040kB inactive_anon:0kB active_file:12828kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118116kB dirty:264kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12968kB pagetables:4896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.082764][ T9154] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.133319][ T9154] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.199522][ T9181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.852'. [ 144.224443][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.852'. [ 144.239388][ T9154] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 144.248647][ T9154] Node 0 DMA32 free:1330840kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24140kB inactive_anon:0kB active_file:12828kB inactive_file:159624kB unevictable:1536kB writepending:264kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:50552kB local_pcp:27392kB free_cma:0kB [ 144.294408][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'. [ 144.327026][ T9154] lowmem_reserve[]: 0 0 0 0 0 [ 144.347837][ T9154] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 144.356565][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 144.388611][ T9154] lowmem_reserve[]: 0 0 0 0 0 [ 144.396688][ T9154] Node 1 Normal free:3937644kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.441544][ T9154] lowmem_reserve[]: 0 0 0 0 0 [ 144.446348][ T9154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.459402][ T9154] Node 0 DMA32: 2983*4kB (UME) 1856*8kB (UME) 1323*16kB (UME) 214*32kB (UME) 132*64kB (UME) 115*128kB (UME) 76*256kB (UM) 49*512kB (UME) 38*1024kB (UME) 23*2048kB (UME) 274*4096kB (M) = 1330828kB [ 144.479020][ T9154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.493334][ T9154] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 9*16kB (UM) 6*32kB (UM) 6*64kB (UM) 5*128kB (UM) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937644kB [ 144.510717][ T9154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.520948][ T9154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.530266][ T9154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.540337][ T9154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.549759][ T9154] 44524 total pagecache pages [ 144.554818][ T9154] 0 pages in swap cache [ 144.559519][ T9154] Free swap = 124996kB [ 144.564202][ T9154] Total swap = 124996kB [ 144.568546][ T9154] 2097051 pages RAM [ 144.572920][ T9154] 0 pages HighMem/MovableOnly [ 144.577611][ T9154] 427077 pages reserved [ 144.588419][ T9154] 0 pages cma reserved [ 144.824426][ T9195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.857'. [ 144.940480][ T9214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.022556][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.085870][ T9216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.865'. [ 145.347191][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 145.356729][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.872'. [ 145.368407][ T9237] netlink: 120 bytes leftover after parsing attributes in process `syz.3.872'. [ 145.379356][ T9242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.531961][ T9261] netlink: 'syz.2.878': attribute type 21 has an invalid length. [ 145.554755][ T9254] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 145.858832][ T9278] netlink: 'syz.4.883': attribute type 4 has an invalid length. [ 146.013274][ T9285] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 146.034914][ T9285] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 146.344987][ T9314] xt_hashlimit: size too large, truncated to 1048576 [ 146.454039][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.478317][ T9318] bridge_slave_0 (unregistering): left allmulticast mode [ 146.502683][ T9318] bridge_slave_0 (unregistering): left promiscuous mode [ 146.530282][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.891450][ T9335] netlink: 'syz.4.898': attribute type 1 has an invalid length. [ 146.899161][ T9335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.192066][ T9359] netlink: 'syz.1.904': attribute type 3 has an invalid length. [ 147.232568][ T9359] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 147.240266][ T9359] NCSI netlink: No device for ifindex 813332851 [ 147.342115][ T9364] x_tables: duplicate entry at hook 1 [ 147.519568][ T9369] bond0: entered promiscuous mode [ 147.525041][ T9369] bond0: entered allmulticast mode [ 147.538150][ T9379] dvmrp0: entered allmulticast mode [ 147.638687][ T9385] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.684220][ T9385] team0: Device macvlan2 is already an upper device of the team interface [ 147.732439][ T9391] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 147.767211][ T9391] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 147.922711][ T9401] tipc: Started in network mode [ 147.927727][ T9401] tipc: Node identity 080211, cluster identity 4711 [ 147.934735][ T9401] tipc: Enabled bearer , priority 0 [ 147.943437][ T9399] x_tables: duplicate entry at hook 2 [ 147.952252][ T9401] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 148.073405][ T9407] tipc: Resetting bearer [ 148.223503][ T9419] netlink: 'syz.3.923': attribute type 4 has an invalid length. [ 148.485438][ T9431] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 148.592756][ T9436] netlink: 'syz.0.930': attribute type 1 has an invalid length. [ 148.674424][ T9439] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 148.735669][ T9439] bond4: option xmit_hash_policy: invalid value (64) [ 148.749991][ T9450] xt_hashlimit: size too large, truncated to 1048576 [ 148.773739][ T9439] bond4 (unregistering): Released all slaves [ 148.821852][ T9452] __nla_validate_parse: 19 callbacks suppressed [ 148.821878][ T9452] netlink: 256 bytes leftover after parsing attributes in process `syz.1.936'. [ 149.052286][ T5900] tipc: Node number set to 134353152 [ 149.310341][ T9483] syzkaller0: entered promiscuous mode [ 149.316597][ T9483] syzkaller0: entered allmulticast mode [ 149.348708][ T9483] openvswitch: netlink: Message has 4 unknown bytes. [ 149.647569][ T9494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.807024][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 149.816648][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 149.850132][ T9512] netlink: 244 bytes leftover after parsing attributes in process `syz.2.955'. [ 149.955616][ T9514] vlan2: entered allmulticast mode [ 149.962254][ T9514] bond0: entered allmulticast mode [ 149.967522][ T9514] bond_slave_0: entered allmulticast mode [ 149.974387][ T9514] bond_slave_1: entered allmulticast mode [ 150.159575][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 150.168751][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 150.180520][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 150.296334][ T9532] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 150.332267][ T9531] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 150.401691][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 150.960703][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 150.980136][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.973'. [ 151.312007][ T9589] nbd0: detected capacity change from 0 to 127 [ 151.364988][ T9589] x9: renamed from bridge_slave_0 (while UP) [ 151.430997][ T5143] block nbd0: Receive control failed (result -104) [ 151.630684][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 151.717647][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 151.802356][ T9616] validate_nla: 4 callbacks suppressed [ 151.802375][ T9616] netlink: 'syz.4.989': attribute type 3 has an invalid length. [ 151.851105][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 151.911183][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 151.994880][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.039427][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.074770][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.142298][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.214482][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.239405][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.262719][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.299741][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.324768][ T9605] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.363398][ T9639] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 153.866134][ T9754] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 153.955150][ T9754] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 154.306774][ T9786] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 154.337272][ T9786] __nla_validate_parse: 7 callbacks suppressed [ 154.337291][ T9786] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1035'. [ 154.386568][ T9786] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1035'. [ 154.514517][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 154.524722][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 154.656748][ T9801] netlink: 'syz.4.1040': attribute type 2 has an invalid length. [ 154.836614][ T9812] xt_hashlimit: size too large, truncated to 1048576 [ 154.855915][ T9813] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 154.964901][ T9813] bond3: entered promiscuous mode [ 154.993845][ T9813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.048661][ T9825] ieee802154 phy1 wpan1: encryption failed: -22 [ 155.085811][ T9823] bond3: (slave bridge4): making interface the new active one [ 155.095817][ T9823] bridge4: entered promiscuous mode [ 155.102786][ T9827] netlink: 'syz.4.1048': attribute type 2 has an invalid length. [ 155.110720][ T9823] bridge4: left promiscuous mode [ 155.194606][ T9832] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1050'. [ 155.216651][ T9827] 9: entered promiscuous mode [ 155.527130][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1058'. [ 155.554931][ T9852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1060'. [ 155.564993][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 155.600322][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 155.894980][ T9869] lo: Caught tx_queue_len zero misconfig [ 155.905584][ T9869] sch_tbf: burst 4 is lower than device lo mtu (81) ! [ 156.114168][ T9884] team0: Port device bridge0 added [ 156.237509][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 156.465248][ T9907] syzkaller0: entered promiscuous mode [ 156.470985][ T9907] syzkaller0: entered allmulticast mode [ 156.775820][ T9929] netlink: 'syz.1.1089': attribute type 3 has an invalid length. [ 156.923460][ T9939] netlink: 'syz.2.1092': attribute type 12 has an invalid length. [ 156.962341][ T9939] netlink: 'syz.2.1092': attribute type 29 has an invalid length. [ 157.020813][ T9947] net_ratelimit: 55 callbacks suppressed [ 157.020831][ T9947] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 157.091847][ T9957] openvswitch: netlink: Flow actions attr not present in new flow. [ 157.211290][ T9963] netlink: 'syz.4.1099': attribute type 3 has an invalid length. [ 157.823285][ T796] IPVS: starting estimator thread 0... [ 157.911912][T10011] IPVS: using max 28 ests per chain, 67200 per kthread [ 157.936521][T10006] lo speed is unknown, defaulting to 1000 [ 158.236973][T10019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.375648][T10019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.526807][T10036] lo speed is unknown, defaulting to 1000 [ 158.590152][T10048] xt_cgroup: xt_cgroup: no path or classid specified [ 158.615632][T10038] syzkaller0: entered promiscuous mode [ 158.624855][T10038] syzkaller0: entered allmulticast mode [ 160.172526][T10056] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 160.374880][T10079] syzkaller0: entered promiscuous mode [ 160.406988][T10079] syzkaller0: entered allmulticast mode [ 160.579826][T10086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.592810][T10086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.696605][ T7910] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.708335][ T7910] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.742622][ T7910] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.763369][ T7910] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.576551][T10107] __nla_validate_parse: 11 callbacks suppressed [ 161.576570][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1127'. [ 161.594436][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 161.603840][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 162.276534][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1132'. [ 162.287517][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1132'. [ 162.332034][T10122] netem: incorrect ge model size [ 162.337349][T10122] netem: change failed [ 162.440203][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1134'. [ 162.604074][T10135] nbd: must specify a size in bytes for the device [ 162.702927][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 163.435130][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'. [ 163.939793][T10222] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1162'. [ 163.985182][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1162'. [ 164.270609][T10244] syzkaller1: entered promiscuous mode [ 164.285219][T10244] syzkaller1: entered allmulticast mode [ 164.646356][T10258] syzkaller0: entered promiscuous mode [ 164.658708][T10258] syzkaller0: entered allmulticast mode [ 164.669207][T10262] netlink: 'syz.1.1174': attribute type 1 has an invalid length. [ 164.719841][T10263] lo speed is unknown, defaulting to 1000 [ 164.866404][T10270] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 164.897937][T10270] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 164.953367][T10270] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 164.981082][T10270] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 164.981173][T10279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.132610][T10290] netlink: 'syz.1.1182': attribute type 1 has an invalid length. [ 165.298933][T10301] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 165.769336][T10316] ipt_REJECT: TCP_RESET invalid for non-tcp [ 165.787220][T10316] syzkaller0: entered promiscuous mode [ 165.807671][T10316] syzkaller0: entered allmulticast mode [ 166.139365][T10339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.194037][T10340] netlink: 'syz.0.1197': attribute type 5 has an invalid length. [ 166.277395][T10340] geneve2: entered promiscuous mode [ 166.295034][T10340] geneve2: entered allmulticast mode [ 166.341899][ T7910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 166.387387][ T7910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 166.590073][T10352] netlink: 'syz.4.1202': attribute type 10 has an invalid length. [ 166.646085][T10352] dummy0: entered promiscuous mode [ 166.653847][T10352] dummy0: entered allmulticast mode [ 166.660665][T10352] team0: Port device dummy0 added [ 167.460827][T10399] __nla_validate_parse: 19 callbacks suppressed [ 167.472336][T10399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1218'. [ 167.486262][T10399] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1218'. [ 167.523274][T10399] veth7: entered promiscuous mode [ 167.657083][T10408] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1220'. [ 167.873228][T10421] netlink: 'syz.4.1226': attribute type 1 has an invalid length. [ 167.876860][T10422] netlink: 'syz.3.1225': attribute type 11 has an invalid length. [ 167.889736][T10422] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1225'. [ 167.955551][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1228'. [ 168.002811][T10336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 168.066094][T10430] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 168.084909][T10430] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 168.099184][T10430] bond5: (slave ip6gre1): making interface the new active one [ 168.107941][T10430] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 168.310808][T10336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 168.434790][T10459] xt_l2tp: v2 tid > 0xffff: 1114244 [ 168.474666][ T7915] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 168.494565][ T7915] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 168.535231][ T7910] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 168.573579][ T7907] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 171.290170][T10451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.524262][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 171.538056][T10496] validate_nla: 1 callbacks suppressed [ 171.538073][T10496] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 171.639155][T10493] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.659409][T10493] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.922248][T10515] syzkaller0: entered promiscuous mode [ 171.935834][T10515] syzkaller0: entered allmulticast mode [ 171.968240][T10518] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 172.016807][T10523] x_tables: duplicate underflow at hook 1 [ 172.026817][T10518] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 172.037487][T10518] gretap1: entered promiscuous mode [ 172.046713][T10518] gretap1: entered allmulticast mode [ 172.683136][T10565] syzkaller0: entered promiscuous mode [ 172.701841][T10565] syzkaller0: entered allmulticast mode [ 172.782763][T10571] netlink: 'syz.2.1257': attribute type 24 has an invalid length. [ 172.883607][T10576] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1259'. [ 173.119958][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 173.138231][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1265'. [ 173.194026][ T7907] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.213065][ T7907] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.214882][T10596] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1266'. [ 173.230693][T10595] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1266'. [ 173.244147][ T7907] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.256173][ T5878] hid (null): global environment stack underflow [ 173.272980][ T7907] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.315578][T10602] macvlan0: entered promiscuous mode [ 173.331724][ T5878] hid-generic 0005:0458:0004.0001: global environment stack underflow [ 173.340072][ T5878] hid-generic 0005:0458:0004.0001: item 0 0 1 11 parsing failed [ 173.415141][ T5878] hid-generic 0005:0458:0004.0001: probe with driver hid-generic failed with error -22 [ 173.438083][T10607] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 173.438168][ T5143] Bluetooth: hci4: link tx timeout [ 173.451650][ T5143] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 173.483963][T10608] netlink: 'syz.2.1271': attribute type 64 has an invalid length. [ 173.519310][T10607] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.596560][T10612] bond5: (slave veth5): Enslaving as an active interface with a down link [ 173.664138][T10607] macvlan2: entered promiscuous mode [ 173.669960][T10607] macvlan2: entered allmulticast mode [ 173.679456][T10607] bond5: entered promiscuous mode [ 173.685702][T10607] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.707217][T10607] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 173.743834][T10607] bond5: left promiscuous mode [ 173.952409][T10641] openvswitch: netlink: Actions may not be safe on all matching packets [ 173.953670][T10642] team_slave_1: Caught tx_queue_len zero misconfig [ 173.968786][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 174.016884][T10646] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 174.030168][T10646] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 174.184635][T10657] netlink: 'syz.2.1287': attribute type 1 has an invalid length. [ 174.192705][T10657] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1287'. [ 175.036508][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 175.087825][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 175.098199][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 175.237367][T10702] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 175.285015][T10702] bond4 (unregistering): Released all slaves [ 175.501508][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 176.077479][T10768] xt_hashlimit: invalid rate [ 176.820057][T10803] netlink: 'syz.4.1316': attribute type 10 has an invalid length. [ 177.149974][T10799] bond5 (unregistering): Released all slaves [ 177.219148][T10803] vxcan1: entered promiscuous mode [ 177.229517][T10803] vxcan1: entered allmulticast mode [ 177.236445][T10803] team0: Device vxcan1 is of different type [ 177.633787][T10836] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 178.025650][T10872] __nla_validate_parse: 11 callbacks suppressed [ 178.025669][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1331'. [ 178.160138][T10882] netlink: 'syz.1.1330': attribute type 10 has an invalid length. [ 178.188522][T10881] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 178.201426][T10882] team0: Device vxcan1 is of different type [ 178.479341][T10902] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.656194][T10911] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1341'. [ 178.677202][T10911] netlink: 'syz.3.1341': attribute type 3 has an invalid length. [ 178.696350][T10911] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1341'. [ 179.215671][T10933] netlink: 'syz.4.1342': attribute type 1 has an invalid length. [ 179.233402][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1343'. [ 179.350272][T10933] bond6: entered promiscuous mode [ 179.371860][T10933] 8021q: adding VLAN 0 to HW filter on device bond6 [ 179.440190][T10939] bond6: (slave bridge5): making interface the new active one [ 179.448423][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'. [ 179.523310][T10939] bridge5: entered promiscuous mode [ 179.570111][T10939] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 179.843251][T10957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 179.926151][T10965] netlink: 'syz.0.1349': attribute type 2 has an invalid length. [ 179.926428][T10962] netlink: 'syz.1.1348': attribute type 39 has an invalid length. [ 179.946454][T10965] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 180.172513][T10982] x_tables: unsorted underflow at hook 1 [ 180.180812][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1352'. [ 180.452577][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 180.915290][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 180.998276][T11019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.378768][T11036] ipt_REJECT: TCP_RESET invalid for non-tcp [ 181.482371][ T5161] block nbd0: Possible stuck request ffff888026718000: control (read@0,1024B). Runtime 30 seconds [ 181.494559][ T5161] block nbd0: Possible stuck request ffff888026718200: control (read@1024,1024B). Runtime 30 seconds [ 181.506253][ T5161] block nbd0: Possible stuck request ffff888026718400: control (read@2048,1024B). Runtime 30 seconds [ 181.517284][ T5161] block nbd0: Possible stuck request ffff888026718600: control (read@3072,1024B). Runtime 30 seconds [ 182.077174][ T5878] IPVS: starting estimator thread 0... [ 182.181816][T11067] IPVS: using max 40 ests per chain, 96000 per kthread [ 182.283358][T11072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.471201][T11083] syzkaller1: entered promiscuous mode [ 182.476720][T11083] syzkaller1: entered allmulticast mode [ 182.534400][T11090] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 182.650381][T11090] bond4: entered promiscuous mode [ 182.673772][T11090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.786954][T11100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.797933][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1381'. [ 182.824217][T11100] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 182.849771][T11100] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 182.899750][T11100] bond4: (slave vti0): making interface the new active one [ 182.932680][T11100] vti0: entered promiscuous mode [ 182.959981][T11100] bond4: (slave vti0): Enslaving as an active interface with an up link [ 183.145814][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 183.620037][T11153] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 183.664593][T11153] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1390'. [ 183.679262][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1391'. [ 183.692022][T11159] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 183.741043][T11159] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1390'. [ 183.793619][T11153] netlink: 'syz.1.1390': attribute type 4 has an invalid length. [ 183.807458][T11170] trusted_key: syz.2.1393 sent an empty control message without MSG_MORE. [ 183.822586][T11153] netlink: 'syz.1.1390': attribute type 5 has an invalid length. [ 183.851465][T11153] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1390'. [ 183.871426][T11159] netlink: 'syz.1.1390': attribute type 4 has an invalid length. [ 183.920528][T11159] netlink: 'syz.1.1390': attribute type 5 has an invalid length. [ 183.943778][T11159] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1390'. [ 184.010071][T11186] IPVS: length: 61 != 8 [ 184.011073][T11187] netlink: 'syz.3.1396': attribute type 12 has an invalid length. [ 184.387556][T11210] delete_channel: no stack [ 184.672826][T11232] : entered promiscuous mode [ 184.703794][T11232] openvswitch: netlink: Flow actions attr not present in new flow. [ 184.731719][T11233] openvswitch: netlink: Flow actions attr not present in new flow. [ 184.831364][T11239] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 184.971976][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 184.989324][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 185.024722][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 185.178880][T11256] netlink: 'syz.2.1417': attribute type 4 has an invalid length. [ 185.539390][T11274] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.565761][T11274] bond5: (slave veth0_to_bond): making interface the new active one [ 185.577158][T11274] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 185.596885][T11278] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1425'. [ 185.637205][T11274] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.675541][T11274] bond5: (slave bond6): Enslaving as an active interface with a down link [ 187.056286][T11362] sock: sock_set_timeout: `syz.1.1445' (pid 11362) tries to set negative timeout [ 187.067847][T11362] tipc: Started in network mode [ 187.072976][T11362] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 187.083076][T11362] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 187.091507][T11362] tipc: Enabled bearer , priority 10 [ 187.179853][T11368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.200480][T11365] gtp3: entered promiscuous mode [ 187.243779][T11365] gtp3: entered allmulticast mode [ 187.452246][T11384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.124622][T11424] lo speed is unknown, defaulting to 1000 [ 188.174134][T11422] openvswitch: netlink: IP tunnel dst address not specified [ 188.219024][ T5878] tipc: Node number set to 1 [ 188.330724][T11428] validate_nla: 5 callbacks suppressed [ 188.330742][T11428] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 188.384929][T11437] __nla_validate_parse: 144 callbacks suppressed [ 188.384949][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 188.398168][T11428] bond7: entered promiscuous mode [ 188.404097][T11436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1468'. [ 188.422005][T11428] 8021q: adding VLAN 0 to HW filter on device bond7 [ 188.453164][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 188.550405][T11428] bond7: (slave bridge4): making interface the new active one [ 188.560189][T11428] bridge4: entered promiscuous mode [ 188.569514][T11428] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 188.971337][T11464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1478'. [ 189.249204][T11484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1484'. [ 189.259925][T11485] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1484'. [ 189.271637][T11491] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1486'. [ 189.404526][T11500] netlink: 'syz.2.1488': attribute type 10 has an invalid length. [ 189.420123][T11500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.420808][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1487'. [ 189.532308][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 189.577318][T11509] team0: Port device team_slave_0 removed [ 189.837975][T11525] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1497'. [ 189.853774][T11524] syzkaller0: entered promiscuous mode [ 189.863584][T11524] syzkaller0: entered allmulticast mode [ 189.888070][T11529] netlink: 'syz.0.1500': attribute type 13 has an invalid length. [ 189.939621][T11530] netlink: 'syz.1.1499': attribute type 4 has an invalid length. [ 189.958841][T11533] xt_policy: output policy not valid in PREROUTING and INPUT [ 189.981743][T11529] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 189.999980][T11529] xt_NFQUEUE: number of total queues is 0 [ 190.133837][T11544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.633896][T11583] xt_hashlimit: size too large, truncated to 1048576 [ 190.810055][T11597] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 191.239940][T11617] ip6tnl0: entered promiscuous mode [ 191.245347][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 191.245393][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 191.245444][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 191.448994][T11629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.541521][T11590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.029167][T11662] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 192.136022][T11670] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 192.173413][T11674] openvswitch: netlink: Flow actions attr not present in new flow. [ 192.174037][T11670] ip6tnl0: Caught tx_queue_len zero misconfig [ 192.255834][T11670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.264973][T11670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.327586][T11680] x_tables: duplicate underflow at hook 1 [ 192.642925][T11695] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 192.650741][T11695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.658007][T11695] IPv6: NLM_F_CREATE should be set when creating new route [ 192.782103][T11703] nbd: must specify at least one socket [ 192.957069][T11714] delete_channel: no stack [ 194.025247][T11775] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 194.035782][T11775] __nla_validate_parse: 35 callbacks suppressed [ 194.035799][T11775] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1575'. [ 194.055205][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'. [ 194.068587][T11769] hsr_slave_0: left promiscuous mode [ 194.074933][T11769] hsr_slave_1: left promiscuous mode [ 194.106370][T11772] netlink: 'syz.1.1574': attribute type 1 has an invalid length. [ 194.127491][T11772] netlink: 'syz.1.1574': attribute type 4 has an invalid length. [ 194.137014][T11772] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1574'. [ 194.240548][T11782] syzkaller1: entered promiscuous mode [ 194.249215][T11782] syzkaller1: entered allmulticast mode [ 194.261511][T11782] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1577'. [ 194.294224][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.373840][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 194.386077][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 194.397878][T11790] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 194.458262][T11788] bond8: entered promiscuous mode [ 194.467394][T11788] bond8: entered allmulticast mode [ 194.473467][T11788] 8021q: adding VLAN 0 to HW filter on device bond8 [ 194.490900][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 194.588887][T11806] macvlan2: entered promiscuous mode [ 194.601477][T11806] macvlan2: entered allmulticast mode [ 194.610461][T11806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.692142][T11814] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1585'. [ 194.798549][T11824] netlink: 'syz.2.1588': attribute type 24 has an invalid length. [ 195.303448][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 195.312809][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'. [ 195.338700][T11833] 8021q: adding VLAN 0 to HW filter on device bond9 [ 197.600315][T11808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.194940][T11880] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 198.200345][T11879] sit0: entered promiscuous mode [ 198.206566][T11879] netlink: 'syz.0.1609': attribute type 1 has an invalid length. [ 198.654660][T11901] syzkaller0: entered promiscuous mode [ 198.660285][T11901] syzkaller0: entered allmulticast mode [ 199.153485][T11927] netlink: 'syz.0.1627': attribute type 83 has an invalid length. [ 199.172915][T11929] __nla_validate_parse: 11 callbacks suppressed [ 199.172935][T11929] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1628'. [ 199.222713][T11931] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1629'. [ 199.259597][T11934] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 199.479815][T11946] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 199.825539][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 199.887446][T11970] nbd: must specify an index to disconnect [ 200.056956][T11984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1645'. [ 200.127449][T11984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1645'. [ 200.162832][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 200.346090][T12004] bond6: option fail_over_mac: invalid value (16) [ 200.355223][T12004] bond6 (unregistering): Released all slaves [ 200.382697][T12008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.410394][T12010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1652'. [ 200.426430][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 200.440470][T12008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.529763][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1653'. [ 200.895672][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 200.959346][T12031] netlink: 'syz.1.1659': attribute type 83 has an invalid length. [ 201.294601][T12050] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 201.321140][T12050] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 201.429843][T12054] syzkaller0: entered promiscuous mode [ 201.441186][T12054] syzkaller0: entered allmulticast mode [ 201.817173][T12090] netlink: 'syz.4.1674': attribute type 3 has an invalid length. [ 201.904947][T12094] xt_hashlimit: size too large, truncated to 1048576 [ 203.320288][T12124] x_tables: duplicate underflow at hook 1 [ 203.345266][T12125] netlink: 'syz.0.1685': attribute type 2 has an invalid length. [ 203.367002][T12124] x_tables: duplicate underflow at hook 1 [ 203.635027][T12150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.677333][T12150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.714267][T12150] batman_adv: batadv0: Removing interface: ipvlan2 [ 203.745220][T12162] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 203.753303][T12162] netlink: 'syz.4.1692': attribute type 2 has an invalid length. [ 203.803466][T12157] syzkaller1: entered promiscuous mode [ 204.221627][T12194] netlink: 'syz.4.1705': attribute type 1 has an invalid length. [ 204.616537][T12206] __nla_validate_parse: 5 callbacks suppressed [ 204.616555][T12206] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1702'. [ 204.644623][T12206] unsupported nlmsg_type 40 [ 204.666467][T12221] netlink: 'syz.3.1713': attribute type 12 has an invalid length. [ 204.676470][T12221] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1713'. [ 204.848996][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1716'. [ 205.071144][T12236] sctp: [Deprecated]: syz.3.1719 (pid 12236) Use of int in max_burst socket option. [ 205.071144][T12236] Use struct sctp_assoc_value instead [ 205.442471][T12255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1720'. [ 205.596695][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 205.683457][T12276] netlink: 'syz.3.1729': attribute type 83 has an invalid length. [ 205.684339][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1730'. [ 205.709904][T12277] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1729'. [ 205.722621][T12277] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1729'. [ 205.724648][T12264] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.1726'. [ 205.961656][T12290] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 206.078664][T12290] 8021q: adding VLAN 0 to HW filter on device bond10 [ 206.174703][T12292] bond10: (slave bridge5): making interface the new active one [ 206.217593][T12292] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 206.334627][T12304] netlink: 'syz.4.1736': attribute type 1 has an invalid length. [ 206.440571][T12312] bond7: (slave bridge6): making interface the new active one [ 206.452119][T12312] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 207.075226][T12342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.124921][T12344] bond5: entered promiscuous mode [ 207.245516][T12349] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1746'. [ 207.282640][T12349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.310811][T12349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.426477][T12358] ip6gre0: Master is either lo or non-ether device [ 207.698246][T12383] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 207.723314][T12385] macvtap1: entered allmulticast mode [ 207.728739][T12385] veth0_macvtap: entered allmulticast mode [ 208.175354][T12426] ================================================================== [ 208.183466][T12426] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 208.191201][T12426] Read of size 8 at addr ffff88802aee7fe0 by task syz.2.1767/12426 [ 208.199090][T12426] [ 208.201409][T12426] CPU: 0 UID: 0 PID: 12426 Comm: syz.2.1767 Not tainted syzkaller #0 PREEMPT(full) [ 208.201426][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.201435][T12426] Call Trace: [ 208.201440][T12426] [ 208.201446][T12426] dump_stack_lvl+0xe8/0x150 [ 208.201469][T12426] print_report+0xba/0x230 [ 208.201486][T12426] ? af_alg_pull_tsgl+0x1c6/0x740 [ 208.201523][T12426] kasan_report+0x117/0x150 [ 208.201546][T12426] ? af_alg_pull_tsgl+0x1c6/0x740 [ 208.201568][T12426] af_alg_pull_tsgl+0x1c6/0x740 [ 208.201592][T12426] skcipher_recvmsg+0x5df/0x1140 [ 208.201613][T12426] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 208.201627][T12426] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.201648][T12426] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 208.201663][T12426] ? security_socket_recvmsg+0x7e/0x2c0 [ 208.201682][T12426] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 208.201696][T12426] sock_recvmsg+0x172/0x1b0 [ 208.201712][T12426] __sys_recvfrom+0x240/0x3c0 [ 208.201729][T12426] ? __pfx___sys_recvfrom+0x10/0x10 [ 208.201753][T12426] ? exc_page_fault+0x6a/0xc0 [ 208.201778][T12426] ? do_user_addr_fault+0xc6f/0x1340 [ 208.201797][T12426] __x64_sys_recvfrom+0xde/0x100 [ 208.201814][T12426] do_syscall_64+0x14d/0xf80 [ 208.201833][T12426] ? trace_irq_disable+0x3b/0x150 [ 208.201845][T12426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.201858][T12426] ? clear_bhb_loop+0x40/0x90 [ 208.201873][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.201886][T12426] RIP: 0033:0x7f8b5a95d04e [ 208.201899][T12426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.201911][T12426] RSP: 002b:00007f8b5b7f0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 208.201927][T12426] RAX: ffffffffffffffda RBX: 00007f8b5b7f26c0 RCX: 00007f8b5a95d04e [ 208.201937][T12426] RDX: 0000000000001000 RSI: 00007f8b5b7f1000 RDI: 0000000000000004 [ 208.201946][T12426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.201953][T12426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 208.201961][T12426] R13: 00007f8b5b7f0f58 R14: 00007f8b5b7f1000 R15: 0000000000000000 [ 208.201976][T12426] [ 208.201980][T12426] [ 208.420305][T12426] Allocated by task 12426: [ 208.424716][T12426] kasan_save_track+0x3e/0x80 [ 208.429386][T12426] __kasan_kmalloc+0x93/0xb0 [ 208.433977][T12426] __kmalloc_noprof+0x35c/0x760 [ 208.438817][T12426] sock_kmalloc+0xd6/0x160 [ 208.443233][T12426] skcipher_recvmsg+0x54d/0x1140 [ 208.448174][T12426] sock_recvmsg+0x172/0x1b0 [ 208.452667][T12426] __sys_recvfrom+0x240/0x3c0 [ 208.457337][T12426] __x64_sys_recvfrom+0xde/0x100 [ 208.462265][T12426] do_syscall_64+0x14d/0xf80 [ 208.467207][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.473088][T12426] [ 208.475398][T12426] The buggy address belongs to the object at ffff88802aee7fc0 [ 208.475398][T12426] which belongs to the cache kmalloc-32 of size 32 [ 208.489275][T12426] The buggy address is located 0 bytes to the right of [ 208.489275][T12426] allocated 32-byte region [ffff88802aee7fc0, ffff88802aee7fe0) [ 208.503728][T12426] [ 208.506048][T12426] The buggy address belongs to the physical page: [ 208.512458][T12426] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802aee7d40 pfn:0x2aee7 [ 208.522700][T12426] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 208.530754][T12426] page_type: f5(slab) [ 208.534719][T12426] raw: 00fff00000000200 ffff88813fea7780 ffff88813fea64c8 ffffea000081b590 [ 208.543325][T12426] raw: ffff88802aee7d40 0000000800400037 00000000f5000000 0000000000000000 [ 208.551975][T12426] page dumped because: kasan: bad access detected [ 208.558375][T12426] page_owner tracks the page as allocated [ 208.564068][T12426] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5667, tgid 5667 (sshd-session), ts 54904301347, free_ts 54841752492 [ 208.584629][T12426] post_alloc_hook+0x231/0x280 [ 208.589396][T12426] get_page_from_freelist+0x24dc/0x2580 [ 208.594947][T12426] __alloc_frozen_pages_noprof+0x18d/0x380 [ 208.600763][T12426] allocate_slab+0x77/0x660 [ 208.605266][T12426] refill_objects+0x331/0x3c0 [ 208.609936][T12426] __pcs_replace_empty_main+0x2e6/0x730 [ 208.615474][T12426] __kmalloc_noprof+0x474/0x760 [ 208.620320][T12426] tomoyo_encode2+0x27f/0x530 [ 208.624988][T12426] tomoyo_check_unix_address+0x3d9/0x7f0 [ 208.630617][T12426] tomoyo_socket_connect_permission+0x1b1/0x290 [ 208.636867][T12426] security_socket_connect+0xc0/0x280 [ 208.642240][T12426] __sys_connect+0x24a/0x450 [ 208.646831][T12426] __x64_sys_connect+0x7a/0x90 [ 208.651611][T12426] do_syscall_64+0x14d/0xf80 [ 208.656206][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.662086][T12426] page last free pid 23 tgid 23 stack trace: [ 208.668046][T12426] __free_frozen_pages+0xc2b/0xdb0 [ 208.673143][T12426] tlb_remove_table_rcu+0x85/0x100 [ 208.678243][T12426] rcu_core+0x7cd/0x1070 [ 208.682476][T12426] handle_softirqs+0x22a/0x870 [ 208.687234][T12426] run_ksoftirqd+0x36/0x60 [ 208.691639][T12426] smpboot_thread_fn+0x541/0xa50 [ 208.696570][T12426] kthread+0x388/0x470 [ 208.700629][T12426] ret_from_fork+0x51e/0xb90 [ 208.705207][T12426] ret_from_fork_asm+0x1a/0x30 [ 208.710003][T12426] [ 208.712311][T12426] Memory state around the buggy address: [ 208.717923][T12426] ffff88802aee7e80: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 208.726638][T12426] ffff88802aee7f00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 208.734692][T12426] >ffff88802aee7f80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 208.742835][T12426] ^ [ 208.750011][T12426] ffff88802aee8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.758142][T12426] ffff88802aee8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 208.766184][T12426] ================================================================== [ 208.791423][T12426] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.798676][T12426] CPU: 0 UID: 0 PID: 12426 Comm: syz.2.1767 Not tainted syzkaller #0 PREEMPT(full) [ 208.808221][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.818282][T12426] Call Trace: [ 208.821577][T12426] [ 208.824514][T12426] vpanic+0x56c/0xa60 [ 208.828490][T12426] ? __pfx_vpanic+0x10/0x10 [ 208.832992][T12426] ? __pfx___schedule+0x10/0x10 [ 208.837862][T12426] panic+0xc5/0xd0 [ 208.841639][T12426] ? __pfx_panic+0x10/0x10 [ 208.846073][T12426] ? preempt_schedule_common+0x82/0xd0 [ 208.851552][T12426] ? af_alg_pull_tsgl+0x1c6/0x740 [ 208.856617][T12426] check_panic_on_warn+0x89/0xb0 [ 208.861581][T12426] ? af_alg_pull_tsgl+0x1c6/0x740 [ 208.866624][T12426] end_report+0x73/0x180 [ 208.870952][T12426] ? af_alg_pull_tsgl+0x1c6/0x740 [ 208.875973][T12426] kasan_report+0x128/0x150 [ 208.880465][T12426] ? af_alg_pull_tsgl+0x1c6/0x740 [ 208.885490][T12426] af_alg_pull_tsgl+0x1c6/0x740 [ 208.890342][T12426] skcipher_recvmsg+0x5df/0x1140 [ 208.895270][T12426] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 208.900637][T12426] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.905594][T12426] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 208.910880][T12426] ? security_socket_recvmsg+0x7e/0x2c0 [ 208.916415][T12426] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 208.921775][T12426] sock_recvmsg+0x172/0x1b0 [ 208.926270][T12426] __sys_recvfrom+0x240/0x3c0 [ 208.930937][T12426] ? __pfx___sys_recvfrom+0x10/0x10 [ 208.936132][T12426] ? exc_page_fault+0x6a/0xc0 [ 208.940799][T12426] ? do_user_addr_fault+0xc6f/0x1340 [ 208.946082][T12426] __x64_sys_recvfrom+0xde/0x100 [ 208.951010][T12426] do_syscall_64+0x14d/0xf80 [ 208.955592][T12426] ? trace_irq_disable+0x3b/0x150 [ 208.960601][T12426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.966663][T12426] ? clear_bhb_loop+0x40/0x90 [ 208.971331][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.977213][T12426] RIP: 0033:0x7f8b5a95d04e [ 208.981616][T12426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.001384][T12426] RSP: 002b:00007f8b5b7f0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 209.009805][T12426] RAX: ffffffffffffffda RBX: 00007f8b5b7f26c0 RCX: 00007f8b5a95d04e [ 209.017851][T12426] RDX: 0000000000001000 RSI: 00007f8b5b7f1000 RDI: 0000000000000004 [ 209.025809][T12426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.033792][T12426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 209.041754][T12426] R13: 00007f8b5b7f0f58 R14: 00007f8b5b7f1000 R15: 0000000000000000 [ 209.049720][T12426] [ 209.053216][T12426] Kernel Offset: disabled [ 209.057553][T12426] Rebooting in 86400 seconds..