last executing test programs: 4m38.423706854s ago: executing program 0 (id=2635): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffb}}}}]}, 0x38}}, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xf8, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000020000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) close(0x3) (async) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000180)=""/167, &(0x7f0000000000)=0xa7) 4m38.218248312s ago: executing program 0 (id=2643): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) write(r1, &(0x7f00000002c0)="8ef82f", 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m37.888051007s ago: executing program 0 (id=2648): unshare(0x6a040080) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0xfe01afe654b3ee43, @private=0xa010100, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) unshare(0x32050100) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r4, &(0x7f0000000380), 0xe) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r7, 0x0, 0x180000}, 0x18) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) 4m37.649527952s ago: executing program 0 (id=2652): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) socket$igmp6(0xa, 0x3, 0x3a) (async) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e21, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, {0xa, 0x1, 0xfffffffd, @private2, 0x6}, 0x80, {[0x6, 0x200, 0x9, 0xfffffefc, 0x2d, 0x0, 0x0, 0x200003]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000008000000911135000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14, 0x80000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettfilter={0x54, 0x2e, 0x2, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff3, 0xb}, {0xfff1, 0x4}, {0x4, 0xf}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bind$packet(r3, &(0x7f0000000140)={0x11, 0xf6, r6, 0x1, 0x1, 0x6, @remote}, 0x14) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f0000000400)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRESHEX=r2], 0x48}}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRESHEX=r2], 0x48}}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@generic="a16d"]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x5, 0x6}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x5, 0x6}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x34048098) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x34048098) socket(0x10, 0x803, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 4m37.393742406s ago: executing program 0 (id=2656): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 4m30.534824808s ago: executing program 0 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0xffe0, 0xf}, {0x0, 0xfff1}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4000) socket(0x3, 0x0, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x20, r13, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m30.344024701s ago: executing program 32 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0xffe0, 0xf}, {0x0, 0xfff1}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4000) socket(0x3, 0x0, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x20, r13, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.106759134s ago: executing program 1 (id=4714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001040000805b0000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e64300000000000000000fff0001c00128009000100626f6e64000000000c000280050011000100"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0) 3.89623524s ago: executing program 1 (id=4717): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x8bc4, 0x7f, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000feffffffd40e00001000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x89, &(0x7f00000001c0)=""/137, 0x41000, 0x4, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c001a"], 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x18, 0x100, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffffffff}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x34}}, 0x80) 3.682962561s ago: executing program 1 (id=4721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x81, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) 3.566212422s ago: executing program 1 (id=4723): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r1, r0, 0x0, 0xfff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0x4) 3.284987433s ago: executing program 1 (id=4725): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 3) 2.902172192s ago: executing program 1 (id=4729): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pread64(r4, &(0x7f0000002840)=""/4096, 0x1000, 0x100000001) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x13, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6ef34"}]}, 0x24}], 0x1}, 0x0) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x3, 0xb}, {0xfff3, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x8, 0x43}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x80814cf37b91fad0}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x91b, 0x0, 0x3, 0x9}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x8) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x3, 0xb}, {0xfff3, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x8, 0x43}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x80814cf37b91fad0}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x91b, 0x0, 0x3, 0x9}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) sendmsg$nl_generic(r10, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001240)={0x490, 0x3b, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1b}, [@nested={0x3c4, 0x51, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xe1, 0x0, 0x0, @uid=r11}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x80000}, @nested={0x216, 0x139, 0x0, 0x1, [@nested={0x8, 0x138, 0x0, 0x1, [@typed={0x4, 0xdf}]}, @generic="18b24affa5ddb50549b0432bef7d0dfdd7b1035763fe8de5c46cf99310361ee94879602c4b188bc3e212376318d32289a94bd0e5e0b193ca6e1f15559f24fffbffed82e15eb2993202f0ba1c6e37fb3342bf1d6c95741512874011ae6416c5aba240251120c005558be14b500286eab8821b24191f032429a90132e383c90e89", @generic="055b3df91ff2e37762ee0a9ee272b284868ac3882fc4d0c4ea9b74bd409b1b4b803e0b5b757a13f82a0af690f4e55f2e8253ba493e249bfd74bfae76480d1ca34a5d72e9f43bb30510f160464ce00e56280af11d20bd73755c2554eacb72a6b72e6dc82ab03d08cb2e8858f644e1091cdb61e6a2632e486c9d2bd265053e259ced89ae9e93c3553c7f7fc16b6bbebeefde1c01a7d1d4fdc60f060964d42b3d7935291d500b0721766e3f1c999330d634ea425e6070f53f522569efad72f71f9625b565677141c5b44ebb5a9f9b0f", @nested={0x18, 0x20, 0x0, 0x1, [@nested={0x4, 0x125}, @nested={0x4, 0x76}, @nested={0x4, 0x9f}, @typed={0x8, 0xf6, 0x0, 0x0, @fd}]}, @generic="412fdac5f450648fb55c227c5d3c4aa460cf8ab1753fac466e99849c3523ce99d1a156cab3ae4b393a4a536bdabb0e204e01d76a6d90f51d81058df83df50a17038ef1fea9a1d5a246717f003042b970896cca6e68e9e5e5f4ea20faa34599ffe9702cf9", @generic="991498275add0a609c4aa389482fa451e59792b4adb024182f8436d6eb444a0af80aff41e8659e21f82237f3b3be69f1240fa4b7387e258fbbd2c97034eb103c"]}, @generic="ef55e143643999614e271821910d5806bccf265aa1f826a50951015be7a81343ecee58cc2204c8c45c0d36d0ac088211c26aa7f654d2bfb1d7e44556087c38789f27880a0d6c7b6ac950de038d052d7d7e628e71204fb9d16557c3a68ece709e7a3dc74f5b0cc46a6c6036ec0286c462ded9574f172455b799494605717056c01284053d0afc2c97a9864963f078e176535e79e182c8f919bdb3ed2185bdd470683b68e48da99348dd0c389b6302a25cab616133215fa43c69ff10b9640d339b", @nested={0xca, 0x1, 0x0, 0x1, [@generic="d3f9ba9b1ff8283ccd28841e9c7b8cc78acca1b9a8dc4c9ee85197c337a6ba691f155cac7f5effe8b8909bf2ff18d9c833128412df4f37426c9d683277858afb46cae3a92bd9d18a6685ec2d5f06a59e4f8924a5b2a32aad7efcb6537a8a1a6616b31137c12fecd6c2479575fb786099643af49799ba014cc8c01ef8ec6a8682620796a80cf293b47ec51fd3dce49f8cf4016d5df16c60b756801dcee62e024e1e60c6e0e3f614048fc2e15db70b03cf6fbaecc213d049accd08012fb889648814bacc35dce4"]}]}, @generic, @generic="46dbdec4a03a252ec95ea8ed2bf0188e68d3911ed6a7266e11429fac07bf5ccf9337bdbaefb4433cb2027e8828a6984662aaba211a875d7beeae392691e2245137b519736fa2ae4b7eca58d8f15e0c042fbf2ea7e97dd6cba1f7b61109a4549fe272404c0c20f9aacf98fc491767b0886ebedd38c0e226d5fa9ebdcdf13c97bbcf315a36a46ddcbc337127526585c4e2232243adf6abd9f71296e1fe4489fd2ce2dfcdda0a2f7c37d64c4a4c8708ffe13fd86d1502e256fc"]}, 0x490}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000018}, 0x4000080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x21, 0x800, 0x0) 2.251660348s ago: executing program 3 (id=4741): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x534}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xadb}]}}}]}, 0x40}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 1.641930668s ago: executing program 3 (id=4747): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x6}, 0x80000002}], 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x8de13c6b70ae92c3, 0x41003, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082cbd7000fedbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900008000002200000008005700a203000004008e0004006c0004008e00"], 0x3c}}, 0x4000000) 1.503762983s ago: executing program 4 (id=4749): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x18}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x15, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xbf22e61aff874854}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x820}, 0x0) 1.276249188s ago: executing program 4 (id=4753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x50bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40001, 0x61}}, 0x20}}, 0x8000) 1.159671794s ago: executing program 4 (id=4755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000980)={0x1, 0x1002}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c000000000000202020a37b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007000000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x1}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0xffffd000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x9, 0x9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x0, 0x7800, 0x7f, 0xf0f}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', r5, 0x20, 0x10, 0x1, 0x2, {{0x1e, 0x4, 0x1, 0x7, 0x78, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@end, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x6, [{@empty, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5764}, {@empty, 0x7}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x89}, @rr={0x7, 0x1b, 0xdf, [@broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @multicast2, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1f, 0xa0, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2, @broadcast, @remote, @broadcast]}]}}}}}) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000004000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d000000000008001f0000000000"], 0x148}}, 0x0) 1.123920066s ago: executing program 5 (id=4756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r5 = epoll_create(0xffffffd5) writev(r5, &(0x7f0000000180), 0x0) 995.891525ms ago: executing program 4 (id=4758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002600)={0x32, 0x1, '\x00', [@ra={0x5, 0x2, 0x80}, @padn, @padn={0x1, 0x1, [0x0]}]}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) sendto$inet6(r0, &(0x7f0000000700), 0x0, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 890.683985ms ago: executing program 4 (id=4760): openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) 707.470741ms ago: executing program 2 (id=4762): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ni\x00'}, 0x58) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x2}, 0x6) write(r0, &(0x7f0000000040)="09000000010000", 0x7) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = socket$packet(0x11, 0x3, 0x300) bind(r3, &(0x7f0000000600)=@pppoe={0x18, 0x0, {0x1, @remote, 'macvlan0\x00'}}, 0x80) (async) socket(0x2a, 0x2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80000001}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x1, @empty, 0xffff82a6}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fbc}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x94) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8d0) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7], 0x60}, 0x1, 0x7}, 0x808) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) (async) sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, 0x0) 672.153682ms ago: executing program 3 (id=4763): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="898b968f9adae50e1196d2b3b92fa885aa5725da95", 0x15}, 0x1, 0x0, 0x0, 0x24004084}, 0x20004884) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e00010000000000000000000700", @ANYRES32], 0x28}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r3, r4, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f000000aa40)={0x0, 0x0, &(0x7f000000aa00)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a005fa62bbd7000fedbdf250200000000000000080005007c0211a7"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) (async, rerun: 32) r7 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='mm_compaction_kcompactd_sleep\x00'}, 0x18) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) (rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xe, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES64=r8], 0x0, 0x4, 0xf6, &(0x7f00000006c0)=""/246, 0x1e00, 0x50, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xa, 0x2, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000c40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9], &(0x7f0000000c80)=[{0x2, 0x3, 0xa}, {0x6, 0x4, 0x5, 0x2}], 0x10, 0x7}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r11, 0x0, 0xd}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)={0x100, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0xec, 0x11, 0x0, 0x1, [@nested={0xe8, 0x13e, 0x0, 0x1, [@nested={0xe4, 0x23, 0x0, 0x1, [@generic="ff12228a20f57c5a6e243065e767b6e40ba937d2550d4e8f43ee84b04ca3ba78f6e5bf095489c17a2b40410c80112f5e5246be915aec2f15c2d99dbdfcae02cc95809cc5712c137c4d827e761ec1702b322b18dc8dd01d27cc97dc819677766817841adf9f661f374dc35192b6011f23d228a365a96f0b812d441f576e4e6ab26889061fadb3eb4bbbeece4eb37bb68b3c8568e52fdaa17188db756e8e405575c5ba12ab3298abff9510e5670a7970350a9ddded1f9beb944c", @typed={0x8, 0x137, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x127}, @generic="a6baa71b38fe4e", @typed={0x14, 0xf4, 0x0, 0x0, @ipv6=@mcast1}]}]}]}]}, 0x100}], 0x1}, 0x300) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000180)=0x44400, 0x4) (async, rerun: 32) getsockopt$rose(r13, 0x104, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) (rerun: 32) 615.38677ms ago: executing program 5 (id=4764): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xb, 0x0, 0x6, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x20, 0x40, 0x3, 0xe}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getsadinfo={0x5c, 0x23, 0x400, 0x70bd28, 0x25dfdbfe, 0x0, [@offload={0xc, 0x1c, {r0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2b, 0x8}}, @tfcpad={0x8, 0x16, 0x3}, @policy_type={0xa, 0x10, {0x1}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2d, 0xffffffff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x628d, '\x00', r0, r1, 0x5, 0x3, 0x3}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_ext={0x1c, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}]}, &(0x7f0000000340)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0x24, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000013c0)={0x2, 0x1, 0x9, 0x6}, 0x10, 0x1172c, 0xffffffffffffffff, 0x7, &(0x7f0000001400)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001440)=[{0x5, 0x3, 0x3, 0x8}, {0x1, 0x4, 0x3, 0x6}, {0x4, 0x5, 0xc, 0xb}, {0x4, 0x1, 0xc, 0xa}, {0x2, 0x5, 0xb, 0x8}, {0x1, 0x5, 0xb, 0x6}, {0x0, 0x5, 0xe, 0xe}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000001580)=r3}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001600), 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x100d, '\x00', r0, r5, 0x3, 0x4, 0x1}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x2, &(0x7f00000016c0)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}], &(0x7f0000001700)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x54, '\x00', r0, 0x25, r5, 0x8, &(0x7f0000001740)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0xd, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000017c0)=[{0x8, 0x2, 0x0, 0xc}], 0x10, 0x730e}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000018c0)={"21d7e9db4a711f56316c06617bb3b3b4", 0x0, 0x0, {0x10, 0x8}, {0x5, 0x8000}, 0x2, [0x4e89, 0xfffffffffffffffa, 0x10001, 0x2f, 0x1c6, 0x80000000, 0x8, 0x0, 0x0, 0x41d3, 0x80000000, 0x200, 0x8, 0xe, 0x7, 0x5a097a09]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f00000019c0)={{r7}, r9, 0x8, @unused=[0x3, 0x100, 0x95, 0xff], @subvolid=0x9a}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000029c0), r10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x21, 0x0, 0x200, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r11, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x4c, r12, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) getpeername$packet(r11, &(0x7f0000002c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002cc0)=0x14) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d80)={0x11, 0x2, &(0x7f0000002bc0)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x9}], &(0x7f0000002c00)='syzkaller\x00', 0x4, 0x33, &(0x7f0000002c40)=""/51, 0x41100, 0x54, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002d00)={0x2, 0x0, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[r4], 0x0, 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000002e40)={'batadv0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002e80)={r7, r15, 0x25, 0x2, @void}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002f00)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r15, r5, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003440)={r14, 0xe0, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000031c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000003240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003280), &(0x7f00000032c0), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000003300)}}, 0x10) pipe(&(0x7f0000003480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x19, 0x16, &(0x7f0000002f80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @map_val={0x18, 0x0, 0x2, 0x0, r17, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x20000000}, @map_val={0x18, 0x0, 0x2, 0x0, r2}], &(0x7f0000003040)='GPL\x00', 0xbe6f, 0x59, &(0x7f0000003080)=""/89, 0x41000, 0x702ee69cda390286, '\x00', r13, @fallback=0x2, r5, 0x8, &(0x7f0000003100)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x4, 0xd, 0x5, 0x1ff}, 0x10, r18, r3, 0x0, &(0x7f00000034c0)=[r19, r2, r4], 0x0, 0x10, 0x4}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r19, 0x65, 0x2, &(0x7f00000035c0)=0x7, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000003680), 0x8) 595.867241ms ago: executing program 3 (id=4765): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000d00)=""/235, 0xeb}, {&(0x7f0000000540)=""/74, 0xfffffffffffffe3d}, {&(0x7f0000000980)=""/88, 0x58}], 0x7, &(0x7f0000002540)=""/4096, 0x1000}, 0x141) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x1}]}, {0x0, [0x2e]}}, &(0x7f0000001540)=""/4096, 0x27, 0x1000, 0x1}, 0x28) (async) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180), &(0x7f0000000200)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0201000004008000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000feffffff00"/28], 0x50) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r5 = socket$netlink(0x10, 0x3, 0xf) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='P'], 0x50}, 0x1, 0x0, 0x0, 0x8044005}, 0x4084) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) r6 = socket$can_raw(0x1d, 0x3, 0x1) (async) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) unshare(0x50100) (async) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000180), 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=@can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "dc8e4602bd767428"}, 0x10}, 0x118, 0x0, 0x0, 0x400c095}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r7, 0x0, 0x0, 0x800) (async) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="68020000010503000000000001000000030000075402010000000000040000000006feff080027005d797a3000000000000000000000000000000000000000000000000000000000342efc98edda6c80931ab42c143b974299d37374550c11721d0f196b8fee6a95d80efc53bcf6bcfc15a85983f6c2753cb2fda57536cf1f266108c2f4a09fb99853abcab03bd6a4e9d795f179ea0900008002000000ff07000009000400010000000600000001000100030000000000000068023402020000000104000007000700020000000700000008004d32020000000001000001010f0001000000040000000800d00103000000000000000d00ff070300000003000000070002000000000005000000100000000000000000000000ffffff7f02000000060000000400010000000000040000000200010003000000040000000300040000000000b50000000500a17a020000007f000000030006000300000000100000008009000100000006a87b17b8c7494b10e35ecd0000000a0005000000000008000000b2b40900010000000100000009000400010000000f000000ff010900000000000600000004000100010000004e0000000600f600020000000000000009007b0000000000030000000900010001000000000000200600040001000000030000000400020002000000030000000104020003000000030000000200b5fd0300000007000000030008000100000004000000f3ff030003000000060000000600fdff02000000090000000a0001000000000000000000220f06004de40d689007ab7a01000008010000000300000009006b0800000000020000000000910002000000b35d0000"], 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000085) 550.859848ms ago: executing program 5 (id=4766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000180000001801000020ff642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x3002}, 0x94) 421.678731ms ago: executing program 2 (id=4767): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xc, 0x0, 0x1}) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) r1 = accept4$netrom(r0, 0x0, &(0x7f0000000080), 0x80000) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000000c0)={{0x6, 0x2}, 0x100, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_kthread_work_execute_end\x00', r0, 0x0, 0xaa6}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={r1}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={@mcast2, @private=0xa010101, 0x9, 0x7}}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000340), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7, 0xa15, 0x24, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x79e, 0x20, 0xfffffffd, 0x2000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', r4, 0x700, 0x20, 0x5, 0xa, {{0x26, 0x4, 0x1, 0x9, 0x98, 0x68, 0x0, 0xb, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x14, 0xd9, 0x0, 0x4, [0x40, 0x8, 0x48, 0x8]}, @timestamp_addr={0x44, 0x34, 0xe1, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@loopback, 0x6}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6b7fd523}, {@multicast2, 0x7}, {@remote, 0x6}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0x4, "cd3f"}, {0x5, 0x10, "c426d0f30e891baf11bd089d1741"}, {0x5, 0xf, "1233c4e4842995745f0fa3aaa9"}]}, @timestamp={0x44, 0x10, 0xe8, 0x0, 0x7, [0x10000, 0xd, 0x7]}]}}}}}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000600)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000540)=""/66, 0x42}, &(0x7f00000005c0), 0x4}, 0xa0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000006c0)='pim6reg0\x00', 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0xfffd, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x110, r7, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6a}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000a40)=0x0) bind$nfc_llcp(r0, &(0x7f0000000a80)={0x27, r9, 0x0, 0x5, 0x3, 0xf0, "30764d8a5743a24fb25d051cb6854ef0c294d9505a943aeec0d0ad897f648f2472b30b22c99f7e096b71c803023f9fbce1cace4c3124a5450a065016f035e4", 0x11}, 0x60) sendmsg$kcm(r2, &(0x7f00000034c0)={&(0x7f0000000b00)=@nfc_llcp={0x27, r9, 0xffffffffffffffff, 0x4, 0x34, 0x7, "7f9c9d0cb146a9908e121a7bfe90d42adedd5d9434fb6cc3b6b058e1be6e0c5b7aa282a9d0c37962c9933456afb11adb88046055bab2445cb4bf5cc85e3e1c", 0x2a}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000b80)="f17384d54afeec60feb37d0e2ed23824c643c12c76caaaff4dad332fef4ea2bed026255cb9c2cf55d00aed493afa77263277a047cb636c5a663610ebc8338e93170b0b7902c2121bb7d0e99ae92c063258e5db3a4328db5320ff5afc225bde876233f1", 0x63}, {&(0x7f0000000c00)="36f9e5bc04bb5ee60932", 0xa}, {&(0x7f0000000c40)="4236d6eea016f6f20e75942c9a6108e4377518587c8dd3ac578dc00f6b57b99dd8aafc6ea213ddbef5305c53bb8dfa38f4bf1d7fb23215b23f6270f236b6bc7daf27284ba84b901f9592f202366184cf5fdf87ce10bf552adae3dc1076dd5c75343482dbd3b61e8a1bc963434e479d48f8b1f1ee132b984c2b08da15040e6dd0e540bff54280f4", 0x87}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)="66dbcb676b43889844038080ac0ff258d3cf2596bcfa315095d39e507f5bb583134de9232739ee4e21cc89d46e0cb3e572e7b704df9a4bb82b7b0be5436ac639d3e9f8dfc2895c3202d4c87d42fd412af827298d90204eda72b92f9c568237b859a5e8bc3cd649086e4bf025f3ee869f38187272766d3e623bd3053f2e3c86a4616ee9824f289fec425bf1b638a0815866ab3917f464c18c0a1e72588f8c5e1f52fc866236035696527734ada62dac63926ac646b5e1f3332d50ad6edc8a2e828fd1711831de5b94e14eb11fa4443268d8a93097", 0xd4}, {&(0x7f0000001e40)="2262aec797ad0c19868bff7ebc9f3600cb7b585e52a388561aa6bf015579be94f26829ba502f21e6d9883cda7c7f8126199e259718396f1e161be3ebf5d840", 0x3f}, {&(0x7f0000001e80)="8084df8188dccb422462af905ef137e1ba186495393668be04db34c321294e2357bfecad8faedf54e9db415371045881eb082212c89ccec9e21d7121527a306bf70ea9db69e705345a60888deffac746cc3b1ca041008020f28c40262a8c2945fbcbf588384f827c77cf73d02c72e905e40f8e20f14bfc128e4e3df21c6d896d8566e7c8be32c23822bc14763f7d01ead85fc227e7078c27fb8797365b04ca3e8095bdbc1c02ecffcbfc278ad24899a0a4690e4ff6c29d648f7067e2c4011e0e9667f4369007260d875e89cdcbdc7720f63f90be3a1ade2ab0cd0fdc47ad2069e324aac26c2f0070afe44f1af40cd70624d1b3de61e18a05", 0xf8}, {&(0x7f0000001f80)="d1895e9495abc103a59e8550d2e89d2f674e164b10a04bccf6e1d1b326172f5b9793750584c82e9dbfa0ed70c29db74e854b7609762db63d7cee739aaa62772a137e5e8675e002808e6b9c03a9954a88b4a9ebbf34ec78bab9cec1bbd45af01d82be3f8f9be51dbb7855c514cd0a15b37a1479aef6cecf39013b1d", 0x7b}, {&(0x7f0000002000)="7baf0d1be49d6411c953f9e72b1fe50a6e10c64e4f705d3503a9e40ae92be961af4d34c51aefba1a75b5455e9f603110b8c46d", 0x33}], 0xa, &(0x7f0000002100)=[{0x88, 0x10d, 0x7, "3d7295c835846ca5e3984bd59a230b4d11c08f81b1437a004ca094b7e96dd2479f52ee8e58e696924ecf1c1c5a6ddab112031332de00979d90cad76ecfc16b37f599300e283928b392ad3e0ce3705c777e42592d1e40e247cb6547d8065efa037f69b9a77078fad737f8d80f675cb2a4d4cf"}, {0x40, 0x84, 0xfffff001, "c3f3300c193ddf33307ee55f62c8fbd785dff6ab3a97fcab0cf93befad82b7e7958b23c94099e440b8ccfa43959a04"}, {0xc8, 0x10a, 0x4, "4ab2f4afbe8418a93ed8d4a4629c05b5ba7dc9af1b72ab4674cf20127366896d34db1b96b5f502037c9063417fbb686cdfdf13cc0f1e854ae93c3d2f8d61bcf63615f746dfbf52bd51deeef9a8a96ee0242ec1fbc438b2d5e50d9e08b13b687b34038996d2adb2598b04ddfd0a1ec9e1e7155fc77a228f8f5c16926b9042bef55476b623a982686248485f17fc1c812d5b4de7da5bcf8c675f7f6c79a7c8dd91c2e2a301aa47ffcddf60065a4b2cd64a3b01f5"}, {0x1010, 0x103, 0x7, "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"}, {0x100, 0x84, 0x8, "9423a54e87e9d0bec37c831613e8457e23ea41edf4c57897f010a885028a2c06135b9765371a8045871bad26711bb662bf4933e48128ab306e18de5c4b3d15128ce8f9a2a9e79882eb5575798a868938d5220c165bbaf5576d9708f9932a3ef310ce9baa6b0fd6ba4e84c5295e33cbe634412df7af92cb79508c890656a61f4a94183bbd14ba763e63becef1d73431c7ec61b3580a7a374baadbe3a5341741645d5db18f2d05aeed05ae11695df47cf4d4c2aebccfc8ad960aab2b5bfd9e6b98aac65366e4ebc7f33855a454bff83a5b55bc70cc2f657b8f1884811c405690c758c0750a050bab01684385dff242"}, {0x30, 0x84, 0x9, "b8bf49da648272675dc2e1b458777f8cbff39c9ad1b3e52c7b31ec787f8a1b"}, {0xa0, 0x0, 0xfff, "fa622ad1218f7316590526f966d4c322ccc8150ce95c82de087d3211e46c1a9c8389690ce1cd053262467bea1d19521fa2abec7b97d160c86152819371f0fb5f39f24439c3c99c639d70204302d55ee79ed522254e26804fece3c4ad77bd20f9b02741cdc7946941aa178689b937e74a8a0bde732958e9af86b38639c6244710cf5d85802795118155"}, {0x20, 0x101, 0x28, "bcb0af6786bb8fec5b0d912b59321f"}], 0x1390}, 0x4000) socket(0x3f, 0x5, 0x30) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000003540), r2) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000003640)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x4c, r10, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000003780)={'sit0\x00', &(0x7f00000036c0)={'ip_vti0\x00', r8, 0x700, 0x700, 0xfffffff8, 0x8, {{0x1f, 0x4, 0x2, 0x10, 0x7c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0x23, 0xe, [@remote, @multicast1, @empty, @empty, @multicast2, @empty, @loopback, @rand_addr=0x64010102]}, @cipso={0x86, 0x1b, 0x3, [{0x7, 0x7, "ee05b13d4b"}, {0x6, 0xe, "0f419073e3efbd363abcb679"}]}, @lsrr={0x83, 0x13, 0x6e, [@local, @rand_addr=0x64010100, @multicast1, @empty]}, @rr={0x7, 0xb, 0xe6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}]}, @ssrr={0x89, 0xb, 0x91, [@dev={0xac, 0x14, 0x14, 0xd}, @multicast1]}]}}}}}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000007d80)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007d40)={&(0x7f00000037c0)=@newchain={0x4574, 0x64, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x2}, {0x7ff0, 0x3}, {0xe, 0xd}}, [@f_rsvp={{0x9}, {0x2378, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x0, 0x3ff}, {0x40, 0x7, 0x3}, 0x5e, 0x8, 0xf}}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_ACT={0x234c, 0x6, [@m_mirred={0xa4, 0x17, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8c77, 0x4, 0x7, 0xa83, 0x400}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x8, 0xffffffff, 0x10}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x10001, 0x5, 0xfff, 0x8}, 0x3, r11}}]}, {0x18, 0x6, "b689ebcc35e6cc73915ee01fb26ab273528b700a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x223c, 0x7, 0x0, 0x0, {{0xb}, {0x21e4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0xfffffff3, 0x8dd, 0x2, {0xff, 0x1, 0x0, 0xf70, 0x5, 0x1200}, {0x7f, 0x2, 0x4, 0xb, 0x6, 0x3}, 0x9e4, 0x1, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x20000000, 0x80, 0x4, 0x14, {0x0, 0x1, 0x401, 0x8, 0x5, 0xf4}, {0x7, 0x0, 0x0, 0x9, 0x7, 0xf1c}, 0x1, 0x7fffffff, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0x7, 0x1, 0x312, 0x7, 0x1, 0x605d, 0x1, 0x800, 0x4, 0x4800000, 0x9, 0x1, 0x5, 0x359, 0x10, 0xe, 0x81, 0xe, 0x4, 0x5, 0x9, 0x40, 0xd61, 0xc, 0xc8, 0xfffffff9, 0x3, 0x8, 0x100, 0x1, 0x7, 0x2, 0x8a, 0x7fde6001, 0xd6, 0x8000, 0x1, 0x8, 0x1, 0x0, 0x1, 0x9, 0xff, 0x7, 0x8, 0x8000, 0x4a, 0x6, 0xd, 0x0, 0x14, 0x6af4, 0x0, 0x80, 0x6, 0x0, 0x7, 0x3, 0x8, 0x2, 0x9, 0x9, 0x8, 0x6, 0x4, 0x1, 0x26, 0xd834, 0x8, 0x7, 0x6, 0xe0d2, 0x8, 0x101, 0x28c7, 0x3, 0x61214057, 0x1, 0xd, 0xce, 0x3b00, 0x200, 0x4, 0x8, 0xa8, 0xffffffff, 0x5, 0x9, 0x1, 0x6, 0xc79, 0x7, 0x8, 0x9, 0x4, 0x1, 0x7, 0x87, 0x10000, 0x40, 0x9, 0x5, 0x8, 0x4, 0xe, 0x100, 0x8, 0x9, 0x1000, 0x40, 0x701d, 0x655b, 0x5, 0x101, 0xffffff7f, 0x1, 0xff, 0xffffffff, 0x9, 0x5, 0x4, 0x8000, 0x0, 0x67, 0x7, 0x2, 0x1, 0x7, 0xffff8000, 0x0, 0x72, 0x3, 0xfffffff8, 0x7d, 0x8000, 0x1, 0x7fff, 0x3, 0x0, 0x9, 0x6, 0x4, 0x1000, 0x7, 0x1, 0x7, 0xf26, 0x9, 0x9, 0x2, 0xfffff800, 0x3ff, 0x40, 0x1000, 0x3, 0x5, 0x9, 0xffffff01, 0x4, 0x3, 0x200, 0xa22c, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfaff, 0x2, 0x0, 0x400, 0x2bdc, 0xe53, 0x663, 0x8000, 0x8, 0x3, 0x27, 0x401, 0x2, 0x7fff, 0xac9, 0x2, 0x7, 0xa, 0x80, 0x6, 0x5, 0xf0, 0x1, 0x7, 0x400, 0x47cc, 0x9, 0x6, 0x9, 0x0, 0xa0, 0x1, 0xe09, 0x8d3, 0x1, 0x0, 0xffffff71, 0x1, 0x5, 0x0, 0x2, 0x1ff, 0x4, 0xfff, 0x1, 0x8000, 0x5, 0x81, 0x80000000, 0x10001, 0xfffffffe, 0x7, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x800, 0x0, 0xc, 0x3ff, 0x4, 0xc, 0x800, 0xffff, 0x58d, 0x0, 0xa4, 0xffffff98, 0xec4, 0x1, 0x3364, 0x400, 0xd38, 0x6, 0xfffffff9, 0x9, 0x6, 0x9, 0x861, 0x1, 0xffffff14, 0x5, 0x4, 0x80000001, 0x993, 0x2d]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xb1, 0xffffffff, 0x2, 0x5, 0x1, 0x7fffffff, 0x9, 0x4, 0x8, 0x191e27a0, 0x9, 0x4, 0xef, 0x4762, 0x1f5, 0x1, 0x7, 0x1ff, 0xb665, 0xe8, 0x8, 0x0, 0x7, 0x9, 0x7fe5, 0x3, 0x100, 0x0, 0x8, 0x7, 0xb, 0x2f5d, 0x8000, 0x5, 0x2, 0x1, 0x200, 0x1, 0x7fffffff, 0x8, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, 0x251fe5ea, 0x4ed3, 0xfffffffe, 0x9, 0xdfc6, 0xb8, 0x3a4c000, 0x6b14, 0x8, 0x7, 0xbf8e, 0xe3, 0x5, 0x2, 0x10000, 0xffff, 0xcaa, 0x4, 0x7, 0x2, 0x3, 0x0, 0x8, 0x401, 0x1b, 0xfffffbff, 0x8000, 0xdb95, 0x0, 0x1, 0x7ff, 0x2, 0x81, 0xef, 0x3ff, 0x8, 0x5, 0x2, 0x0, 0x64, 0xabbd, 0x0, 0x1b1f, 0x1, 0x4, 0xfffffffe, 0x6, 0x8, 0x46f, 0x3, 0x3, 0x6, 0x4, 0xfffffff7, 0xb, 0x0, 0x8, 0x8, 0x7, 0x5, 0x3, 0x7, 0x3, 0x7ff, 0x6, 0x8, 0x4, 0xe6, 0x2, 0x5, 0x5, 0x2, 0x5, 0x101, 0x5fe3, 0x3, 0x5, 0x8, 0x552, 0x40, 0x79, 0x714, 0xb8, 0x8, 0x1, 0x2, 0xf0c, 0x1e2b, 0xe27, 0x6, 0x4, 0x2, 0x6, 0x10, 0x4, 0x2, 0x1, 0x6, 0x6, 0x4, 0x80, 0x7, 0x80000000, 0x2, 0x800, 0xd, 0x9, 0xffff8000, 0xd2f, 0x1000, 0x200, 0x7f, 0x7, 0xfffffff4, 0x0, 0x0, 0x86ee, 0x80000001, 0x5, 0x4, 0xffffffff, 0xc, 0x8, 0x6, 0xa, 0xfffffffb, 0x6fb, 0x6, 0x9713, 0x1, 0x2, 0x10, 0x3, 0x8, 0xfffffff8, 0x6, 0x10000, 0xfec7, 0x4, 0xe, 0x0, 0x0, 0x707, 0x7, 0x5, 0x10000, 0x0, 0x9, 0x4, 0x81, 0x0, 0x6, 0x5, 0x62, 0x8, 0x4, 0x4, 0x6, 0x0, 0xffffffff, 0x40, 0x2, 0xccc6, 0x2, 0x375, 0x3a4, 0x3ff, 0x1ff, 0x2, 0x9, 0xbec, 0x3, 0x40, 0x3a79, 0x8000, 0x800, 0x9, 0x7, 0x0, 0x5, 0x5, 0x1ff, 0xfffffc01, 0x1, 0x1, 0x7fffffff, 0x3, 0x8, 0x87fd, 0x0, 0x5, 0x7fff, 0x3, 0x2, 0xe4, 0x81, 0x81, 0xf, 0xf, 0x8162, 0x1, 0x5, 0xb, 0x2, 0xc6, 0x5, 0x2]}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4, 0x2, 0x6374, 0x5, 0x1, 0x2, 0x10, 0xffffffff, 0x5, 0x6648, 0x8, 0xc, 0x5, 0x81, 0x2, 0x7, 0x18000000, 0x6, 0x7, 0x6, 0x4, 0x8, 0x4, 0x5, 0x7ff, 0x9, 0x4, 0xd38, 0x9a2, 0x7fff, 0x8000, 0xffff, 0x4, 0x7, 0x0, 0x6, 0xa, 0x0, 0x10001, 0x2, 0x2, 0x8, 0x7, 0x4, 0x0, 0x2, 0xc, 0x4, 0x8000, 0x9, 0x7, 0x2, 0x1, 0x80, 0x100, 0x2, 0x7, 0x6, 0x4, 0xdb0, 0x9, 0x5, 0x4, 0x8, 0x10001, 0x4, 0x9, 0x1, 0x8, 0x9, 0x80, 0xfffffffe, 0xfffffff1, 0x7, 0x4, 0x101, 0x1, 0x1, 0x6, 0x1, 0x7, 0x8, 0xc, 0x8, 0x1, 0x91d, 0x0, 0xee19, 0x136, 0x8, 0x4800000, 0x7f, 0x80, 0x7, 0x100, 0x8, 0x8ca, 0x4, 0x1, 0x4908, 0x1, 0xffff120c, 0x8, 0x9, 0x1, 0x401, 0x43a, 0xd7, 0x5, 0x6, 0x2, 0x0, 0xfff, 0x6, 0x8, 0x0, 0x6cb6, 0x0, 0x101, 0xd, 0x1b, 0x0, 0xc, 0x9, 0x80, 0x2, 0x40, 0x4, 0x7, 0x4f9, 0x1, 0x200000, 0x3ff, 0x7ff, 0x1, 0x4, 0xfffffff8, 0x9e, 0x5, 0x80000000, 0x2, 0x3ff, 0xbd3, 0xa, 0xa, 0x1ff, 0x80000001, 0x800, 0x9, 0x4, 0x5, 0x3, 0x9, 0x100, 0x9, 0x1, 0xfffffffb, 0x1, 0x2, 0x1ea, 0x8, 0x5, 0x3, 0x1, 0x3, 0x6, 0x8, 0x2, 0x401, 0x6, 0x8001, 0x5, 0x44, 0xa85, 0x7, 0x7, 0x720b4f5a, 0x5, 0x0, 0x6, 0x1, 0xffffffff, 0x5, 0x9, 0x9, 0x5, 0xbf, 0x8, 0x6, 0xe, 0x0, 0x9f, 0x4598, 0x5, 0x2, 0x6, 0x1, 0x8, 0x1, 0x3de, 0x80bd, 0x7, 0xffff8001, 0x38c9, 0x1a, 0x1, 0x67ff, 0x7, 0x8, 0xa, 0x4, 0x8, 0x1, 0x939e, 0x1, 0x4, 0x3, 0x740d, 0xfffffff4, 0x7, 0x4, 0x0, 0x2, 0x4, 0x5, 0x2, 0xa, 0x5, 0x3, 0x9, 0x1, 0x1, 0xd, 0x7, 0x81, 0x1, 0x3, 0x0, 0x7, 0x5, 0x6414, 0x2, 0xffffffc0, 0x4, 0x0, 0xf, 0x2, 0xd2, 0x401, 0x1f, 0x5, 0xb7, 0x7c4, 0xfffffffd, 0x81]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x0, 0xa, 0x7fffffff, 0x7, 0x4, 0x6, 0x8, 0xa293, 0xffff94dc, 0x7f, 0xfff, 0x4, 0x5bf, 0x1, 0x5, 0x81, 0x9, 0x893e, 0x4, 0xf, 0xc, 0x1, 0x3ff, 0x5, 0x0, 0x3, 0x6, 0xb38, 0x6, 0x3, 0x2, 0x9, 0xffff, 0x3c4, 0x52f, 0x9, 0x401, 0x1, 0x3, 0xf0a, 0x3, 0x3, 0x0, 0x4, 0x6, 0x100, 0x8666, 0x3, 0x2, 0x8, 0x2, 0x1, 0x2, 0x800, 0x200, 0x6, 0x4, 0x0, 0x1, 0x7ff, 0xfcb1, 0x4, 0x2, 0xb6, 0x3, 0x4, 0x6, 0x8, 0x6, 0xb, 0x5, 0x8001, 0x2, 0x6, 0xc661, 0x3ff, 0x0, 0x8, 0xfffffff4, 0x6, 0xffff, 0x1, 0x3d3, 0x6, 0x7, 0xffffffff, 0x3, 0x7, 0x7f, 0x10, 0x3, 0xffffff32, 0x1, 0x9, 0x4, 0xd864, 0x9, 0x1ff, 0x8, 0xc985, 0x0, 0x6, 0x38, 0xb, 0x1, 0x0, 0xc84, 0x8, 0x101, 0xa0000, 0x7, 0x401, 0x3, 0x1ff, 0x8, 0x8, 0x9, 0xf52, 0x6, 0x9, 0xe, 0x6, 0x7944, 0x401, 0x400, 0xffff, 0x8d, 0x7ff, 0x5, 0x8001, 0x5, 0x2, 0x4, 0xd5b, 0x11, 0x9, 0x100, 0x2, 0x100, 0x7, 0xfffffff9, 0xffffffff, 0xffffffff, 0x3, 0x3, 0x1ff, 0x5, 0x0, 0x9, 0x0, 0x6d3b, 0x7, 0x6, 0x0, 0x7f, 0x3, 0x50c, 0x356f, 0x9, 0x0, 0xb43, 0x5, 0x7fffffff, 0xc, 0x3, 0x3, 0xff, 0x22e8, 0x3, 0x9, 0x81, 0x80000001, 0x9, 0x1, 0x8, 0x1, 0xffff, 0x7, 0x1000, 0x7fffffff, 0x6, 0x80000001, 0x10001, 0xeff, 0x660aa8a4, 0x256, 0x3, 0x7ff, 0x9, 0x5, 0x101, 0x4, 0x9, 0xfffffffa, 0x5, 0x21a, 0x16000000, 0xf5, 0xdb8, 0xf, 0x7fffffff, 0x4, 0x45a, 0x3, 0x40, 0x8, 0x0, 0x0, 0x1, 0x7, 0x100, 0xffffffff, 0x1, 0x7, 0x5e5, 0x4, 0x8, 0x8, 0x2, 0x7, 0x3, 0x3, 0x0, 0xf, 0x1, 0x1, 0xd, 0x4, 0x3ff, 0x6, 0x80000001, 0xffff, 0x2, 0x7fff, 0x7, 0x73e, 0x7, 0xb8c5, 0x0, 0x9, 0x8, 0x7, 0x9, 0x7f, 0x200, 0x4, 0x641, 0xb3e, 0x8273, 0x5, 0x44c0, 0x8, 0x80000000, 0x8e, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1000000a, 0x6, 0x31, 0xb6d, {0x31, 0x0, 0x1, 0xa5a, 0x2, 0xba4}, {0x5, 0x1, 0x7fff, 0x4, 0x1, 0xffffff7f}, 0x9, 0xffff8001, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9, 0x80, 0x2, 0x0, 0x5, 0x4, 0xfff, 0x3, 0x9, 0x9, 0x42cf, 0x73, 0x3, 0x8000, 0x4, 0xd96e, 0x3, 0x89, 0x2, 0xffffffff, 0x101, 0x706, 0x0, 0x0, 0x4, 0x6, 0x7, 0x8000, 0x1000, 0x3, 0x10001, 0x8, 0x6, 0x4, 0xffffffaf, 0x6, 0x3, 0x10000, 0x617, 0x6, 0x4, 0x10001, 0x6, 0x6, 0x8, 0x6, 0xb18c, 0xbf, 0x81, 0x7, 0x9, 0x9, 0x1000, 0xc701, 0x1, 0xc, 0x401, 0xd, 0x3f, 0x6c2, 0x80, 0x4, 0x0, 0x4, 0x10001, 0xfffffff9, 0xc691, 0x6, 0x400, 0x1, 0x9, 0x7, 0x4, 0x1, 0x7, 0x2, 0x40, 0x6, 0x6dd3, 0x1594, 0x1, 0x7fff, 0xd4, 0x7fffffff, 0x2, 0x6, 0x2, 0x5, 0xfffffffb, 0x4, 0x7ff, 0x4, 0x7fffffff, 0x5, 0x3, 0x6, 0x88a, 0x8, 0x400, 0x7abc, 0x528, 0x50000, 0x7fffffff, 0x83b3, 0x2, 0x8, 0x4, 0xb34, 0x81, 0xa192, 0xb63, 0x4, 0xffff, 0x0, 0x1, 0x9, 0x7fff, 0x0, 0x4, 0xb94, 0x0, 0xfffffffc, 0x10, 0x2, 0x7, 0x1ff, 0x400, 0x226f, 0x3, 0x3, 0x7, 0x4, 0x6f59, 0xff, 0x7fff, 0xf, 0x1, 0x1, 0x1, 0x2, 0xfffffffc, 0x40, 0x8, 0x8, 0x9, 0x2, 0x34ea, 0x13b, 0x0, 0x0, 0xa, 0x4, 0x8, 0x2, 0x1ff, 0x7, 0x100, 0x9, 0xd4fa, 0x5, 0x1, 0xffffffff, 0x445, 0x27, 0x1, 0x4, 0xfffffffb, 0x0, 0x3, 0xa, 0x3ff, 0x10, 0xff, 0x2, 0x10001, 0x7, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0xe1, 0x8, 0x89b, 0xe, 0x4370, 0x64, 0x0, 0x0, 0x3, 0x4, 0x2, 0xff, 0x6, 0xaba, 0x80000001, 0x6, 0x9, 0x758a, 0x4, 0x9, 0x2, 0x2c9, 0x2, 0x2, 0x78000, 0x0, 0x5, 0x40, 0x7ff, 0x7, 0x120, 0x6, 0x71, 0x6122, 0x2, 0x1, 0x8, 0x58b9a059, 0xc6da, 0xc, 0x7d, 0x9d9, 0x9, 0xfffffff9, 0x6, 0x7f, 0x8, 0x2, 0x4, 0x6e, 0x7, 0x401, 0x7, 0x7ff, 0x0, 0x344, 0xff, 0x0, 0xffffffff, 0x3, 0xfff, 0x4, 0x5, 0x7, 0x7, 0x47, 0x8000, 0x7, 0xb, 0xaad, 0x7, 0x80, 0x1e, 0x3]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf555}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2000, 0x20000001, 0x10001, 0x4, 0x1, {0x0, 0x1, 0x100, 0x8, 0x3, 0x200}, {0x4, 0x1, 0x6, 0xd6d, 0xa, 0x101}, 0x3, 0x8000, 0x10000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3af, 0x800, 0x2, 0xff, 0xfffffffe, 0x3, 0x4, 0x7fffffff, 0x0, 0xffffffff, 0x401, 0x7, 0x5, 0xe, 0x0, 0x8000, 0x401, 0x1, 0x3, 0x6, 0xfffffffd, 0x2, 0x800, 0x23, 0xfffffffd, 0xbce, 0x9b42, 0xc18, 0x1, 0x2, 0x14, 0x94, 0x80000001, 0x4a037eb6, 0x551, 0x3, 0x8, 0x2, 0x2, 0x10000, 0x400000, 0x6, 0xfff, 0x5, 0x0, 0x4, 0x77c8a2f7, 0x3, 0x2, 0x200, 0x4, 0x10002000, 0x6f, 0x30000000, 0x0, 0x1, 0x7, 0x8, 0x2, 0x2, 0x2, 0x5, 0x13, 0x400, 0xd80, 0xf35, 0x2, 0x7, 0x3, 0x3, 0x6, 0x8, 0x4ebb, 0x7, 0x800, 0x326, 0xffffffff, 0x5, 0x200, 0x8000, 0x168, 0x0, 0x9, 0xddd, 0x80, 0x4, 0x97d, 0x5, 0x1, 0x8, 0xb099, 0x2, 0x1, 0x6, 0xfffffff8, 0x8, 0xff, 0x200, 0x0, 0x8001, 0xb3d, 0x3, 0x0, 0x7, 0x3, 0x10000, 0xcd, 0x9, 0x10001, 0x10, 0x7, 0x9, 0xb09, 0x0, 0xffffd7db, 0x0, 0x0, 0x7, 0xc4aa, 0xeac, 0x5, 0x3, 0x5, 0x4, 0x1, 0x5, 0x27, 0x22154187, 0x9, 0xe, 0x7, 0x8, 0x4d50, 0xf7e, 0x5, 0x8, 0x9, 0x0, 0x2, 0xfff, 0x0, 0xfffff800, 0x3, 0x100, 0x8, 0x5, 0x1, 0x532, 0xfffffffa, 0xd, 0x400, 0x1, 0x8, 0x27aa, 0x1, 0xfffff001, 0x8, 0x6, 0xfffffffa, 0x2, 0x8d1, 0x2, 0x31, 0x7, 0x4, 0x8, 0x5, 0x3, 0x7, 0x8, 0x9, 0x80000001, 0x3, 0x8, 0x0, 0x7, 0x40008, 0x8, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0xc222, 0x1, 0x4, 0x1ff, 0xe4e0, 0x8, 0x1, 0x99c, 0x1, 0x0, 0x1ff, 0xf13, 0xd, 0x200, 0x140, 0x2, 0x4, 0x401, 0x8, 0xb, 0x3, 0x0, 0x7b94, 0x2, 0x1, 0xfffffffa, 0x1, 0x80000001, 0x2, 0x9, 0x6, 0x7b2, 0x3, 0x3, 0x1c, 0x4, 0x4, 0x1, 0x0, 0xf, 0x80, 0xc597, 0x4, 0x1, 0x3, 0x6, 0x1ff, 0x9, 0x7, 0xfffffff7, 0x0, 0x1000, 0x50, 0xd73d, 0x8, 0x2, 0x6, 0xc57, 0xfffffff3, 0x2, 0x2, 0xffff, 0x6, 0x9, 0x7fff, 0xfd, 0x7d, 0x0, 0x7, 0x5, 0x2, 0xab, 0x3, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x2, 0x9, 0x4171, 0x2, 0x0, 0x6, 0x8, 0x5, 0x1, 0x8, 0x9, 0xfffffffb, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x6, 0x6, 0x4, 0x7, 0x98, 0xb3, 0x80000000, 0x1, 0x8000, 0xffffffff, 0x0, 0x0, 0x5, 0x9, 0x7, 0x9, 0xeb2f, 0x5, 0x5, 0x2, 0x80000001, 0x3, 0x40, 0x2, 0x6, 0x9, 0x1, 0x81, 0x0, 0x22a, 0x2, 0xd6a1, 0xc0b0000, 0x40, 0x2, 0x5, 0x5, 0x0, 0xe, 0x2, 0x963, 0xfffffff9, 0x6, 0xfd6, 0x3, 0x7ff, 0xfff, 0x4, 0x6, 0x1, 0x9, 0x6, 0x5, 0x5d, 0x8, 0x0, 0x8000, 0x8, 0x400, 0x8, 0x8, 0x1, 0x80000000, 0x9, 0xfff, 0x1, 0x81, 0x2, 0x4, 0xffffffd0, 0x6b, 0xc, 0xa, 0x2, 0x6, 0x8, 0x7, 0x1, 0x4, 0x9, 0xfffffffb, 0x5, 0x7fffffff, 0x3, 0xe, 0x9, 0x8, 0x5, 0x6, 0x6a, 0xc, 0x9f08, 0xfffff781, 0x8, 0x1cfb, 0x10001, 0x2d, 0x7, 0x6, 0x4, 0x10000, 0x8, 0x8, 0xbb78, 0x80000000, 0x8, 0x2, 0x8, 0x80, 0xb0, 0x3, 0x7, 0x4, 0x9, 0x8000, 0x20000000, 0x8, 0x7, 0x312, 0x8, 0xba, 0xffffff45, 0x5, 0x58000, 0x400, 0x5, 0xfffffffd, 0x9, 0x4, 0x3, 0x2, 0x5, 0x5, 0x4, 0xfffffc00, 0x6, 0x1000, 0xfffffff2, 0x0, 0x3, 0x6, 0x4, 0x5, 0x6, 0x81, 0x7, 0x7f, 0x1, 0x20, 0xb, 0x0, 0x80000000, 0x4, 0xb, 0x8, 0x1, 0x8000, 0x81, 0x2, 0x4, 0x4, 0x5edb, 0x0, 0x3f1, 0x6, 0x7f, 0xffffffff, 0x2, 0x7, 0x7, 0x1ff, 0x2, 0x1, 0x1, 0x7, 0xa, 0xd, 0x490, 0x8, 0x7, 0x8001, 0x80, 0x7fff, 0x5, 0x9, 0xf, 0xc, 0x8, 0x1, 0x0, 0x40004000, 0x0, 0x4, 0x4000000, 0x3, 0x12f2a0, 0x5, 0x3, 0xffffffff, 0xe, 0x9, 0x0, 0x8699, 0xb71, 0x2, 0x1b80, 0x45d26f2b, 0x6, 0xfffffffb, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, 0x2, 0x81, 0x3, 0x1, 0x3, 0x6, 0x9, 0x5, 0x5, 0x8, 0x1, 0x5, 0x0, 0x6, 0x5, 0x7, 0xeae8, 0xd247]}], [], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x2, 0x4, 0xffffe9f5, 0x0, 0xf, 0x4, 0x6, 0x9, 0x65, 0x4, 0x80000000, 0x1, 0x0, 0x8f22, 0x5, 0x9, 0x8, 0x8b, 0x3, 0x1, 0x66bd1506, 0xffffffff, 0x0, 0x0, 0x5, 0x67abf64a, 0x0, 0x6, 0xffff87e7, 0x9, 0x4a, 0x6, 0x7fff, 0x3b7, 0x9, 0x4, 0x0, 0x23, 0x9, 0x53, 0x22a7d691, 0xeb0b, 0x80, 0x3, 0x7, 0x8, 0x8, 0x1, 0x6, 0x9, 0x0, 0xf, 0x6134, 0x3, 0x28, 0xe73, 0x8001, 0x2, 0x8, 0x2, 0x3, 0x7, 0xffffb07f, 0xff, 0xb, 0x1, 0xfff, 0x7, 0x4d8, 0xbd, 0x81, 0x1000, 0x3, 0xff, 0x0, 0x4, 0x8, 0x8b, 0x7, 0x7fff, 0x2f21, 0x401, 0x2, 0x401, 0x6, 0x2, 0xb1, 0x7, 0x7, 0xc, 0x8, 0x3, 0xfffffff9, 0xe0, 0xc, 0x81e, 0x401, 0x2, 0x2, 0xfff, 0x4, 0x7, 0x8, 0x4, 0x7ff, 0x4, 0x4c8, 0x81, 0x5, 0xfff, 0x0, 0x6, 0x5, 0x7, 0x2, 0x6, 0x81, 0x2, 0xcff9, 0xffffffff, 0x9, 0x0, 0x8, 0x88ff, 0x80, 0x1, 0x2, 0x7, 0x932, 0x7, 0xfffffff9, 0x5, 0x7, 0x7ff, 0x3ff, 0xf, 0x5, 0x81, 0x9, 0x6, 0xff, 0x5, 0x34c, 0x14ab, 0xa, 0x7fffffff, 0xc2d, 0x8, 0x0, 0x26, 0xf, 0x7, 0x3, 0x2, 0x7, 0x0, 0x2, 0x1, 0x10c5bfd, 0x2, 0x44, 0x2, 0x5, 0x2, 0x3, 0x6, 0x9, 0xcaee, 0x5, 0x4, 0x5, 0x2, 0x4, 0x52cb714f, 0x4, 0x300, 0x1, 0x0, 0x5, 0x6, 0x5, 0x80, 0xa, 0x7ff, 0x1, 0xe, 0x8, 0x7, 0x2ef17302, 0xfffff236, 0x7fffffff, 0x9e4, 0x6, 0x4, 0x4, 0x9, 0x2, 0xfffffeff, 0x2, 0xfff, 0xff, 0x8, 0x5, 0x80000001, 0xe0, 0x3, 0x5, 0x0, 0x69, 0x2, 0x0, 0xc, 0x6, 0xffffffff, 0x200, 0x1, 0x80000001, 0xb, 0x9fe, 0x3d24, 0x4, 0x2, 0x3, 0x0, 0x9, 0x229, 0x3, 0x6, 0x3, 0x80000001, 0x200, 0x4c8, 0x0, 0x7, 0x46, 0xffffffff, 0xffff, 0x881b, 0x0, 0x200, 0x9, 0x6, 0x200, 0x1000, 0x5, 0x1, 0x1, 0x0, 0x6, 0x9, 0x800, 0x23ac, 0x80000001, 0xffff6960, 0x7fff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0x2f, 0x6, "0572d11ba13c7fc60a8e8d9862411e2780f96d8c7e4360b1d1158f15e49a48943073405a40a0aa2eb99024"}, {0xc, 0x7, {0xa538fb87a787779b}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x68, 0x1a, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xc00000}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x13, 0x6, "e8490818acf28fc3eb95bf2227be03"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @f_rsvp6={{0xa}, {0x4}}, @f_rsvp6={{0xa}, {0x1c6c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0x3bc, 0x7}, {0x80, 0x8a5, 0x2}, 0x73, 0x99, 0xb0}}, @TCA_RSVP_POLICE={0x410, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x46a1e35c, 0x3, 0x80000000, 0xfffff8a1, 0xec61, 0x9, 0x9, 0x0, 0x3, 0x9, 0xf60, 0xffffffff, 0x7, 0xfffffe00, 0x6fc2, 0x7f, 0xfe4, 0x5, 0x3, 0x0, 0x20000000, 0x9, 0x9074, 0xa9, 0x2f6b, 0x7e, 0x7, 0x6, 0x1, 0x800, 0xa, 0x8, 0x8, 0x8, 0xfffffffa, 0x7, 0x6, 0x81, 0x1000, 0x7, 0x3, 0x5, 0x3, 0x9, 0x400, 0x401, 0x0, 0x4, 0x47, 0x7, 0x24473b92, 0x7fff, 0x8, 0x10, 0xfffffffd, 0x99d, 0x81, 0x0, 0x4, 0xfffffff6, 0x5, 0xffffffff, 0xfffffff7, 0x1, 0x10001, 0xf, 0x9, 0x8, 0x8, 0x1, 0xe6, 0x51dd, 0x4, 0x1, 0x6, 0x3, 0x6, 0xf, 0x4, 0x5, 0x9, 0xfffffffc, 0x3, 0x5, 0x11a, 0x8, 0x9, 0xfffffff5, 0x5, 0x7, 0x8, 0xfffffffa, 0x0, 0x4, 0xffffffff, 0x74, 0x5, 0x8, 0x4361, 0x0, 0x8000, 0x40000000, 0x10001, 0x2, 0x80, 0x2, 0x2, 0x5, 0x4, 0x9, 0x401, 0x38, 0xffffffff, 0x7ff, 0x4, 0x4, 0x8, 0x30, 0x0, 0x5, 0x4, 0x0, 0xffffffff, 0x8, 0x5, 0x0, 0x4, 0x448, 0x8, 0x781, 0x200, 0x7, 0x515, 0x5, 0xae, 0x2, 0x1, 0x8, 0xfffffe00, 0xfffffc01, 0x1fffe, 0x0, 0x101, 0x80, 0x2, 0xfffffffa, 0xd, 0x2, 0x4, 0x4, 0xfd, 0x81, 0xd, 0xfffffffa, 0x0, 0xd135, 0xcc, 0xa0e, 0x4, 0x8, 0x80000001, 0x10, 0x8, 0x5, 0xb9f, 0x1, 0x2, 0x9, 0x1, 0xb, 0x8, 0x0, 0x6, 0x9, 0x5, 0x0, 0x5, 0x1, 0x6, 0x2, 0x8, 0xfffffff9, 0x9, 0x4, 0x30a19931, 0xd46, 0x100, 0x4, 0x9, 0x5580, 0xb555, 0x35, 0x2, 0x8, 0xc5de, 0x0, 0x1, 0x7fffffff, 0xe881, 0x1, 0x6, 0xf, 0x1, 0x72b, 0x4, 0x5, 0x40000, 0x40, 0x0, 0x0, 0xfffffffe, 0x8, 0xc0f3, 0x10, 0x4, 0x7, 0xfffffffd, 0x4, 0x0, 0x8, 0x9, 0x7, 0x7, 0x80, 0xfffffffd, 0x10, 0x7, 0x13, 0x5, 0x401, 0x2a, 0xfffffff9, 0x6, 0x3, 0x3, 0x5, 0xa036, 0xfffff5ee, 0xfffffffe, 0x2, 0xff, 0x2, 0x40, 0x6438, 0x1000, 0x2, 0x8, 0x3, 0x7, 0xa75, 0x8, 0x3, 0xfffffff9, 0x7a0d00, 0xfffffffb]}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0x4}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xc8, 0x7ff, 0xd2}, {0x1, 0x3, 0xee49}, 0x21, 0x10, 0x4}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff2}}, @TCA_RSVP_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_ACT={0x17d8, 0x6, [@m_skbmod={0x50, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x22, 0x6, "fe675b64bc153daaab2fed406b743523a3174da540175196ed0d300da7d6"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x148, 0x11, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0xe0fb, 0x0, 0x5a, 0x3ff}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0xd8, 0x6, "af4c4b975652fbdce2fd0367cfd65d1e550a8f769e6bb5dd2fef3cb90976093f03d9353cdba4cb3c3115da93fc1e3e6407fe04d69ad51c398415304c54233acc4b4b2ab2c7872c85c11ca4fb3d6d48467f9db165dca2fe0b50c2dd6ea0e25ede83f5e37db2eba9493ce691d36e57996a096f672325457e007f7472160368076a8a3a6e448d8bcd46cf3fd978ad53a1fed2fa131f00c189c3f9517126dd61e0dd5f8f110c672d4491e7d47427bf797f1578a1198be8c4cfe772f63fb72ba5a185d3dcbfc4a47ffe15d00ed2f035566b83542b7607"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1088, 0x1, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x8, 0x0, 0xfffffe00, 0x2}, 0x6200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x1, 0x6, 0x2}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4cd3, 0xe, 0xb, 0xfff, 0x1}}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_skbedit={0x110, 0x16, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x2, 0x3, 0x7a, 0x101}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x8}}]}, {0xc2, 0x6, "f432bf28db4aaf08c786a87b74b0835d170c652c774ad5364aeeba4e8600fabc03b0b3eaf5941df948443dd2b0eb34c1e342139e5026c3745addc105a853005257c947544119aee85239f9233de346453c6fef96aeda7e7bed1d709c10910a72e4f46a805aa5bf67b1f295424602f0f2073765834e6276b6fd6e67530efa7a9feddf6a378b4276cd7d435b430d20751bb4355a10fd5f6afcd3c164befddf7da80c47137f04ab1a53515dee69a02ecb00682f800b04fa4e6a8791bd33482c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x108, 0x1b, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x6, 0x800, 0xffffffff}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0xb49176dad3a0ce26, 0x6, 0x9}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x8, 0x766e, 0x2}, 0x9}}]}, {0x83, 0x6, "bbcf36dca4e196e938211937532c5fa004bbb55490b10bbebadccd4cba6cbc41a346b2c68762e6bde129316d31d5f01c79aa7c6b43353fb5db53ad36414d1731ba186ca0ae921b9d92363d75edbb683f236bac6c912f77e9b10e26aabab55b50d54e7979d8ef5ccde766a2dab7193b0faacade2eff0b179e62ed10d3bf59b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x188, 0x11, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x4, 0x8, 0x6843, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf, 0xb73f, 0x2, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x40}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xfff2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xeb, 0x6, "876ba4f95b314ff5e18bb3b12222fe7cbe9afe870a1d6d5c1f93871155f8fbb2e6ea010b344011bcf1dbd8d9dc34fcb7de7524e2690bb4e5116ca8f0931c50696be026c25136c91891b587a263b9c459cdedea81d5ee2f87a03c9c14c6ece4f2d3f42fabd20c8dd640beea7ba7424cbce07003af035abde34930d55fdabad6702a4b3564960d5fa30d3dff075e65802693b3c3caf667f414949c03cc624deb2ec5d86513a1d43a2783013c01301721a471965293308acba81583213fd354e46eeed9fde7c29aa4cb2c371ff7f7a8e625315f970a4c57c608f5dfa60746c3ee6d8c939045f7e984"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x214, 0x12, 0x0, 0x0, {{0x7}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3d548c7d}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xce, 0x6, {0x7, 'nat\x00', 0x1, 0xb, "faee81d1014ddf24078e0da2c6d5822571d5b86e562c338d9384ef92c2e110827b92a9fe0ee754afdeec575ab5be2a047798a480abae5333ae5f87191dcb39e816bd484caad13d947f31aa5226b8073ab36d4d20e390de052b29159974410e18254f9bea816e6f4f86600d1aa7a5f981aa2086f43ae7787fc874d264074c183d5a3976623c4c9273041aad84b822a85ce318c581c82b49d54007bc020db3ade88a1f43fd"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xa9, 0x6, "8d07cb4d50ca32faad5cf16464bef3f065ab6fd4414e272963d5001e1df335ce77e81918de626cd2dc40be0e7460460e5c8178eaea983de502046a6a6751419920cba9de8e2e229d7303c7c1a0682d6a43704cf9393a788586a233f4234b5be2a28c94ade442de44045ccac34f27e5737e85fbc602f3cc74566b83db42e30b8e541039c4c0720f16e4419513c8ffbc9f8e85496b54945179cb45ebb0639596626d1c2c2715"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xce42}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xc, 0x4}}]}}, @f_rsvp={{0x9}, {0x518, 0x2, [@TCA_RSVP_POLICE={0x50c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x86e8, 0x2, 0x2, {0xff, 0x3, 0x8, 0xf, 0xdb, 0x1ff}, {0xbb, 0x0, 0x8, 0xb, 0x2, 0x9}, 0x55, 0x9, 0xfffffffa}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8c8, 0x20000000, 0x4, 0xd, 0x56, {0x38, 0x0, 0x9, 0x18a7, 0x9, 0x80}, {0x1, 0x0, 0x2, 0x2, 0x1, 0xfff}, 0x1, 0x7fffffff, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x5, 0x8001, 0x8, 0xfffffe01, {0xa, 0x2, 0x1, 0x3, 0x1b9a, 0x6}, {0xa1, 0x2, 0x7fff, 0x7ff, 0x4, 0x5}, 0x0, 0x5cb0fa09, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3d160e4c}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x69, 0x2, 0x101, {0xd7, 0x0, 0x6d, 0x4, 0x8, 0xea4b}, {0x5, 0x1, 0x8, 0x4ccd, 0x7e, 0x5}, 0x700, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xefb, 0xfffff59c, 0x7, 0x80, 0x80, 0x7, 0x7ff, 0x80000000, 0x6, 0x8, 0x2, 0x8, 0x9, 0x1ff, 0xfd, 0xfffffffe, 0x9, 0xe9, 0x9, 0x7, 0x800, 0x7fff, 0x650, 0x7, 0x3, 0x4, 0x2a, 0x1, 0xec5f, 0x7736, 0x2, 0x8, 0x1, 0x7, 0xa, 0xffff0001, 0x80, 0x0, 0x1, 0x80000000, 0x0, 0x8, 0x1, 0x6, 0x8, 0x7, 0xf, 0x5, 0x10001, 0x3, 0x1, 0x0, 0x39, 0x7, 0xad, 0x9, 0x7, 0x0, 0x2, 0x4c, 0x4, 0x6, 0x9, 0x2, 0x2, 0xec, 0x10001, 0x92ea, 0x6a94, 0x8, 0x8, 0xd59f, 0x2, 0x6, 0x40, 0x68, 0x5, 0x8, 0x80000001, 0x3, 0xfffffffa, 0x9, 0x0, 0x6, 0x4, 0x9, 0x3, 0xb5, 0x6, 0x6, 0x1, 0x6, 0x1ff755d8, 0x7916, 0x9, 0x1, 0x4, 0x1ff, 0x1, 0x7fffffff, 0xb30, 0x1, 0x9, 0x1, 0x8b, 0xb, 0x1e, 0x8, 0x8001, 0x482, 0x5, 0xfffffff7, 0x78, 0x8, 0x101, 0x7fffffff, 0x1, 0x7, 0x1ff, 0x101, 0xb, 0x0, 0x7fffffff, 0x4, 0x0, 0x1, 0x0, 0x10001, 0x5f6, 0x9, 0x9, 0x1, 0x7fffffff, 0x1, 0x77a, 0x0, 0x6, 0x6, 0x1, 0x1, 0xf6, 0x10001, 0xfff, 0x6, 0x8e8, 0x294a, 0x3, 0x8, 0xfffffffe, 0x7f, 0x2, 0x6, 0x2, 0x7, 0x9aa9, 0x6, 0x5, 0x6, 0x85, 0x0, 0x5, 0x2, 0x4, 0x15, 0x401, 0x5, 0x1, 0xa4, 0x7f, 0x1, 0x40, 0x9, 0x11, 0x22, 0x4, 0x1ff, 0x1, 0xfffffffc, 0x38ae, 0x8, 0xfffffffe, 0x6, 0x4, 0x9, 0x4, 0x3, 0x8, 0x6, 0x3, 0x2, 0x80, 0x90, 0x7, 0x9, 0x7, 0x3, 0x8, 0x8883, 0x4000000, 0x6, 0xee7, 0x0, 0x1, 0x80000001, 0x0, 0xa90, 0x0, 0x3, 0x2, 0x0, 0x4, 0x6, 0x3, 0xfffffff7, 0x5, 0xffffff00, 0x5, 0xffffffff, 0x2512, 0x4, 0x9, 0x1, 0x2, 0x9, 0xfff, 0x482f, 0x8, 0xff, 0x2f, 0x8, 0x3, 0x9c49, 0x8, 0x2, 0xb9b2, 0x80000001, 0x5, 0x4ad3, 0x10001, 0x2, 0xfffffffd, 0x7f, 0x9, 0x130, 0x5, 0x97, 0x3311, 0xfffffff7, 0xffff, 0x80000000, 0x4, 0x5801, 0xffffffff, 0x9, 0xbf69]}]}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010101}]}}]}, 0x4574}, 0x1, 0x0, 0x0, 0xc815}, 0xc080) connect$inet6(r6, &(0x7f0000007dc0)={0xa, 0x4e23, 0x5, @mcast2, 0x9}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000007e00)=0xfffffff6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000007e80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000086c0)={&(0x7f0000007e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000008680)={&(0x7f00000080c0)={0x588, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1c}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r11}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x83b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x370d}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffee9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x744, 0x1, 0x0, 0xff000000}]}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x98, 0x1, 0x90, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x588}, 0x1, 0x0, 0x0, 0x6040844}, 0x4004) 416.014214ms ago: executing program 5 (id=4768): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = socket(0x1e, 0x805, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f00000001c0)=""/77, &(0x7f0000000100)=0x4d) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc8f0}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x2004208d}, 0x2000a004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r9], 0x4) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 386.832021ms ago: executing program 2 (id=4769): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000100)=0xb, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000002100)=""/4114, &(0x7f0000000000)=0x1012) preadv(r2, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000ac0)=""/103, 0x67}], 0x2, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x58e}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8146103c}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0xe6cfd8f73c104680}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000200)='syzkaller\x00', 0xd, 0xff4, &(0x7f0000001cc0)=""/4084, 0x41100}, 0x94) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000100)=0xb, 0x4) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000002100)=""/4114, &(0x7f0000000000)=0x1012) (async) preadv(r2, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000ac0)=""/103, 0x67}], 0x2, 0x4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x58e}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8146103c}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0xe6cfd8f73c104680}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000200)='syzkaller\x00', 0xd, 0xff4, &(0x7f0000001cc0)=""/4084, 0x41100}, 0x94) (async) 220.205687ms ago: executing program 2 (id=4770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002600)={0x32, 0x1, '\x00', [@ra={0x5, 0x2, 0x80}, @padn, @padn={0x1, 0x1, [0x0]}]}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 219.672654ms ago: executing program 5 (id=4771): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007c00000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000100)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 190.093432ms ago: executing program 2 (id=4772): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x23, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x58, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x10e}, {0x10, 0x110, 0x2}], 0x20}, 0x0) 157.924138ms ago: executing program 5 (id=4773): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x6}, 0x80000002}], 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x8de13c6b70ae92c3, 0x41003, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082cbd7000fedbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900008000002200000008005700a203000004008e0004006c0004008e00"], 0x3c}}, 0x4000000) 75.416407ms ago: executing program 2 (id=4774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x9, [@enum={0x9, 0x5, 0x0, 0x6, 0x4, [{0xe, 0x2aa}, {0x2, 0xffffffff}, {0x2, 0x6}, {0xc, 0x1}, {0x2, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x8}}]}, {0x0, [0x5f, 0x2e, 0x30, 0x30, 0x5f, 0x61, 0x30]}}, &(0x7f0000000380)=""/153, 0x6d, 0x99, 0x1, 0x2, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r1, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000200), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0x4, 0xf, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="344b07b9735c", {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x3, 0x7ff, 0x0, 0x6, 0xf, 'ip6erspan0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x210}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x24d9}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 0x0, 0x2, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0x4, 0xe, 0x8, 0x0, 0x5, 'ip6erspan0\x00', 'lo\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@broadcast, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @empty, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r5, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x25dfdbff, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x32}, @in6=@empty, {0x0, 0x0, 0x10000000, 0x0, 0x8}, {0x2000000000000000}, {}, 0x0, 0x3505, 0x0, 0x0, 0x0, 0x1}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x2, 0x4}}]}, 0x120}}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa2}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004300090000000000040000000300000008000200030005"], 0x1c}}, 0x24000044) socket$nl_netfilter(0x10, 0x3, 0xc) 74.354759ms ago: executing program 3 (id=4775): socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0200020000000000000000000004cddc357278812fbae0a9716d74fd8660dbdd9a8de3cfb73330ee9eeee66974def50a78886e5e73034620cdc51633de4d5c5fa037b0fdb71e9b0d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000d400000018111800", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100e5ffffff94000000000000001801000020786c2500000000002020207b1a1092ea108ced612800000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000bf91000000000000b702000000000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000001c0)=0x100, 0x4) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 5.61918ms ago: executing program 3 (id=4776): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x4dc2adb69bd7e24c, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x691a, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x3c}}, 0x0) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@bloom_filter={0x1e, 0x7, 0x9, 0x0, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0xe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}}}, 0x24}}, 0x0) recvmmsg(r7, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000003c00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}], 0x4, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) getsockname(r9, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0xb0) sendmsg$nl_route_sched(r8, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000003b00)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) unshare(0x22020600) read(r0, &(0x7f0000000100)=""/113, 0x71) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 0s ago: executing program 4 (id=4777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000005000000fd0900008800000000000000", @ANYRES32, @ANYBLOB="feffffff00000000000000000900000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r3}, 0x38) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100c2bd70000000000025000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'caif0\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001b1401000000000000000000080022"], 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00e5ff", @ANYRES16=r6, @ANYBLOB="310300000000000000000900000004000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ered promiscuous mode [ 315.063700][T17212] geneve2: entered allmulticast mode [ 315.320678][T17113] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.344197][T17223] netlink: 'syz.5.3404': attribute type 12 has an invalid length. [ 315.384782][T17113] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.546261][T17113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.607653][T17113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.674529][T17233] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 315.693202][T17113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.098025][T17113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.258802][T17250] lo speed is unknown, defaulting to 1000 [ 316.337681][T17268] vlan2: entered promiscuous mode [ 316.348170][T17268] bond0: entered promiscuous mode [ 316.474067][T17271] syzkaller0: entered promiscuous mode [ 316.490893][T17271] syzkaller0: entered allmulticast mode [ 316.591526][T17113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.616940][ T5862] Bluetooth: hci1: command tx timeout [ 316.644546][T17281] netlink: 'syz.1.3419': attribute type 16 has an invalid length. [ 316.661155][T17113] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.662447][T17281] netlink: 'syz.1.3419': attribute type 17 has an invalid length. [ 316.780642][T17294] IPv6: NLM_F_REPLACE set, but no existing node found! [ 316.997188][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.004368][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.034674][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.072560][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.104053][T17303] FAULT_INJECTION: forcing a failure. [ 317.104053][T17303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.121783][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.121823][T17303] CPU: 1 UID: 0 PID: 17303 Comm: syz.1.3424 Not tainted syzkaller #0 PREEMPT(full) [ 317.121848][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.121863][T17303] Call Trace: [ 317.121872][T17303] [ 317.121884][T17303] dump_stack_lvl+0x189/0x250 [ 317.121920][T17303] ? __pfx____ratelimit+0x10/0x10 [ 317.121959][T17303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.121988][T17303] ? __pfx__printk+0x10/0x10 [ 317.122021][T17303] ? __might_fault+0xb0/0x130 [ 317.122060][T17303] ? rcu_is_watching+0x15/0xb0 [ 317.122087][T17303] should_fail_ex+0x414/0x560 [ 317.122122][T17303] _copy_from_user+0x2d/0xb0 [ 317.122151][T17303] ___sys_recvmsg+0x12e/0x510 [ 317.122184][T17303] ? __pfx____sys_recvmsg+0x10/0x10 [ 317.122214][T17303] ? __fget_files+0x2a/0x420 [ 317.122234][T17303] ? rcu_is_watching+0x15/0xb0 [ 317.122268][T17303] ? __fget_files+0x3a0/0x420 [ 317.122296][T17303] do_recvmmsg+0x307/0x770 [ 317.122327][T17303] ? __pfx_do_recvmmsg+0x10/0x10 [ 317.122363][T17303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.122398][T17303] __x64_sys_recvmmsg+0x190/0x240 [ 317.122428][T17303] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 317.122454][T17303] ? rcu_is_watching+0x15/0xb0 [ 317.122481][T17303] ? rcu_is_watching+0x15/0xb0 [ 317.122506][T17303] do_syscall_64+0xfa/0x3b0 [ 317.122530][T17303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.122556][T17303] ? clear_bhb_loop+0x60/0xb0 [ 317.122583][T17303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.122607][T17303] RIP: 0033:0x7fa27c18ebe9 [ 317.122629][T17303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.122651][T17303] RSP: 002b:00007fa27d06d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 317.122685][T17303] RAX: ffffffffffffffda RBX: 00007fa27c3b5fa0 RCX: 00007fa27c18ebe9 [ 317.122704][T17303] RDX: 0000000000000001 RSI: 0000200000001b80 RDI: 0000000000000003 [ 317.122721][T17303] RBP: 00007fa27d06d090 R08: 0000000000000000 R09: 0000000000000000 [ 317.122736][T17303] R10: 0000000000012000 R11: 0000000000000246 R12: 0000000000000001 [ 317.122753][T17303] R13: 00007fa27c3b6038 R14: 00007fa27c3b5fa0 R15: 00007ffc5b249e68 [ 317.122783][T17303] [ 317.371872][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.392365][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.399566][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.700952][T17113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.716115][T17113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.778266][T17319] lo speed is unknown, defaulting to 1000 [ 317.832865][T17324] lo speed is unknown, defaulting to 1000 [ 318.152084][T17113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.695787][ T5862] Bluetooth: hci1: command tx timeout [ 318.703788][T17360] __nla_validate_parse: 5 callbacks suppressed [ 318.703812][T17360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3434'. [ 318.710981][T17359] netlink: 'syz.5.3436': attribute type 2 has an invalid length. [ 318.752659][T17363] netlink: 'syz.3.3437': attribute type 1 has an invalid length. [ 318.999319][T17113] veth0_vlan: entered promiscuous mode [ 319.059615][T17113] veth1_vlan: entered promiscuous mode [ 319.214743][T17113] veth0_macvtap: entered promiscuous mode [ 319.268093][T17113] veth1_macvtap: entered promiscuous mode [ 319.332905][T17113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.372579][T17113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.453375][ T7994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.480731][ T7994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.507972][ T7994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.534057][ T7994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.612782][T17389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.743358][ T7987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.761471][ T7987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.844579][ T7987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.864229][ T7987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.127611][T17411] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3448'. [ 320.503686][T17433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3453'. [ 320.704789][T17447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3454'. [ 320.762824][T17449] net_ratelimit: 15 callbacks suppressed [ 320.762848][T17449] netlink: zone id is out of range [ 320.776538][ T5862] Bluetooth: hci1: command tx timeout [ 320.792410][T17449] netlink: zone id is out of range [ 320.805688][T17449] netlink: zone id is out of range [ 320.814456][T17449] netlink: zone id is out of range [ 320.824370][T17449] netlink: zone id is out of range [ 320.869446][T17449] netlink: zone id is out of range [ 320.881381][T17449] netlink: zone id is out of range [ 320.921637][T17449] netlink: zone id is out of range [ 320.933619][T17449] netlink: zone id is out of range [ 320.961570][T17449] netlink: zone id is out of range [ 321.137649][T17461] tipc: Enabled bearer , priority 0 [ 321.145207][T17461] syzkaller0: entered promiscuous mode [ 321.150876][T17461] syzkaller0: entered allmulticast mode [ 321.162327][T17461] syzkaller0: left promiscuous mode [ 321.167990][T17461] syzkaller0: left allmulticast mode [ 321.174971][T17461] tipc: Enabling of bearer rejected, already enabled [ 321.195849][T17460] tipc: Resetting bearer [ 321.252277][T17460] tipc: Disabling bearer [ 321.590205][T17477] lo speed is unknown, defaulting to 1000 [ 321.864359][T17495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3475'. [ 321.904163][T17495] netlink: 'syz.4.3475': attribute type 1 has an invalid length. [ 321.918219][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3474'. [ 321.929471][T17497] netlink: 'syz.4.3475': attribute type 1 has an invalid length. [ 321.978427][T17499] netlink: 'syz.2.3471': attribute type 1 has an invalid length. [ 321.987452][T17499] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3471'. [ 321.996745][T17499] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3471'. [ 322.108476][T17513] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3474'. [ 322.197796][T17508] lo speed is unknown, defaulting to 1000 [ 325.380477][T17532] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3481'. [ 325.414534][T17530] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 325.432768][T17537] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3481'. [ 325.586796][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3486'. [ 325.594125][T17552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3487'. [ 325.624719][T17550] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 325.653426][T17550] netlink: 'syz.3.3485': attribute type 1 has an invalid length. [ 325.662376][T17550] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3485'. [ 325.706654][T17554] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3489'. [ 325.774014][T17557] bridge_slave_0: left allmulticast mode [ 325.783101][T17557] bridge_slave_0: left promiscuous mode [ 325.790004][T17557] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.806976][T17557] bridge_slave_1: left allmulticast mode [ 325.819247][T17557] bridge_slave_1: left promiscuous mode [ 325.832860][T17557] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.933759][T17557] bond0: (slave bond_slave_0): Releasing backup interface [ 325.969615][T17577] netlink: 'syz.4.3492': attribute type 1 has an invalid length. [ 325.993306][T17557] bond0: (slave bond_slave_1): Releasing backup interface [ 326.016322][T17557] team0: Port device team_slave_0 removed [ 326.033514][T17557] team0: Port device team_slave_1 removed [ 326.042266][T17557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.042816][T17583] netlink: 'syz.3.3485': attribute type 10 has an invalid length. [ 326.059602][T17557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.186608][T17557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.194140][T17557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.320335][T17554] .70·: renamed from hsr0 (while UP) [ 326.329177][T17554] .70·: entered allmulticast mode [ 326.334349][T17554] hsr_slave_0: entered allmulticast mode [ 326.346537][T17554] hsr_slave_1: entered allmulticast mode [ 326.352785][T17554] net_ratelimit: 284 callbacks suppressed [ 326.352804][T17554] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 326.508600][T17571] lo speed is unknown, defaulting to 1000 [ 326.553012][T17577] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 326.568534][T17576] vlan2: entered allmulticast mode [ 326.583334][T17576] veth1: entered allmulticast mode [ 326.595760][T10576] syz1: Port: 1 Link DOWN [ 326.600315][T17583] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 326.623241][T17583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.634931][T17583] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 326.657740][T17591] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3493'. [ 326.700937][T10576] syz1: Port: 1 Link ACTIVE [ 326.707792][T17580] lo speed is unknown, defaulting to 1000 [ 326.847950][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3496'. [ 326.930628][T17601] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3496'. [ 326.976794][ T7993] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 327.064201][T17614] sctp: [Deprecated]: syz.2.3498 (pid 17614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.064201][T17614] Use struct sctp_sack_info instead [ 327.262360][T17618] lo speed is unknown, defaulting to 1000 [ 327.281978][T17621] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3501'. [ 327.831299][T17644] syz.1.3507 uses old SIOCAX25GETINFO [ 327.987509][T17647] netlink: zone id is out of range [ 327.993329][T17647] netlink: zone id is out of range [ 328.029774][T17647] netlink: zone id is out of range [ 328.045415][T17647] netlink: zone id is out of range [ 328.061951][T17647] netlink: zone id is out of range [ 328.069797][T17647] netlink: zone id is out of range [ 328.075568][T17647] netlink: zone id is out of range [ 328.080792][T17647] netlink: zone id is out of range [ 328.086411][T17647] netlink: zone id is out of range [ 328.360333][T17661] netlink: 'syz.2.3513': attribute type 1 has an invalid length. [ 328.394134][T17661] netlink: 'syz.2.3513': attribute type 2 has an invalid length. [ 328.425720][T17661] netlink: 'syz.2.3513': attribute type 1 has an invalid length. [ 328.520955][T17673] netlink: 'syz.5.3517': attribute type 1 has an invalid length. [ 328.716851][T17674] veth1_to_batadv: entered promiscuous mode [ 328.743098][T17674] veth1_to_batadv: entered allmulticast mode [ 328.975826][T17707] netlink: 'syz.1.3527': attribute type 1 has an invalid length. [ 329.039482][T17705] bond0: (slave wlan1): Releasing backup interface [ 329.109869][T17705] bond2: (slave gretap1): Releasing active interface [ 329.262491][T17707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.327205][T17707] bond1: (slave bond2): making interface the new active one [ 329.351545][T17707] bond1: (slave bond2): Enslaving as an active interface with an up link [ 329.394927][T17720] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 329.413874][T17724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.577477][T17731] tipc: Started in network mode [ 329.595871][T17731] tipc: Node identity 669d589a9547, cluster identity 4711 [ 329.626005][T17731] tipc: Enabled bearer , priority 0 [ 329.638104][T17731] syzkaller0: entered promiscuous mode [ 329.646092][T17731] syzkaller0: entered allmulticast mode [ 329.725940][T17730] tipc: Resetting bearer [ 329.749443][T17730] tipc: Disabling bearer [ 330.508315][T17796] __nla_validate_parse: 12 callbacks suppressed [ 330.508335][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3556'. [ 330.663557][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3559'. [ 330.873965][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3561'. [ 330.883319][T17813] macsec0: entered allmulticast mode [ 330.889192][T17813] veth1_macvtap: entered allmulticast mode [ 331.031048][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3563'. [ 331.051137][T17825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.058459][T17825] IPv6: NLM_F_CREATE should be set when creating new route [ 331.233725][T17835] netlink: 'syz.1.3568': attribute type 2 has an invalid length. [ 331.329329][T17834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.371061][T17834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.445925][T17834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.446202][T17838] net_ratelimit: 126 callbacks suppressed [ 331.446221][T17838] netlink: set zone limit has 4 unknown bytes [ 331.465427][T17834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.631670][T17834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.652803][T17834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.670418][T17845] syzkaller1: entered promiscuous mode [ 331.676895][T17845] syzkaller1: entered allmulticast mode [ 331.684032][T17850] tipc: Cannot configure node identity twice [ 331.727145][T17834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.745624][T17834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.958544][ T3006] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.972005][ T3006] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.996828][ T3006] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.015086][ T3006] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.030690][ T3006] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.040378][ T3006] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.049283][ T3006] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.067596][ T3006] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.112995][T17867] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3579'. [ 332.143083][T17867] syzkaller1: entered promiscuous mode [ 332.165957][T17867] syzkaller1: entered allmulticast mode [ 332.948768][T17880] netlink: 'syz.1.3581': attribute type 7 has an invalid length. [ 333.291423][T17886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3586'. [ 333.342704][T17884] netlink: zone id is out of range [ 333.345056][T17889] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 333.355681][T17884] netlink: zone id is out of range [ 333.393735][T17884] netlink: zone id is out of range [ 333.425699][T17884] netlink: zone id is out of range [ 333.433041][T17884] netlink: zone id is out of range [ 333.446132][T17884] netlink: zone id is out of range [ 333.455186][T17884] netlink: zone id is out of range [ 333.465613][T17884] netlink: zone id is out of range [ 333.481711][T17884] netlink: zone id is out of range [ 333.709816][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3589'. [ 333.834794][T17901] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.842330][T17901] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.850296][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3592'. [ 333.894590][T17916] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3592'. [ 334.073284][T17901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.091774][T17901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.294686][T17901] vlan2: left allmulticast mode [ 334.301276][T17901] veth1: left allmulticast mode [ 334.388805][ T7987] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.421758][ T7987] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.459576][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'. [ 334.469929][ T7987] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.504371][T17937] netlink: 'syz.5.3600': attribute type 10 has an invalid length. [ 334.512351][ T7987] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.555281][T17940] netlink: 'syz.5.3600': attribute type 10 has an invalid length. [ 334.638799][T17937] team0: Failed to send options change via netlink (err -105) [ 334.664663][T17937] team0: Port device dummy0 added [ 334.760465][T17949] veth0_to_team: entered promiscuous mode [ 334.766592][T17949] veth0_to_team: entered allmulticast mode [ 335.180843][T17981] netlink: 'syz.2.3613': attribute type 3 has an invalid length. [ 335.337891][T17990] vlan4: entered promiscuous mode [ 335.343139][T17990] vlan4: entered allmulticast mode [ 335.359543][T17990] hsr_slave_1: entered allmulticast mode [ 336.302476][T18042] __nla_validate_parse: 5 callbacks suppressed [ 336.302497][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3630'. [ 336.346513][T18042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3630'. [ 336.467502][ T30] audit: type=1800 audit(1756488015.759:3): pid=18031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3625" name="memory.events" dev="tmpfs" ino=642 res=0 errno=0 [ 336.616016][ T5862] Bluetooth: hci1: command tx timeout [ 336.682359][T18051] netlink: 'syz.2.3631': attribute type 1 has an invalid length. [ 336.691197][T18051] netlink: 'syz.2.3631': attribute type 1 has an invalid length. [ 336.699566][T18051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3631'. [ 336.752408][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'. [ 336.772860][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 336.796812][T18060] syzkaller0: entered promiscuous mode [ 336.802346][T18060] syzkaller0: entered allmulticast mode [ 336.820395][T18055] tipc: Enabled bearer , priority 0 [ 336.831595][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3636'. [ 336.843071][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3636'. [ 336.863903][T18061] vlan3: entered promiscuous mode [ 336.871139][T18061] team0: entered promiscuous mode [ 336.886002][T18061] team_slave_0: entered promiscuous mode [ 336.905896][T18061] team_slave_1: entered promiscuous mode [ 336.960233][T18055] tipc: Resetting bearer [ 337.017834][T18055] tipc: Disabling bearer [ 337.084044][T18076] netlink: 'syz.1.3642': attribute type 1 has an invalid length. [ 337.093140][T18067] lo speed is unknown, defaulting to 1000 [ 337.153290][T18076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.174762][T18082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.182925][T18082] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 337.196204][T18082] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 337.271317][T18082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3642'. [ 337.282615][T18076] veth3: entered promiscuous mode [ 337.292077][T18076] bond4: (slave veth3): Enslaving as an active interface with a down link [ 337.304711][T18082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.312530][T18084] syzkaller1: entered promiscuous mode [ 337.318114][T18084] syzkaller1: entered allmulticast mode [ 337.352230][T18089] netlink: 'syz.5.3645': attribute type 27 has an invalid length. [ 337.363277][T18089] netlink: 'syz.5.3645': attribute type 27 has an invalid length. [ 337.406924][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3646'. [ 337.453911][T18076] syzkaller0: entered promiscuous mode [ 337.460380][T18076] syzkaller0: entered allmulticast mode [ 337.479315][T18091] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 337.644334][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3647'. [ 337.892474][T18114] net_ratelimit: 60 callbacks suppressed [ 337.892495][T18114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.170871][T18134] lo speed is unknown, defaulting to 1000 [ 338.185578][T18129] nbd5: detected capacity change from 0 to 127 [ 338.209299][ T5862] block nbd5: Receive control failed (result -32) [ 338.216433][ T51] block nbd5: Receive control failed (result -32) [ 338.817122][T18163] geneve2: left promiscuous mode [ 338.825997][T18163] geneve2: left allmulticast mode [ 338.840331][T18163] vlan2: left promiscuous mode [ 338.853038][T18163] bond0: left promiscuous mode [ 338.882784][T18163] veth3: left promiscuous mode [ 339.033784][T18181] gtp0: entered promiscuous mode [ 339.056203][T18181] gtp0: entered allmulticast mode [ 339.257526][T18200] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 339.276693][T18198] lo speed is unknown, defaulting to 1000 [ 339.295927][T18193] ip6_vti0: entered promiscuous mode [ 339.311531][T18193] ip6_vti0: entered allmulticast mode [ 339.422319][T18205] netlink: 'syz.4.3680': attribute type 5 has an invalid length. [ 339.481076][T18205] geneve2: entered promiscuous mode [ 339.490661][T18205] geneve2: entered allmulticast mode [ 339.535368][ T3006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 339.567053][ T3006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 339.590870][T18205] syzkaller0: entered promiscuous mode [ 339.605661][T18205] syzkaller0: entered allmulticast mode [ 339.629820][T18205] macsec1: entered promiscuous mode [ 339.688794][ T3006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 339.728059][ T3006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 339.847109][T18219] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 339.871981][T18219] team0: Port device batadv1 added [ 339.925924][T18226] netlink: 'syz.3.3685': attribute type 7 has an invalid length. [ 340.011670][T18221] bridge2: port 1(bond1) entered blocking state [ 340.042425][T18221] bridge2: port 1(bond1) entered disabled state [ 340.049443][T18221] bond1: entered allmulticast mode [ 340.132939][T18236] veth0_vlan: left promiscuous mode [ 340.139272][T18236] veth0_vlan: entered promiscuous mode [ 340.428277][T18267] tipc: Started in network mode [ 340.433208][T18267] tipc: Node identity 16aebb86a0aa, cluster identity 4711 [ 340.444055][T18267] tipc: Enabled bearer , priority 0 [ 340.517717][T18267] tipc: Disabling bearer [ 340.853705][T18291] netlink: 'syz.3.3703': attribute type 12 has an invalid length. [ 340.999345][T18298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.051868][T18298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.243472][T18298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.262119][T18304] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 341.272114][T18304] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 341.361098][T18298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.401917][T18313] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 341.408567][T18313] syzkaller1: linktype set to 823 [ 341.434755][T18311] netlink: zone id is out of range [ 341.441280][T18311] netlink: zone id is out of range [ 341.448370][T18311] netlink: zone id is out of range [ 341.454171][T18311] netlink: zone id is out of range [ 341.459386][T18311] netlink: zone id is out of range [ 341.467331][T18311] netlink: zone id is out of range [ 341.473946][T18311] netlink: zone id is out of range [ 341.516991][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.525074][T18311] netlink: zone id is out of range [ 341.525908][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.549823][T18311] netlink: zone id is out of range [ 341.563181][T18322] __nla_validate_parse: 16 callbacks suppressed [ 341.563204][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'. [ 341.664089][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 341.824172][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.926931][T18323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.948755][T18323] bond5: (slave bond6): Enslaving as an active interface with an up link [ 341.991815][T18333] netlink: 'syz.5.3714': attribute type 4 has an invalid length. [ 342.027619][T18324] bond5 (unregistering): (slave bond6): Releasing backup interface [ 342.070550][T18324] bond5 (unregistering): Released all slaves [ 342.107002][ T7993] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.403456][T18349] netlink: 'syz.2.3719': attribute type 2 has an invalid length. [ 342.417703][T18349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3719'. [ 342.431862][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3718'. [ 342.441471][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3718'. [ 342.457138][T18348] veth1_macvtap: left allmulticast mode [ 342.462870][T18348] veth1_macvtap: left promiscuous mode [ 342.513404][T18357] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 342.718171][T18363] tipc: Enabled bearer , priority 0 [ 342.748007][T18369] netlink: 'syz.1.3721': attribute type 1 has an invalid length. [ 342.917956][T18369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.948221][T18363] tipc: Disabling bearer [ 343.050396][T18374] net_ratelimit: 13 callbacks suppressed [ 343.050419][T18374] netlink: zone id is out of range [ 343.067450][T18374] netlink: zone id is out of range [ 343.083768][T18374] netlink: zone id is out of range [ 343.096881][T18374] netlink: zone id is out of range [ 343.102423][T18374] netlink: zone id is out of range [ 343.108403][T18374] netlink: zone id is out of range [ 343.113648][T18374] netlink: zone id is out of range [ 343.119493][T18374] netlink: zone id is out of range [ 343.124740][T18374] netlink: zone id is out of range [ 343.131008][T18374] netlink: zone id is out of range [ 343.256382][T18389] netlink: 'syz.2.3728': attribute type 2 has an invalid length. [ 343.266014][T18390] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3725'. [ 343.279131][T18389] k›*·]‘: entered promiscuous mode [ 343.307154][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 343.338588][T18392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3725'. [ 343.457176][T18401] netlink: 'syz.5.3727': attribute type 1 has an invalid length. [ 343.465329][T18401] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3727'. [ 343.485082][T18401] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3727'. [ 344.850616][T18459] Bluetooth: MGMT ver 1.23 [ 345.020662][T18457] lo speed is unknown, defaulting to 1000 [ 345.453233][T18454] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.465696][T18454] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 345.544602][T18454] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.553619][T18490] netlink: 'syz.5.3764': attribute type 4 has an invalid length. [ 345.574173][T18454] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 345.607957][T18454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.640635][T18454] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 345.667448][T18454] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 345.682324][T18454] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 345.730065][T18454] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.738448][T18496] netlink: 'syz.1.3767': attribute type 10 has an invalid length. [ 345.742387][T18499] dvmrp8: entered allmulticast mode [ 345.763946][T18454] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 345.784771][T18496] dummy0: entered promiscuous mode [ 345.800146][T18504] netlink: 'syz.1.3767': attribute type 10 has an invalid length. [ 345.812017][T18496] team0: Failed to send options change via netlink (err -105) [ 345.825698][T18496] team0: Port device dummy0 added [ 345.843765][T18504] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 345.953909][T18504] dummy0: left promiscuous mode [ 345.994590][T18504] team0: Failed to send options change via netlink (err -105) [ 346.018630][T18504] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 346.043513][T18504] team0: Port device dummy0 removed [ 346.071214][T18504] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 346.094540][T18507] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 346.120186][T18507] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 346.188239][T18506] lo speed is unknown, defaulting to 1000 [ 346.356233][T18498] dvmrp8: left allmulticast mode [ 346.417132][T18530] netlink: 'syz.4.3776': attribute type 8 has an invalid length. [ 346.628176][T18549] __nla_validate_parse: 5 callbacks suppressed [ 346.628199][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'. [ 346.684471][T18549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3777'. [ 346.696301][T18553] netlink: 'syz.1.3781': attribute type 10 has an invalid length. [ 346.774739][T18553] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 346.888448][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3781'. [ 346.907932][T18540] syzkaller1: entered promiscuous mode [ 346.913537][T18540] syzkaller1: entered allmulticast mode [ 346.938331][T18566] netlink: 'syz.5.3783': attribute type 1 has an invalid length. [ 346.949754][T18566] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3783'. [ 346.980844][ T10] IPVS: starting estimator thread 0... [ 346.993820][T18553] bond0: (slave bridge0): Releasing backup interface [ 347.075561][T18568] IPVS: using max 35 ests per chain, 84000 per kthread [ 347.139523][T18542] lo speed is unknown, defaulting to 1000 [ 347.139545][T18574] veth0: entered promiscuous mode [ 347.171906][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 347.234335][T18574] veth0 (unregistering): left promiscuous mode [ 347.401500][T18576] lo speed is unknown, defaulting to 1000 [ 347.996924][T18605] lo speed is unknown, defaulting to 1000 [ 348.069027][T18611] lo speed is unknown, defaulting to 1000 [ 348.242076][T18620] @ÿ: renamed from veth0_vlan (while UP) [ 348.461464][T18623] lo speed is unknown, defaulting to 1000 [ 348.566239][T18632] net_ratelimit: 12 callbacks suppressed [ 348.566262][T18632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.649117][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3796'. [ 348.665505][T18611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3796'. [ 348.739133][T18632] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 348.763791][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3796'. [ 348.979125][T18647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3806'. [ 348.990051][T18647] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3806'. [ 349.162155][T18647] lo speed is unknown, defaulting to 1000 [ 349.212767][T18656] lo speed is unknown, defaulting to 1000 [ 349.360712][T18661] team0: Port device batadv1 removed [ 349.603355][T18676] openvswitch: netlink: IP tunnel dst address not specified [ 350.109516][T18697] batadv1: entered promiscuous mode [ 350.128790][T18697] batadv1: entered allmulticast mode [ 350.272439][T18706] lo speed is unknown, defaulting to 1000 [ 350.350869][T18701] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 350.451623][T18717] dvmrp0: entered allmulticast mode [ 350.882824][T18734] lo speed is unknown, defaulting to 1000 [ 351.278633][T18755] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562068166) [ 351.289465][T18755] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 351.604954][T18767] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 351.780337][T18780] netlink: zone id is out of range [ 351.786998][T18780] netlink: zone id is out of range [ 351.793837][T18780] netlink: zone id is out of range [ 351.799831][T18780] netlink: zone id is out of range [ 351.819583][T18780] netlink: zone id is out of range [ 351.825624][T18780] netlink: zone id is out of range [ 351.997391][T18792] __nla_validate_parse: 11 callbacks suppressed [ 351.997413][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3847'. [ 352.050372][ T7990] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 352.084335][ T7990] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 352.151478][ T7990] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 352.178099][ T7990] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 352.363997][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 352.376749][T18817] tipc: Enabling of bearer rejected, failed to enable media [ 352.591094][T18825] netlink: 'syz.3.3859': attribute type 1 has an invalid length. [ 352.614612][T18829] netlink: 'syz.2.3858': attribute type 13 has an invalid length. [ 352.644725][T18825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.653150][T18829] netlink: 'syz.2.3858': attribute type 17 has an invalid length. [ 352.711482][T18830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.737509][T18833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3860'. [ 352.764557][T18830] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 352.788669][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3858'. [ 352.818476][T18830] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 352.938635][T18829] ip6_vti0: left promiscuous mode [ 352.973020][T18829] ip6_vti0: left allmulticast mode [ 353.104679][T18833] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 353.149043][T18834] lo speed is unknown, defaulting to 1000 [ 353.359535][T18859] netlink: 'syz.1.3868': attribute type 10 has an invalid length. [ 353.381278][T18859] bond0: (slave dummy0): Releasing backup interface [ 353.414395][T18859] dummy0: entered promiscuous mode [ 353.432827][T18859] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 353.473252][T18862] netlink: 'syz.1.3868': attribute type 10 has an invalid length. [ 353.503622][T18859] team0: Failed to send options change via netlink (err -105) [ 353.522692][T18859] team0: Port device dummy0 added [ 353.544825][T18862] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 353.557738][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 353.568161][T18862] dummy0: left promiscuous mode [ 353.589952][T18862] team0: Failed to send options change via netlink (err -105) [ 353.607111][T18862] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 353.624695][T18862] team0: Port device dummy0 removed [ 353.644872][T18862] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 353.682028][T18869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.763448][T18873] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3873'. [ 353.991557][T18877] net_ratelimit: 17 callbacks suppressed [ 353.991579][T18877] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.011841][T18890] netlink: 'syz.2.3879': attribute type 29 has an invalid length. [ 354.031557][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3879'. [ 354.299361][T18897] siw: device registration error -23 [ 354.382147][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3884'. [ 354.532088][T18919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3888'. [ 354.569761][T18919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3888'. [ 354.959071][T18933] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 354.982404][T18933] bond0 (unregistering): Released all slaves [ 355.009550][T18940] tipc: Enabling of bearer rejected, failed to enable media [ 355.153071][T18949] netlink: 'syz.1.3898': attribute type 1 has an invalid length. [ 355.171785][T18947] lo speed is unknown, defaulting to 1000 [ 355.189379][T18950] lo speed is unknown, defaulting to 1000 [ 355.529129][T18975] dvmrp0: left allmulticast mode [ 355.552606][T18976] lo speed is unknown, defaulting to 1000 [ 355.649866][T18978] lo speed is unknown, defaulting to 1000 [ 355.658565][T18972] netlink: 'syz.2.3904': attribute type 3 has an invalid length. [ 355.985892][T18995] netlink: 'syz.3.3911': attribute type 10 has an invalid length. [ 356.037357][T18997] netlink: 'syz.3.3911': attribute type 10 has an invalid length. [ 356.078417][T18995] team0: Failed to send options change via netlink (err -105) [ 356.111708][T18995] team0: Port device 0! added [ 356.134033][T18997] team0: Failed to send port change of device 0! via netlink (err -105) [ 356.144402][T18998] netlink: set zone limit has 4 unknown bytes [ 356.159662][T18997] team0: Failed to send options change via netlink (err -105) [ 356.167520][T18997] team0: Failed to send port change of device 0! via netlink (err -105) [ 356.177021][T18997] team0: Port device 0! removed [ 356.198104][T18989] lo speed is unknown, defaulting to 1000 [ 356.904733][T19031] pimreg: entered allmulticast mode [ 356.916665][T19031] pimreg: left allmulticast mode [ 357.097657][T19042] lo speed is unknown, defaulting to 1000 [ 357.234637][T19054] __nla_validate_parse: 14 callbacks suppressed [ 357.234657][T19054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3929'. [ 357.271846][T19056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.281655][T19057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3930'. [ 357.342814][T19064] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3931'. [ 357.721725][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3938'. [ 357.793964][T19090] lo speed is unknown, defaulting to 1000 [ 357.979593][T19101] validate_nla: 1 callbacks suppressed [ 357.979638][T19101] netlink: 'syz.1.3943': attribute type 4 has an invalid length. [ 358.026566][T19101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3943'. [ 358.174667][T19115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.444528][T19134] lo speed is unknown, defaulting to 1000 [ 358.535882][T19136] lo speed is unknown, defaulting to 1000 [ 358.953536][T19168] netlink: 'syz.5.3963': attribute type 4 has an invalid length. [ 358.984255][T19170] netlink: 'syz.3.3964': attribute type 7 has an invalid length. [ 359.004279][T19170] netlink: 'syz.3.3964': attribute type 8 has an invalid length. [ 359.026907][T19170] netlink: 'syz.3.3964': attribute type 15 has an invalid length. [ 359.060844][T19177] netlink: 'syz.3.3964': attribute type 1 has an invalid length. [ 359.069583][T19177] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3964'. [ 359.091740][T19179] netlink: 'syz.1.3968': attribute type 1 has an invalid length. [ 359.118042][T19179] bond7: entered promiscuous mode [ 359.123754][T19179] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.132393][T19179] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3968'. [ 359.151763][T19179] batadv1: entered promiscuous mode [ 359.158821][T19179] batadv1: entered allmulticast mode [ 359.166196][T19179] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 359.171114][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057dff000: rx timeout, send abort [ 359.175916][T19179] bond7: (slave batadv1): making interface the new active one [ 359.191140][T19179] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 359.492920][T19200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3971'. [ 359.504896][T19200] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3971'. [ 359.589081][T19202] lo speed is unknown, defaulting to 1000 [ 359.681227][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057dff000: abort rx timeout. Force session deactivation [ 359.747344][T19202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3972'. [ 360.094540][T19214] netlink: 'syz.4.3977': attribute type 4 has an invalid length. [ 360.211266][T19222] veth1_macvtap: left promiscuous mode [ 360.229834][T19222] macsec0: entered promiscuous mode [ 360.250044][T19222] macsec0: entered allmulticast mode [ 360.301855][T19223] veth1_macvtap: entered promiscuous mode [ 360.319407][T19223] veth1_macvtap: entered allmulticast mode [ 360.335518][T19223] macsec0: left promiscuous mode [ 360.341512][T19223] macsec0: left allmulticast mode [ 360.348015][T19223] veth1_macvtap: left allmulticast mode [ 360.502788][T19234] macsec3: entered promiscuous mode [ 360.513516][T19234] dummy0: entered promiscuous mode [ 360.524056][T19234] macsec3: entered allmulticast mode [ 360.530566][T19234] dummy0: entered allmulticast mode [ 360.547309][T19234] dummy0: left allmulticast mode [ 360.554918][T19234] dummy0: left promiscuous mode [ 360.713404][T19241] team0: Port device dummy0 removed [ 360.723597][T19241] batman_adv: batadv0: Adding interface: dummy0 [ 360.734725][T19241] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.791944][T19241] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 360.913031][T19246] lo speed is unknown, defaulting to 1000 [ 360.931511][T19248] lo speed is unknown, defaulting to 1000 [ 361.093002][T19258] netlink: 'syz.1.3991': attribute type 4 has an invalid length. [ 361.156453][T19263] FAULT_INJECTION: forcing a failure. [ 361.156453][T19263] name failslab, interval 1, probability 0, space 0, times 0 [ 361.198938][T19263] CPU: 0 UID: 0 PID: 19263 Comm: syz.1.3993 Not tainted syzkaller #0 PREEMPT(full) [ 361.198970][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.198985][T19263] Call Trace: [ 361.198994][T19263] [ 361.199004][T19263] dump_stack_lvl+0x189/0x250 [ 361.199037][T19263] ? __pfx____ratelimit+0x10/0x10 [ 361.199070][T19263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.199096][T19263] ? __pfx__printk+0x10/0x10 [ 361.199126][T19263] ? fs_reclaim_acquire+0x7d/0x100 [ 361.199160][T19263] ? rcu_is_watching+0x15/0xb0 [ 361.199182][T19263] ? __pfx___might_resched+0x10/0x10 [ 361.199202][T19263] ? lock_acquire+0x5f/0x360 [ 361.199235][T19263] should_fail_ex+0x414/0x560 [ 361.199265][T19263] should_failslab+0xa8/0x100 [ 361.199298][T19263] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 361.199350][T19263] ? __alloc_skb+0x112/0x2d0 [ 361.199372][T19263] __alloc_skb+0x112/0x2d0 [ 361.199393][T19263] netlink_sendmsg+0x5c6/0xb30 [ 361.199420][T19263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.199442][T19263] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.199463][T19263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.199486][T19263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.199507][T19263] __sock_sendmsg+0x21c/0x270 [ 361.199538][T19263] ____sys_sendmsg+0x505/0x830 [ 361.199564][T19263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.199601][T19263] ? import_iovec+0x74/0xa0 [ 361.199628][T19263] ___sys_sendmsg+0x21f/0x2a0 [ 361.199651][T19263] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.199696][T19263] ? __fget_files+0x2a/0x420 [ 361.199714][T19263] ? __fget_files+0x3a0/0x420 [ 361.199740][T19263] __x64_sys_sendmsg+0x19b/0x260 [ 361.199764][T19263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.199791][T19263] ? __pfx_ksys_write+0x10/0x10 [ 361.199815][T19263] ? rcu_is_watching+0x15/0xb0 [ 361.199837][T19263] ? rcu_is_watching+0x15/0xb0 [ 361.199859][T19263] do_syscall_64+0xfa/0x3b0 [ 361.199881][T19263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.199902][T19263] ? clear_bhb_loop+0x60/0xb0 [ 361.199927][T19263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.199947][T19263] RIP: 0033:0x7fa27c18ebe9 [ 361.199966][T19263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.199986][T19263] RSP: 002b:00007fa27d06d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.200008][T19263] RAX: ffffffffffffffda RBX: 00007fa27c3b5fa0 RCX: 00007fa27c18ebe9 [ 361.200025][T19263] RDX: 0000000020000050 RSI: 0000200000000300 RDI: 0000000000000003 [ 361.200040][T19263] RBP: 00007fa27d06d090 R08: 0000000000000000 R09: 0000000000000000 [ 361.200054][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.200067][T19263] R13: 00007fa27c3b6038 R14: 00007fa27c3b5fa0 R15: 00007ffc5b249e68 [ 361.200092][T19263] [ 362.165807][T19293] netlink: 'syz.1.4004': attribute type 10 has an invalid length. [ 362.179953][T19293] dummy0: entered promiscuous mode [ 362.186941][T19293] team0: Failed to send options change via netlink (err -105) [ 362.194447][T19293] team0: Port device dummy0 added [ 362.203403][T19293] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.236938][T19293] dummy0: left promiscuous mode [ 362.261849][T19293] team0: Failed to send options change via netlink (err -105) [ 362.305318][T19293] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.314748][T19297] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20003 [ 362.314837][T19293] team0: Port device dummy0 removed [ 362.338792][T19299] __nla_validate_parse: 4 callbacks suppressed [ 362.338812][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4005'. [ 362.363837][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4005'. [ 362.390197][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4003'. [ 362.393881][T19299] geneve2: entered promiscuous mode [ 362.399350][T19302] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 362.399381][T19302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.494719][T19299] geneve2: entered allmulticast mode [ 362.502630][ T7987] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 362.533653][ T7987] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 362.635993][ T7987] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 362.664427][T19310] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 362.678649][T19310] geneve2: left promiscuous mode [ 362.683825][T19310] geneve2: left allmulticast mode [ 362.706961][ T7987] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 363.060916][T19337] validate_nla: 3 callbacks suppressed [ 363.060940][T19337] netlink: 'syz.4.4015': attribute type 4 has an invalid length. [ 363.418131][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4025'. [ 363.483051][ T10] IPVS: starting estimator thread 0... [ 363.576293][T19372] IPVS: using max 42 ests per chain, 100800 per kthread [ 363.647159][T19383] netlink: 844 bytes leftover after parsing attributes in process `syz.4.4030'. [ 363.787517][T19383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4030'. [ 363.933092][T19405] netlink: 'syz.1.4038': attribute type 17 has an invalid length. [ 364.056470][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4038'. [ 364.076045][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4038'. [ 364.092397][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4038'. [ 364.113940][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4038'. [ 364.127469][ T10] IPVS: starting estimator thread 0... [ 364.216130][T19414] IPVS: using max 33 ests per chain, 79200 per kthread [ 364.315365][T19429] lo speed is unknown, defaulting to 1000 [ 364.731296][T19456] pim6reg1: entered promiscuous mode [ 364.739071][T19456] pim6reg1: entered allmulticast mode [ 364.840802][T19465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.939376][T19469] lo speed is unknown, defaulting to 1000 [ 365.206308][T19483] : entered promiscuous mode [ 365.416701][T19498] team0: Port device sit2 added [ 365.471613][T19508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.840732][T19533] netlink: 'syz.1.4077': attribute type 10 has an invalid length. [ 365.951784][T19535] batman_adv: batadv0: Removing interface: dummy0 [ 365.998412][T19535] bond0: (slave wlan1): Releasing backup interface [ 366.239807][T19554] lo speed is unknown, defaulting to 1000 [ 367.118279][T19567] veth0_to_team: left promiscuous mode [ 367.123815][T19567] veth0_to_team: left allmulticast mode [ 367.339815][T19567] veth1_macvtap: left allmulticast mode [ 367.347191][T19567] macsec0: left promiscuous mode [ 367.352384][T19567] macsec0: left allmulticast mode [ 367.395407][T19567] gretap1: left promiscuous mode [ 367.435426][T19574] hsr_slave_0: left promiscuous mode [ 367.461065][T19574] hsr_slave_1: left promiscuous mode [ 367.503240][ T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.547207][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.575869][ T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.584293][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.624281][ T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.676494][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.715589][ T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.724006][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.896482][T19606] __nla_validate_parse: 84 callbacks suppressed [ 367.896503][T19606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4099'. [ 368.065272][T19618] netlink: 'syz.4.4103': attribute type 10 has an invalid length. [ 368.079582][T19618] dummy0: entered promiscuous mode [ 368.086392][T19618] team0: Failed to send options change via netlink (err -105) [ 368.093935][T19618] team0: Port device dummy0 added [ 368.095293][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4102'. [ 368.108143][T19618] netlink: 'syz.4.4103': attribute type 10 has an invalid length. [ 368.108913][T19618] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 368.110909][T19618] dummy0: left promiscuous mode [ 368.132956][T19618] team0: Failed to send options change via netlink (err -105) [ 368.152928][T19618] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 368.162377][T19618] team0: Port device dummy0 removed [ 368.173927][T19618] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 368.406571][T19646] lo speed is unknown, defaulting to 1000 [ 368.599728][T19646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4110'. [ 368.861516][T19664] netlink: 'syz.5.4112': attribute type 17 has an invalid length. [ 368.870354][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4115'. [ 368.883127][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4115'. [ 369.114661][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4112'. [ 369.138011][ T7993] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.153544][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4112'. [ 369.163025][ T7993] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.186709][ T7993] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.215476][ T7993] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.240676][T19682] netlink: 'syz.1.4120': attribute type 1 has an invalid length. [ 369.254965][ T7993] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.264124][ T7993] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.273729][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4112'. [ 369.283016][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4112'. [ 369.294126][ T7993] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.314010][ T7993] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.828244][T19704] can: request_module (can-proto-5) failed. [ 370.222747][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4132'. [ 370.236668][T19722] syz_tun: entered allmulticast mode [ 370.253653][T19719] lo speed is unknown, defaulting to 1000 [ 370.281062][T19723] siw: device registration error -23 [ 370.317306][T19721] syz_tun: left allmulticast mode [ 371.046514][T19766] netlink: 'syz.4.4146': attribute type 2 has an invalid length. [ 371.123001][T19772] macvtap1: entered promiscuous mode [ 371.128488][T19772] macvtap1: entered allmulticast mode [ 371.134458][T19772] syz_tun: entered promiscuous mode [ 371.167640][T19772] syz_tun: entered allmulticast mode [ 371.181235][T19772] team0: Device macvtap1 failed to register rx_handler [ 371.215427][T19772] syz_tun: left allmulticast mode [ 371.220869][T19772] syz_tun: left promiscuous mode [ 371.521106][T19785] netlink: 'syz.5.4152': attribute type 10 has an invalid length. [ 371.544389][T19785] team0: Failed to send options change via netlink (err -105) [ 371.552590][T19785] team0: Port device dummy0 added [ 371.562761][T19785] netlink: 'syz.5.4152': attribute type 10 has an invalid length. [ 371.589179][T19785] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 371.603952][T19785] team0: Failed to send options change via netlink (err -105) [ 371.614092][T19785] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 371.638701][T19785] team0: Port device dummy0 removed [ 371.658142][T19785] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 372.073960][T19829] netlink: 'syz.3.4164': attribute type 12 has an invalid length. [ 372.270800][T19844] syzkaller1: entered promiscuous mode [ 372.277453][T19844] syzkaller1: entered allmulticast mode [ 372.297858][T19844] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 372.499249][T19858] lo speed is unknown, defaulting to 1000 [ 372.620612][T19869] netlink: 'syz.5.4179': attribute type 10 has an invalid length. [ 372.662962][T19869] bond0: (slave dummy0): Releasing backup interface [ 372.689990][T19869] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 372.711859][T19872] FAULT_INJECTION: forcing a failure. [ 372.711859][T19872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.712596][T19869] team0: Failed to send options change via netlink (err -105) [ 372.733891][T19869] team0: Port device dummy0 added [ 372.735393][T19870] netlink: 'syz.5.4179': attribute type 10 has an invalid length. [ 372.739831][T19872] CPU: 1 UID: 0 PID: 19872 Comm: syz.4.4180 Not tainted syzkaller #0 PREEMPT(full) [ 372.739865][T19872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.739886][T19872] Call Trace: [ 372.739896][T19872] [ 372.739907][T19872] dump_stack_lvl+0x189/0x250 [ 372.739942][T19872] ? __pfx____ratelimit+0x10/0x10 [ 372.739980][T19872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.740009][T19872] ? __pfx__printk+0x10/0x10 [ 372.740039][T19872] ? __might_fault+0xb0/0x130 [ 372.740080][T19872] ? rcu_is_watching+0x15/0xb0 [ 372.740104][T19872] should_fail_ex+0x414/0x560 [ 372.740140][T19872] _copy_from_user+0x2d/0xb0 [ 372.740169][T19872] ___sys_sendmsg+0x158/0x2a0 [ 372.740196][T19872] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.740247][T19872] ? __fget_files+0x2a/0x420 [ 372.740267][T19872] ? __fget_files+0x3a0/0x420 [ 372.740296][T19872] __x64_sys_sendmsg+0x19b/0x260 [ 372.740323][T19872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.740355][T19872] ? __pfx_ksys_write+0x10/0x10 [ 372.740400][T19872] ? rcu_is_watching+0x15/0xb0 [ 372.740427][T19872] ? rcu_is_watching+0x15/0xb0 [ 372.740453][T19872] do_syscall_64+0xfa/0x3b0 [ 372.740477][T19872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.740502][T19872] ? clear_bhb_loop+0x60/0xb0 [ 372.740530][T19872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.740560][T19872] RIP: 0033:0x7f51b038ebe9 [ 372.740583][T19872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.740604][T19872] RSP: 002b:00007f51b126c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.740630][T19872] RAX: ffffffffffffffda RBX: 00007f51b05b5fa0 RCX: 00007f51b038ebe9 [ 372.740650][T19872] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 372.740666][T19872] RBP: 00007f51b126c090 R08: 0000000000000000 R09: 0000000000000000 [ 372.740683][T19872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.740699][T19872] R13: 00007f51b05b6038 R14: 00007f51b05b5fa0 R15: 00007ffee24cd498 [ 372.740728][T19872] [ 372.985728][T19870] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 373.010412][T19870] team0: Failed to send options change via netlink (err -105) [ 373.023828][T19870] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 373.037710][T19870] team0: Port device dummy0 removed [ 373.081531][T19870] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.261006][T19897] netlink: 'syz.3.4188': attribute type 3 has an invalid length. [ 373.351991][T19900] __nla_validate_parse: 24 callbacks suppressed [ 373.352012][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4189'. [ 373.483629][T19907] netlink: 'syz.2.4191': attribute type 21 has an invalid length. [ 373.499269][T19910] syzkaller0: entered promiscuous mode [ 373.523258][T19910] syzkaller0: entered allmulticast mode [ 373.537273][T19907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4191'. [ 373.586340][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4194'. [ 373.877160][T19938] syzkaller0: entered promiscuous mode [ 373.886609][T19938] syzkaller0: entered allmulticast mode [ 373.895762][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4201'. [ 373.935434][T19939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4200'. [ 373.983726][T19954] netlink: 'syz.4.4205': attribute type 10 has an invalid length. [ 373.996876][T19954] bond0: (slave dummy0): Releasing backup interface [ 374.022253][T19954] dummy0: entered promiscuous mode [ 374.038705][T19954] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 374.066570][T19960] netlink: 'syz.4.4205': attribute type 10 has an invalid length. [ 374.086251][T19954] team0: Failed to send options change via netlink (err -105) [ 374.093842][T19954] team0: Port device dummy0 added [ 374.110685][T19960] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 374.136868][T19960] dummy0: left promiscuous mode [ 374.153615][T19960] team0: Failed to send options change via netlink (err -105) [ 374.162304][T19960] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 374.186809][T19960] team0: Port device dummy0 removed [ 374.202881][T19960] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 374.270365][T19974] lo speed is unknown, defaulting to 1000 [ 374.370411][T19977] lo speed is unknown, defaulting to 1000 [ 374.609446][T19991] FAULT_INJECTION: forcing a failure. [ 374.609446][T19991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.633782][T19991] CPU: 0 UID: 0 PID: 19991 Comm: syz.2.4214 Not tainted syzkaller #0 PREEMPT(full) [ 374.633815][T19991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.633830][T19991] Call Trace: [ 374.633839][T19991] [ 374.633850][T19991] dump_stack_lvl+0x189/0x250 [ 374.633881][T19991] ? __pfx____ratelimit+0x10/0x10 [ 374.633913][T19991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.633939][T19991] ? __pfx__printk+0x10/0x10 [ 374.633966][T19991] ? __might_fault+0xb0/0x130 [ 374.633997][T19991] ? aa_file_perm+0x13a/0x1550 [ 374.634018][T19991] ? rcu_is_watching+0x15/0xb0 [ 374.634042][T19991] ? rcu_is_watching+0x15/0xb0 [ 374.634063][T19991] should_fail_ex+0x414/0x560 [ 374.634094][T19991] _copy_from_user+0x2d/0xb0 [ 374.634119][T19991] ____sys_sendmsg+0x2fe/0x830 [ 374.634147][T19991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.634177][T19991] ? import_iovec+0x74/0xa0 [ 374.634204][T19991] ___sys_sendmsg+0x21f/0x2a0 [ 374.634228][T19991] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.634272][T19991] ? __fget_files+0x2a/0x420 [ 374.634291][T19991] ? __fget_files+0x3a0/0x420 [ 374.634317][T19991] __x64_sys_sendmsg+0x19b/0x260 [ 374.634342][T19991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.634371][T19991] ? __pfx_ksys_write+0x10/0x10 [ 374.634398][T19991] ? rcu_is_watching+0x15/0xb0 [ 374.634430][T19991] ? rcu_is_watching+0x15/0xb0 [ 374.634454][T19991] do_syscall_64+0xfa/0x3b0 [ 374.634475][T19991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.634498][T19991] ? clear_bhb_loop+0x60/0xb0 [ 374.634523][T19991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.634544][T19991] RIP: 0033:0x7fe2ac78ebe9 [ 374.634563][T19991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.634584][T19991] RSP: 002b:00007fe2ad622038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.634607][T19991] RAX: ffffffffffffffda RBX: 00007fe2ac9b5fa0 RCX: 00007fe2ac78ebe9 [ 374.634625][T19991] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 374.634640][T19991] RBP: 00007fe2ad622090 R08: 0000000000000000 R09: 0000000000000000 [ 374.634654][T19991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.634672][T19991] R13: 00007fe2ac9b6038 R14: 00007fe2ac9b5fa0 R15: 00007fff1a366a08 [ 374.634699][T19991] [ 374.953104][T19994] lo speed is unknown, defaulting to 1000 [ 375.004041][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4215'. [ 375.130516][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4215'. [ 375.257769][T20007] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4218'. [ 375.481031][T20007] bond0 (unregistering): Released all slaves [ 375.503963][T20009] tipc: Enabling of bearer rejected, failed to enable media [ 375.669580][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 375.951933][T20047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.959257][T20047] IPv6: NLM_F_CREATE should be set when creating new route [ 375.991859][T20049] lo speed is unknown, defaulting to 1000 [ 376.138656][T20055] netlink: 724 bytes leftover after parsing attributes in process `syz.3.4232'. [ 376.367328][T20065] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 376.473649][T20071] batadv_slave_0: entered promiscuous mode [ 376.858196][T20096] lo speed is unknown, defaulting to 1000 [ 376.933416][T20100] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 376.948476][T20100] syzkaller0: linktype set to 1 [ 376.998274][T20104] lo speed is unknown, defaulting to 1000 [ 377.267147][T20105] macsec0: entered promiscuous mode [ 377.285791][T20105] syzkaller0: entered promiscuous mode [ 377.320352][T20105] syzkaller0: left promiscuous mode [ 377.750884][T20123] lo speed is unknown, defaulting to 1000 [ 378.197460][T20139] netlink: 'syz.4.4263': attribute type 10 has an invalid length. [ 378.205614][T20139] syz_tun: entered promiscuous mode [ 378.249585][T20139] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 378.699336][ T1310] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.765467][T20158] FAULT_INJECTION: forcing a failure. [ 378.765467][T20158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.780252][T20158] CPU: 1 UID: 0 PID: 20158 Comm: syz.5.4267 Not tainted syzkaller #0 PREEMPT(full) [ 378.780284][T20158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.780298][T20158] Call Trace: [ 378.780306][T20158] [ 378.780316][T20158] dump_stack_lvl+0x189/0x250 [ 378.780347][T20158] ? __pfx____ratelimit+0x10/0x10 [ 378.780379][T20158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.780405][T20158] ? __pfx__printk+0x10/0x10 [ 378.780433][T20158] ? __might_fault+0xb0/0x130 [ 378.780468][T20158] ? rcu_is_watching+0x15/0xb0 [ 378.780492][T20158] should_fail_ex+0x414/0x560 [ 378.780524][T20158] _copy_from_user+0x2d/0xb0 [ 378.780550][T20158] do_sock_getsockopt+0x17d/0x450 [ 378.780575][T20158] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 378.780596][T20158] ? rcu_needs_cpu+0xa0/0xb0 [ 378.780616][T20158] ? __fget_files+0x3a0/0x420 [ 378.780635][T20158] ? __fget_files+0x2a/0x420 [ 378.780658][T20158] __x64_sys_getsockopt+0x1a5/0x250 [ 378.780680][T20158] ? rcu_needs_cpu+0xa0/0xb0 [ 378.780702][T20158] ? rcu_needs_cpu+0xa0/0xb0 [ 378.780725][T20158] do_syscall_64+0xfa/0x3b0 [ 378.780745][T20158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.780767][T20158] ? clear_bhb_loop+0x60/0xb0 [ 378.780792][T20158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.780814][T20158] RIP: 0033:0x7f16f338ebe9 [ 378.780833][T20158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.780853][T20158] RSP: 002b:00007f16f15d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 378.780876][T20158] RAX: ffffffffffffffda RBX: 00007f16f35b6090 RCX: 00007f16f338ebe9 [ 378.780893][T20158] RDX: 0000000000000007 RSI: 0000000000000084 RDI: 0000000000000003 [ 378.780906][T20158] RBP: 00007f16f15d5090 R08: 0000200000001300 R09: 0000000000000000 [ 378.780921][T20158] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 378.780936][T20158] R13: 00007f16f35b6128 R14: 00007f16f35b6090 R15: 00007fffba11bd38 [ 378.780962][T20158] [ 379.024523][T20160] ip6gre1: entered allmulticast mode [ 379.047855][T20165] siw: device registration error -23 [ 379.055770][T20165] __nla_validate_parse: 5 callbacks suppressed [ 379.055792][T20165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4270'. [ 379.074786][T20165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4270'. [ 379.148166][T20165] tipc: Enabled bearer , priority 0 [ 379.157046][T20165] veth0_to_bridge: entered promiscuous mode [ 379.163251][T20165] veth0_to_bridge: entered allmulticast mode [ 379.187617][T20172] veth0: entered promiscuous mode [ 379.193954][T20172] vlan2: entered promiscuous mode [ 379.663530][T20189] FAULT_INJECTION: forcing a failure. [ 379.663530][T20189] name failslab, interval 1, probability 0, space 0, times 0 [ 379.686107][T20189] CPU: 0 UID: 0 PID: 20189 Comm: syz.3.4277 Not tainted syzkaller #0 PREEMPT(full) [ 379.686141][T20189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.686156][T20189] Call Trace: [ 379.686165][T20189] [ 379.686175][T20189] dump_stack_lvl+0x189/0x250 [ 379.686207][T20189] ? __pfx____ratelimit+0x10/0x10 [ 379.686239][T20189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.686265][T20189] ? __pfx__printk+0x10/0x10 [ 379.686295][T20189] ? fs_reclaim_acquire+0x7d/0x100 [ 379.686328][T20189] ? rcu_is_watching+0x15/0xb0 [ 379.686350][T20189] ? __pfx___might_resched+0x10/0x10 [ 379.686369][T20189] ? lock_acquire+0x5f/0x360 [ 379.686401][T20189] should_fail_ex+0x414/0x560 [ 379.686431][T20189] should_failslab+0xa8/0x100 [ 379.686463][T20189] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 379.686493][T20189] ? __alloc_skb+0x112/0x2d0 [ 379.686515][T20189] __alloc_skb+0x112/0x2d0 [ 379.686537][T20189] netlink_sendmsg+0x5c6/0xb30 [ 379.686563][T20189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.686584][T20189] ? aa_sock_msg_perm+0xf1/0x1d0 [ 379.686605][T20189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.686629][T20189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.686650][T20189] __sock_sendmsg+0x21c/0x270 [ 379.686680][T20189] ____sys_sendmsg+0x505/0x830 [ 379.686707][T20189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.686746][T20189] ? import_iovec+0x74/0xa0 [ 379.686772][T20189] ___sys_sendmsg+0x21f/0x2a0 [ 379.686797][T20189] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.686841][T20189] ? __fget_files+0x2a/0x420 [ 379.686859][T20189] ? __fget_files+0x3a0/0x420 [ 379.686884][T20189] __x64_sys_sendmsg+0x19b/0x260 [ 379.686909][T20189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.686938][T20189] ? __pfx_ksys_write+0x10/0x10 [ 379.686965][T20189] ? rcu_is_watching+0x15/0xb0 [ 379.686989][T20189] ? rcu_is_watching+0x15/0xb0 [ 379.687012][T20189] do_syscall_64+0xfa/0x3b0 [ 379.687032][T20189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.687054][T20189] ? clear_bhb_loop+0x60/0xb0 [ 379.687078][T20189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.687099][T20189] RIP: 0033:0x7efd6458ebe9 [ 379.687119][T20189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.687139][T20189] RSP: 002b:00007efd65442038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.687164][T20189] RAX: ffffffffffffffda RBX: 00007efd647b5fa0 RCX: 00007efd6458ebe9 [ 379.687180][T20189] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 379.687195][T20189] RBP: 00007efd65442090 R08: 0000000000000000 R09: 0000000000000000 [ 379.687209][T20189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.687222][T20189] R13: 00007efd647b6038 R14: 00007efd647b5fa0 R15: 00007ffe714da8c8 [ 379.687247][T20189] [ 380.096306][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4283'. [ 380.195535][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 380.267837][ T10] tipc: Node number set to 4091173018 [ 380.472798][T20227] FAULT_INJECTION: forcing a failure. [ 380.472798][T20227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.497469][T20227] CPU: 0 UID: 0 PID: 20227 Comm: syz.2.4289 Not tainted syzkaller #0 PREEMPT(full) [ 380.497503][T20227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.497518][T20227] Call Trace: [ 380.497527][T20227] [ 380.497538][T20227] dump_stack_lvl+0x189/0x250 [ 380.497597][T20227] ? __pfx____ratelimit+0x10/0x10 [ 380.497631][T20227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.497658][T20227] ? __pfx__printk+0x10/0x10 [ 380.497692][T20227] ? rcu_is_watching+0x15/0xb0 [ 380.497716][T20227] should_fail_ex+0x414/0x560 [ 380.497747][T20227] _copy_to_user+0x31/0xb0 [ 380.497774][T20227] sctp_getsockopt_adaptation_layer+0x120/0x190 [ 380.497812][T20227] ? __pfx_sctp_getsockopt_adaptation_layer+0x10/0x10 [ 380.497854][T20227] sctp_getsockopt+0x633/0xb60 [ 380.497875][T20227] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 380.497908][T20227] do_sock_getsockopt+0x36f/0x450 [ 380.497932][T20227] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 380.497954][T20227] ? rcu_needs_cpu+0xa0/0xb0 [ 380.497975][T20227] ? __fget_files+0x3a0/0x420 [ 380.497994][T20227] ? __fget_files+0x2a/0x420 [ 380.498017][T20227] __x64_sys_getsockopt+0x1a5/0x250 [ 380.498039][T20227] ? rcu_needs_cpu+0xa0/0xb0 [ 380.498060][T20227] ? rcu_needs_cpu+0xa0/0xb0 [ 380.498083][T20227] do_syscall_64+0xfa/0x3b0 [ 380.498105][T20227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.498127][T20227] ? clear_bhb_loop+0x60/0xb0 [ 380.498151][T20227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.498172][T20227] RIP: 0033:0x7fe2ac78ebe9 [ 380.498193][T20227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.498213][T20227] RSP: 002b:00007fe2ad601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 380.498237][T20227] RAX: ffffffffffffffda RBX: 00007fe2ac9b6090 RCX: 00007fe2ac78ebe9 [ 380.498254][T20227] RDX: 0000000000000007 RSI: 0000000000000084 RDI: 0000000000000003 [ 380.498268][T20227] RBP: 00007fe2ad601090 R08: 0000200000001300 R09: 0000000000000000 [ 380.498283][T20227] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 380.498298][T20227] R13: 00007fe2ac9b6128 R14: 00007fe2ac9b6090 R15: 00007fff1a366a08 [ 380.498325][T20227] [ 380.884772][T20231] lo speed is unknown, defaulting to 1000 [ 380.927367][T20206] tipc: Enabling of bearer rejected, failed to enable media [ 381.063360][T20238] IPVS: set_ctl: invalid protocol: 4 100.1.0.255:20000 [ 381.151034][T20247] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 381.161462][T20244] netlink: 'syz.3.4294': attribute type 10 has an invalid length. [ 381.201066][T20244] team0: Failed to send options change via netlink (err -105) [ 381.213075][T20248] netlink: 'syz.3.4294': attribute type 10 has an invalid length. [ 381.224695][T20244] team0: Port device 0! added [ 381.257025][T20248] team0: Failed to send port change of device 0! via netlink (err -105) [ 381.332952][T20248] team0: Failed to send options change via netlink (err -105) [ 381.341922][T20248] team0: Failed to send port change of device 0! via netlink (err -105) [ 381.352114][T20248] team0: Port device 0! removed [ 381.468769][T20251] netlink: 'syz.2.4295': attribute type 10 has an invalid length. [ 381.485448][T20251] team0: Device dummy0 is of different type [ 381.498170][T20251] netlink: 'syz.2.4295': attribute type 10 has an invalid length. [ 382.007084][T20272] syzkaller1: entered promiscuous mode [ 382.012709][T20272] syzkaller1: entered allmulticast mode [ 382.137903][T20274] lo speed is unknown, defaulting to 1000 [ 382.228908][T20286] tipc: Enabled bearer , priority 0 [ 382.294589][T20286] syzkaller0: entered promiscuous mode [ 382.306522][T20286] syzkaller0: entered allmulticast mode [ 382.444768][T20295] FAULT_INJECTION: forcing a failure. [ 382.444768][T20295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.475706][T20295] CPU: 0 UID: 0 PID: 20295 Comm: syz.3.4306 Not tainted syzkaller #0 PREEMPT(full) [ 382.475753][T20295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.475770][T20295] Call Trace: [ 382.475778][T20295] [ 382.475787][T20295] dump_stack_lvl+0x189/0x250 [ 382.475818][T20295] ? __pfx____ratelimit+0x10/0x10 [ 382.475850][T20295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.475875][T20295] ? __pfx__printk+0x10/0x10 [ 382.475909][T20295] ? rcu_is_watching+0x15/0xb0 [ 382.475931][T20295] should_fail_ex+0x414/0x560 [ 382.475962][T20295] _copy_to_user+0x31/0xb0 [ 382.475986][T20295] simple_read_from_buffer+0xe1/0x170 [ 382.476018][T20295] proc_fail_nth_read+0x1b3/0x220 [ 382.476044][T20295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.476069][T20295] ? rw_verify_area+0x2a6/0x4d0 [ 382.476095][T20295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.476118][T20295] vfs_read+0x1fd/0xa30 [ 382.476143][T20295] ? fdget_pos+0x247/0x320 [ 382.476165][T20295] ? __pfx___mutex_lock+0x10/0x10 [ 382.476185][T20295] ? __pfx_vfs_read+0x10/0x10 [ 382.476217][T20295] ? __fget_files+0x3a0/0x420 [ 382.476235][T20295] ? __fget_files+0x2a/0x420 [ 382.476259][T20295] ksys_read+0x145/0x250 [ 382.476288][T20295] ? __pfx_ksys_read+0x10/0x10 [ 382.476314][T20295] ? rcu_is_watching+0x15/0xb0 [ 382.476337][T20295] ? rcu_is_watching+0x15/0xb0 [ 382.476360][T20295] do_syscall_64+0xfa/0x3b0 [ 382.476381][T20295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.476402][T20295] ? clear_bhb_loop+0x60/0xb0 [ 382.476436][T20295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.476463][T20295] RIP: 0033:0x7efd6458d5fc [ 382.476483][T20295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 382.476503][T20295] RSP: 002b:00007efd65421030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.476526][T20295] RAX: ffffffffffffffda RBX: 00007efd647b6090 RCX: 00007efd6458d5fc [ 382.476542][T20295] RDX: 000000000000000f RSI: 00007efd654210a0 RDI: 0000000000000004 [ 382.476556][T20295] RBP: 00007efd65421090 R08: 0000000000000000 R09: 0000000000000000 [ 382.476570][T20295] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 382.476584][T20295] R13: 00007efd647b6128 R14: 00007efd647b6090 R15: 00007ffe714da8c8 [ 382.476609][T20295] [ 382.718385][T20286] tipc: Resetting bearer [ 382.864378][T20283] tipc: Resetting bearer [ 382.916730][T20283] tipc: Disabling bearer [ 383.200938][T20326] lo speed is unknown, defaulting to 1000 [ 383.243548][T20331] .70·: left allmulticast mode [ 383.248547][T20331] hsr_slave_0: left allmulticast mode [ 383.254118][T20331] hsr_slave_1: left allmulticast mode [ 383.314068][ T36] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.343941][ T36] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.421374][ T36] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.452376][ T36] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.504806][T20340] lo speed is unknown, defaulting to 1000 [ 383.562334][T20350] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4319'. [ 383.776078][T20358] syzkaller1: entered promiscuous mode [ 383.782708][T20358] syzkaller1: entered allmulticast mode [ 383.970019][T20363] lo speed is unknown, defaulting to 1000 [ 384.147304][T20374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4327'. [ 384.174097][T20374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4327'. [ 384.389567][T20388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.578969][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4324'. [ 384.592245][T20363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4324'. [ 384.613899][T20401] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.646071][T20401] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.834872][T20401] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.871306][T20401] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.919540][T20411] lo speed is unknown, defaulting to 1000 [ 384.971752][T20401] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.986749][T20401] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 385.018595][T20423] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 385.030563][T20423] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 385.061949][T20401] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.090556][T20401] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 385.120541][T20426] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4344'. [ 385.227066][ T7990] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 385.253251][ T7990] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 385.309122][T20444] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4348'. [ 385.324872][ T7990] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 385.360711][ T7990] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 385.384118][ T7990] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 385.405699][ T7990] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 385.416539][T20446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4349'. [ 385.484251][T20448] tipc: Enabling of bearer rejected, failed to enable media [ 385.516269][ T7990] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 385.552945][ T7990] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 385.590357][T20456] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 385.634871][T20454] lo speed is unknown, defaulting to 1000 [ 385.760974][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4356'. [ 385.912924][T20477] netlink: 724 bytes leftover after parsing attributes in process `syz.2.4358'. [ 385.970153][T20477] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4358'. [ 385.999011][T20468] lo speed is unknown, defaulting to 1000 [ 386.117949][T20486] netlink: 'syz.4.4361': attribute type 10 has an invalid length. [ 386.159248][T20486] bond0: (slave dummy0): Releasing backup interface [ 386.196496][T20490] netlink: 'syz.4.4361': attribute type 10 has an invalid length. [ 386.279774][T20486] dummy0: entered promiscuous mode [ 386.318909][T20486] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 386.361230][T20486] team0: Failed to send options change via netlink (err -105) [ 386.415632][T20486] team0: Port device dummy0 added [ 386.452214][T20490] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 386.534850][T20490] dummy0: left promiscuous mode [ 386.556858][T20490] team0: Failed to send options change via netlink (err -105) [ 386.564794][T20490] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 386.585847][T20490] team0: Port device dummy0 removed [ 386.592107][T20499] openvswitch: netlink: IP tunnel dst address not specified [ 386.594454][T20490] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 386.739373][T20497] tipc: Enabled bearer , priority 0 [ 386.746768][T20500] syzkaller0: entered promiscuous mode [ 386.758686][T20500] syzkaller0: entered allmulticast mode [ 386.830586][T20497] tipc: Resetting bearer [ 386.865744][T20496] tipc: Resetting bearer [ 386.882602][T20496] tipc: Disabling bearer [ 386.909590][T20505] lo speed is unknown, defaulting to 1000 [ 387.191854][T20524] GUP no longer grows the stack in syz.3.4373 (20524): 200000006000-20000000a000 (200000005000) [ 387.242711][T20524] CPU: 1 UID: 0 PID: 20524 Comm: syz.3.4373 Not tainted syzkaller #0 PREEMPT(full) [ 387.242743][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.242758][T20524] Call Trace: [ 387.242766][T20524] [ 387.242782][T20524] dump_stack_lvl+0x189/0x250 [ 387.242816][T20524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.242842][T20524] ? __pfx__printk+0x10/0x10 [ 387.242871][T20524] ? find_vma+0xe7/0x160 [ 387.242900][T20524] ? mas_next_slot+0xc27/0xcf0 [ 387.242935][T20524] __get_user_pages+0x24d0/0x2ce0 [ 387.242967][T20524] ? __gup_longterm_locked+0xc68/0x1660 [ 387.243004][T20524] ? __gup_longterm_locked+0xc68/0x1660 [ 387.243046][T20524] __gup_longterm_locked+0xde9/0x1660 [ 387.243074][T20524] ? try_grab_folio_fast+0x1be/0x4f0 [ 387.243104][T20524] ? rcu_is_watching+0x15/0xb0 [ 387.243127][T20524] ? rcu_is_watching+0x15/0xb0 [ 387.243150][T20524] gup_fast_fallback+0x1e6a/0x2010 [ 387.243198][T20524] ? __pfx_gup_fast_fallback+0x10/0x10 [ 387.243224][T20524] ? __mutex_lock+0x335/0x1350 [ 387.243248][T20524] ? is_valid_gup_args+0x11f/0x200 [ 387.243276][T20524] ? get_user_pages_fast+0x4d/0xb0 [ 387.243304][T20524] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 387.243334][T20524] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 387.243367][T20524] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 387.243397][T20524] ? wait_for_space+0x24d/0x2d0 [ 387.243430][T20524] iov_iter_get_pages2+0x5e/0xa0 [ 387.243457][T20524] __se_sys_vmsplice+0x548/0x10d0 [ 387.243501][T20524] ? futex_private_hash_put+0x4b/0x280 [ 387.243530][T20524] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 387.243565][T20524] ? __pfx_futex_wake+0x10/0x10 [ 387.243626][T20524] ? rcu_is_watching+0x15/0xb0 [ 387.243649][T20524] ? rcu_is_watching+0x15/0xb0 [ 387.243671][T20524] do_syscall_64+0xfa/0x3b0 [ 387.243692][T20524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.243714][T20524] ? clear_bhb_loop+0x60/0xb0 [ 387.243738][T20524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.243760][T20524] RIP: 0033:0x7efd6458ebe9 [ 387.243780][T20524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.243801][T20524] RSP: 002b:00007efd65442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 387.243826][T20524] RAX: ffffffffffffffda RBX: 00007efd647b5fa0 RCX: 00007efd6458ebe9 [ 387.243843][T20524] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 387.243857][T20524] RBP: 00007efd64611e19 R08: 0000000000000000 R09: 0000000000000000 [ 387.243871][T20524] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 387.243884][T20524] R13: 00007efd647b6038 R14: 00007efd647b5fa0 R15: 00007ffe714da8c8 [ 387.243910][T20524] [ 387.271510][T20523] bridge3: entered promiscuous mode [ 387.530369][T20523] macsec1: entered promiscuous mode [ 387.536557][T20523] macsec1: entered allmulticast mode [ 387.541956][T20523] bridge3: entered allmulticast mode [ 387.551142][T20523] bridge3: port 1(macsec1) entered blocking state [ 387.558583][T20523] bridge3: port 1(macsec1) entered disabled state [ 387.567475][T20523] bridge3: left allmulticast mode [ 387.572757][T20523] bridge3: left promiscuous mode [ 387.724585][T20546] syzkaller0: entered promiscuous mode [ 387.743391][T20546] syzkaller0: entered allmulticast mode [ 387.759123][T20533] lo speed is unknown, defaulting to 1000 [ 387.782550][T20546] syzkaller0: mtu less than device minimum [ 388.104086][T20562] netlink: 'syz.1.4385': attribute type 10 has an invalid length. [ 388.124246][T20562] geneve0: entered promiscuous mode [ 388.142334][T20562] team0: Port device geneve0 added [ 388.157355][ T7993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.175203][ T7993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.208584][ T7993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.212746][T20561] netlink: 'syz.4.4384': attribute type 10 has an invalid length. [ 388.246728][ T7993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.267795][T20568] netlink: 'syz.4.4384': attribute type 10 has an invalid length. [ 388.311527][T20561] bond0: (slave dummy0): Releasing backup interface [ 388.388977][T20561] dummy0: entered promiscuous mode [ 388.416640][T20561] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 388.444715][T20561] team0: Failed to send options change via netlink (err -105) [ 388.468162][T20561] team0: Port device dummy0 added [ 388.475949][T20568] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 388.510954][T20568] dummy0: left promiscuous mode [ 388.548460][T20568] team0: Failed to send options change via netlink (err -105) [ 388.570816][T20568] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 388.601704][T20568] team0: Port device dummy0 removed [ 388.632877][T20568] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 388.680729][T20582] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 388.723403][T20605] bridge0: port 1(erspan0) entered blocking state [ 388.733861][T20605] bridge0: port 1(erspan0) entered disabled state [ 388.740746][T20605] erspan0: entered allmulticast mode [ 388.748173][T20605] erspan0: left allmulticast mode [ 388.754505][T20602] lo speed is unknown, defaulting to 1000 [ 389.155119][T20620] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 389.218249][T20624] netlink: 'syz.4.4401': attribute type 1 has an invalid length. [ 389.283769][T20602] __nla_validate_parse: 13 callbacks suppressed [ 389.283794][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4395'. [ 389.300491][T20602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4395'. [ 389.383802][T20635] netlink: 'syz.5.4405': attribute type 9 has an invalid length. [ 389.540828][T20636] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 389.540988][T20635] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 389.772654][T20661] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.4409'. [ 389.844435][T20664] tipc: Enabling of bearer rejected, already enabled [ 389.867260][T20664] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 389.885161][T20664] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 389.901268][T20664] tipc: Resetting bearer [ 390.227757][T20674] tipc: Enabling of bearer rejected, already enabled [ 390.329634][T20674] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4417'. [ 390.373169][T20674] netlink: 'syz.4.4417': attribute type 9 has an invalid length. [ 390.450958][T20678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4418'. [ 390.733301][T20691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4423'. [ 390.764683][T20695] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 390.816940][T20694] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 391.044303][T20710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4429'. [ 391.079267][T20698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4426'. [ 391.099453][T20698] 8021q: VLANs not supported on team0 [ 391.122074][T20698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4426'. [ 391.137358][T20698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4426'. [ 391.155191][T20715] Unsupported ieee802154 address type: 0 [ 391.319513][T20735] syz_tun: entered allmulticast mode [ 391.423875][T20735] dvmrp8: entered allmulticast mode [ 391.521575][T20735] lo speed is unknown, defaulting to 1000 [ 391.590570][T20744] netlink: 'syz.4.4435': attribute type 23 has an invalid length. [ 391.799697][T20729] syz_tun: left allmulticast mode [ 391.810915][T20729] dvmrp8: left allmulticast mode [ 391.853186][T20760] netlink: 'syz.2.4442': attribute type 6 has an invalid length. [ 392.056229][T20767] netlink: 'syz.2.4442': attribute type 7 has an invalid length. [ 392.206561][T20768] block nbd6: server does not support multiple connections per device. [ 392.222783][T20768] block nbd6: shutting down sockets [ 393.405509][T20825] lo speed is unknown, defaulting to 1000 [ 393.505458][ T30] audit: type=1800 audit(1756488072.809:4): pid=20829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4464" name=CB dev="tmpfs" ino=1700 res=0 errno=0 [ 393.789568][T20837] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 393.820925][T20839] tipc: Enabled bearer , priority 0 [ 393.828678][T20839] syzkaller0: entered promiscuous mode [ 393.845124][T20839] syzkaller0: entered allmulticast mode [ 393.911665][T20839] tipc: Resetting bearer [ 393.967944][T20838] tipc: Resetting bearer [ 394.037508][T20838] tipc: Disabling bearer [ 394.084738][T20844] netlink: 'syz.3.4470': attribute type 1 has an invalid length. [ 394.354469][T20865] __nla_validate_parse: 5 callbacks suppressed [ 394.354491][T20865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4475'. [ 394.539257][T20856] lo speed is unknown, defaulting to 1000 [ 394.588953][T20849] lo speed is unknown, defaulting to 1000 [ 394.896004][T20856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4473'. [ 394.907006][T20856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4473'. [ 401.815570][T11963] page_pool_release_retry() stalled pool shutdown: id 113, 1 inflight 60 sec [ 429.895312][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.137488][ T1310] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.577696][ T1310] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 511.654283][T20882] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4480'. [ 511.730147][T20887] lo speed is unknown, defaulting to 1000 [ 511.903109][T20895] lo speed is unknown, defaulting to 1000 [ 511.944648][T20891] openvswitch: netlink: Multiple metadata blocks provided [ 511.990313][T20891] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4481'. [ 512.039719][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4483'. [ 512.084146][T20902] netlink: 'syz.2.4484': attribute type 4 has an invalid length. [ 512.115559][T20891] lo speed is unknown, defaulting to 1000 [ 512.342852][T20910] lo speed is unknown, defaulting to 1000 [ 512.525919][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4486'. [ 512.800470][T20921] nbd: must specify at least one socket [ 512.803576][T20922] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4488'. [ 512.976331][T20925] lo speed is unknown, defaulting to 1000 [ 512.988524][T20928] netlink: 'syz.4.4489': attribute type 4 has an invalid length. [ 513.523018][T20949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4495'. [ 513.533249][T20951] netlink: 'syz.5.4493': attribute type 10 has an invalid length. [ 513.542564][T20951] team0: Device hsr_slave_0 failed to register rx_handler [ 513.883081][T20948] tipc: Enabled bearer , priority 0 [ 513.901171][T20948] syzkaller0: entered promiscuous mode [ 513.916361][T20948] syzkaller0: entered allmulticast mode [ 513.937444][T20946] tipc: Resetting bearer [ 513.954253][T20946] tipc: Disabling bearer [ 514.093393][T20960] ‚: renamed from bond_slave_0 [ 514.197728][T20960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.213614][T20968] tc_dump_action: action bad kind [ 514.277941][T20960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.292698][T20972] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4502'. [ 514.370322][T20969] lo speed is unknown, defaulting to 1000 [ 514.443077][T20960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.555812][T20960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.583021][T20986] netlink: 'syz.3.4506': attribute type 1 has an invalid length. [ 514.676854][T20989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4508'. [ 514.700416][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.716807][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.737315][ T7989] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.760647][ T7993] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.303861][T21023] netlink: 'syz.5.4517': attribute type 10 has an invalid length. [ 515.499048][T21031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4520'. [ 515.514690][T21031] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4520'. [ 515.542597][T21031] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 515.734261][T21043] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 516.006381][T21058] netlink: 'syz.1.4527': attribute type 1 has an invalid length. [ 516.160423][T21062] veth5: entered promiscuous mode [ 516.172035][T21064] netlink: 'syz.4.4528': attribute type 3 has an invalid length. [ 516.180621][T21064] netlink: 'syz.4.4528': attribute type 3 has an invalid length. [ 516.248113][T21066] lo speed is unknown, defaulting to 1000 [ 516.362603][T21081] netlink: 'syz.5.4533': attribute type 32 has an invalid length. [ 516.609590][T21089] lo speed is unknown, defaulting to 1000 [ 516.816901][T21101] __nla_validate_parse: 3 callbacks suppressed [ 516.816923][T21101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4536'. [ 516.930798][T21111] lo speed is unknown, defaulting to 1000 [ 517.656894][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4552'. [ 517.800875][T21166] netlink: 'syz.1.4556': attribute type 58 has an invalid length. [ 517.825150][T21166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4556'. [ 517.841280][T21173] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4555'. [ 518.047573][T21186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4560'. [ 518.079618][T21186] 8021q: VLANs not supported on ipvlan1 [ 518.086953][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4560'. [ 518.096055][T21186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4560'. [ 518.326215][T21204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.343359][T21204] tipc: Enabled bearer , priority 0 [ 518.515191][T21216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4568'. [ 518.533359][T21216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4568'. [ 518.550547][T21221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.646904][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4575'. [ 518.671058][T21230] netlink: 'syz.4.4574': attribute type 1 has an invalid length. [ 518.677649][T21231] FAULT_INJECTION: forcing a failure. [ 518.677649][T21231] name failslab, interval 1, probability 0, space 0, times 0 [ 518.702527][T21231] CPU: 1 UID: 0 PID: 21231 Comm: syz.3.4573 Not tainted syzkaller #0 PREEMPT(full) [ 518.702560][T21231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.702575][T21231] Call Trace: [ 518.702586][T21231] [ 518.702595][T21231] dump_stack_lvl+0x189/0x250 [ 518.702629][T21231] ? __pfx____ratelimit+0x10/0x10 [ 518.702663][T21231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.702689][T21231] ? __pfx__printk+0x10/0x10 [ 518.702729][T21231] ? fs_reclaim_acquire+0x7d/0x100 [ 518.702763][T21231] ? rcu_is_watching+0x15/0xb0 [ 518.702785][T21231] ? __pfx___might_resched+0x10/0x10 [ 518.702805][T21231] ? lock_acquire+0x5f/0x360 [ 518.702837][T21231] should_fail_ex+0x414/0x560 [ 518.702869][T21231] should_failslab+0xa8/0x100 [ 518.702902][T21231] __kmalloc_cache_noprof+0x70/0x3d0 [ 518.702931][T21231] ? tcf_proto_create+0x65/0x330 [ 518.702957][T21231] tcf_proto_create+0x65/0x330 [ 518.702983][T21231] tc_new_tfilter+0x11aa/0x15b0 [ 518.703021][T21231] ? __pfx_tc_new_tfilter+0x10/0x10 [ 518.703042][T21231] ? __dev_queue_xmit+0x1d79/0x3b50 [ 518.703078][T21231] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 518.703111][T21231] ? rcu_is_watching+0x15/0xb0 [ 518.703133][T21231] ? lock_release+0x4b/0x3e0 [ 518.703161][T21231] ? bpf_lsm_capable+0x9/0x20 [ 518.703190][T21231] ? security_capable+0x7e/0x2e0 [ 518.703224][T21231] ? __pfx_tc_new_tfilter+0x10/0x10 [ 518.703246][T21231] rtnetlink_rcv_msg+0x7cc/0xb70 [ 518.703287][T21231] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 518.703317][T21231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.703348][T21231] ? ref_tracker_free+0x63a/0x7d0 [ 518.703378][T21231] ? __asan_memcpy+0x40/0x70 [ 518.703402][T21231] ? __pfx_ref_tracker_free+0x10/0x10 [ 518.703438][T21231] netlink_rcv_skb+0x208/0x470 [ 518.703471][T21231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.703504][T21231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.703555][T21231] netlink_unicast+0x82f/0x9e0 [ 518.703590][T21231] ? __pfx_netlink_unicast+0x10/0x10 [ 518.703620][T21231] ? netlink_sendmsg+0x642/0xb30 [ 518.703638][T21231] ? skb_put+0x11b/0x210 [ 518.703661][T21231] netlink_sendmsg+0x805/0xb30 [ 518.703686][T21231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.703707][T21231] ? aa_sock_msg_perm+0xf1/0x1d0 [ 518.703729][T21231] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.703752][T21231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.703772][T21231] __sock_sendmsg+0x21c/0x270 [ 518.703802][T21231] ____sys_sendmsg+0x505/0x830 [ 518.703828][T21231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.703856][T21231] ? import_iovec+0x74/0xa0 [ 518.703882][T21231] ___sys_sendmsg+0x21f/0x2a0 [ 518.703905][T21231] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.703949][T21231] ? __fget_files+0x2a/0x420 [ 518.703967][T21231] ? __fget_files+0x3a0/0x420 [ 518.703992][T21231] __x64_sys_sendmsg+0x19b/0x260 [ 518.704017][T21231] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.704046][T21231] ? __pfx_ksys_write+0x10/0x10 [ 518.704072][T21231] ? rcu_is_watching+0x15/0xb0 [ 518.704096][T21231] ? rcu_is_watching+0x15/0xb0 [ 518.704119][T21231] do_syscall_64+0xfa/0x3b0 [ 518.704139][T21231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.704161][T21231] ? clear_bhb_loop+0x60/0xb0 [ 518.704185][T21231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.704206][T21231] RIP: 0033:0x7efd6458ebe9 [ 518.704225][T21231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.704244][T21231] RSP: 002b:00007efd65442038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.704274][T21231] RAX: ffffffffffffffda RBX: 00007efd647b5fa0 RCX: 00007efd6458ebe9 [ 518.704291][T21231] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000003 [ 518.704306][T21231] RBP: 00007efd65442090 R08: 0000000000000000 R09: 0000000000000000 [ 518.704320][T21231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.704334][T21231] R13: 00007efd647b6038 R14: 00007efd647b5fa0 R15: 00007ffe714da8c8 [ 518.704360][T21231] [ 519.208682][T21245] tipc: Enabled bearer , priority 0 [ 519.239775][T21245] syzkaller0: entered promiscuous mode [ 519.258787][T21245] syzkaller0: entered allmulticast mode [ 519.281702][T21247] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 519.292664][T21247] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 519.324467][T21245] tipc: Resetting bearer [ 519.357790][T21244] tipc: Resetting bearer [ 519.365040][T11963] tipc: Node number set to 3053763462 [ 519.394781][T21244] tipc: Disabling bearer [ 519.423795][T21247] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 519.437183][T21247] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 519.540849][T21265] veth0_to_bridge: entered promiscuous mode [ 519.588060][T21265] veth0_to_bridge: left promiscuous mode [ 519.606987][T21247] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 519.619017][T21247] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 519.666133][T21267] lo speed is unknown, defaulting to 1000 [ 519.690604][T21247] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 519.719969][T21247] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 519.805959][ T51] block nbd6: Receive control failed (result -32) [ 519.946710][ T3006] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 519.954872][ T3006] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 519.995363][ T3006] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 520.003662][ T3006] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 520.185702][ T3006] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 520.194032][ T3006] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 520.231159][T21291] !: renamed from dummy0 [ 520.253962][ T3006] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 520.307952][ T3006] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 520.692185][T21306] batadv_slave_0: left promiscuous mode [ 520.715175][T21306] gtp0: left promiscuous mode [ 520.721644][T21306] geneve2: left promiscuous mode [ 520.734678][T21306] syzkaller0: left promiscuous mode [ 521.182153][T21348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.397028][T21360] tipc: Enabled bearer , priority 0 [ 521.404114][T21359] tipc: Enabling of bearer rejected, already enabled [ 521.420209][T21367] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 521.425749][T21368] netlink: 'syz.2.4612': attribute type 1 has an invalid length. [ 521.447457][T21360] syzkaller0: entered promiscuous mode [ 521.453207][T21360] syzkaller0: entered allmulticast mode [ 521.498815][T21359] tipc: Resetting bearer [ 521.675844][T21376] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 521.683346][T21358] tipc: Resetting bearer [ 521.708988][T21358] tipc: Disabling bearer [ 521.960717][T21391] __nla_validate_parse: 197 callbacks suppressed [ 521.960740][T21391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4621'. [ 521.983786][T21393] netlink: 'syz.1.4622': attribute type 3 has an invalid length. [ 522.026864][T21393] syz_tun: entered allmulticast mode [ 522.044148][T21393] siw: device registration error -23 [ 522.103678][T21393] bond7: left promiscuous mode [ 522.105714][T21400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4620'. [ 522.123142][T21393] batadv1: left promiscuous mode [ 522.137050][T21393] batadv1: left allmulticast mode [ 522.143179][T21393] veth5: left promiscuous mode [ 522.159955][ T7989] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.170571][ T7989] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.210262][T21392] syz_tun: left allmulticast mode [ 522.249415][ T7989] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.388887][ T7989] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.676419][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4634'. [ 522.762873][T21438] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 524.113558][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4643'. [ 524.178056][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'. [ 524.266158][T21468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4646'. [ 524.306770][T21474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.404812][T21468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.452902][T21486] netlink: 'syz.2.4652': attribute type 1 has an invalid length. [ 524.525630][T21483] tc_dump_action: action bad kind [ 524.531287][T21487] tc_dump_action: action bad kind [ 524.866676][T21514] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4659'. [ 524.917450][T21514] tipc: Can't bind to reserved service type 2 [ 524.937184][T21517] syzkaller1: entered promiscuous mode [ 524.965729][T21517] syzkaller1: entered allmulticast mode [ 525.011163][T21519] tipc: Enabling of bearer rejected, already enabled [ 525.032783][T21521] syzkaller1: entered promiscuous mode [ 525.038799][T21521] syzkaller1: entered allmulticast mode [ 525.092365][T21521] lo speed is unknown, defaulting to 1000 [ 525.213903][T21535] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4665'. [ 525.233737][T21535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4665'. [ 525.264401][T21535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4665'. [ 525.474210][T21545] syzkaller1: entered promiscuous mode [ 525.490865][T21545] syzkaller1: entered allmulticast mode [ 525.600346][T21557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.737345][T21565] veth5: entered promiscuous mode [ 526.090572][T21581] macsec1: entered promiscuous mode [ 526.096304][T21581] dummy0: entered promiscuous mode [ 526.101682][T21581] macsec1: entered allmulticast mode [ 526.108267][T21581] dummy0: entered allmulticast mode [ 526.116990][T21581] dummy0: left allmulticast mode [ 526.123174][T21581] dummy0: left promiscuous mode [ 526.489179][T21604] syzkaller0: entered promiscuous mode [ 526.854658][T21624] lo speed is unknown, defaulting to 1000 [ 526.913382][T21631] FAULT_INJECTION: forcing a failure. [ 526.913382][T21631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.942909][T21631] CPU: 1 UID: 0 PID: 21631 Comm: syz.3.4696 Not tainted syzkaller #0 PREEMPT(full) [ 526.942941][T21631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 526.942955][T21631] Call Trace: [ 526.942964][T21631] [ 526.942973][T21631] dump_stack_lvl+0x189/0x250 [ 526.943004][T21631] ? __pfx____ratelimit+0x10/0x10 [ 526.943036][T21631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.943060][T21631] ? __pfx__printk+0x10/0x10 [ 526.943087][T21631] ? __might_fault+0xb0/0x130 [ 526.943120][T21631] ? rcu_is_watching+0x15/0xb0 [ 526.943142][T21631] should_fail_ex+0x414/0x560 [ 526.943173][T21631] _copy_from_user+0x2d/0xb0 [ 526.943199][T21631] __sys_bpf+0x1ed/0x870 [ 526.943237][T21631] ? __pfx___sys_bpf+0x10/0x10 [ 526.943273][T21631] ? ksys_write+0x22a/0x250 [ 526.943301][T21631] ? __pfx_ksys_write+0x10/0x10 [ 526.943326][T21631] ? rcu_is_watching+0x15/0xb0 [ 526.943349][T21631] __x64_sys_bpf+0x7c/0x90 [ 526.943369][T21631] do_syscall_64+0xfa/0x3b0 [ 526.943389][T21631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.943411][T21631] ? clear_bhb_loop+0x60/0xb0 [ 526.943435][T21631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.943456][T21631] RIP: 0033:0x7efd6458ebe9 [ 526.943476][T21631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.943499][T21631] RSP: 002b:00007efd65442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.943522][T21631] RAX: ffffffffffffffda RBX: 00007efd647b5fa0 RCX: 00007efd6458ebe9 [ 526.943538][T21631] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 526.943553][T21631] RBP: 00007efd65442090 R08: 0000000000000000 R09: 0000000000000000 [ 526.943567][T21631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.943580][T21631] R13: 00007efd647b6038 R14: 00007efd647b5fa0 R15: 00007ffe714da8c8 [ 526.943606][T21631] [ 527.271044][T21634] __nla_validate_parse: 7 callbacks suppressed [ 527.271070][T21634] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4694'. [ 527.469995][T21647] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 527.489399][T21649] vlan3: entered promiscuous mode [ 527.499125][T21649] macvtap0: entered promiscuous mode [ 527.527478][T21651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4702'. [ 527.540076][T21652] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4701'. [ 527.833081][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4706'. [ 527.834365][T21666] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 527.856088][T21664] lo speed is unknown, defaulting to 1000 [ 528.166918][T21681] lo speed is unknown, defaulting to 1000 [ 528.187836][T21684] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4711'. [ 528.211369][T21691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4713'. [ 528.252495][T21690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.292906][T21685] bond0: (slave dummy0): Releasing backup interface [ 528.316409][T21694] rdma_op ffff888080af89f0 conn xmit_rdma 0000000000000000 [ 528.406478][T21701] netlink: 'syz.1.4717': attribute type 26 has an invalid length. [ 528.498379][T21684] netlink: 'syz.5.4711': attribute type 10 has an invalid length. [ 528.574879][T21684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.605885][T21684] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 528.642144][T21717] lo speed is unknown, defaulting to 1000 [ 528.760406][T21723] tipc: Enabled bearer , priority 0 [ 528.779603][T21722] tipc: Disabling bearer [ 528.875974][T21727] tipc: Enabling of bearer rejected, already enabled [ 528.926783][T21727] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 529.014215][T21730] FAULT_INJECTION: forcing a failure. [ 529.014215][T21730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.046661][T21734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.063557][T21730] CPU: 1 UID: 0 PID: 21730 Comm: syz.1.4725 Not tainted syzkaller #0 PREEMPT(full) [ 529.063589][T21730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.063604][T21730] Call Trace: [ 529.063613][T21730] [ 529.063623][T21730] dump_stack_lvl+0x189/0x250 [ 529.063655][T21730] ? __pfx____ratelimit+0x10/0x10 [ 529.063688][T21730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.063714][T21730] ? __pfx__printk+0x10/0x10 [ 529.063742][T21730] ? rcu_is_watching+0x15/0xb0 [ 529.063764][T21730] ? lock_acquire+0x5f/0x360 [ 529.063799][T21730] ? rcu_is_watching+0x15/0xb0 [ 529.063821][T21730] should_fail_ex+0x414/0x560 [ 529.063852][T21730] _copy_from_user+0x2d/0xb0 [ 529.063878][T21730] bpf_test_init+0xf8/0x170 [ 529.063917][T21730] bpf_prog_test_run_xdp+0x37c/0x1000 [ 529.063956][T21730] ? rcu_is_watching+0x15/0xb0 [ 529.063979][T21730] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 529.064016][T21730] ? __fget_files+0x2a/0x420 [ 529.064064][T21730] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 529.064099][T21730] bpf_prog_test_run+0x2c7/0x340 [ 529.064142][T21730] __sys_bpf+0x581/0x870 [ 529.064171][T21730] ? __pfx___sys_bpf+0x10/0x10 [ 529.064206][T21730] ? ksys_write+0x22a/0x250 [ 529.064236][T21730] ? __pfx_ksys_write+0x10/0x10 [ 529.064263][T21730] ? rcu_is_watching+0x15/0xb0 [ 529.064289][T21730] __x64_sys_bpf+0x7c/0x90 [ 529.064314][T21730] do_syscall_64+0xfa/0x3b0 [ 529.064336][T21730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.064357][T21730] ? clear_bhb_loop+0x60/0xb0 [ 529.064382][T21730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.064403][T21730] RIP: 0033:0x7fa27c18ebe9 [ 529.064423][T21730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.064443][T21730] RSP: 002b:00007fa27d06d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.064467][T21730] RAX: ffffffffffffffda RBX: 00007fa27c3b5fa0 RCX: 00007fa27c18ebe9 [ 529.064485][T21730] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 529.064499][T21730] RBP: 00007fa27d06d090 R08: 0000000000000000 R09: 0000000000000000 [ 529.064514][T21730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.064527][T21730] R13: 00007fa27c3b6038 R14: 00007fa27c3b5fa0 R15: 00007ffc5b249e68 [ 529.064554][T21730] [ 529.378927][T21749] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4730'. [ 529.468053][T21752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4729'. [ 529.619723][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4735'. [ 529.646423][T21765] bridge_slave_1: left allmulticast mode [ 529.675950][T21765] bridge_slave_1: left promiscuous mode [ 529.695303][T21765] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.728748][T21765] bridge_slave_0: left allmulticast mode [ 529.741370][T21765] bridge_slave_0: left promiscuous mode [ 529.755705][T21765] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.952586][T21783] FAULT_INJECTION: forcing a failure. [ 529.952586][T21783] name failslab, interval 1, probability 0, space 0, times 0 [ 529.994451][T21783] CPU: 1 UID: 0 PID: 21783 Comm: syz.5.4740 Not tainted syzkaller #0 PREEMPT(full) [ 529.994484][T21783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.994499][T21783] Call Trace: [ 529.994508][T21783] [ 529.994518][T21783] dump_stack_lvl+0x189/0x250 [ 529.994549][T21783] ? __pfx____ratelimit+0x10/0x10 [ 529.994582][T21783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.994608][T21783] ? __pfx__printk+0x10/0x10 [ 529.994640][T21783] ? fs_reclaim_acquire+0x7d/0x100 [ 529.994672][T21783] ? rcu_is_watching+0x15/0xb0 [ 529.994693][T21783] ? __pfx___might_resched+0x10/0x10 [ 529.994712][T21783] ? lock_acquire+0x5f/0x360 [ 529.994744][T21783] should_fail_ex+0x414/0x560 [ 529.994774][T21783] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 529.994807][T21783] should_failslab+0xa8/0x100 [ 529.994840][T21783] __kvmalloc_node_noprof+0x161/0x5f0 [ 529.994872][T21783] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 529.994914][T21783] bpf_test_run_xdp_live+0x18e/0x1b10 [ 529.994951][T21783] ? stack_trace_save+0x9c/0xe0 [ 529.994977][T21783] ? stack_depot_save_flags+0x40/0x860 [ 529.995007][T21783] ? unwind_next_frame+0x11/0x2390 [ 529.995036][T21783] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 529.995068][T21783] ? bpf_test_init+0xc2/0x170 [ 529.995096][T21783] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 529.995128][T21783] ? bpf_prog_test_run+0x2c7/0x340 [ 529.995158][T21783] ? __sys_bpf+0x581/0x870 [ 529.995183][T21783] ? __x64_sys_bpf+0x7c/0x90 [ 529.995232][T21783] ? __might_fault+0xb0/0x130 [ 529.995261][T21783] ? rcu_is_watching+0x15/0xb0 [ 529.995282][T21783] ? lock_acquire+0x5f/0x360 [ 529.995318][T21783] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 529.995341][T21783] ? __might_fault+0xcc/0x130 [ 529.995373][T21783] ? _copy_from_user+0x94/0xb0 [ 529.995398][T21783] ? bpf_test_init+0x133/0x170 [ 529.995427][T21783] ? xdp_convert_md_to_buff+0x5b/0x330 [ 529.995463][T21783] bpf_prog_test_run_xdp+0x713/0x1000 [ 529.995502][T21783] ? rcu_is_watching+0x15/0xb0 [ 529.995526][T21783] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 529.995563][T21783] ? __fget_files+0x2a/0x420 [ 529.995585][T21783] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 529.995619][T21783] bpf_prog_test_run+0x2c7/0x340 [ 529.995651][T21783] __sys_bpf+0x581/0x870 [ 529.995679][T21783] ? __pfx___sys_bpf+0x10/0x10 [ 529.995714][T21783] ? ksys_write+0x22a/0x250 [ 529.995744][T21783] ? __pfx_ksys_write+0x10/0x10 [ 529.995769][T21783] ? rcu_is_watching+0x15/0xb0 [ 529.995794][T21783] __x64_sys_bpf+0x7c/0x90 [ 529.995818][T21783] do_syscall_64+0xfa/0x3b0 [ 529.995844][T21783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.995866][T21783] ? clear_bhb_loop+0x60/0xb0 [ 529.995889][T21783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.995910][T21783] RIP: 0033:0x7f16f338ebe9 [ 529.995928][T21783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.995946][T21783] RSP: 002b:00007f16f15f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.995969][T21783] RAX: ffffffffffffffda RBX: 00007f16f35b5fa0 RCX: 00007f16f338ebe9 [ 529.995986][T21783] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 529.996001][T21783] RBP: 00007f16f15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 529.996014][T21783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.996028][T21783] R13: 00007f16f35b6038 R14: 00007f16f35b5fa0 R15: 00007fffba11bd38 [ 529.996053][T21783] [ 530.342805][T21785] C: renamed from team_slave_0 [ 530.358315][T21789] netlink: 'syz.4.4742': attribute type 1 has an invalid length. [ 530.366850][T21789] netlink: 'syz.4.4742': attribute type 2 has an invalid length. [ 530.481341][T21785] netlink: 'syz.3.4741': attribute type 3 has an invalid length. [ 530.489236][T21785] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4741'. [ 530.498575][T21785] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 530.534391][T21797] IPVS: length: 49 != 24 [ 530.792582][T21809] netlink: 'syz.4.4749': attribute type 17 has an invalid length. [ 530.833969][T21809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.959270][T21814] netlink: 'syz.2.4751': attribute type 1 has an invalid length. [ 531.217787][T21828] tipc: Enabled bearer , priority 0 [ 531.310689][T21828] syzkaller0: entered promiscuous mode [ 531.327232][T21828] syzkaller0: entered allmulticast mode [ 531.338209][T21828] tipc: Resetting bearer [ 531.366678][T21826] tipc: Resetting bearer [ 531.456761][T21826] tipc: Disabling bearer [ 531.713779][T21850] lo speed is unknown, defaulting to 1000 [ 532.295372][ C1] ================================================================== [ 532.303528][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 532.311488][ C1] Read of size 2 at addr ffff8880560dbc2a by task syz.2.4774/21889 [ 532.319421][ C1] [ 532.321783][ C1] CPU: 1 UID: 0 PID: 21889 Comm: syz.2.4774 Not tainted syzkaller #0 PREEMPT(full) [ 532.321816][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.321833][ C1] Call Trace: [ 532.321843][ C1] [ 532.321856][ C1] dump_stack_lvl+0x189/0x250 [ 532.321893][ C1] ? rcu_is_watching+0x15/0xb0 [ 532.321920][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.321954][ C1] ? rcu_is_watching+0x15/0xb0 [ 532.321977][ C1] ? lock_release+0x4b/0x3e0 [ 532.322014][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 532.322044][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 532.322074][ C1] print_report+0xca/0x240 [ 532.322103][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 532.322133][ C1] kasan_report+0x118/0x150 [ 532.322168][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 532.322205][ C1] rose_timer_expiry+0x471/0x4b0 [ 532.322258][ C1] call_timer_fn+0x17e/0x5f0 [ 532.322296][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 532.322331][ C1] ? call_timer_fn+0xbe/0x5f0 [ 532.322367][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 532.322407][ C1] ? rcu_is_watching+0x15/0xb0 [ 532.322429][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 532.322463][ C1] __run_timer_base+0x61a/0x860 [ 532.322496][ C1] ? ktime_get+0x3e/0x1f0 [ 532.322534][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 532.322562][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 532.322604][ C1] run_timer_softirq+0xb7/0x180 [ 532.322644][ C1] handle_softirqs+0x283/0x870 [ 532.322671][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 532.322697][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 532.322726][ C1] __irq_exit_rcu+0xca/0x1f0 [ 532.322754][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 532.322784][ C1] irq_exit_rcu+0x9/0x30 [ 532.322809][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 532.322845][ C1] [ 532.322855][ C1] [ 532.322864][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.322891][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 532.322927][ C1] Code: 08 60 a0 92 65 8b 15 e8 b4 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 <83> fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c [ 532.322949][ C1] RSP: 0018:ffffc90011c1f860 EFLAGS: 00000246 [ 532.322972][ C1] RAX: ffffffff84c80f41 RBX: 0000000000000000 RCX: ffff888079c20000 [ 532.322991][ C1] RDX: 0000000000000002 RSI: 0000000000000009 RDI: 0000000000000009 [ 532.323005][ C1] RBP: 0000000000000001 R08: ffff888031f01cc7 R09: 1ffff110063e0398 [ 532.323022][ C1] R10: dffffc0000000000 R11: ffffed10063e0399 R12: 0000000000000011 [ 532.323038][ C1] R13: dffffc0000000000 R14: ffff88803aa6a400 R15: 0000000000000009 [ 532.323060][ C1] ? __genradix_ptr+0x1c1/0x220 [ 532.323098][ C1] __genradix_ptr+0x1c1/0x220 [ 532.323133][ C1] sctp_stream_init+0x222/0x440 [ 532.323172][ C1] sctp_association_new+0x10dd/0x25f0 [ 532.323208][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 532.323235][ C1] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 532.323260][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 532.323291][ C1] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 532.323319][ C1] ? security_sctp_bind_connect+0x7e/0x2e0 [ 532.323360][ C1] sctp_sendmsg+0x155c/0x2810 [ 532.323391][ C1] ? __pfx_sctp_sendmsg+0x10/0x10 [ 532.323413][ C1] ? rcu_is_watching+0x15/0xb0 [ 532.323438][ C1] ? aa_sk_perm+0x81e/0x950 [ 532.323475][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 532.323511][ C1] ? sock_rps_record_flow+0x19/0x410 [ 532.323544][ C1] ? inet_sendmsg+0x2f4/0x370 [ 532.323577][ C1] __sock_sendmsg+0x19c/0x270 [ 532.323611][ C1] __sys_sendto+0x3bd/0x520 [ 532.323642][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 532.323662][ C1] ? do_futex+0x395/0x420 [ 532.323709][ C1] ? rcu_is_watching+0x15/0xb0 [ 532.323765][ C1] __x64_sys_sendto+0xde/0x100 [ 532.323789][ C1] do_syscall_64+0xfa/0x3b0 [ 532.323811][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.323835][ C1] ? clear_bhb_loop+0x60/0xb0 [ 532.323866][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.323889][ C1] RIP: 0033:0x7fe2ac78ebe9 [ 532.323914][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.323935][ C1] RSP: 002b:00007fe2ad601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 532.323959][ C1] RAX: ffffffffffffffda RBX: 00007fe2ac9b6090 RCX: 00007fe2ac78ebe9 [ 532.323975][ C1] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000008 [ 532.323991][ C1] RBP: 00007fe2ac811e19 R08: 000020000005ffe4 R09: 000000000000001c [ 532.324007][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.324021][ C1] R13: 00007fe2ac9b6128 R14: 00007fe2ac9b6090 R15: 00007fff1a366a08 [ 532.324057][ C1] [ 532.324066][ C1] [ 532.791204][ C1] Allocated by task 21521: [ 532.795716][ C1] kasan_save_track+0x3e/0x80 [ 532.800407][ C1] __kasan_kmalloc+0x93/0xb0 [ 532.805185][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 532.810065][ C1] ops_init+0x7b/0x5c0 [ 532.814141][ C1] setup_net+0x10c/0x320 [ 532.818413][ C1] copy_net_ns+0x31b/0x4d0 [ 532.822847][ C1] create_new_namespaces+0x3f3/0x720 [ 532.828167][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 532.833902][ C1] ksys_unshare+0x4c8/0x8c0 [ 532.838608][ C1] __x64_sys_unshare+0x38/0x50 [ 532.843478][ C1] do_syscall_64+0xfa/0x3b0 [ 532.847994][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.853899][ C1] [ 532.856233][ C1] Freed by task 7990: [ 532.860229][ C1] kasan_save_track+0x3e/0x80 [ 532.864931][ C1] kasan_save_free_info+0x46/0x50 [ 532.869996][ C1] __kasan_slab_free+0x5b/0x80 [ 532.874946][ C1] kfree+0x18e/0x440 [ 532.878875][ C1] ops_undo_list+0x856/0x990 [ 532.883469][ C1] cleanup_net+0x4c5/0x800 [ 532.887888][ C1] process_scheduled_works+0xae1/0x17b0 [ 532.893438][ C1] worker_thread+0x8a0/0xda0 [ 532.898037][ C1] kthread+0x70e/0x8a0 [ 532.902137][ C1] ret_from_fork+0x3f9/0x770 [ 532.907182][ C1] ret_from_fork_asm+0x1a/0x30 [ 532.911965][ C1] [ 532.914292][ C1] The buggy address belongs to the object at ffff8880560dbc00 [ 532.914292][ C1] which belongs to the cache kmalloc-512 of size 512 [ 532.928350][ C1] The buggy address is located 42 bytes inside of [ 532.928350][ C1] freed 512-byte region [ffff8880560dbc00, ffff8880560dbe00) [ 532.942068][ C1] [ 532.944400][ C1] The buggy address belongs to the physical page: [ 532.951264][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x560d8 [ 532.960041][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 532.968577][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 532.976140][ C1] page_type: f5(slab) [ 532.980668][ C1] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 532.989258][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 532.997850][ C1] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 533.006529][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 533.015208][ C1] head: 00fff00000000002 ffffea0001583601 00000000ffffffff 00000000ffffffff [ 533.023941][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 533.033498][ C1] page dumped because: kasan: bad access detected [ 533.039961][ C1] page_owner tracks the page as allocated [ 533.045684][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5854, tgid 5854 (syz-executor), ts 75522656175, free_ts 26760399255 [ 533.067323][ C1] post_alloc_hook+0x240/0x2a0 [ 533.072127][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 533.077675][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 533.083483][ C1] alloc_pages_mpol+0x232/0x4a0 [ 533.088341][ C1] allocate_slab+0x8a/0x370 [ 533.092847][ C1] ___slab_alloc+0xbeb/0x1410 [ 533.097538][ C1] __kmalloc_noprof+0x305/0x4f0 [ 533.102399][ C1] fib6_info_alloc+0x30/0xf0 [ 533.107008][ C1] ip6_route_info_create+0x142/0x860 [ 533.112442][ C1] ip6_route_add+0x49/0x1b0 [ 533.116957][ C1] addrconf_add_dev+0x24f/0x340 [ 533.121882][ C1] addrconf_init_auto_addrs+0x57c/0xa30 [ 533.127440][ C1] addrconf_notify+0xacc/0x1010 [ 533.132306][ C1] notifier_call_chain+0x1b3/0x3e0 [ 533.137451][ C1] __dev_notify_flags+0x18d/0x2e0 [ 533.142481][ C1] netif_change_flags+0xe8/0x1a0 [ 533.147426][ C1] page last free pid 1 tgid 1 stack trace: [ 533.153233][ C1] __free_frozen_pages+0xbc4/0xd30 [ 533.158358][ C1] free_contig_range+0x1bd/0x4a0 [ 533.163304][ C1] destroy_args+0x64/0x4a0 [ 533.167725][ C1] debug_vm_pgtable+0x39f/0x3b0 [ 533.172682][ C1] do_one_initcall+0x233/0x820 [ 533.177455][ C1] do_initcall_level+0x104/0x190 [ 533.182405][ C1] do_initcalls+0x59/0xa0 [ 533.186746][ C1] kernel_init_freeable+0x334/0x4b0 [ 533.191954][ C1] kernel_init+0x1d/0x1d0 [ 533.196296][ C1] ret_from_fork+0x3f9/0x770 [ 533.200886][ C1] ret_from_fork_asm+0x1a/0x30 [ 533.205746][ C1] [ 533.208075][ C1] Memory state around the buggy address: [ 533.213707][ C1] ffff8880560dbb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.221782][ C1] ffff8880560dbb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.229848][ C1] >ffff8880560dbc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.238272][ C1] ^ [ 533.243670][ C1] ffff8880560dbc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.251741][ C1] ffff8880560dbd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.259806][ C1] ================================================================== [ 533.269203][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 533.276427][ C1] CPU: 1 UID: 0 PID: 21889 Comm: syz.2.4774 Not tainted syzkaller #0 PREEMPT(full) [ 533.285827][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.296018][ C1] Call Trace: [ 533.299311][ C1] [ 533.302165][ C1] dump_stack_lvl+0x99/0x250 [ 533.306791][ C1] ? __asan_memcpy+0x40/0x70 [ 533.311409][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.316729][ C1] ? __pfx__printk+0x10/0x10 [ 533.321357][ C1] vpanic+0x281/0x750 [ 533.325364][ C1] ? __pfx_vpanic+0x10/0x10 [ 533.329912][ C1] ? rcu_is_watching+0x15/0xb0 [ 533.334782][ C1] panic+0xb9/0xc0 [ 533.338519][ C1] ? __pfx_panic+0x10/0x10 [ 533.342946][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 533.348855][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 533.354946][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 533.360070][ C1] check_panic_on_warn+0x89/0xb0 [ 533.365026][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 533.370168][ C1] end_report+0x78/0x160 [ 533.374446][ C1] kasan_report+0x129/0x150 [ 533.379062][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 533.384204][ C1] rose_timer_expiry+0x471/0x4b0 [ 533.389160][ C1] call_timer_fn+0x17e/0x5f0 [ 533.393767][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 533.399590][ C1] ? call_timer_fn+0xbe/0x5f0 [ 533.404983][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 533.410117][ C1] ? rcu_is_watching+0x15/0xb0 [ 533.414989][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 533.420464][ C1] __run_timer_base+0x61a/0x860 [ 533.425329][ C1] ? ktime_get+0x3e/0x1f0 [ 533.429690][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 533.435083][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 533.441340][ C1] run_timer_softirq+0xb7/0x180 [ 533.446202][ C1] handle_softirqs+0x283/0x870 [ 533.451113][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 533.455927][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 533.461254][ C1] __irq_exit_rcu+0xca/0x1f0 [ 533.465918][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 533.471162][ C1] irq_exit_rcu+0x9/0x30 [ 533.475432][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 533.481141][ C1] [ 533.484094][ C1] [ 533.487078][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.493098][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 533.499296][ C1] Code: 08 60 a0 92 65 8b 15 e8 b4 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 <83> fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c [ 533.518938][ C1] RSP: 0018:ffffc90011c1f860 EFLAGS: 00000246 [ 533.525024][ C1] RAX: ffffffff84c80f41 RBX: 0000000000000000 RCX: ffff888079c20000 [ 533.533032][ C1] RDX: 0000000000000002 RSI: 0000000000000009 RDI: 0000000000000009 [ 533.541026][ C1] RBP: 0000000000000001 R08: ffff888031f01cc7 R09: 1ffff110063e0398 [ 533.549007][ C1] R10: dffffc0000000000 R11: ffffed10063e0399 R12: 0000000000000011 [ 533.556983][ C1] R13: dffffc0000000000 R14: ffff88803aa6a400 R15: 0000000000000009 [ 533.564976][ C1] ? __genradix_ptr+0x1c1/0x220 [ 533.569850][ C1] __genradix_ptr+0x1c1/0x220 [ 533.574550][ C1] sctp_stream_init+0x222/0x440 [ 533.579524][ C1] sctp_association_new+0x10dd/0x25f0 [ 533.584950][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 533.590259][ C1] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 533.596101][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 533.601578][ C1] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 533.607136][ C1] ? security_sctp_bind_connect+0x7e/0x2e0 [ 533.612994][ C1] sctp_sendmsg+0x155c/0x2810 [ 533.617788][ C1] ? __pfx_sctp_sendmsg+0x10/0x10 [ 533.622904][ C1] ? rcu_is_watching+0x15/0xb0 [ 533.627686][ C1] ? aa_sk_perm+0x81e/0x950 [ 533.632216][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 533.637255][ C1] ? sock_rps_record_flow+0x19/0x410 [ 533.642560][ C1] ? inet_sendmsg+0x2f4/0x370 [ 533.647293][ C1] __sock_sendmsg+0x19c/0x270 [ 533.651989][ C1] __sys_sendto+0x3bd/0x520 [ 533.656510][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 533.661627][ C1] ? do_futex+0x395/0x420 [ 533.666073][ C1] ? rcu_is_watching+0x15/0xb0 [ 533.670865][ C1] __x64_sys_sendto+0xde/0x100 [ 533.676079][ C1] do_syscall_64+0xfa/0x3b0 [ 533.680595][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.686757][ C1] ? clear_bhb_loop+0x60/0xb0 [ 533.691619][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.697605][ C1] RIP: 0033:0x7fe2ac78ebe9 [ 533.702118][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.722080][ C1] RSP: 002b:00007fe2ad601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 533.730510][ C1] RAX: ffffffffffffffda RBX: 00007fe2ac9b6090 RCX: 00007fe2ac78ebe9 [ 533.738672][ C1] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000008 [ 533.746651][ C1] RBP: 00007fe2ac811e19 R08: 000020000005ffe4 R09: 000000000000001c [ 533.754629][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.762605][ C1] R13: 00007fe2ac9b6128 R14: 00007fe2ac9b6090 R15: 00007fff1a366a08 [ 533.770642][ C1] [ 533.773975][ C1] Kernel Offset: disabled [ 533.778324][ C1] Rebooting in 86400 seconds..