last executing test programs: 19.010429053s ago: executing program 0 (id=8776): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x1, 0x2000}, 0x50) close(0x3) (async) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@perf_event={0x5}}, 0xfffffffffffffe78) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@perf_event={0x5}}, 0xfffffffffffffe78) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000680)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000680)=0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x9c2, 0x2, 0xac7d, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000540)=0x5, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) 18.742825521s ago: executing program 0 (id=8781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000020000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000040a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x10}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="4c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000200"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 18.434545545s ago: executing program 0 (id=8784): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) accept$unix(r0, &(0x7f0000000300), &(0x7f0000000540)=0x6e) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'veth1_macvtap\x00', {0x2, 0x0, @private}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800dd8d29bd700000000000020000f0ffffff070000000006001500050000000c001680050002"], 0x30}}, 0x0) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000001a40)="259a53f2710100000000000000a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) sendto$l2tp(r7, 0x0, 0x30a6334f, 0x4c811, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101, 0xfffffffe}, 0xe0a4f0644f6d8ea8) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x1e4, 0x30, 0x1, 0x0, 0x0, {}, [{0x1d0, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x0, 0x6, 0x5}, @TCA_MPLS_PROTO={0x0, 0x4, 0x18}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x4, 0x4}, {0xc}, {0xc}}}, @m_mpls={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x0, 0x8, 0x1}, @TCA_MPLS_PARMS={0x0, 0x2, {{0xffffffff, 0x7, 0x4, 0x3, 0xe}, 0x3}}]}, {0x0, 0x6, "dc4f947ce3b072695f95ce7e739e6e499a9b1d907b5a4f4185f0d27db8dffe1aa098cce75d48a2f73bf24d033f0ffe6c4fc84e47eddf6e5c0647b7f4a76e492e6568f119bcac73d6343b18013970f640b1d956b7467a36488e7a882337040ecec2278a08860e3652f6eb327176b508d59398bb6869e621546a31f380b6b2bd6a2885d37eff6ea6d032cce882877a2f9acb4424c8ecb74ed274bfce4065334c0fde5c40370fceb0dfc6ba8f55149519df"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) (async) accept$unix(r0, &(0x7f0000000300), &(0x7f0000000540)=0x6e) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'veth1_macvtap\x00', {0x2, 0x0, @private}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) (async) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800dd8d29bd700000000000020000f0ffffff070000000006001500050000000c001680050002"], 0x30}}, 0x0) (async) socket(0x2, 0xa, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000001a40)="259a53f2710100000000000000a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) sendto$l2tp(r7, 0x0, 0x30a6334f, 0x4c811, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101, 0xfffffffe}, 0xe0a4f0644f6d8ea8) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x1e4, 0x30, 0x1, 0x0, 0x0, {}, [{0x1d0, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x0, 0x6, 0x5}, @TCA_MPLS_PROTO={0x0, 0x4, 0x18}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x4, 0x4}, {0xc}, {0xc}}}, @m_mpls={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x0, 0x8, 0x1}, @TCA_MPLS_PARMS={0x0, 0x2, {{0xffffffff, 0x7, 0x4, 0x3, 0xe}, 0x3}}]}, {0x0, 0x6, "dc4f947ce3b072695f95ce7e739e6e499a9b1d907b5a4f4185f0d27db8dffe1aa098cce75d48a2f73bf24d033f0ffe6c4fc84e47eddf6e5c0647b7f4a76e492e6568f119bcac73d6343b18013970f640b1d956b7467a36488e7a882337040ecec2278a08860e3652f6eb327176b508d59398bb6869e621546a31f380b6b2bd6a2885d37eff6ea6d032cce882877a2f9acb4424c8ecb74ed274bfce4065334c0fde5c40370fceb0dfc6ba8f55149519df"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) (async) 18.157023255s ago: executing program 0 (id=8785): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008100)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bdaa, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x5}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xffea, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 17.856192849s ago: executing program 0 (id=8787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@loopback, @loopback, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5}, {0x5, 0x3}, {0x7, 0x2}}, [@q_dsmark={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4}, 0x40001) 17.828876549s ago: executing program 0 (id=8790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8880}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000280)={r3, &(0x7f0000000100)='\x00', 0x8000, &(0x7f0000000180)={@_ha_fsid={[0x81, 0x2]}, {0x0, 0x6, 0x8, 0x8000}}, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=0xa83}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 6.635328773s ago: executing program 4 (id=8838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000c000000364d000001000000", @ANYRES32, @ANYBLOB="0000000000000000000021000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000700)="a67bb4b5ff7f00006fae8a81b37b06b9c54aea93abb2e616133fee0932c72f357cc57c07afde8367d77cf182beb370a3c08c017a383def1834ec87dde53e42c77e74b0df1e8cf0ff867a0d671450c232342bafca7b43d2a49322fcca38dfe8101b6b87aa070e3b82265a100e978f0b3f26dccbf2aab072a8eaaca599648483fa58d3dd193718e04a02825076089b35788b8936189dd1eefe3a5499786ba6bf00fa591ffc1993da6ed17656341e8ff34155d0faa305acedd1857c", 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x6}}, 0xa) bind$tipc(r6, &(0x7f0000000400)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) bind$tipc(r7, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c006e0520464e4eccbc0b64b07f9e43bb000010003b150000000000000000707242db945d2464fe4589be682b650000032a056b0255810000fd77b396f5926c0365347aec80e1fa45aa57cffea1121522e84a2c09ee2e2c9b06532653059a950ac0f4e715d6043a795c848eeba9d941833bfefa35c40423e81c7124212a93f04366358720f8f0dc0829b457eb87a365976944e320b91397be97bc917ac51c2ca25ebb3e94d423594d72eb29c068", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006aff028008001c00", @ANYRES16=r4, @ANYBLOB], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000014000100000000000000000002000180"], 0x14}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x20, &(0x7f0000000080)=0x2000000, 0x4) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) bind$inet(r11, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf253d0000000e0001006e657464657673696d00001df800000000000064657673696d3000000e00820000000000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6.553124366s ago: executing program 2 (id=8839): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x3, @vifc_lcl_addr=@remote, @private=0xa010101}, 0x10) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@multicast1, @broadcast}, &(0x7f0000000100)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b40)={&(0x7f0000000240), 0xc, &(0x7f0000000b00)={&(0x7f00000002c0)={0x814, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x7b8, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0xc}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "aa4b0e7fa5624bad46a3c581b4caf746b18f01c4943ada99221be3018192b2a3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f861cda72479b67147a33ce38ff61dc8b06f3818edd9b0e4410c1ce624d32b38"}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}]}, {0x404, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3a8, 0x9, 0x0, 0x1, [{0x4}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xff}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2f0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0db0165c04e1aa0a09a3fc468805c4bbdfe368de8b6a3870e78fc951f6b9125f"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d6a3e871cdc8f0f8dab9bdbe7f4daa1a713b0b2d50423bb2ad9ff1304a8f90ab"}, @WGPEER_A_ALLOWEDIPS={0x25c, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "54e1c5d64690641f981c444d9d6f057f9a6749f941988767d950979d1fa3638d"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x814}, 0x1, 0x0, 0x0, 0x4000086}, 0x1010) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000cc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=@bridge_getneigh={0x60, 0x1e, 0x200, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x1, 0x100}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x81}, @IFLA_CARRIER={0x5, 0x21, 0xc}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffff242}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40081}, 0x4000040) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x10, 0x1402, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x20044020) recvfrom(r2, &(0x7f0000001100)=""/135, 0x87, 0x40000020, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80000, 0x7) connect$inet6(r7, &(0x7f00000011c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001240)=0x14) bind$packet(r8, &(0x7f0000001280)={0x11, 0xf5, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) sendmsg$inet6(r7, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="b9d68f083286a3d8ddf125a5b6b76d40c44c59ee2544b25792a0ffe9a2037f9d8bf2c324f5a55c7d09c5890e39c7408cf378dfa2ff17adad1a4a54d2c21f9831aa79c30ce5a2c89c80594743bfbd45540648efb3c749fbbf3742363a0a4067c4ab9eebf14c53347ed5c5772956f9d4d9a612525a2632785822b627e3e96c4b128c48a0bb4e8b1e9f73e5b170310738ab998c6a1c68753a4656c0a8b3a8e245f844c788b1c73345dbc33fbcb80f62b90c024c65476314e7cc75795cadf7", 0xbd}], 0x1}, 0x20040005) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r9, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x34, r10, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x1, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) ioctl$NILFS_IOCTL_SYNC(r8, 0x80086e8a, &(0x7f00000016c0)) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000001700)=@req={0x81, 0x401, 0x7e1, 0x9}, 0x10) bind$alg(r2, &(0x7f0000001740)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001980)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={0xffffffffffffffff, 0x20, &(0x7f0000001b40)={&(0x7f0000001a40)=""/65, 0x41, 0x0, &(0x7f0000001ac0)=""/106, 0x6a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003040)={0xa, 0x2, &(0x7f00000018c0)=@raw=[@generic={0x6, 0x0, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0x6d}], &(0x7f0000001900)='syzkaller\x00', 0x1, 0x14, &(0x7f0000001940)=""/20, 0x41000, 0x28, '\x00', 0x0, @fallback=0x37, r11, 0x8, &(0x7f00000019c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001a00)={0x5, 0xa, 0x100000, 0x7f}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000003000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x55}, 0x94) 6.187512295s ago: executing program 4 (id=8842): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d0001000000080006000900000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000044) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0xc090) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000f7dbdf257900000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, 0x0, &(0x7f0000000100)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x340080d1, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg(r6, &(0x7f0000000300)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x1, @remote, 'syzkaller1\x00'}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="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", 0xff}], 0x1}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r9, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.763348556s ago: executing program 4 (id=8849): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) getpeername$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000500)={0x6, 'dummy0\x00', {0x687a}, 0x7}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000003740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003700)={&(0x7f0000003780)=ANY=[@ANYBLOB="141a0000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf258300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099002fa60000250000001814118014140580bc000080b800038004000200300001802c00018004000a0004000a0004000100050005000400000006000400030000000400090006000400040000007c00018024000180050007002c0000000500030003000000060004000500000008000200030000003400018004000c0005000300040000000400090004000a0004000100040008000500060017000000050005000900000004000b000c000180050005000300000014000180060004000000000004000a000400090004000200640000800a000100ffffffffffff00004800038004000200040002003c000180080001800400010030000180040009000500030003000000050003000100000004000a0004000a00050005000f00000005000600160000000a000100ffffffffffff0000180300800c00028008002600111700005400038004000200440001801c000180080002000300000004000800050005000f00000004000c0010000180050005000900000004000a00140001800600040000000000050006000c00000004000200040002001c00038004000200040002000400020004000200040002000400020024020380b40001801c0001800500050007000000040009000400010006000400c20000001c000180050007000000000004000a0004000a000400080004000100140001800500070089000000050005000d00000008000180040009000c00018005000500040000002c000180050006001a000000050003000e0000000500060015000000050006001400000004000c0004000a001000018004000a0004000100040009001400018004000b00060004000700000004000900fc000180140001800400080004000c00050006000e00000034000180050006001100000004000c000500050008000000050007000000000005000600090000000400080005000500020000002000018004000b0004000b00040009000500050004000000060004001f0700002c00018004000b000400010004000b0005000300000000000400080004000b0004000c0005000300020000002800018006000400400000000500070057000000080002000300000004000800050003000a000000100001800400080004000c0004000b002400018005000500050000000400090004000c0004000b000500050006000000040009000800018004000a00040002000400020068000180100001800500030002000000040001003800018004000c0004000c0006000400befb00000500070000000000050005000600000004000a00060004000500000004000c0004000b000c0001800400080004000b001000018004000b0005000700bc0000000a00010008021100000000005c00038004000200540001802000018006000400a7000000050003000a00000004000c0005000700080000003000018006000400070000000500050009000000050003000a00000004000800050007008100000005000300060000000a000100080211000001000080070080b8010380bc0001800800018004000a003c0001800800020002000000050005000a0000000400010004000100080002000300000004000c0004000b00050003000800000004000b0004000a001c00018004000c00040008000400010004000a000500050005000000180001800500070004000000080002000400000004000a003800018004000b000400090004000c00050006001a000000050003000d0000000500050009000000050007000100000004000c0004000a00080001800400010004000200c4000180100001800400010005000300030000002000018004000b0004000a0004000c0004000800050003000000000004000a00100001800400010004000a0004000a002000018004000a0004000900050003000700000004000b0005000700060000000c00018004000a00040001000c00018006000400100000002c00018004000a000400080005000700ea000000050005000c000000080002000200000005000700070000001c000180050005000700000005000500050000000400010004000b00040002002c000180100001800400080005000500050000001800018004000900050007000000000004000100040009007c00038004000200740001801800018004000a0004000a0004000b0005000500040000000800018004000900280001800500060002000000050003000b000000050005000500000004000100050006000a0000000c00018004000c00040009001c00018005000300040000000400090005000500070000000400080038000380300001801c00018006000400080000000800020003000000050007000500000010000180050005000f000000040008000400020094020380cc0001801c000180050003000d000000050005000b000000050003000f000000080001800400080034000180050005000f000000050005000600000004000b00050007008e0000000400010004000a00050006000f00000004000c003c000180050005000600000004000900040009000600040078d1000004000a00080002000000000004000800050007009b00000004000a000400090034000180080002000200000004000a0004000c0004000900040008000400080004000b00050003000000000005000500080000000400020024000180200001800400080005000700090000000500050004000000050007000100000004000200b400018018000180050007000c00000004000c0004000100040001002000018004000c000600040007000000050007000000000005000500030000002c00018004000a00040001000500030002000000050007000b00000004000b0004000a000800020004000000280001800600040008000000050006000c00000008000200040000000400010005000700030000001800018004000b00050006000e000000050003000f0000000c0001800600040003000000dc000180400001800800020000000000050005000700000004000c00040001000400010004000c000500060001000000080002000300000004000a000500070068000000200001800600040002000000080002000000000004000900060004005b0000002800018004000a0004000c00040001000500060009000000050007000600000005000700040000000800018004000c000800018004000a00400001800500050008000000050007008000000005000700080000000400010004000a0004000800050005000b0000000400010005000300080000000400080004000200040002000a00010008021100000100007002038014000180040001800c0001800800020004000000040101802000018004000a00050007000700000005000300100000000400080004000b001400018005000700f000000005000700040000003c00018005000300050000000500030006000000050007000500000004000900050005000c000000050006001a00000008000200020000000400080038000180050005000500000005000600080000000500060012000000050003000600000006000400080000000400080008000200040000001c00018004000c00050006001a000000040008000400010004000a003c00018004000c0004000900050005000100000005000500090000000600040008000000050003000e000000060004000010000004000c0004000900400001803c0001800500060017000000050005000f0000000400090004000c00060004000900000004000100050006000d00000004000c0004000a0004000a00e40001801000018004000b00050003000e0000001c00018006000400090000000400090004000900050006000f000000280001800400090004000a000500030007000000050003000000000004000900050005000a00000014000180040008000400090005000700d400000010000180060004000400000004000a0030000180050003000700000004000800050005000400000004000b000400080004000c000400010005000600190000000c000180050006001f0000002c0001800400010004000b0004000800050003000a0000000400090004000c0004000b0004000b00040008002c0001802800018004000a000400080004000b000500060006000000050006001d00000004000b0004000b0004000200100000800a000100ffffffffffff00004c0200800a000100080211000001000010010380040101802c00018004000a0004000900050006000e0000000500070006000000050006000c00000006000400080000001000018004000b0005000600020000000c00018006000400000800004000018004000b00040001000800020004000000040009000400090008000200020000000500060011000000080002000000000005000600040000000400080038000180080002000200000004000a00050006000200000005000700070000000600040081ff0000050003000000000008000200020000000c000180050007000700000018000180080002000000000004000100050006001e0000001c000180050005000f0000000500070000000000060004000000000004000200040002004c0002800800a0000500000008002201720200000800a000ab000000050019010a000000080022018e000000080022018e0000000800a000080000000800a100f9ffffff050019010e000000ac0003800400020004000200a000018034000180050003000800000004000b0004000900050005000900000005000700010000000500060002000000050003000b0000001000018004000800050005000c0000001c000180040009000400010004000b0004000c0006000400050000000800018004000c00080001800400080020000180040001000400080004000100060004007f00000005000700070000000c00018005000500030000002800038004000200100001800c0001800800020003000000100001800c00018004000b0004000b000a0001000802110000010000380100802c000280080026008a090000080026006c0900000800a100020000000800a10022b1000005001801290000000a000100ffffffffffff0000e4000380840001804c000180040001000600040000010000050003000700000008000200030000000500030007000000050005000700000004000a00050006001d0000000800020002000000050007001000000010000180050007000800000004000a0024000180040001000400090004000900050006000200000004000c0005000300020000000400020004000200540001802800018004000b00080002000200000004000100060004003300000004000800080002000400000010000180050003000f000000040009001000018008000200000000000400010008000180040008000a00010008021100000100000a0001000802110000010000600000800a000100ffffffffffff000018000380140001801000018004000a000400090004000c000a00010008021100000000000a00010008021100000000001400028008002700010000000800a0000c0000000a0001000802110000010000b80100808c010380b00001802c000180050003000100000004000a00040008000500050006000000050005000300000004000b00040008001400018004000100050003000b00000004000900140001800400090004000100050003000d00000034000180050005000d0000000400010004000c000500030008000000050005000a0000000400010004000100050006001c00000024000180060004000700000005000700090000000500030002000000050007000300000004000200d40001800c0001800400090004000a0030000180050006001a00000005000300040000000500060003000000050007000f00000004000b0006000400ff0100001000018005000700c3000000040008002000018005000700050000000500030009000000050003000100000004000b0024000180050003000900000008000200010000000800020004000000050003000800000040000180050003000d00000004000a000400080004000c00050007000000000006000400050000000800020001000000050005000c0000000400080004000c001c0002800800a1000600000008009f000100000005001801220000000a0001000802110000010000ac0200800a000100ffffffffffff0000140002800800a000080000000800a100080000000a00010008021100000100007c02038004000200e80001801800018004000c00050005000100000005000600110000001400018005000600080000000400010004000100180001800400010004000b00040008000400010004000b002c000180050005000e000000050003000e000000050005000900000004000b0004000a00050007000200000014000180050005000d00000004000b0004000b004000018004000b0004000100050003000f0000000500070004000000050007000100000006000400030000000500050000000000060004000000000004000c00200001800400010004000b0004000a0005000300060000000500070002000000bc0001802400018004000c000400090004000c000400090004000a0004000a0008000200010000001400018004000800080002000300000004000a000c000180050003000a00000030000180050003000b000000050007000a00000004000c0004000b0004000100080002000000000004000b0004000c0030000180050005000e00000004000a0004000a00040300000800020002000000040008000500070004000000040009001400018005000700090000000600040006000000b40001801000018004000a000400080004000a001400018004000a000500050009000000040001000c00018008000200000000003000018004000b000600040005000000050003000200000004000a0004000b000500060019000000050006001200000028000180040001000500070000000000080002000100000004000100050003000600000004000b001c000180080002000300000004000c0004000900050006000a0000000c00018005000700000000000400020018000180140001800400090004000c00050007000a000000c8051180c4050580540000802c00028008002700010000000800a1000500000008002201950000000800a10001800000080022014d0200000a000100ffffffffffff0000080003800400020010000380040002000400020004000200ec0300803c00028008002700020000000800a1000000000008002600ad1600000800a0000600000008002600501400000800a0001000000005001801130000000a0001000802110000010000a003038004000180640101803400018005000600010000000400010004000a00050007000000000004000b0004000b00050005000000000004000a00040009002c0001800500030009000000050006001400000004000b000500050007000000050003000600000004000a003000018004000c0005000700090000000500030009000000040001000500030004000000050003000400000004000b0024000180040008000500030002000000050003000e0000000400090004000c0004000800200001800400010005000700a3000000050005000f0000000800020003000000180001800500030005000000050003000000000004000b000400018048000180050006000b00000008000200020000000500070010000000040009000500070005000000040009000500050002000000050007006400000004000b0008000200020000000c00018008000200030000001c0001800500060014000000060004000400000004000a0004000a0004000200e00001803000018004000a000500050007000000050005000900000004000b00e6bb33aef594208d050005000c000000050003000b000000040009000800018004000900400001800800020000000000050006081f0000000400010004000800080002000600000004000b00040001000800020000000000060004000900000004000c002c00018004000c0004000c00040008000500030006000000050003000700000004000a00050006001200000024000180050006001600000004000b000500030001000000050003000300000004000a001400018004000800060004000000000004000800380001803400018004000900060004005408000004000800050003000e000000040009000800020000000000050006000600000004000b003c0001800c00018005000700040000002c00018004000900050007000900000004000a0004000c00080002000200000004000a000500030007000000dc0001803400018004000c000400080004000100040001000500070008000000050006000d00000004000a00040008000400080004000b003400018004000900050006001100000004000b00060004000200000004000a0006000400ffff000006000400ff0000000400080014000180050007000900000004000b000400080010000180040001000400090004000c000c00018004000a00040009000c000180050007000800000028000180050006000300000008000200020000000500070007000000050005000200000004000b000c0001800400090004000b00800100802c01038004000200c80001802800018004000100040009000600040003000000050005000f00000004000c00050006000600000010000180050003000600000004000c001800018005000700fc0000000400080006000400050000001400018004000c0004000b00050003000a000000100001800500070008000000040009002c000180050003000c0000000400080004000a000800020002000000050006001900000005000600040000002400018004000c000500070005000000050007008000000004000b000400010004000100500001803000018006000400340a000005000500040000000400010008000200040000000400080004000800050005000f0000000c00018004000b000400010010000180060004004800000004000b000400020004000200040002004400028008009f00070000000800270000000000080022016402000008002700030000000800a1000300000008009f0003000000080026006c090000080022019e0100000a000100ffffffffffff00000a000600c112ae61b3fc41d921d1fc235d14f4d3cfd2d5ac31d13fd3d36d07fd1847fb553fb74b367fbdd04a9edd3ec8f5a084f1dbaf700872b7f224c44050bb42e81989f6fb5806bbc8996a52ff36ff854c28a84fc8be48b22989793fe613993d03ed172ecfaab10edf98ebd5817c0d178b8bfca869cbf73d97911420c10138dc5ea207ba5c8bfbac2c17f7387dbe27e65b25f74210bd099852f2776cc2b84b40de853601baa80b7aba96227f2b608431c8ed0860e3ffabe0476fc43f"], 0x1a14}, 0x1, 0x0, 0x0, 0x44080}, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x9) (async, rerun: 32) sendto$inet6(r7, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, 0x0, 0x0) (async) sendmsg$netlink(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)=ANY=[@ANYRES16=r4], 0x18}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000080) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0042006e657464657673696d3000000d0087006c325f64726f707300000000050083000000527d0e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300010000002e50ee6e5a257679fc907488de5fac78e381abc35d71a7c6507cf17f48e8e19f3c1d52f8dab7b70ab97c5b56b0b371cbaa8ea08f8594cf84faf728066893ca3fd9a8853216f0acd30ba2e9350c150a56a6cbe1f6eef21a8ed92e1fe2e634dfa79c8eb78a5792e5f9da8b2dfa7124b6ad2f5d"], 0x200}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async, rerun: 32) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async, rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="811068000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbef7, 0x10, r0, 0xce2a3000) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 3.75368909s ago: executing program 2 (id=8850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010025bd7000fcdbe82596211b38819486e6cd00000000", @ANYRES32=0x0, @ANYBLOB="0021040002240000140003006261746164763000000000000000000008000400d70000001c0016801800018014000b0007000000000000000100000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010025bd7000fcdbe82596211b38819486e6cd00000000", @ANYRES32=0x0, @ANYBLOB="0021040002240000140003006261746164763000000000000000000008000400d70000001c0016801800018014000b0007000000000000000100000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) 3.451513639s ago: executing program 4 (id=8851): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x47) syz_emit_ethernet(0x10ae, &(0x7f00000011c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00be00", 0x1078, 0x6, 0x0, @local, @local, {[@srh={0x11, 0x2, 0x4, 0x1, 0x0, 0x60, 0xa, [@loopback]}, @hopopts={0x16, 0x204, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @padn, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x10}}, @generic={0x69, 0x1000, "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"}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x8000}, @window={0x3, 0x3, 0x3}, @window={0x3, 0x3, 0x4}, @generic={0x0, 0xc, "2487920d85eec745fc2e"}]}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104d0000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000002280)={0x1060, 0x0, 0x5, 0xd01, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x6}, 0x3, 0x6, 0x1800, 0x81, 0x1b, 'syz0\x00', "c67d26ce430887103f1b62a2ba9af99a25c45f8ffd18daccecfcc1e974a2d1de", "87d22a7f896b444872322d03aa3b7e02957d232b610b795957abf0fe0c010fd1", [{0x7, 0x8, {0x2, 0x99d}}, {0x0, 0x5, {0x2, 0xd37}}, {0xaa, 0x400, {0x2, 0x3}}, {0x7, 0x9e, {0x2, 0x3}}, {0x80, 0x0, {0x3, 0x9}}, {0x6, 0xdac5, {0x1, 0x3}}, {0x0, 0x3528, {0x1, 0x9}}, {0x4, 0x0, {0x1, 0x1}}, {0x7, 0x6f66, {0x0, 0x6}}, {0x5, 0x3, {0x2, 0xcbf}}, {0x0, 0x4, {0x2, 0x9}}, {0x6, 0x5, {0x2, 0xc}}, {0x7fff, 0x1, {0x0, 0x1}}, {0x0, 0x4c, {0x1, 0x3}}, {0x100, 0xa8, {0x1, 0x4}}, {0x0, 0x4, {0x1, 0x9}}, {0x9, 0x7fff, {0x2}}, {0x2, 0x7, {0x3, 0x6}}, {0xfffa, 0xcbf3, {0x2}}, {0x3, 0x9, {0x1, 0xfffffff8}}, {0x4, 0x2, {0x0, 0x5}}, {0x7, 0x640, {0x3, 0x8001}}, {0x1e, 0x2, {0x0, 0x8001}}, {0x8, 0x0, {0x1, 0xfffff90e}}, {0x2, 0x81, {0x0, 0x8}}, {0x40, 0xfff, {0x1, 0x1}}, {0x3, 0xfd40, {0x2, 0x8001}}, {0xf, 0x4, {0x2, 0x6}}, {0xccb, 0x52ec, {0x2, 0x4}}, {0x0, 0x56f9, {0x2, 0x6}}, {0x90, 0x9, {0x1, 0x4af}}, {0x2, 0x9, {0x3, 0x80000001}}, {0x8, 0x9, {0x1, 0xcbe}}, {0x6, 0x7, {0x2, 0xe0b}}, {0x2, 0x3ff, {0x0, 0x4}}, {0x3, 0x7, {0x1, 0x3}}, {0x8, 0xe4, {0x3, 0x7f}}, {0x1f08, 0x8, {0x2, 0x7f}}, {0x0, 0x7, {0x0, 0x5}}, {0x0, 0xd52, {0x3, 0x40}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x1, 0x6, 0x3, 0x101, 0x14, 'syz1\x00', "ffb71b9bbcbabe3e5c0911d6a6857f0970505f7b4ebd688983bfcc9f7da2f0fe", "03ae637416052459a15800dbc1c85e103b0dcbf85a472dc644cba96577443496", [{0x6, 0xc, {0x1, 0x52}}, {0xb, 0x6, {0x2, 0x1}}, {0xfff7, 0x5, {0x3, 0xb}}, {0xf001, 0x3, {0x2, 0x7}}, {0x7, 0x101, {0x3, 0x5}}, {0x9, 0x7f, {0x2, 0x1ff}}, {0x7, 0xa33, {0x0, 0x40}}, {0x9, 0xf6a, {0x3, 0x7}}, {0x1, 0x3, {0x2, 0x9}}, {0x3, 0x5, {0x3, 0x9}}, {0xb, 0xa9e, {0x3, 0x2}}, {0xf5f, 0xeae2, {0x3, 0x9}}, {0x3, 0x4, {0x3, 0x2}}, {0x9, 0x9, {0x1, 0xffff7fff}}, {0x4, 0x5, {0x3}}, {0x0, 0x8, {0x0, 0x6}}, {0xf9fd, 0x400, {0x3, 0x4}}, {0xc6b, 0x3, {0x1, 0x3}}, {0x6, 0x1, {0x0, 0xff}}, {0x6, 0x0, {0x3, 0x1}}, {0x5, 0x6, {0x3, 0x6067845}}, {0x1, 0x4, {0x1, 0x80000000}}, {0x1, 0x0, {0x1, 0xd7fc}}, {0x8, 0x401, {0x2, 0xbc}}, {0x9, 0x7, {0x1}}, {0x3, 0xff, {0x2, 0x26}}, {0x5, 0xe54c, {0x3, 0x3}}, {0x8a, 0x200, {0x3, 0x401}}, {0xd, 0xd, {0x1, 0x3}}, {0x1, 0x2, {0x2, 0x8}}, {0xb0e, 0x3, {0x2, 0x3}}, {0x2, 0x2, {0x2}}, {0x1, 0x800, {0x1, 0xb5d2}}, {0x5, 0x8, {0x0, 0x5}}, {0x1ff, 0x1000, {0x3, 0x9}}, {0x1000, 0xc3, {0x1, 0x1}}, {0x8, 0x81, {0x2, 0xd00b}}, {0x2, 0xdf48, {0x0, 0x6}}, {0x2, 0x9, {0x1, 0x8}}, {0x8}]}}}, {{0x254, 0x1, {{0x2, 0xfffffffa}, 0xff, 0x8, 0x9a6, 0x6, 0x22, 'syz1\x00', "c70d0b8f01e10c1ad245d2155e3e00f8d08c04dced111766858c8e3878e5537f", "af190f003f2e087dda4505894b7584d10a9046a11b2c2743adf468774e4104b9", [{0x2, 0x2, {0x3, 0x8}}, {0xe, 0x0, {0x2, 0x4}}, {0x1, 0x775, {0x2, 0x1}}, {0x9, 0x101, {0x2, 0x6}}, {0x7, 0x1, {0x0, 0x8}}, {0x1ff, 0xa3a, {0x0, 0x3}}, {0xd, 0x7, {0x0, 0x3}}, {0x5, 0x1, {0x2, 0x5}}, {0x5, 0x1, {0x5295ac03c67a8e6d, 0x7f}}, {0xf, 0x7e, {0x0, 0x6}}, {0x1, 0x5, {0x0, 0x7}}, {0x997, 0xf001, {0x2, 0xfffffff7}}, {0x0, 0x1, {0xc9b8909e89b1db24, 0x5}}, {0x8, 0x9, {0x2, 0x5}}, {0x8, 0x0, {0x3, 0xc4}}, {0x0, 0x8, {0x2, 0xfff}}, {0x2, 0xf9, {0x0, 0x3ff}}, {0x43a7, 0x1, {0x0, 0x3}}, {0x7ff, 0xb7, {0x33cb3c83b0e49969, 0x80000000}}, {0x6, 0x4, {0x0, 0x4}}, {0x3, 0x100, {0x2, 0x9}}, {0x5, 0x4, {0x0, 0x7}}, {0x7, 0x3, {0x2, 0xfffffff0}}, {0x80, 0x4, {0x2, 0x6}}, {0x6, 0x2, {0x2, 0x6}}, {0x2, 0x307, {0x3, 0x4}}, {0xfff, 0x7f, {0x0, 0x2}}, {0x8, 0x2, {0x1, 0x3}}, {0x9, 0x2dda, {0x1}}, {0x9, 0x2, {0x1, 0x3}}, {0x0, 0x7, {0x0, 0x4}}, {0x400, 0xd, {0x3, 0x3}}, {0x8c, 0x21, {0x1, 0xe}}, {0x7, 0x81, {0x0, 0x4}}, {0x401, 0x80, {0x0, 0x4}}, {0x7, 0x5, {0x3, 0x1}}, {0x9, 0x9, {0x1, 0x9}}, {0x2, 0x3, {0x3, 0xcff}}, {0x7, 0x8, {0x0, 0x4}}, {0x3, 0x7, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x8, 0x4, 0x0, 0x5, 0x1c, 'syz1\x00', "eb83281dc51297fc322b09316724cf42d3c0cde232713563ca3f85cda937d4c4", "f8730d2f9e14d227c2d68fe745f4557a35d22e106545f899023bd8d087b3dd95", [{0x9, 0x9, {0x2}}, {0xca70, 0x69a, {0x1, 0xffffff52}}, {0x8fa, 0x7fff, {0x0, 0x24e}}, {0x1ff, 0x4, {0x2, 0xdfd5}}, {0x1, 0x5, {0x3, 0x25}}, {0x3, 0x1, {0x2, 0x400}}, {0x6, 0x9, {0x1, 0x7}}, {0x1, 0x101, {0x2, 0x2}}, {0x4, 0x3, {0x0, 0x7}}, {0xd, 0x4, {0x1, 0xce2}}, {0x12, 0xecb8, {0x7, 0x9}}, {0x0, 0x3, {0x1, 0x8}}, {0x2, 0x6, {0x0, 0x7}}, {0x8, 0xd, {0x2, 0x1}}, {0x9, 0xf5, {0x0, 0x7fff}}, {0x23b0, 0x4, {0x3, 0x5}}, {0x1, 0x8, {0x3, 0x81}}, {0x223, 0xd, {0x0, 0x7ff}}, {0x3, 0x9, {0x1, 0x5}}, {0x7, 0x1, {0x1, 0x4}}, {0x38a, 0x8, {0x3, 0x2}}, {0xfff8, 0x5, {0x3, 0xffff0001}}, {0x0, 0x1000, {0x2}}, {0x2b1, 0x7, {0x945d1fae7406a890, 0x6}}, {0x81, 0x57bc, {0x2, 0x8}}, {0x0, 0x54c0, {0x3, 0x5}}, {0xfff, 0x8a7d, {0x17ef89a7e42e2f89, 0x10001}}, {0x8, 0x80, {0x1, 0x4a}}, {0x101, 0x2}, {0x2, 0x0, {0x2, 0x9}}, {0x5, 0x1, {0x1, 0x2dc}}, {0xba5, 0x3, {0x1, 0x8}}, {0xffff, 0x2, {0x2, 0x8}}, {0x3, 0x150, {0x0, 0x8}}, {0xfff, 0xf, {0x1, 0x7}}, {0x3, 0x5, {0x1, 0x80}}, {0x2, 0x5, {0x2, 0x7}}, {0x0, 0x400, {0x2, 0x1}}, {0xbf6, 0x5, {0x3, 0x8001}}, {0x1, 0xfc, {0x2, 0x1000}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x65, 0x1, 0xfff7, 0x8, 0x26, 'syz1\x00', "51c4310990d6083cccdbcbe5edc6ab156965a4eb4ba32bd006ecfa2ba244e55b", "d0549ecd9b6f7cb3896016b436282a979dd5373f807fe50a3a44bac5b2bcba80", [{0x49, 0x2, {0x0, 0x2}}, {0x2, 0x95f, {0x1, 0xf5b9}}, {0x1, 0x100, {0x3, 0x7}}, {0x9, 0xa429, {0x2, 0x4}}, {0x8, 0x6, {0x2, 0x5}}, {0x9, 0x0, {0x0, 0xa}}, {0xa, 0x7ae0, {0x2, 0x5}}, {0x1, 0x5, {0x3, 0x1}}, {0x8000, 0x1, {0x3, 0x1ff}}, {0x8, 0xf6a2, {0x0, 0x557b30b4}}, {0x9, 0x400, {0x1, 0x8}}, {0x8, 0x2, {0x1, 0xb440}}, {0x9fe, 0x1, {0x3, 0x7}}, {0xf, 0x403d, {0x1, 0x4}}, {0xdf, 0x6, {0x0, 0x9}}, {0x0, 0x1ff, {0x1, 0xf5}}, {0xc8e8, 0x0, {0x1, 0x8f0}}, {0x9, 0x2, {0x0, 0xe25}}, {0xbb3, 0x6, {0x1, 0x3f}}, {0x4, 0x3, {0x2, 0x3}}, {0x2, 0x3, {0x1}}, {0x7, 0x5, {0x3, 0x2}}, {0xf, 0x4, {0x0, 0x4}}, {0x4, 0x300, {0x0, 0xffff8001}}, {0x848d, 0x3, {0x3, 0x1}}, {0xb, 0x1, {0x0, 0x81}}, {0x7, 0x9, {0x3, 0x2}}, {0x0, 0x2, {0x1, 0x5ba}}, {0x9, 0xa, {0x1, 0xad67}}, {0x5, 0x7ee5, {0x0, 0x2}}, {0xe43, 0xa, {0x2, 0x8}}, {0x6, 0x8000, {0x2, 0x5}}, {0x6, 0x9, {0x3, 0x3}}, {0x3, 0x6d, {0x0, 0x8000}}, {0x5, 0x6, {0x2, 0x9}}, {0x2, 0x0, {0x0, 0x2}}, {0x200, 0x5, {0x3, 0x7ff}}, {0x200, 0x9, {0x0, 0xe1e}}, {0x5, 0x4, {0x0, 0x8000}}, {0x92f, 0x7, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x3ff}, 0xff, 0x3, 0x4, 0x2, 0x1b, 'syz0\x00', "3e6a26e66769ba3dc6bad5982d88e102af8e3157dfdfdc77c886332c1914ffaf", "a6c8c41dd42a8fdd90c46040de61725e7f53f2e3deae75fd6cb8e1fc8234150a", [{0xff, 0x1, {0x2, 0x4}}, {0x5, 0x6, {0x3, 0x6}}, {0x7ff, 0x7, {0x1, 0x7}}, {0x2, 0x9, {0x2, 0x1}}, {0x5, 0x3, {0x2, 0xfffffeff}}, {0xc6da, 0x8001, {0x0, 0xfffffff8}}, {0x8bd, 0x34, {0x3}}, {0x9, 0x1, {0x2, 0xe14}}, {0x8, 0x9, {0x1, 0x4}}, {0x5, 0x40, {0x3, 0x8}}, {0xe, 0x0, {0x1, 0x101}}, {0x0, 0x8, {0x2, 0x9}}, {0x6, 0x2, {0x0, 0x7b2}}, {0x6, 0x4, {0x3, 0x80000001}}, {0x2, 0x4, {0x3, 0x7ff}}, {0xb, 0x7, {0x3, 0x3}}, {0x8, 0x9, {0x0, 0x3}}, {0x2, 0x1, {0x2}}, {0x4, 0xfff, {0x0, 0x3}}, {0x3, 0x6, {0x3, 0x7fffffff}}, {0x3, 0x8, {0x1}}, {0x8, 0x4, {0x1, 0x7}}, {0xfffc, 0x6, {0x2, 0xfffffffe}}, {0x9, 0x8, {0x2, 0x9}}, {0x7f, 0x0, {0x0, 0x3}}, {0x4, 0x7af, {0x0, 0xd3}}, {0x1ff, 0x5, {0x3, 0x5}}, {0x9, 0x9, {0x2, 0x10001}}, {0xe505, 0x5, {0x0, 0x9}}, {0x4, 0x1, {0x1, 0xe}}, {0xf2, 0x200, {0x1, 0x10}}, {0x80, 0x1, {0x1, 0x101}}, {0x9, 0x1, {0x3, 0x4}}, {0x2c4b, 0xb, {0x1, 0x4514}}, {0x10, 0x82e, {0x2}}, {0x3, 0x1000, {0x3, 0x7}}, {0xc1b, 0x1, {0x3, 0xfff}}, {0x6, 0x8, {0x1, 0xfffffffd}}, {0x8, 0x3, {0x3, 0x9}}, {0x9, 0x5b, {0x0, 0x8000}}]}}}, {{0x254, 0x1, {{0x2, 0xd58a}, 0xb, 0x0, 0x92, 0x6, 0xd, 'syz0\x00', "abbfa050c7f98555333adfdae3cbc4950a2f01f9a7d6b2ade2212daf65ba7ac5", "5211f677c828223f98226f0ab57426f4ba86cad90add62b682d6bb95e9d5af8c", [{0x7, 0xf5, {0x0, 0xe}}, {0xf82, 0x0, {0x0, 0x9}}, {0x7ff, 0x9, {0x1, 0x6d00}}, {0x4, 0xffff, {0x3, 0x17}}, {0xfff9, 0x8, {0x0, 0x8}}, {0x0, 0x9, {0x0, 0x1}}, {0xfff0, 0x9, {0x3, 0x3}}, {0x10, 0x6, {0x3, 0x4}}, {0x8000, 0x4, {0x2, 0x3c6b99bd}}, {0xf, 0x0, {0x1, 0x8}}, {0x5, 0x7, {0x3, 0x7}}, {0x1, 0x8, {0x0, 0x8}}, {0x2, 0x6, {0x3}}, {0xcd6, 0x7, {0x2}}, {0x3a18, 0x6, {0x0, 0x3a}}, {0xf81f, 0xffff, {0x0, 0x8}}, {0xc953, 0x5, {0x1, 0x44f}}, {0xfffa, 0x9, {0x2, 0x5845}}, {0x1, 0x5a5, {0x2, 0x6}}, {0x5, 0x81, {0x1, 0x7}}, {0x8, 0x8, {0x0, 0x3}}, {0x40, 0x6a95, {0x2, 0x800}}, {0x8, 0xa65, {0x0, 0xff}}, {0x3, 0x2, {0x1, 0x4}}, {0xa6, 0x6, {0x2, 0x8001}}, {0x4, 0x2e55, {0x2, 0x7}}, {0x7, 0x0, {0x2, 0x6}}, {0x3, 0x8, {0x3, 0x1}}, {0x3, 0x2, {0x2}}, {0xca0d, 0x7, {0x1, 0xfffffff7}}, {0x4000, 0x6, {0x2, 0x9}}, {0x1, 0x7f, {0x0, 0x4}}, {0x3, 0x6, {0x3, 0x10000}}, {0x7, 0x7f, {0x2, 0x3}}, {0x0, 0x8, {0x0, 0xa}}, {0xffff, 0x7, {0x1}}, {0xd, 0x7f, {0x3, 0x3}}, {0xffff, 0xfb3f, {0x0, 0x2}}, {0x3, 0x23, {0x0, 0x81}}, {0x2, 0xe5, {0x9aa3afe68a267483, 0x3}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x2004c010}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000004}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="5e02000000000000c2040000000705020000c204fffffffa07313659575b3487cf63c42963c4d59b48f7967bdf4fdaf306adaf5f887fe41532e901ca03c7b6a11b8db64aa59bdab9d010c184ac7bf7619e52cac1a0bf628f2b6992093737a21a771b68484815e1672ec2da3561154782158c36da186e0db005eda74ea5f4b1a6f97d8e9e020000000d138cf948a7149cf1a6a78cf3d75bbe5c59cff897db7339b3b97c15c2f6d458baf4831a182840286f804338516bffafc814"], 0x18) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) unshare(0x68040200) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES64=r5, @ANYRES16=r7, @ANYRES8=r7, @ANYRES8=r0, @ANYRESOCT=r9, @ANYRESDEC=r6, @ANYRESDEC=r9, @ANYRES16=0x0, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, &(0x7f0000000140)=0x101, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) 3.326468131s ago: executing program 2 (id=8853): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009a00)=@newtfilter={0x33ac, 0x2c, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {0xfff3, 0x4}, {0x3, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x9d, 0x23}}, @filter_kind_options=@f_basic={{0xa}, {0x3374, 0x2, [@TCA_BASIC_POLICE={0x4c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000007, 0x1, 0xa, 0x400, {0xff, 0x2, 0x1a9a, 0x9, 0x0, 0x5de}, {0x2, 0x1, 0xfccd, 0x4, 0xc2ef, 0xed}, 0xe, 0x7, 0xa}}]}, @TCA_BASIC_ACT={0x154, 0x3, [@m_sample={0x80, 0x1b, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xffff5667, 0x0, 0x8, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4b, 0x1, 0x5, 0x4, 0x5}}]}, {0x12, 0x6, "7e482c541ebbcf5344a6d56c8f68"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xd0, 0xb, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xce11, 0x4, 0x8d, 0x81}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x52, 0x5, 0x66c5f8e5, 0xe957}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfffffc00, 0x5, 0x40, 0x4d}, 0x1}}]}, {0x4b, 0x6, "f163aed99f6e45b217990619551a848357447986ee31b4c22f783bbb574eb60d31cd110666040819c80610ba74f1dedf47bc585606dc08a4abf5bcf6d9735510ad5a91152f0427"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BASIC_EMATCHES={0x125c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x92d1, 0x7, 0xa712}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x8001}, {0x800, 0x2, 0x0, "f1fb"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0x7d07}, {0x8, 0x4, 0xe0000, 0xc}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xb0, 0x8, 0x9}, {0x3, 0x1, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x1088, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x49c, 0x2, 0x3}, {0xe, 0x0, 0x17c8ee4cc4aef8c5}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff0, 0x3, 0xb8}, {0xfffffe01, 0x4, 0xa523, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x9, 0x4, 0xd}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="2ca845106fbd23", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="869b464dd0a4f7b14717"]}]}}, @TCF_EM_CONTAINER={0x100c, 0x5, 0x0, 0x0, {{0x3, 0x0, 0x8}, "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"}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0xfffc, 0x9, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x7f, 0x4, 0xf}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x88, 0x2}, {0x8, 0x7}}}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x83, 0x2, 0x8}, {0xd4a1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x9}, {{0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x1ff}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xa06b, 0x2, 0x81}, {0xfffe, 0x6, 0x2, "65deda670a0f"}}}, @TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x7}, "ab3b6b41cb450eb673d2f22b3975c9de623044a9e030a5f19d65d8aa1facce769996f4d3d5"}}]}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x3, 0xff}, {0x4, 0x5, 0xbb6, 0x306d}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x56, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89, 0xf2, 0x1}, {0xf8, 0x62, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f, 0x6}, {0x1, 0xe6, 0x2}}}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="0a334b65b795bb31", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="76cf31981adad35a34db", @TCF_META_TYPE_VAR="9e779faa0feb0eafdd"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="b2d4f42e6f21b279839c", @TCF_META_TYPE_VAR="36661cbb07152b"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8001, 0x3, 0x9}, {0x6, 0xe391, 0x8, 0x4}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x4d}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x922e}}]}, @TCA_BASIC_ACT={0x12ac, 0x3, [@m_ctinfo={0x118, 0x1e, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffffffff}]}, {0xdc, 0x6, "d6e8956c42fc0bdbd4ac81c7dae6fb872d8be7c92c0f493965d619e352d2102e12fcd40fec8c334dfc3e22127b638cc4259934e5cd60dadd23c5a992e27199ac8105261ab3c39f93274d878e9541c79739711c19525ac828f523e17e84c2d229ee8a33d57e15de150e921275b94a3b93e1ac09895913a71c50cff6f24d28ebdc75b4b84471f44d25f642c03ef01466934706ce341f8c3cba609d92e63f4b4aec96e602af990d3a808333be5f2e7ecd5a74d0a479a071164518d3a50c472c418aaea9d2798e51d8728d02d5f961e1c1baee294136103fde2a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x1044, 0x6, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7035590361d84631, 0x1}}}}, @m_sample={0xe0, 0x6, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0xa4, 0x6, "5cd486ba26d3fa8c8f70e2b8b3c9a3651fc101b2087ed8180f29eb8d3406f9fd2d40f8a65e95254487b67c2bd7d1dd19d86edaf9d00808d13f59998b20d0311a03de502939dfa2a5f8730593db0b3ec9e39cd18b2e227160f4eb54e6417d58af8e58457aa32d4904593d03d483b07c21b71eca242fc7b82a0c16d88430ab76a313a796b28bb05dc4ce0cb5e9cada2c6d8ece9d11b832d5d45cc312c5d3c70687"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x6c, 0x15, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0xb}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa}]}, {0xc, 0x6, "a09b6a6c88747100"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_POLICE={0xcb4, 0x4, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffe}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x80400000, 0xfff, 0x80000000, {0x1, 0x2, 0x4, 0x5, 0x4, 0x8}, {0x9, 0x0, 0xf801, 0x0, 0x5, 0x5}, 0x1, 0x9, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7fffffff, 0x7, 0x3, 0x1000, 0x1ff, 0x8000, 0x0, 0x5, 0x6, 0xfff, 0x683, 0x7, 0x78c, 0x7, 0x9, 0x1f, 0xffff, 0x0, 0x5, 0x7, 0x6, 0x5, 0x1, 0x2, 0x4, 0x8, 0xbc, 0xfd, 0x38000, 0xf, 0x7, 0xfffffc01, 0xe47e, 0xfffffffa, 0x3, 0x0, 0x9, 0x1, 0x4, 0x2, 0xf, 0x80, 0x6, 0x7, 0x7fffffff, 0x6, 0x1, 0xc, 0x4dff, 0x8001, 0x3, 0x0, 0x8, 0x61960f0, 0xc, 0xe, 0xff, 0x7, 0x17f1, 0x9, 0x1, 0xc, 0x0, 0xfffffed0, 0x7fff, 0x4, 0x9, 0xff, 0x516, 0x660, 0x2, 0x8, 0xffffc41f, 0x7, 0x2, 0x1, 0xecf8, 0xffffffff, 0x7, 0x5, 0x5, 0x4, 0x8, 0x1269, 0x5, 0x2, 0x2, 0xf, 0x11, 0x81, 0x3ff, 0x0, 0x1ff, 0x5, 0x8, 0xfffffffc, 0x4, 0x5, 0x4, 0xb, 0x6, 0xd4d, 0x23, 0x5, 0xfffffffa, 0x1, 0x7, 0x400, 0x8, 0x6183, 0xe, 0x4, 0x0, 0x3, 0xe68, 0x1, 0x3, 0x0, 0x5, 0x5, 0xdf, 0x0, 0x0, 0x9c9, 0x6, 0x5, 0x2, 0x2, 0x1000000, 0x395a, 0x5, 0x5, 0xb0, 0xb, 0xb2c, 0x5, 0x0, 0x3dc8, 0x2, 0x72e, 0x30be, 0x8, 0x10000, 0x81, 0x6, 0x2, 0xffffffff, 0x2, 0x3b9f, 0x2, 0x800, 0xfffffff4, 0x4, 0x8, 0x8, 0x5, 0x401, 0x7fffffff, 0x4, 0x200, 0x3, 0x400, 0x4, 0xb, 0x200, 0x9, 0x55, 0x8, 0x0, 0x10001, 0x1ff, 0x7ff, 0x3, 0xa, 0x2, 0x100, 0xb7, 0x3, 0x40, 0x1, 0x5, 0xb, 0x101, 0x9, 0xfffff0fb, 0xfff, 0x20000001, 0xfffffff9, 0x400, 0x23bff8d0, 0xd3b, 0x8, 0x0, 0x5, 0x20000008, 0x16503ca3, 0x4, 0x8, 0x9, 0xf019, 0x18000, 0x0, 0x3, 0xec, 0x1000, 0x4, 0x8, 0xfffffffb, 0x3ff, 0x2, 0x4, 0xb4, 0x1, 0x8, 0x0, 0x62dc6640, 0x7, 0x2d93, 0x10001, 0x0, 0x3, 0x2, 0x7, 0x3, 0x0, 0x8, 0xff, 0x3, 0x3, 0x100, 0x80000001, 0x7, 0x9, 0x2, 0x8, 0x6, 0x3000000, 0x6, 0xfffffffe, 0x7ff, 0xab7f, 0x1, 0x400, 0x0, 0xfffffff8, 0x2, 0x8, 0x69c6, 0x2, 0x1, 0x80, 0xe393, 0xa, 0x83, 0x7fffffff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb45d}, @TCA_POLICE_RESULT={0x8, 0x5, 0x44e0}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x401, 0x9, 0x1, 0x7, 0x564, 0x800, 0x400, 0x24000, 0x1, 0x2, 0x1, 0x2, 0x2, 0x5, 0x8, 0x400, 0x10001, 0x1, 0x4, 0x4, 0x5, 0x6, 0x2, 0x17b, 0x1, 0x0, 0x3, 0x9, 0x714, 0xffff3b21, 0xfffffbff, 0xe, 0xfffffffc, 0xa5b, 0xd339, 0x7, 0x3, 0x0, 0x6, 0x81, 0x33, 0x0, 0x4, 0xfffffff7, 0xffffff01, 0x6, 0x4c, 0x2, 0x2, 0xfffffffb, 0xffffffff, 0x8, 0x5, 0x8, 0x4, 0x0, 0x1, 0x3, 0x8, 0x6931, 0x2, 0x88, 0x6, 0x1, 0x1, 0x5, 0x7fff, 0x2, 0x7, 0x3, 0xffffffff, 0x3, 0x8, 0x1, 0x7, 0x20, 0x6, 0x4, 0x5, 0x7, 0x0, 0xc624, 0x5, 0x1000, 0x74, 0xfffffffb, 0x300, 0x80, 0x51e5, 0x5, 0x8, 0x9, 0x0, 0x5, 0x5, 0xf, 0x9e72, 0x8, 0x2, 0xb, 0x0, 0xfff, 0x1, 0x5, 0x800, 0x8, 0x6, 0x9, 0xfc, 0x87b, 0xffff, 0xa1, 0x6, 0x57, 0x9, 0x1, 0x7, 0x6, 0x8000, 0x3, 0x7, 0xff, 0x7, 0x6, 0xc29f, 0xad40, 0x4, 0x7, 0x10000, 0x2, 0x5, 0x7, 0x3, 0x5, 0x5, 0x7fffffff, 0xa, 0x9000000, 0x9, 0x4, 0x9, 0x40, 0x0, 0x3, 0x7, 0x3, 0x80000001, 0x4, 0x5, 0xffffffa7, 0xb, 0x3, 0x4, 0xd0d, 0x0, 0x80000001, 0x9, 0x64c, 0xfffffffa, 0xe9, 0x7, 0x3, 0xffffffff, 0x9, 0xb, 0x1, 0x5, 0x1, 0x400, 0xb903, 0x5, 0xd9, 0x0, 0x8, 0x7, 0x1, 0x2, 0x8, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x401, 0xfffffffc, 0xffff, 0x9, 0x6, 0x0, 0xffffff15, 0xfe, 0x400, 0xd, 0x8, 0x7, 0xe, 0x7, 0x2, 0x5, 0x5, 0xc, 0x401, 0xd93, 0x7e0, 0x4ef8, 0x4, 0x3ed9, 0x4, 0x1, 0x6, 0x8, 0x2, 0x1, 0xe5e0, 0x7, 0x97, 0x4, 0x8, 0x5a40, 0x0, 0xe1f1, 0x12000000, 0x6, 0x1, 0x7, 0xe, 0x3, 0x6, 0x2, 0x39b, 0x3, 0x12, 0xc, 0x98b, 0x3, 0x2, 0x1ff, 0x0, 0x5, 0xc5dd, 0x5, 0xf, 0x5, 0xff, 0x5, 0x8, 0xffffffff, 0x9, 0x4, 0x101, 0x7, 0x7ff, 0xf, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffff62a, 0x9, 0x4, 0xfffffff8, 0x38, 0xd, 0x7, 0x80, 0x7fff, 0xbe55, 0x2, 0x8f47, 0xa, 0xeff, 0xffffff01, 0x0, 0x8, 0x1, 0x4, 0x9, 0x9, 0x4, 0x0, 0x8, 0x58770545, 0x7, 0x10, 0x1ff, 0x4, 0x3, 0x10001, 0x4, 0x6, 0xfffffff9, 0xe578, 0xffff, 0x7ff, 0xfffffffc, 0x6, 0x7, 0x1ff, 0xe, 0x0, 0x0, 0x8, 0xc, 0xfffffffe, 0x800b, 0xab6, 0xffffffa0, 0x6, 0x4, 0x50, 0x4, 0x80000000, 0x8, 0x8, 0x7, 0xfffff0e9, 0x5, 0x1, 0xe, 0xfffffff7, 0x0, 0x6, 0x288, 0x3ff, 0x5, 0xf10, 0x3, 0x4, 0x3, 0x5, 0x2, 0xffff, 0x7, 0x3, 0x9, 0x6, 0x1, 0xbfd, 0x1515, 0x5, 0x2, 0xe95, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x7f, 0xffffff7a, 0x4f7a, 0x100, 0x7, 0x3ff, 0x4, 0x6, 0x8, 0x0, 0x15a00, 0x1, 0x101, 0x6, 0x6, 0x29, 0x200, 0x7, 0x3, 0x4, 0x1, 0x8000, 0xa, 0x4, 0x8000, 0x8466, 0xc3e, 0x7d4685ca, 0x0, 0x70ad, 0x5, 0x101, 0x4, 0x7fff, 0x8, 0x80, 0x0, 0xc6, 0x3, 0xf24, 0xf, 0x6, 0x7, 0x401, 0x5, 0x9, 0x3, 0x7, 0xf28, 0xb, 0x3, 0x7, 0xfff, 0x48, 0x7d5a, 0x7, 0x8, 0x1, 0xf0, 0xc, 0x735ccd76, 0x5, 0xffffff01, 0x2, 0x1, 0x8000, 0xfff, 0x8, 0x1, 0x9, 0x2, 0x9, 0x1000, 0x7, 0x5, 0x7, 0xfffffffd, 0x9, 0x7, 0x5, 0x3, 0x2, 0x3, 0x9, 0x1d69c7eb, 0x2, 0x1, 0x10, 0xfffffff8, 0x1000, 0xa8a, 0x9, 0x0, 0x1, 0x1, 0x6, 0x3, 0x7, 0xa, 0xc, 0x0, 0x0, 0x3ba, 0x4, 0x200, 0x401, 0xc, 0x3d1, 0x1000, 0x1, 0x57b, 0x40, 0xfffff6fb, 0xfffffffc, 0x8, 0x4, 0x2, 0x4, 0x4b, 0x8, 0x100, 0x401, 0x6, 0x10000, 0x80000000, 0x1, 0x5, 0xde, 0x8, 0x7, 0xffffffff, 0xbfaa, 0x6, 0x8, 0x3, 0x5, 0x800, 0xc, 0x2, 0x1, 0xc2, 0x1, 0x8, 0xffffffff, 0x4, 0x0, 0x0, 0x8, 0x6, 0x1, 0x4, 0x2, 0x9, 0x6, 0x9, 0x9, 0x6, 0x80000000, 0x8, 0xa, 0x400, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3f}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xfff3}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x7}}, @TCA_BASIC_EMATCHES={0x4}]}}]}, 0x33ac}, 0x1, 0x0, 0x0, 0x805}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0x64}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xffffffffffffff08}]}}, @TCA_RATE={0x0, 0x5, {0xe, 0x7}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x80000001}, @TCA_RATE={0x0, 0x5, {0x4, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400cc}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0xfffe, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000000180)=0x1, 0x4) r8 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x40d4, 0x4) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=0x0, @ANYRESDEC=0x0], 0x48}}, 0x64980) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec072, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) 3.282442103s ago: executing program 3 (id=8854): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) recvmmsg$unix(r3, &(0x7f0000005540)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/171, 0xab}], 0x2}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/240, 0xf0}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/20, 0x14}, {&(0x7f0000001ac0)=""/253, 0xfd}, {&(0x7f0000001bc0)=""/88, 0x58}, {&(0x7f0000001c40)=""/12, 0xc}], 0x6, &(0x7f0000001d00)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001e00)=""/81, 0x51}, {&(0x7f0000001e80)=""/193, 0xc1}], 0x2}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000002080)=[{&(0x7f0000002040)=""/41, 0x29}], 0x1, &(0x7f00000020c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000003380)=[{&(0x7f0000002240)=""/142, 0x8e}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/110, 0x6e}], 0x3, &(0x7f00000033c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)=""/146, 0x92}, {&(0x7f0000003580)=""/179, 0xb3}, {&(0x7f0000003640)=""/38, 0x26}, {&(0x7f0000003680)=""/251, 0xfb}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/129, 0x81}, {&(0x7f0000004840)}, {&(0x7f0000004880)=""/229, 0xe5}], 0x8, &(0x7f0000004a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000004b00), 0x6e, &(0x7f0000005180)=[{&(0x7f0000004b80)=""/45, 0x2d}, {&(0x7f0000004bc0)=""/15, 0xf}, {&(0x7f0000004c00)=""/177, 0xb1}, {&(0x7f0000004cc0)=""/248, 0xf8}, {&(0x7f0000004dc0)=""/218, 0xda}, {&(0x7f0000004ec0)=""/160, 0xa0}, {&(0x7f0000004f80)=""/117, 0x75}, {&(0x7f0000005000)=""/100, 0x64}, {&(0x7f0000005080)=""/217, 0xd9}], 0x9, &(0x7f0000005240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000005300)=@abs, 0x6e, &(0x7f0000005480)=[{&(0x7f0000005380)=""/245, 0xf5}], 0x1, &(0x7f00000054c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x8, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r4, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000305fcffffff0007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000610000024001280090001007866726d0000000014d9df1297057394e1000000080001000200000008000a00", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.051572066s ago: executing program 3 (id=8855): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}], 0x2}, 0xc854) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0xffffffff000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x22f8, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x22c4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x226c, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cf4, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x84a, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x8000, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x130, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x22f8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 1.942288743s ago: executing program 2 (id=8857): socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000000240)) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfcf, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xebc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x101, 0x4d, &(0x7f0000000340)=""/77, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xf, 0xbd18, 0x100}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[{0x3, 0x3, 0x6, 0xb}, {0x2, 0x2, 0xe, 0x8}, {0x4, 0x5, 0x9}, {0x3, 0x1, 0xe, 0xa}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c00028006002f5c26dde6b40db27a01", @ANYRES32=r1, @ANYBLOB="0a000200aaaaaaaaaa4400000a000100aaaaaaaaaa180000"], 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.801838125s ago: executing program 3 (id=8858): mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="8918edbb27657cdf36d4793757defe1bd09791d3865aa0746374a86a46404e2969e90b29768e46bdddad899f77cf1fae7827c23883fb05b76675806cb5c3890ae71e32f4d7bfdcf1e5b9baeffa732ef5ca953102ac32943a6344374a0631f47d92626a", 0x63}, {&(0x7f00000001c0)="8d3061c67d2256", 0x7}, {&(0x7f0000002b00)="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"/4096, 0x1000}], 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e20, 0x4e, @dev={0xfe, 0x80, '\x00', 0x29}, 0xb4e1}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b27ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd000"}, 0xd8) unshare(0x20040600) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x8d0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000480)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000040)={r8}) 1.403763567s ago: executing program 3 (id=8859): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x16, 0x8, 0x5, 0x27, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_key={0xb, 0x9, 0x248, 0x0, "399a8331335c5e7637934c7d90f484ff5deb0594d830a4b485e769f0886e9c6bd08bc383028f7d09dbb22646dc9ed2c5bc36661775a0ea3bcbc566f3401d5aca63f4c302c6081b414f"}, @sadb_x_sec_ctx={0x10, 0x18, 0x5, 0x7, 0x71, "baab72f7d765428b89b91cd98d21a9150cf9bdd55e2fd70108c99e3d9d24e1adce268aacbe0b84c86450422d13dd8f4ec2ea4643d1d6e1633482f9cbf8e206be69f5e137843b12ea1afb3970abe04d046fa89e8afa52e9bcaf780ce923033f1e91f032018f399e92e98c7c6f1684e16950"}, @sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0xf6, 0xc9, 0x3, 0x20000001}, @sadb_ident={0x2, 0xb, 0x1, 0x0, 0x100000001}, @sadb_key={0x1, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x1b}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd26, 0x3502}, @sadb_sa={0x2, 0x1, 0x4d2, 0x2, 0x9, 0x30, 0x4, 0x60000001}]}, 0x138}}, 0x8001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001700)={'ip6gre0\x00', &(0x7f0000001680)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x6, 0x5, 0x7c, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x20, 0x20, 0x7fffffff, 0xfa62}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x22, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x3, 0x1, 0x5, 0xa, 0x7, 0xffffffffffffffff, 0x10}, @cb_func={0x18, 0xb}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000640)='GPL\x00', 0xfffffffc, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000017c0)=[0x1, r0, r0, 0xffffffffffffffff, r0, r0], &(0x7f0000001800)=[{0x2, 0x4, 0xb, 0x2}, {0x2, 0x1, 0x1}], 0x10, 0xe}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) pipe(&(0x7f00000000c0)) (async) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x16, 0x8, 0x5, 0x27, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_key={0xb, 0x9, 0x248, 0x0, "399a8331335c5e7637934c7d90f484ff5deb0594d830a4b485e769f0886e9c6bd08bc383028f7d09dbb22646dc9ed2c5bc36661775a0ea3bcbc566f3401d5aca63f4c302c6081b414f"}, @sadb_x_sec_ctx={0x10, 0x18, 0x5, 0x7, 0x71, "baab72f7d765428b89b91cd98d21a9150cf9bdd55e2fd70108c99e3d9d24e1adce268aacbe0b84c86450422d13dd8f4ec2ea4643d1d6e1633482f9cbf8e206be69f5e137843b12ea1afb3970abe04d046fa89e8afa52e9bcaf780ce923033f1e91f032018f399e92e98c7c6f1684e16950"}, @sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0xf6, 0xc9, 0x3, 0x20000001}, @sadb_ident={0x2, 0xb, 0x1, 0x0, 0x100000001}, @sadb_key={0x1, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x1b}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd26, 0x3502}, @sadb_sa={0x2, 0x1, 0x4d2, 0x2, 0x9, 0x30, 0x4, 0x60000001}]}, 0x138}}, 0x8001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001700)={'ip6gre0\x00', &(0x7f0000001680)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x6, 0x5, 0x7c, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x20, 0x20, 0x7fffffff, 0xfa62}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x22, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x3, 0x1, 0x5, 0xa, 0x7, 0xffffffffffffffff, 0x10}, @cb_func={0x18, 0xb}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000640)='GPL\x00', 0xfffffffc, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000017c0)=[0x1, r0, r0, 0xffffffffffffffff, r0, r0], &(0x7f0000001800)=[{0x2, 0x4, 0xb, 0x2}, {0x2, 0x1, 0x1}], 0x10, 0xe}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) (async) 1.403399392s ago: executing program 2 (id=8860): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000022c0)={0x0, 0x3}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002900)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x4800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r9, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x4810) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800e20003000000000000002a12dc5054507582864732ba22b03f8f0ec588f3002d076a080b1f9a8282b9a71bdf98bc3ff2aa2f5030271e1c3ae43cbee11bf9b6053aca4f8794e0fabac7134b1e8e484784114ab461232f476cdc5d44951d1950d877d59629395a27e4a483c4e2083d5f91e797400f12701a5a1ef8d3a6c866ea1ada51478598237de8c8f40134579545363257f2b3c5a0ca18ccf795fcbc1dd2146ca4b056af16018b7b211f81d51ef1352872d06fe5d180ecad7e34", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.243596654s ago: executing program 1 (id=8862): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x85}, 0x94) ioctl(r0, 0x6106, &(0x7f0000000040)="8e2d06d74c8f39c0e676d992a73ead3bb0533e5bfbd06ecc9024bda3f88c6ee2d6e426a56b04dea39073a25bab6dab2c585aff0df24344c1cd21f3d653d4bc55b4d3911c51aada6b17c62a0281c6d78d4c0db98531de2899c4a70b244f2e02e7f3592421b15c250c4c290e89d8699c76206bc41ac8e8e6d743de28567748cdcb2da862fa3dafd6d36c94fa50cb3e96ddb641fa016233") 1.151539931s ago: executing program 3 (id=8863): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESOCT=r2], 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70b92a, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x57, 0x0}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x0, 0xfeffff7f00000001, 0x100, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x44004}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) ioctl$sock_ifreq(r0, 0x8925, &(0x7f0000000040)={'ip_vti0\x00', @ifru_hwaddr=@broadcast}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) 1.129251076s ago: executing program 4 (id=8864): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000072009fb3010000000000000007000000", @ANYRES32=r1, @ANYBLOB="08000100"], 0x20}}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x7f, 0x333bfa0c, {{0x1d, 0x4, 0x3, 0xf, 0x74, 0x65, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @loopback, {[@cipso={0x86, 0x40, 0x2, [{0x2, 0x10, "02acc705c4106e7de185ced8f59c"}, {0x6, 0x3, 'X'}, {0x0, 0x8, "6963b973b662"}, {0x5, 0xd, "0e8d9145c92f392cd1fe12"}, {0x5, 0x12, "d6e7d79e0f6daba476e317c3fd531c0d"}]}, @rr={0x7, 0x1f, 0x8b, [@rand_addr=0x64010101, @multicast2, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000000200"/20, @ANYRES32=r2, @ANYBLOB="00000000080800001c0012800b00010067726574617000000c00028008000700e00000010a000100bbbbbbbbbbbb0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket(0x2b, 0x80801, 0x1) poll(&(0x7f00000000c0)=[{r7, 0x1041}, {r6, 0x2187}], 0x2, 0x403) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x8000, 0x8, 0xc0b2, 0xffff, {{0x1e, 0x4, 0x2, 0x25, 0x78, 0x65, 0x0, 0xd5, 0x29, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x2c, 0xfd, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3b}}, {@private=0xa010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@rand_addr=0x64010100, 0xe5a6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x7d, 0x3, 0xf, [{@loopback, 0x8}, {@broadcast, 0x2}, {@multicast2}, {@rand_addr=0x64010101, 0x2}]}, @timestamp={0x44, 0x14, 0x7c, 0x0, 0x0, [0x6, 0x2, 0x7, 0x7ae2]}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0x2}, {0xfff3}, {0x2, 0x7}}, [{0x8, 0xb, 0x36}, {0x8, 0xb, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x404c811) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000002f8ff000000000900000085000000290000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000088000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r11, 0xe14393ba65cdfb2b, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) 976.713441ms ago: executing program 1 (id=8865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=r0], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) unshare(0x26020480) sendfile(r2, r3, 0x0, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) 848.186515ms ago: executing program 1 (id=8866): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x4, 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x4, 0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbfb}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbfb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\x00\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000000)=ANY=[], 0x40}, 0x20000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "077630915973ee81", "7f33602f12f69d36236df079a3163413", "bf60b32c", "89e06dc62325b584"}, 0x28) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "077630915973ee81", "7f33602f12f69d36236df079a3163413", "bf60b32c", "89e06dc62325b584"}, 0x28) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'veth0\x00', {'gretap0\x00'}, 0xd0c3}) 774.995356ms ago: executing program 1 (id=8867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) getgid() sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="bc989d2591ec493c1f34e194dea2df7b2e54c570d33304dd75345099b85b6f145a687fcf08c29b21303658a13f7740340a0d1f56f014bc734c028729edf1c3ace586f8252e87937dca25e2a7a7cd8760cacf3b08e7837762924b1dc3bba5f5416828fb8d00ca4a0b3f16b45bef92ef11e6de9cb06763157fbd247e78e50dc7f83003fc7c0cd8b88bb58c1a224c2d9b3396d6151bf40807ee4166e1546510af33e93e", 0xa2}, 0x1, 0x0, 0x0, 0x84}, 0xc004) 729.595578ms ago: executing program 1 (id=8868): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0xfffffffffffffffb, 0xb, 0x3}, 0x33}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f0002"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', r4, 0x29, 0x4b, 0x40, 0x2, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0xce, 0xffffffa1}}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r1, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000003125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) 664.107888ms ago: executing program 3 (id=8869): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@initdev, @initdev, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'erspan0\x00', r9, 0x8, 0x8000, 0x0, 0x0, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x6, 0x13, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x13}, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4, 0x2}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r10) 493.27156ms ago: executing program 1 (id=8870): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x145a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8003}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000000000000000000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) unshare(0x22020600) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r7 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r7, 0x0, 0x104) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000200)={0x200000c0, 0xfffffffa, 0x101, 0xb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010029bd700000000000022020000000000000200000088fdc013cea84054a7371e1d4bbb1bd33b017bd37c0aa4cce0090d344f0f65318dcadc7350dbc5c84a2d7e32d9c61cbea2e9cc4d979f9a4afb449f3c1cf1363470781"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) 50.725ms ago: executing program 2 (id=8871): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x60, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe2"}, &(0x7f0000000080)=0x68) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 0s ago: executing program 4 (id=8872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000010900010073797a3100000000200004801c0001800c0001007061796c6f6164000c000280080002400000de030900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r10}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r12, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 09/2026 [ 1036.530927][ T4361] Call Trace: [ 1036.530936][ T4361] [ 1036.530945][ T4361] dump_stack_lvl+0xe8/0x150 [ 1036.530978][ T4361] should_fail_ex+0x40c/0x560 [ 1036.531007][ T4361] _copy_to_user+0x31/0xb0 [ 1036.531037][ T4361] bpf_verifier_vlog+0x496/0x900 [ 1036.531071][ T4361] __btf_verifier_log+0xe2/0x140 [ 1036.531091][ T4361] ? __kvmalloc_node_noprof+0x53f/0x860 [ 1036.531120][ T4361] ? btf_parse_type_sec+0x517/0x2360 [ 1036.531146][ T4361] ? btf_new_fd+0x487/0xbb0 [ 1036.531172][ T4361] ? __sys_bpf+0xd2e/0xd90 [ 1036.531197][ T4361] ? __pfx___btf_verifier_log+0x10/0x10 [ 1036.531229][ T4361] __btf_verifier_log_type+0x3c8/0x6a0 [ 1036.531261][ T4361] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1036.531288][ T4361] ? rcu_is_watching+0x15/0xb0 [ 1036.531351][ T4361] ? trace_kmalloc+0x2a/0xf0 [ 1036.531380][ T4361] btf_enum64_check_meta+0x49e/0xe20 [ 1036.531408][ T4361] ? rcu_is_watching+0x15/0xb0 [ 1036.531435][ T4361] ? kfree+0x4d/0x640 [ 1036.531459][ T4361] btf_parse_type_sec+0x3cf/0x2360 [ 1036.531491][ T4361] ? btf_parse_hdr+0x1da/0x810 [ 1036.531520][ T4361] ? btf_parse_hdr+0x5f2/0x810 [ 1036.531543][ T4361] ? btf_parse_str_sec+0x244/0x2f0 [ 1036.531572][ T4361] btf_new_fd+0x487/0xbb0 [ 1036.531604][ T4361] __sys_bpf+0xd2e/0xd90 [ 1036.531634][ T4361] ? __pfx___sys_bpf+0x10/0x10 [ 1036.531667][ T4361] ? __fget_files+0x2a/0x420 [ 1036.531706][ T4361] ? ksys_write+0x242/0x270 [ 1036.531736][ T4361] ? __pfx_ksys_write+0x10/0x10 [ 1036.531767][ T4361] __x64_sys_bpf+0xba/0xd0 [ 1036.531788][ T4361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.531808][ T4361] do_syscall_64+0x174/0x580 [ 1036.531834][ T4361] ? trace_irq_disable+0x3b/0x140 [ 1036.531857][ T4361] ? clear_bhb_loop+0x40/0x90 [ 1036.531879][ T4361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.531898][ T4361] RIP: 0033:0x7fd3e779de59 [ 1036.531916][ T4361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.531932][ T4361] RSP: 002b:00007fd3e8704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1036.531951][ T4361] RAX: ffffffffffffffda RBX: 00007fd3e7a25fa0 RCX: 00007fd3e779de59 [ 1036.531965][ T4361] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 1036.531974][ T4361] RBP: 00007fd3e8704090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.531987][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1036.531998][ T4361] R13: 00007fd3e7a26038 R14: 00007fd3e7a25fa0 R15: 00007ffeb402ccb8 [ 1036.532027][ T4361] [ 1036.873252][ T4366] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1037.027144][ T4372] bond6: Removing last ns target with arp_interval on [ 1037.054410][ T4379] FAULT_INJECTION: forcing a failure. [ 1037.054410][ T4379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.067502][ T4379] CPU: 1 UID: 0 PID: 4379 Comm: syz.2.7715 Not tainted syzkaller #0 PREEMPT(full) [ 1037.067525][ T4379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.067535][ T4379] Call Trace: [ 1037.067543][ T4379] [ 1037.067551][ T4379] dump_stack_lvl+0xe8/0x150 [ 1037.067583][ T4379] should_fail_ex+0x40c/0x560 [ 1037.067610][ T4379] _copy_from_user+0x2d/0xb0 [ 1037.067635][ T4379] ___sys_sendmsg+0x1c6/0x360 [ 1037.067661][ T4379] ? __lock_acquire+0x683/0x2cf0 [ 1037.067687][ T4379] ? __pfx____sys_sendmsg+0x10/0x10 [ 1037.067710][ T4379] ? __lock_acquire+0x683/0x2cf0 [ 1037.067736][ T4379] ? kstrtouint+0x6e/0xe0 [ 1037.067793][ T4379] __sys_sendmmsg+0x273/0x4d0 [ 1037.067826][ T4379] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1037.067863][ T4379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1037.067904][ T4379] ? ksys_write+0x242/0x270 [ 1037.067942][ T4379] ? __pfx_ksys_write+0x10/0x10 [ 1037.067977][ T4379] __x64_sys_sendmmsg+0xa0/0xc0 [ 1037.068002][ T4379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.068020][ T4379] do_syscall_64+0x174/0x580 [ 1037.068045][ T4379] ? trace_irq_disable+0x3b/0x140 [ 1037.068070][ T4379] ? clear_bhb_loop+0x40/0x90 [ 1037.068094][ T4379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.068114][ T4379] RIP: 0033:0x7f189819de59 [ 1037.068132][ T4379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.068149][ T4379] RSP: 002b:00007f1898f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1037.068170][ T4379] RAX: ffffffffffffffda RBX: 00007f1898425fa0 RCX: 00007f189819de59 [ 1037.068185][ T4379] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1037.068199][ T4379] RBP: 00007f1898f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.068211][ T4379] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1037.068223][ T4379] R13: 00007f1898426038 R14: 00007f1898425fa0 R15: 00007ffdb0216328 [ 1037.068256][ T4379] [ 1037.414993][ T4390] hsr0 speed is unknown, defaulting to 1000 [ 1037.523517][ T4392] __nla_validate_parse: 81 callbacks suppressed [ 1037.523535][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7719'. [ 1037.848566][ T4413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.886010][ T4410] syzkaller1: entered promiscuous mode [ 1037.912902][ T4410] syzkaller1: entered allmulticast mode [ 1037.971281][ T4410] bond3: entered promiscuous mode [ 1037.976438][ T4410] bond3: entered allmulticast mode [ 1037.981976][ T4410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1037.995504][ T4410] netlink: 'syz.1.7722': attribute type 3 has an invalid length. [ 1038.024020][ T4410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7722'. [ 1038.218113][ T4410] batadv_slave_0: entered promiscuous mode [ 1038.293208][ T4431] netlink: 'syz.0.7726': attribute type 1 has an invalid length. [ 1038.318931][ T4431] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7726'. [ 1038.356560][ T4437] FAULT_INJECTION: forcing a failure. [ 1038.356560][ T4437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.376760][ T4437] CPU: 0 UID: 0 PID: 4437 Comm: syz.2.7727 Not tainted syzkaller #0 PREEMPT(full) [ 1038.376787][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1038.376799][ T4437] Call Trace: [ 1038.376806][ T4437] [ 1038.376815][ T4437] dump_stack_lvl+0xe8/0x150 [ 1038.376849][ T4437] should_fail_ex+0x40c/0x560 [ 1038.376884][ T4437] _copy_from_user+0x2d/0xb0 [ 1038.376913][ T4437] ___sys_sendmsg+0x1c6/0x360 [ 1038.376941][ T4437] ? __lock_acquire+0x683/0x2cf0 [ 1038.376971][ T4437] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.376997][ T4437] ? __lock_acquire+0x683/0x2cf0 [ 1038.377026][ T4437] ? kstrtouint+0x6e/0xe0 [ 1038.377088][ T4437] __sys_sendmmsg+0x273/0x4d0 [ 1038.377122][ T4437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1038.377159][ T4437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1038.377201][ T4437] ? ksys_write+0x242/0x270 [ 1038.377231][ T4437] ? __pfx_ksys_write+0x10/0x10 [ 1038.377266][ T4437] __x64_sys_sendmmsg+0xa0/0xc0 [ 1038.377294][ T4437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.377315][ T4437] do_syscall_64+0x174/0x580 [ 1038.377341][ T4437] ? trace_irq_disable+0x3b/0x140 [ 1038.377365][ T4437] ? clear_bhb_loop+0x40/0x90 [ 1038.377389][ T4437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.377408][ T4437] RIP: 0033:0x7f189819de59 [ 1038.377426][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.377443][ T4437] RSP: 002b:00007f1898f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1038.377464][ T4437] RAX: ffffffffffffffda RBX: 00007f1898425fa0 RCX: 00007f189819de59 [ 1038.377479][ T4437] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1038.377492][ T4437] RBP: 00007f1898f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.377504][ T4437] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1038.377516][ T4437] R13: 00007f1898426038 R14: 00007f1898425fa0 R15: 00007ffdb0216328 [ 1038.377547][ T4437] [ 1038.692302][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7728'. [ 1039.054661][ T4443] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1039.064200][ T4443] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7728'. [ 1039.087184][ T4453] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7730'. [ 1039.155913][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7728'. [ 1039.416290][ T4461] hsr0 speed is unknown, defaulting to 1000 [ 1039.711306][ T4487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7735'. [ 1040.043441][ T4509] netlink: 'syz.1.7737': attribute type 2 has an invalid length. [ 1040.082467][ T4509] : entered promiscuous mode [ 1040.203752][ T4461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7731'. [ 1040.275379][ T4461] team0: entered promiscuous mode [ 1040.293210][ T4461] team0: entered allmulticast mode [ 1040.307351][ T4461] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.561400][ T4523] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1040.860067][ T4543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7747'. [ 1040.910765][ T4543] netlink: 'syz.2.7747': attribute type 2 has an invalid length. [ 1040.926146][ T4543] : entered promiscuous mode [ 1041.133816][ T4555] bond2: (slave dummy0): Releasing backup interface [ 1041.167718][ T4555] bridge_slave_1: left allmulticast mode [ 1041.174236][ T4555] bridge_slave_1: left promiscuous mode [ 1041.181293][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.217267][ T4555] bond0: (slave 07ÿ): Releasing backup interface [ 1041.227120][ T4555] bond0: (slave bond_slave_1): Releasing backup interface [ 1041.237326][ T4555] team0: Port device team_slave_0 removed [ 1041.244328][ T4555] team0: Port device team_slave_1 removed [ 1041.250661][ T4555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.258590][ T4555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1041.369176][ T4568] netlink: 'syz.3.7754': attribute type 2 has an invalid length. [ 1041.383522][ T4568] : entered promiscuous mode [ 1041.532085][ T4572] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1041.715692][T10058] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.730117][T10058] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.740741][T10058] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.750598][T10058] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.127176][ T4615] bond4: option ad_select: invalid value (34) [ 1042.134453][ T4615] bond4 (unregistering): Released all slaves [ 1042.651562][ T4640] netlink: 'syz.0.7770': attribute type 58 has an invalid length. [ 1042.658845][ T4641] netlink: 'syz.0.7770': attribute type 58 has an invalid length. [ 1042.731524][ T4646] __nla_validate_parse: 6 callbacks suppressed [ 1042.731542][ T4646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7772'. [ 1045.027006][ T4608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1045.037675][ T4617] netlink: 'syz.4.7765': attribute type 2 has an invalid length. [ 1045.046396][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7765'. [ 1045.220598][ T4662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7776'. [ 1045.292597][ T4669] tipc: Enabling of bearer rejected, already enabled [ 1045.362337][ T4677] xt_connbytes: Forcing CT accounting to be enabled [ 1045.423339][ T4683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7780'. [ 1045.431526][ T4684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1045.462177][ T4684] syzkaller0: entered promiscuous mode [ 1045.477333][ T4684] syzkaller0: entered allmulticast mode [ 1045.594975][ T4693] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7783'. [ 1045.666130][ T4701] netlink: 'syz.1.7785': attribute type 1 has an invalid length. [ 1045.674152][ T4701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1045.769905][ T4697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7784'. [ 1045.791207][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7784'. [ 1045.804354][ T4703] xt_hashlimit: size too large, truncated to 1048576 [ 1045.934519][ T4704] xt_hashlimit: size too large, truncated to 1048576 [ 1045.941262][ T4704] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1045.963569][ T4716] xt_hashlimit: size too large, truncated to 1048576 [ 1045.974341][ T4716] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1046.298454][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7793'. [ 1046.307381][ T4730] netlink: 'syz.3.7793': attribute type 30 has an invalid length. [ 1046.321768][ T4730] vxlan2: entered promiscuous mode [ 1046.326941][ T4730] vxlan2: entered allmulticast mode [ 1046.333671][T10058] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.335593][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7793'. [ 1046.347146][T10058] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.352213][ T4730] netlink: 'syz.3.7793': attribute type 30 has an invalid length. [ 1046.388774][T10058] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.418614][T10058] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.450857][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.544607][ T4738] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7796'. [ 1048.850218][ T4710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1049.256954][ T4777] bond6: option ad_user_port_key: invalid value (65535) [ 1049.289065][ T4777] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 1049.340034][ T4777] bond6 (unregistering): Released all slaves [ 1049.714685][ T4800] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7809'. [ 1049.724943][ T4800] netlink: 'syz.3.7809': attribute type 9 has an invalid length. [ 1049.738415][ T4800] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7809'. [ 1049.931716][ T4804] netlink: 'syz.2.7811': attribute type 58 has an invalid length. [ 1049.939581][ T4804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7811'. [ 1050.037494][ T4817] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1050.252214][ T4830] tipc: Enabled bearer , priority 0 [ 1050.259996][ T4830] syzkaller0: entered promiscuous mode [ 1050.265829][ T4830] syzkaller0: entered allmulticast mode [ 1050.304361][ T4830] tipc: Resetting bearer [ 1050.312896][ T4829] tipc: Resetting bearer [ 1050.354802][ T4829] tipc: Disabling bearer [ 1050.406390][ T4822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.613297][ T4838] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7822'. [ 1050.826351][ T4846] netlink: 'syz.1.7825': attribute type 1 has an invalid length. [ 1050.848601][ T4848] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7824'. [ 1050.872161][ T4846] bond4: entered promiscuous mode [ 1050.880594][ T4846] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1050.904205][ T4846] syzkaller0: entered promiscuous mode [ 1050.909748][ T4846] syzkaller0: entered allmulticast mode [ 1050.999670][ T4824] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1051.141817][ T4851] team0: Port device syz_tun added [ 1051.161875][ T4851] netlink: 'syz.0.7826': attribute type 23 has an invalid length. [ 1051.685619][ T4876] "syz.4.7833" (4876) uses obsolete ecb(arc4) skcipher [ 1051.792526][ T4883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1051.861555][ T4883] vlan2: entered promiscuous mode [ 1051.879186][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1051.895640][ T4883] gretap0: entered promiscuous mode [ 1052.030556][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1052.136608][ T4897] xt_hashlimit: size too large, truncated to 1048576 [ 1052.182820][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1052.200376][ T4901] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1052.489257][ T4929] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20001 [ 1052.650400][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7847'. [ 1052.813702][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7849'. [ 1052.895404][ T4953] netlink: 'syz.1.7852': attribute type 2 has an invalid length. [ 1052.906503][ T4953] netlink: 'syz.1.7852': attribute type 8 has an invalid length. [ 1053.027308][ T4963] netlink: 'syz.4.7856': attribute type 26 has an invalid length. [ 1053.058796][ T4953] netlink: 'syz.1.7852': attribute type 3 has an invalid length. [ 1053.182051][ T4972] "syz.2.7857" (4972) uses obsolete ecb(arc4) skcipher [ 1053.216018][ T4974] syzkaller0: entered promiscuous mode [ 1053.221541][ T4974] syzkaller0: entered allmulticast mode [ 1053.530235][ T4992] hsr0 speed is unknown, defaulting to 1000 [ 1053.533236][ T4994] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1054.938763][ T29] audit: type=1804 audit(1783773644.779:20): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7879" name="/newroot/412/cgroup.controllers" dev="tmpfs" ino=2135 res=1 errno=0 [ 1055.075625][ T29] audit: type=1800 audit(1783773644.789:21): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7879" name="cgroup.controllers" dev="tmpfs" ino=2135 res=0 errno=0 [ 1055.159577][ T5048] __nla_validate_parse: 7 callbacks suppressed [ 1055.159599][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7881'. [ 1056.362670][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7895'. [ 1056.551049][ T5117] netlink: 'syz.1.7899': attribute type 1 has an invalid length. [ 1056.582251][ T5117] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7899'. [ 1056.608772][ T5117] pim6reg1: entered promiscuous mode [ 1056.614122][ T5117] pim6reg1: entered allmulticast mode [ 1056.866336][ T5127] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7901'. [ 1057.161281][ T5148] FAULT_INJECTION: forcing a failure. [ 1057.161281][ T5148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.174373][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: syz.1.7908 Not tainted syzkaller #0 PREEMPT(full) [ 1057.174398][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1057.174409][ T5148] Call Trace: [ 1057.174417][ T5148] [ 1057.174425][ T5148] dump_stack_lvl+0xe8/0x150 [ 1057.174457][ T5148] should_fail_ex+0x40c/0x560 [ 1057.174482][ T5148] _copy_from_user+0x2d/0xb0 [ 1057.174509][ T5148] ___sys_sendmsg+0x1c6/0x360 [ 1057.174553][ T5148] ? __pfx____sys_sendmsg+0x10/0x10 [ 1057.174579][ T5148] ? __lock_acquire+0x683/0x2cf0 [ 1057.174647][ T5148] __sys_sendmmsg+0x273/0x4d0 [ 1057.174679][ T5148] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1057.174716][ T5148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1057.174758][ T5148] ? ksys_write+0x242/0x270 [ 1057.174789][ T5148] ? __pfx_ksys_write+0x10/0x10 [ 1057.174822][ T5148] __x64_sys_sendmmsg+0xa0/0xc0 [ 1057.174850][ T5148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.174871][ T5148] do_syscall_64+0x174/0x580 [ 1057.174894][ T5148] ? trace_irq_disable+0x3b/0x140 [ 1057.174917][ T5148] ? clear_bhb_loop+0x40/0x90 [ 1057.174937][ T5148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.174960][ T5148] RIP: 0033:0x7fd3e779de59 [ 1057.174980][ T5148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.174996][ T5148] RSP: 002b:00007fd3e8704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1057.175017][ T5148] RAX: ffffffffffffffda RBX: 00007fd3e7a25fa0 RCX: 00007fd3e779de59 [ 1057.175030][ T5148] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1057.175043][ T5148] RBP: 00007fd3e8704090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.175055][ T5148] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1057.175065][ T5148] R13: 00007fd3e7a26038 R14: 00007fd3e7a25fa0 R15: 00007ffeb402ccb8 [ 1057.175097][ T5148] [ 1057.337016][ T5153] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 1057.653978][ T5725] hsr0 speed is unknown, defaulting to 1000 [ 1057.659976][ T5725] syz2: Port: 1 Link DOWN [ 1057.959704][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7920'. [ 1057.984857][ T5182] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1058.160018][ T5194] netlink: 'syz.2.7922': attribute type 1 has an invalid length. [ 1058.190025][ T5194] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7922'. [ 1058.201181][ T5194] netlink: 'syz.2.7922': attribute type 1 has an invalid length. [ 1058.286314][ T5199] openvswitch: netlink: Flow key attr not present in new flow. [ 1058.796647][ T5224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7932'. [ 1058.829189][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7932'. [ 1058.871122][ T5230] batman_adv: batadv0: Adding interface: gretap3 [ 1058.882417][ T5230] batman_adv: batadv0: The MTU of interface gretap3 is too small (1414) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.924381][ T5235] FAULT_INJECTION: forcing a failure. [ 1058.924381][ T5235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.940541][ T5230] batman_adv: batadv0: Interface activated: gretap3 [ 1058.955041][ T5235] CPU: 0 UID: 0 PID: 5235 Comm: syz.0.7936 Not tainted syzkaller #0 PREEMPT(full) [ 1058.955067][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.955079][ T5235] Call Trace: [ 1058.955087][ T5235] [ 1058.955095][ T5235] dump_stack_lvl+0xe8/0x150 [ 1058.955130][ T5235] should_fail_ex+0x40c/0x560 [ 1058.955162][ T5235] _copy_from_user+0x2d/0xb0 [ 1058.955190][ T5235] ___sys_sendmsg+0x1c6/0x360 [ 1058.955226][ T5235] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.955253][ T5235] ? __lock_acquire+0x683/0x2cf0 [ 1058.955330][ T5235] __sys_sendmmsg+0x273/0x4d0 [ 1058.955364][ T5235] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1058.955401][ T5235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1058.955444][ T5235] ? ksys_write+0x242/0x270 [ 1058.955476][ T5235] ? __pfx_ksys_write+0x10/0x10 [ 1058.955512][ T5235] __x64_sys_sendmmsg+0xa0/0xc0 [ 1058.955540][ T5235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.955562][ T5235] do_syscall_64+0x174/0x580 [ 1058.955588][ T5235] ? trace_irq_disable+0x3b/0x140 [ 1058.955613][ T5235] ? clear_bhb_loop+0x40/0x90 [ 1058.955637][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.955657][ T5235] RIP: 0033:0x7f8bf459de59 [ 1058.955676][ T5235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.955692][ T5235] RSP: 002b:00007f8bf53f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1058.955713][ T5235] RAX: ffffffffffffffda RBX: 00007f8bf4825fa0 RCX: 00007f8bf459de59 [ 1058.955728][ T5235] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1058.955742][ T5235] RBP: 00007f8bf53f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.955755][ T5235] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1058.955767][ T5235] R13: 00007f8bf4826038 R14: 00007f8bf4825fa0 R15: 00007ffd29676668 [ 1058.955799][ T5235] [ 1058.991222][ T5233] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7937'. [ 1059.179135][ T5233] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7937'. [ 1059.474387][ T5261] netlink: 'syz.1.7944': attribute type 7 has an invalid length. [ 1059.513819][ T5252] syzkaller0: entered promiscuous mode [ 1059.531740][ T5252] syzkaller0: entered allmulticast mode [ 1059.729523][ T5278] FAULT_INJECTION: forcing a failure. [ 1059.729523][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.759370][ T5278] CPU: 1 UID: 0 PID: 5278 Comm: syz.2.7951 Not tainted syzkaller #0 PREEMPT(full) [ 1059.759397][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1059.759408][ T5278] Call Trace: [ 1059.759417][ T5278] [ 1059.759425][ T5278] dump_stack_lvl+0xe8/0x150 [ 1059.759459][ T5278] should_fail_ex+0x40c/0x560 [ 1059.759487][ T5278] should_failslab+0xa8/0x100 [ 1059.759517][ T5278] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1059.759540][ T5278] ? local_lock_release+0x9c/0x160 [ 1059.759567][ T5278] ? __alloc_skb+0x1d7/0x7a0 [ 1059.759589][ T5278] ? __alloc_skb+0x1d7/0x7a0 [ 1059.759619][ T5278] __alloc_skb+0x1d7/0x7a0 [ 1059.759649][ T5278] alloc_skb_with_frags+0xc6/0x760 [ 1059.759674][ T5278] ? __lock_acquire+0x683/0x2cf0 [ 1059.759701][ T5278] ? __lock_acquire+0x683/0x2cf0 [ 1059.759736][ T5278] sock_alloc_send_pskb+0x878/0x990 [ 1059.759773][ T5278] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1059.759796][ T5278] ? sock_def_readable+0xae/0x550 [ 1059.759823][ T5278] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1059.759848][ T5278] unix_dgram_sendmsg+0x4da/0x17b0 [ 1059.759891][ T5278] ? __lock_acquire+0x683/0x2cf0 [ 1059.759915][ T5278] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1059.759942][ T5278] ? aa_sock_msg_perm+0xda/0x1b0 [ 1059.759965][ T5278] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1059.759988][ T5278] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1059.760009][ T5278] sock_sendmsg_nosec+0x13a/0x180 [ 1059.760035][ T5278] ____sys_sendmsg+0x54e/0x850 [ 1059.760068][ T5278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1059.760106][ T5278] ? import_iovec+0x73/0xa0 [ 1059.760136][ T5278] ___sys_sendmsg+0x2a5/0x360 [ 1059.760169][ T5278] ? __pfx____sys_sendmsg+0x10/0x10 [ 1059.760195][ T5278] ? __lock_acquire+0x683/0x2cf0 [ 1059.760267][ T5278] __sys_sendmmsg+0x273/0x4d0 [ 1059.760301][ T5278] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1059.760344][ T5278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1059.760386][ T5278] ? ksys_write+0x242/0x270 [ 1059.760416][ T5278] ? __pfx_ksys_write+0x10/0x10 [ 1059.760451][ T5278] __x64_sys_sendmmsg+0xa0/0xc0 [ 1059.760479][ T5278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.760500][ T5278] do_syscall_64+0x174/0x580 [ 1059.760525][ T5278] ? trace_irq_disable+0x3b/0x140 [ 1059.760549][ T5278] ? clear_bhb_loop+0x40/0x90 [ 1059.760572][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.760591][ T5278] RIP: 0033:0x7f189819de59 [ 1059.760610][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.760627][ T5278] RSP: 002b:00007f1898f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1059.760647][ T5278] RAX: ffffffffffffffda RBX: 00007f1898425fa0 RCX: 00007f189819de59 [ 1059.760662][ T5278] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1059.760675][ T5278] RBP: 00007f1898f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.760687][ T5278] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1059.760700][ T5278] R13: 00007f1898426038 R14: 00007f1898425fa0 R15: 00007ffdb0216328 [ 1059.760731][ T5278] [ 1060.177606][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.179753][ T5293] netlink: 504 bytes leftover after parsing attributes in process `syz.2.7954'. [ 1060.193722][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7954'. [ 1060.242946][ T5295] xt_hashlimit: size too large, truncated to 1048576 [ 1060.262891][ T5275] bridge_slave_1 (unregistering): left allmulticast mode [ 1060.281681][ T5275] bridge_slave_1 (unregistering): left promiscuous mode [ 1060.294302][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.342827][ T5298] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1060.395345][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7955'. [ 1060.502485][ T5304] xt_hashlimit: size too large, truncated to 1048576 [ 1061.136396][ T5324] netlink: 'syz.3.7963': attribute type 3 has an invalid length. [ 1061.145128][ T5324] netlink: 'syz.3.7963': attribute type 1 has an invalid length. [ 1061.154272][ T5324] netlink: 'syz.3.7963': attribute type 2 has an invalid length. [ 1061.166163][ T5324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7963'. [ 1065.344062][ T5338] netlink: 'syz.2.7966': attribute type 10 has an invalid length. [ 1065.407134][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7967'. [ 1065.421380][ T5343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7968'. [ 1065.461084][ T5348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7968'. [ 1065.801407][ T5369] netlink: 'syz.0.7975': attribute type 19 has an invalid length. [ 1065.812214][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1065.831948][ T5369] netlink: 'syz.0.7975': attribute type 19 has an invalid length. [ 1065.841616][ T5372] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.7977'. [ 1065.892500][ T5374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7973'. [ 1065.904143][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1065.964629][ T5375] netlink: 'syz.4.7976': attribute type 12 has an invalid length. [ 1066.012188][ T5369] netlink: 'syz.0.7975': attribute type 5 has an invalid length. [ 1066.055220][ T5369] ip6erspan0: entered allmulticast mode [ 1066.202754][ T5383] bond7: entered promiscuous mode [ 1066.220070][ T5383] bond7: entered allmulticast mode [ 1066.386532][ T5403] FAULT_INJECTION: forcing a failure. [ 1066.386532][ T5403] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.419839][ T5403] CPU: 0 UID: 0 PID: 5403 Comm: syz.0.7983 Not tainted syzkaller #0 PREEMPT(full) [ 1066.419867][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.419879][ T5403] Call Trace: [ 1066.419887][ T5403] [ 1066.419897][ T5403] dump_stack_lvl+0xe8/0x150 [ 1066.419931][ T5403] should_fail_ex+0x40c/0x560 [ 1066.419959][ T5403] should_failslab+0xa8/0x100 [ 1066.419987][ T5403] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1066.420010][ T5403] ? local_lock_release+0x9c/0x160 [ 1066.420038][ T5403] ? __alloc_skb+0x1d7/0x7a0 [ 1066.420060][ T5403] ? __alloc_skb+0x1d7/0x7a0 [ 1066.420092][ T5403] __alloc_skb+0x1d7/0x7a0 [ 1066.420121][ T5403] alloc_skb_with_frags+0xc6/0x760 [ 1066.420147][ T5403] ? __lock_acquire+0x683/0x2cf0 [ 1066.420175][ T5403] ? __lock_acquire+0x683/0x2cf0 [ 1066.420206][ T5403] sock_alloc_send_pskb+0x878/0x990 [ 1066.420244][ T5403] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1066.420271][ T5403] ? sock_def_readable+0xae/0x550 [ 1066.420298][ T5403] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1066.420323][ T5403] unix_dgram_sendmsg+0x4da/0x17b0 [ 1066.420372][ T5403] ? __lock_acquire+0x683/0x2cf0 [ 1066.420397][ T5403] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1066.420425][ T5403] ? aa_sock_msg_perm+0xda/0x1b0 [ 1066.420445][ T5403] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1066.420468][ T5403] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1066.420488][ T5403] sock_sendmsg_nosec+0x13a/0x180 [ 1066.420514][ T5403] ____sys_sendmsg+0x54e/0x850 [ 1066.420548][ T5403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1066.420585][ T5403] ? import_iovec+0x73/0xa0 [ 1066.420617][ T5403] ___sys_sendmsg+0x2a5/0x360 [ 1066.420650][ T5403] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.420677][ T5403] ? __lock_acquire+0x683/0x2cf0 [ 1066.420750][ T5403] __sys_sendmmsg+0x273/0x4d0 [ 1066.420784][ T5403] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1066.420822][ T5403] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1066.420863][ T5403] ? ksys_write+0x242/0x270 [ 1066.420892][ T5403] ? __pfx_ksys_write+0x10/0x10 [ 1066.420925][ T5403] __x64_sys_sendmmsg+0xa0/0xc0 [ 1066.420954][ T5403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.420974][ T5403] do_syscall_64+0x174/0x580 [ 1066.421001][ T5403] ? trace_irq_disable+0x3b/0x140 [ 1066.421025][ T5403] ? clear_bhb_loop+0x40/0x90 [ 1066.421049][ T5403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.421068][ T5403] RIP: 0033:0x7f8bf459de59 [ 1066.421087][ T5403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.421104][ T5403] RSP: 002b:00007f8bf53f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1066.421125][ T5403] RAX: ffffffffffffffda RBX: 00007f8bf4825fa0 RCX: 00007f8bf459de59 [ 1066.421139][ T5403] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1066.421152][ T5403] RBP: 00007f8bf53f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.421165][ T5403] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1066.421177][ T5403] R13: 00007f8bf4826038 R14: 00007f8bf4825fa0 R15: 00007ffd29676668 [ 1066.421208][ T5403] [ 1067.061221][ T5418] IPv6: sit2: Disabled Multicast RS [ 1067.320557][ T5432] openvswitch: netlink: Message has -2 unknown bytes. [ 1067.349307][ T5432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1067.375734][ T5433] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1067.384430][ T5439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7992'. [ 1067.870695][ T5458] netlink: 'syz.1.7999': attribute type 1 has an invalid length. [ 1067.880290][ T5452] veth3: entered allmulticast mode [ 1068.075436][ T5461] bond6: entered promiscuous mode [ 1068.080594][ T5461] bond6: entered allmulticast mode [ 1068.086020][ T5461] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1068.093622][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8003'. [ 1068.108943][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8004'. [ 1068.395642][ T5476] batman_adv: batadv0: Adding interface: gretap2 [ 1068.402491][ T5476] batman_adv: batadv0: The MTU of interface gretap2 is too small (1414) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.448393][ T5476] batman_adv: batadv0: Interface activated: gretap2 [ 1068.468254][ T5482] netlink: 'syz.3.8007': attribute type 40 has an invalid length. [ 1068.932383][ T5509] hsr0 speed is unknown, defaulting to 1000 [ 1069.224279][ T5525] netlink: 'syz.1.8015': attribute type 4 has an invalid length. [ 1069.253076][ T5525] netlink: 'syz.1.8015': attribute type 4 has an invalid length. [ 1069.353858][ T5509] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1069.450640][ T5534] IPVS: set_ctl: invalid protocol: 136 172.20.20.44:20000 [ 1069.537431][ T5535] vlan4: entered promiscuous mode [ 1069.543085][ T5535] hsr0: entered promiscuous mode [ 1069.549513][ T5535] vlan4: entered allmulticast mode [ 1069.554727][ T5535] hsr0: entered allmulticast mode [ 1069.559774][ T5535] hsr_slave_0: entered allmulticast mode [ 1069.565433][ T5535] hsr_slave_1: entered allmulticast mode [ 1069.636742][ T5535] hsr_slave_0: left promiscuous mode [ 1069.643154][ T5535] hsr_slave_1: left promiscuous mode [ 1070.012123][ T5549] netlink: 'syz.4.8023': attribute type 13 has an invalid length. [ 1071.392986][ T5597] netlink: 'syz.4.8035': attribute type 1 has an invalid length. [ 1071.417239][ T5597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1071.499469][ T5597] __nla_validate_parse: 7 callbacks suppressed [ 1071.499488][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8035'. [ 1071.640067][ T5601] ªªªªª!: renamed from virt_wifi0 [ 1071.686105][ T5610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.915817][ T5614] netlink: 'syz.2.8037': attribute type 15 has an invalid length. [ 1071.937425][ T5614] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8037'. [ 1071.955001][ T5616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8038'. [ 1072.075287][ T5581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.111360][ T5581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.673975][ T5636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1072.685195][ T5636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1072.694180][ T5636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1072.703142][ T5636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1072.712107][ T5636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1072.721069][ T5636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1072.728841][ T5632] hsr0 speed is unknown, defaulting to 1000 [ 1072.742333][ T5636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1072.995706][ T5581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.006079][ T5581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.178498][ T5647] netlink: 'syz.4.8045': attribute type 13 has an invalid length. [ 1073.186362][ T5647] netlink: 'syz.4.8045': attribute type 17 has an invalid length. [ 1073.318126][ T5652] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1073.484984][ T5663] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1073.652251][T30210] Bluetooth: hci4: command 0x0405 tx timeout [ 1073.945848][ T5647] ªªªªª!: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1073.957573][ T5647] veth0_vlan: left promiscuous mode [ 1073.965229][ T5647] veth0_vlan: entered promiscuous mode [ 1073.987122][ T5647] mac80211_hwsim hwsim70 wlan0: left promiscuous mode [ 1074.030473][ T5647] mac80211_hwsim hwsim70 wlan0: left allmulticast mode [ 1074.041612][ T5647] netdevsim netdevsim4 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1074.052201][ T5647] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1074.062967][ T5647] netdevsim netdevsim4 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1074.073885][ T5647] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1074.083014][ T5647] netdevsim netdevsim4 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1074.093699][ T5647] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1074.102197][ T5647] netdevsim netdevsim4 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1074.112791][ T5647] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1074.172617][ T5647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1074.185133][ T5647] veth0_to_team: entered promiscuous mode [ 1074.194546][ T5647] geneve2: left promiscuous mode [ 1074.200775][ T5647] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1074.211135][ T5647] geneve3: left promiscuous mode [ 1074.216114][ T5647] geneve3: left allmulticast mode [ 1074.222299][ T5647] bond0: entered allmulticast mode [ 1074.227437][ T5647] ÿ: entered allmulticast mode [ 1074.232361][ T5647] ÿ: entered promiscuous mode [ 1074.237969][ T5647] bond0: entered promiscuous mode [ 1074.258966][ T5647] macvtap1: left promiscuous mode [ 1074.264019][ T5647] bond0: left promiscuous mode [ 1074.269013][ T5647] macvtap1: left allmulticast mode [ 1074.274124][ T5647] bond0: left allmulticast mode [ 1074.278984][ T5647] ÿ: left allmulticast mode [ 1074.284836][ T5647] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1074.295999][ T5647] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1074.303760][ T5647] gretap1: left promiscuous mode [ 1074.311646][ T5647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1074.329359][ T5647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1074.338859][ T5647] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1074.355056][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.375236][ T8920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.405609][ T5670] geneve0: entered promiscuous mode [ 1074.512785][ T5672] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1074.525414][ T5672] bond8 (unregistering): Released all slaves [ 1074.644805][ T5683] bond6: (slave bond_slave_1): Device is not bonding slave [ 1074.670011][ T5683] bond6: option active_slave: invalid value (bond_slave_1) [ 1074.693236][ T5683] bond6 (unregistering): Released all slaves [ 1074.713660][ T5690] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1074.771178][T10054] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 1074.786201][T10054] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1074.826472][ T5581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1074.902985][ T5581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.927392][T10054] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1074.936747][T10054] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1074.950687][ T5703] block nbd9: server does not support multiple connections per device. [ 1074.975541][ T5716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.990203][ T5703] block nbd9: shutting down sockets [ 1075.063956][ T5715] bond8: Unable to set up delay as MII monitoring is disabled [ 1075.072513][ T5715] bond8 (unregistering): Released all slaves [ 1075.290985][ T5581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.301786][ T5581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.628423][ T5750] batman_adv: batadv0: Adding interface: macsec1 [ 1075.649336][ T5750] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.685553][ T5750] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 1075.724521][ T8920] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.733543][ T8920] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.791749][ T8920] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.805564][ T8920] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.849500][T10053] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.859116][T10053] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.883257][T10053] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.892557][T10053] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.424124][ T5762] ip6tnl1: entered allmulticast mode [ 1076.606780][ T5776] bridge0: port 2(syz_tun) entered blocking state [ 1076.622149][ T5776] bridge0: port 2(syz_tun) entered disabled state [ 1076.660444][ T5776] syz_tun: entered allmulticast mode [ 1076.709649][ T5776] syz_tun: entered promiscuous mode [ 1076.715433][ T5776] bridge0: port 2(syz_tun) entered blocking state [ 1076.721964][ T5776] bridge0: port 2(syz_tun) entered forwarding state [ 1076.815179][ T5789] __nla_validate_parse: 165 callbacks suppressed [ 1076.815192][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8075'. [ 1076.939037][ T5787] mac80211_hwsim hwsim72 syzkaller0: left promiscuous mode [ 1076.970960][ T5787] mac80211_hwsim hwsim72 syzkaller0: left allmulticast mode [ 1077.306784][ T5813] IPVS: Error connecting to the multicast addr [ 1077.349257][ T5822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8080'. [ 1077.358399][ T5822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8080'. [ 1077.453445][ T5824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8083'. [ 1077.571055][ T5826] 8021q: VLANs not supported on ip6tnl0 [ 1078.012408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031fd2000: rx timeout, send abort [ 1078.152246][ T5840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8088'. [ 1078.257539][ T5845] ip6erspan0: entered allmulticast mode [ 1078.512516][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031fd1800: rx timeout, send abort [ 1078.523525][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031fd2000: abort rx timeout. Force session deactivation [ 1078.633138][ T5854] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 1078.817789][ T5856] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.8093'. [ 1079.020855][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031fd1800: abort rx timeout. Force session deactivation [ 1079.067508][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ad3fc00: rx timeout, send abort [ 1079.076443][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ad3fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1079.331415][ T5875] netlink: 'syz.2.8099': attribute type 4 has an invalid length. [ 1079.421535][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8099'. [ 1079.430957][ T5866] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8097'. [ 1079.440119][ T5866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8097'. [ 1079.817136][ T5897] netlink: 'syz.3.8102': attribute type 2 has an invalid length. [ 1079.824922][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8102'. [ 1079.834887][ T5897] nbd: must specify at least one socket [ 1080.200964][ T5283] veth0_macvtap: left promiscuous mode [ 1080.306560][ T5913] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1080.319173][ T5913] bond9 (unregistering): Released all slaves [ 1080.745316][ T5935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1080.751280][ T5935] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1080.811412][ T5935] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1080.817373][ T5935] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1081.017348][ T5935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1081.023311][ T5935] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1081.285986][ T5970] netlink: 'syz.3.8123': attribute type 2 has an invalid length. [ 1081.417635][ T5935] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1081.488942][ T5935] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1081.499064][ T5984] netlink: 'syz.0.8125': attribute type 4 has an invalid length. [ 1081.641292][ T5984] netlink: 'syz.0.8125': attribute type 4 has an invalid length. [ 1082.383325][ T6027] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 1082.416110][ T6027] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 1082.444950][ T6027] veth1_virt_wifi: entered allmulticast mode [ 1082.492547][ T6027] veth1_virt_wifi: left allmulticast mode [ 1082.860853][ T6045] netlink: 'syz.1.8140': attribute type 1 has an invalid length. [ 1082.896854][ T6045] bond6: option mode: invalid value (12) [ 1082.910918][ T6045] bond6 (unregistering): Released all slaves [ 1083.120632][ T6054] : renamed from dummy0 [ 1083.585687][ T29] audit: type=1804 audit(1783773673.419:22): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8143" name="/newroot/366/cgroup.controllers" dev="tmpfs" ino=1891 res=1 errno=0 [ 1083.676868][ T29] audit: type=1800 audit(1783773673.419:23): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8143" name="cgroup.controllers" dev="tmpfs" ino=1891 res=0 errno=0 [ 1083.698894][ T29] audit: type=1804 audit(1783773673.439:24): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8143" name="/newroot/366/cgroup.controllers" dev="tmpfs" ino=1891 res=1 errno=0 [ 1083.849589][ T6089] tipc: Failed to remove unknown binding: 66,1,1/3262671483:1946512232/1946512234 [ 1084.311486][ T6101] __nla_validate_parse: 7 callbacks suppressed [ 1084.311505][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8153'. [ 1084.445822][ T6108] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8153'. [ 1084.477750][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8155'. [ 1084.551180][ T6116] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1084.568798][ T6110] tun0: tun_chr_ioctl cmd 1074025675 [ 1084.574139][ T6110] tun0: persist enabled [ 1084.578503][ T6111] tun0: tun_chr_ioctl cmd 1074025675 [ 1084.630891][ T6111] tun0: persist enabled [ 1084.790110][ T6125] syzkaller0: entered promiscuous mode [ 1084.827010][ T6125] syzkaller0: entered allmulticast mode [ 1084.976822][ T6125] tipc: Enabled bearer , priority 0 [ 1085.023120][ T6137] syzkaller1: entered promiscuous mode [ 1085.028651][ T6137] syzkaller1: entered allmulticast mode [ 1085.035978][ T6139] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1085.045256][ T6134] netlink: 'syz.3.8159': attribute type 15 has an invalid length. [ 1085.053102][ T6134] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1085.065224][ T6137] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8162'. [ 1085.077520][ T6124] tipc: Resetting bearer [ 1085.173501][ T6124] tipc: Disabling bearer [ 1085.453966][ T6155] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1085.492046][ T6155] xt_hashlimit: max too large, truncated to 1048576 [ 1085.642319][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8165'. [ 1085.729822][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8167'. [ 1085.782936][ T6172] hsr0 speed is unknown, defaulting to 1000 [ 1085.804455][ T6167] netlink: 'syz.4.8167': attribute type 13 has an invalid length. [ 1085.857564][ T6167] ksmbd: Unknown IPC event: 6, ignore. [ 1085.884000][ T6176] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1086.096916][ T6179] netlink: 'syz.3.8169': attribute type 13 has an invalid length. [ 1086.104787][ T6179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8169'. [ 1086.122952][ T6188] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8171'. [ 1086.705665][ T6210] A link change request failed with some changes committed already. Interface ªªªªª! may have been left with an inconsistent configuration, please check. [ 1087.109560][ T6220] netlink: 'syz.3.8178': attribute type 1 has an invalid length. [ 1087.208761][ T6230] netlink: 'syz.4.8180': attribute type 4 has an invalid length. [ 1087.237723][ T6220] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1087.267675][ T6235] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8180'. [ 1087.320112][ T6229] veth3: entered allmulticast mode [ 1087.330005][ T6229] bond8: (slave veth3): Enslaving as an active interface with a down link [ 1087.383288][ T6220] bond8: (slave veth0_to_bond): making interface the new active one [ 1087.422816][ T6220] veth0_to_bond: entered promiscuous mode [ 1087.448865][ T6220] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1087.514353][ T6229] macvlan2: entered promiscuous mode [ 1087.526014][ T6229] macvlan2: entered allmulticast mode [ 1087.556126][ T6229] bond8: entered promiscuous mode [ 1087.562135][ T6229] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1087.569784][ T6229] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1087.585852][ T6229] bond8: left promiscuous mode [ 1087.859587][ T6255] netlink: 'syz.2.8184': attribute type 2 has an invalid length. [ 1087.868245][ T6255] netlink: 'syz.2.8184': attribute type 2 has an invalid length. [ 1087.928534][ T6260] tipc: Enabling of bearer rejected, already enabled [ 1088.138609][ T6269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.156759][ T6269] Cannot find set identified by id 65534 to match [ 1088.208978][ T6269] bond2: (slave dummy0): Releasing active interface [ 1088.688357][ T6304] netlink: 'syz.4.8197': attribute type 1 has an invalid length. [ 1088.781151][ T6307] netlink: 'syz.4.8197': attribute type 11 has an invalid length. [ 1089.327738][ T6328] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1089.413518][ T6351] __nla_validate_parse: 6 callbacks suppressed [ 1089.413538][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8207'. [ 1089.485097][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1089.599534][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1090.124831][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8213'. [ 1090.230952][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8213'. [ 1090.600079][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8215'. [ 1090.609003][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8215'. [ 1092.154505][ T6328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1092.174479][ T6377] netlink: 'syz.1.8211': attribute type 1 has an invalid length. [ 1092.182254][ T6377] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8211'. [ 1092.214358][ T6390] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8213'. [ 1092.621256][ T6448] netlink: 1132 bytes leftover after parsing attributes in process `syz.1.8222'. [ 1092.826425][ T6430] netlink: 'syz.2.8217': attribute type 75 has an invalid length. [ 1092.839093][ T6450] tipc: Enabling of bearer rejected, already enabled [ 1093.201094][ T6475] SET target dimension over the limit! [ 1093.450995][ T6475] netlink: 'syz.0.8230': attribute type 10 has an invalid length. [ 1093.551333][ T6487] Cannot find del_set index 8192 as target [ 1094.385141][ T6531] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1094.404805][ T6531] syzkaller1: linktype set to 0 [ 1094.679061][T18997] block nbd9: Receive control failed (result -107) [ 1094.808157][ T6549] ipt_rpfilter: unknown options [ 1095.084847][ T6563] __nla_validate_parse: 6 callbacks suppressed [ 1095.084864][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8256'. [ 1095.169815][ T6569] bond6 (unregistering): Released all slaves [ 1095.455036][ T6593] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8264'. [ 1095.479482][ T6595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1095.628443][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8266'. [ 1095.922668][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8269'. [ 1095.950639][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8269'. [ 1096.054453][ T6625] FAULT_INJECTION: forcing a failure. [ 1096.054453][ T6625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.055426][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8273'. [ 1096.068811][ T6625] CPU: 0 UID: 0 PID: 6625 Comm: syz.2.8272 Not tainted syzkaller #0 PREEMPT(full) [ 1096.068837][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1096.068848][ T6625] Call Trace: [ 1096.068857][ T6625] [ 1096.068864][ T6625] dump_stack_lvl+0xe8/0x150 [ 1096.068897][ T6625] should_fail_ex+0x40c/0x560 [ 1096.068924][ T6625] _copy_to_user+0x31/0xb0 [ 1096.068952][ T6625] bpf_verifier_vlog+0x496/0x900 [ 1096.068984][ T6625] __btf_verifier_log+0xe2/0x140 [ 1096.069021][ T6625] ? __pfx___btf_verifier_log+0x10/0x10 [ 1096.069040][ T6625] ? __might_fault+0xaf/0x130 [ 1096.069067][ T6625] ? btf_parse_hdr+0x1da/0x810 [ 1096.069096][ T6625] btf_parse_hdr+0x2bd/0x810 [ 1096.069124][ T6625] btf_new_fd+0x32f/0xbb0 [ 1096.069160][ T6625] __sys_bpf+0xd2e/0xd90 [ 1096.069192][ T6625] ? __pfx___sys_bpf+0x10/0x10 [ 1096.069225][ T6625] ? __fget_files+0x2a/0x420 [ 1096.069265][ T6625] ? ksys_write+0x242/0x270 [ 1096.069294][ T6625] ? __pfx_ksys_write+0x10/0x10 [ 1096.069325][ T6625] __x64_sys_bpf+0xba/0xd0 [ 1096.069347][ T6625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.069368][ T6625] do_syscall_64+0x174/0x580 [ 1096.069394][ T6625] ? trace_irq_disable+0x3b/0x140 [ 1096.069417][ T6625] ? clear_bhb_loop+0x40/0x90 [ 1096.069440][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.069458][ T6625] RIP: 0033:0x7f189819de59 [ 1096.069476][ T6625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.069492][ T6625] RSP: 002b:00007f1898f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1096.069512][ T6625] RAX: ffffffffffffffda RBX: 00007f1898425fa0 RCX: 00007f189819de59 [ 1096.069525][ T6625] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 1096.069538][ T6625] RBP: 00007f1898f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.069550][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.069561][ T6625] R13: 00007f1898426038 R14: 00007f1898425fa0 R15: 00007ffdb0216328 [ 1096.069592][ T6625] [ 1096.100092][ T6622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1096.309397][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8273'. [ 1096.319683][ T6627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1096.566874][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8278'. [ 1096.672010][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8278'. [ 1096.786224][ T6650] batadv0: entered promiscuous mode [ 1096.798934][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8274'. [ 1096.811847][ T6650] macsec2: entered promiscuous mode [ 1096.824923][ T6650] macsec2: entered allmulticast mode [ 1096.851811][ T6650] batadv0: entered allmulticast mode [ 1096.860042][ T6650] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1096.891886][ T6650] batadv0: left allmulticast mode [ 1096.901262][ T6650] batadv0: left promiscuous mode [ 1097.405294][ T6663] netlink: 'syz.3.8280': attribute type 1 has an invalid length. [ 1097.441897][ T6663] bond10: entered promiscuous mode [ 1097.447605][ T6663] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1097.461223][ T6663] netlink: 'syz.3.8280': attribute type 5 has an invalid length. [ 1097.654045][ T6663] bond10: (slave bridge4): making interface the new active one [ 1097.668971][ T6663] bridge4: entered promiscuous mode [ 1097.675652][ T6663] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 1099.120532][ T6756] netlink: 'syz.2.8302': attribute type 5 has an invalid length. [ 1099.130769][ T6758] syzkaller1: entered promiscuous mode [ 1099.136309][ T6758] syzkaller1: entered allmulticast mode [ 1099.478605][ T6775] netlink: 'syz.2.8306': attribute type 13 has an invalid length. [ 1099.486462][ T6775] netlink: 'syz.2.8306': attribute type 17 has an invalid length. [ 1099.494416][ T6775] netlink: 'syz.2.8306': attribute type 13 has an invalid length. [ 1099.502222][ T6775] netlink: 'syz.2.8306': attribute type 17 has an invalid length. [ 1099.510175][ T6775] netlink: 'syz.2.8306': attribute type 13 has an invalid length. [ 1099.517980][ T6775] netlink: 'syz.2.8306': attribute type 17 has an invalid length. [ 1100.108721][T10054] veth0_to_bond: left promiscuous mode [ 1100.139427][ T6811] __nla_validate_parse: 10 callbacks suppressed [ 1100.139444][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8316'. [ 1100.228229][ T6814] hsr0 speed is unknown, defaulting to 1000 [ 1100.370004][ T6822] hsr0: entered allmulticast mode [ 1100.386962][ T6822] hsr_slave_0: entered allmulticast mode [ 1100.401336][ T6822] hsr_slave_1: entered allmulticast mode [ 1100.448887][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8318'. [ 1100.496779][ T6822] hsr_slave_0: left promiscuous mode [ 1100.516752][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8321'. [ 1100.569432][ T6822] hsr_slave_1: left promiscuous mode [ 1100.589008][ T6834] netlink: 98 bytes leftover after parsing attributes in process `syz.3.8319'. [ 1100.601162][ T6822] hsr0 (unregistering): left allmulticast mode [ 1100.612982][ T6837] ip6_vti0: Master is either lo or non-ether device [ 1100.620064][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8320'. [ 1100.927175][ T6847] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1100.950767][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1100.987720][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1101.000686][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1101.055025][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1101.355759][ T6866] geneve3: entered promiscuous mode [ 1101.379980][ T8920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.402037][ T8920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.427453][ T6872] FAULT_INJECTION: forcing a failure. [ 1101.427453][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.447742][ T8920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.498306][ T6872] CPU: 0 UID: 0 PID: 6872 Comm: syz.0.8332 Not tainted syzkaller #0 PREEMPT(full) [ 1101.498334][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1101.498346][ T6872] Call Trace: [ 1101.498354][ T6872] [ 1101.498363][ T6872] dump_stack_lvl+0xe8/0x150 [ 1101.498397][ T6872] should_fail_ex+0x40c/0x560 [ 1101.498425][ T6872] should_failslab+0xa8/0x100 [ 1101.498456][ T6872] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1101.498479][ T6872] ? local_lock_release+0x9c/0x160 [ 1101.498534][ T6872] ? __alloc_skb+0x1d7/0x7a0 [ 1101.498557][ T6872] ? __alloc_skb+0x1d7/0x7a0 [ 1101.498588][ T6872] __alloc_skb+0x1d7/0x7a0 [ 1101.498619][ T6872] alloc_skb_with_frags+0xc6/0x760 [ 1101.498644][ T6872] ? __lock_acquire+0x683/0x2cf0 [ 1101.498673][ T6872] ? __lock_acquire+0x683/0x2cf0 [ 1101.498704][ T6872] sock_alloc_send_pskb+0x878/0x990 [ 1101.498743][ T6872] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1101.498767][ T6872] ? sock_def_readable+0xae/0x550 [ 1101.498794][ T6872] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1101.498820][ T6872] unix_dgram_sendmsg+0x4da/0x17b0 [ 1101.498859][ T6872] ? __lock_acquire+0x683/0x2cf0 [ 1101.498884][ T6872] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1101.498911][ T6872] ? aa_sock_msg_perm+0xda/0x1b0 [ 1101.498936][ T6872] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1101.498959][ T6872] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1101.498979][ T6872] sock_sendmsg_nosec+0x13a/0x180 [ 1101.499005][ T6872] ____sys_sendmsg+0x54e/0x850 [ 1101.499041][ T6872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1101.499078][ T6872] ? import_iovec+0x73/0xa0 [ 1101.499110][ T6872] ___sys_sendmsg+0x2a5/0x360 [ 1101.499143][ T6872] ? __pfx____sys_sendmsg+0x10/0x10 [ 1101.499169][ T6872] ? __lock_acquire+0x683/0x2cf0 [ 1101.499245][ T6872] __sys_sendmmsg+0x273/0x4d0 [ 1101.499279][ T6872] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1101.499313][ T6872] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1101.499351][ T6872] ? ksys_write+0x242/0x270 [ 1101.499380][ T6872] ? __pfx_ksys_write+0x10/0x10 [ 1101.499415][ T6872] __x64_sys_sendmmsg+0xa0/0xc0 [ 1101.499441][ T6872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.499461][ T6872] do_syscall_64+0x174/0x580 [ 1101.499487][ T6872] ? trace_irq_disable+0x3b/0x140 [ 1101.499517][ T6872] ? clear_bhb_loop+0x40/0x90 [ 1101.499541][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.499559][ T6872] RIP: 0033:0x7f8bf459de59 [ 1101.499577][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.499593][ T6872] RSP: 002b:00007f8bf53f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1101.499613][ T6872] RAX: ffffffffffffffda RBX: 00007f8bf4825fa0 RCX: 00007f8bf459de59 [ 1101.499628][ T6872] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1101.499640][ T6872] RBP: 00007f8bf53f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.499652][ T6872] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1101.499664][ T6872] R13: 00007f8bf4826038 R14: 00007f8bf4825fa0 R15: 00007ffd29676668 [ 1101.499695][ T6872] [ 1101.813903][ T8920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.941584][ T6852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.957095][ T6852] netlink: 'syz.4.8326': attribute type 11 has an invalid length. [ 1102.028524][ T6878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1102.258489][ T6889] syzkaller1: entered promiscuous mode [ 1102.264018][ T6889] syzkaller1: entered allmulticast mode [ 1102.272263][ T6890] xt_cgroup: invalid path, errno=-2 [ 1102.396164][ T6893] netlink: 'syz.4.8326': attribute type 11 has an invalid length. [ 1102.897598][ T6900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1102.969728][ T6900] macvlan5: entered promiscuous mode [ 1102.982682][ T6900] macvlan5: entered allmulticast mode [ 1102.998712][ T6900] bond6: entered promiscuous mode [ 1103.009678][ T6900] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1103.053039][ T6900] bond6: left promiscuous mode [ 1103.164705][ T6912] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode [ 1103.172229][ T6912] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode [ 1103.226264][ T6914] hsr0 speed is unknown, defaulting to 1000 [ 1103.282878][ T29] audit: type=1800 audit(1783773693.089:25): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8344" name="memory.events" dev="tmpfs" ino=2584 res=0 errno=0 [ 1103.376416][ T29] audit: type=1800 audit(1783773693.219:26): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8344" name="memory.events" dev="tmpfs" ino=2584 res=0 errno=0 [ 1103.899229][ T6959] x_tables: duplicate entry at hook 1 [ 1104.526503][ T6974] bond3: left promiscuous mode [ 1104.532221][ T6974] bond3: left allmulticast mode [ 1104.552339][ T6974] team1: left promiscuous mode [ 1104.557468][ T6974] team1: left allmulticast mode [ 1104.565342][ T6974] team2: left promiscuous mode [ 1104.570275][ T6974] team2: left allmulticast mode [ 1104.577968][ T6974] ip6gre2: left promiscuous mode [ 1104.582993][ T6974] ip6gre2: left allmulticast mode [ 1104.606597][ T6974] mac80211_hwsim hwsim63 syzkaller0: left promiscuous mode [ 1104.613926][ T6974] mac80211_hwsim hwsim63 syzkaller0: left allmulticast mode [ 1104.622246][ T6974] vlan2: left allmulticast mode [ 1104.627109][ T6974] bond0: left allmulticast mode [ 1104.686139][ T6974] gretap2: left allmulticast mode [ 1104.706954][ T6974] ip6erspan0: left allmulticast mode [ 1104.718349][ T6974] bond6: left promiscuous mode [ 1104.723153][ T6974] bond6: left allmulticast mode [ 1104.729903][ T6974] ip6tnl1: left allmulticast mode [ 1104.743252][ T6978] hsr_slave_0: left promiscuous mode [ 1104.752151][ T6978] hsr_slave_1: left promiscuous mode [ 1104.808195][T10054] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.826999][T10054] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.841738][T10054] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.853607][T10054] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.870518][T10054] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.928090][T10054] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.955251][T10054] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.963658][T10054] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.093724][ T7013] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1105.155394][ T7015] netlink: 'syz.0.8368': attribute type 29 has an invalid length. [ 1105.172873][ T7015] netlink: 'syz.0.8368': attribute type 1 has an invalid length. [ 1105.180575][ T7006] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 1105.275758][ T7023] __nla_validate_parse: 15 callbacks suppressed [ 1105.275778][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1105.435904][ T7033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8370'. [ 1105.445235][ T7033] netlink: 47 bytes leftover after parsing attributes in process `syz.1.8370'. [ 1105.454795][ T7033] netlink: 'syz.1.8370': attribute type 6 has an invalid length. [ 1105.463718][ T7033] netlink: 'syz.1.8370': attribute type 6 has an invalid length. [ 1105.785361][ T7064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.889738][ T7064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.902749][ T7064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.176990][ T7079] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 1106.343244][ T7090] netlink: 'syz.0.8388': attribute type 1 has an invalid length. [ 1106.351763][ T7090] netlink: 'syz.0.8388': attribute type 2 has an invalid length. [ 1106.362936][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8388'. [ 1106.502349][ T7092] tipc: New replicast peer: 255.255.255.255 [ 1106.509699][ T7092] tipc: Enabled bearer , priority 10 [ 1106.657315][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1106.767291][ T7097] syzkaller0: entered promiscuous mode [ 1106.772812][ T7097] syzkaller0: entered allmulticast mode [ 1111.498772][ T8920] veth1_virt_wifi: left promiscuous mode [ 1111.504641][ T8920] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 1111.766836][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8404'. [ 1111.856582][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8405'. [ 1112.027683][ T8920] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1112.120967][ T8920] bond0 (unregistering): Released all slaves [ 1112.134778][ T8920] bond1 (unregistering): Released all slaves [ 1112.150025][ T8920] bond2 (unregistering): (slave veth7): Releasing active interface [ 1112.159439][ T8920] bond2 (unregistering): Released all slaves [ 1112.182835][ T8920] bond3 (unregistering): Released all slaves [ 1112.218428][ T8920] bond4 (unregistering): (slave veth9): Releasing backup interface [ 1112.227188][ T8920] bond4 (unregistering): Released all slaves [ 1112.241922][ T8920] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1112.252178][ T8920] bond5 (unregistering): Released all slaves [ 1112.265034][ T8920] bond6 (unregistering): Released all slaves [ 1112.281170][ T8920] bond7 (unregistering): Released all slaves [ 1112.298095][ T8920] bond8 (unregistering): Released all slaves [ 1112.319188][ T8920] bond9 (unregistering): Released all slaves [ 1112.384049][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8407'. [ 1112.393084][ T7169] netlink: 'syz.1.8407': attribute type 7 has an invalid length. [ 1112.413295][ T7157] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1112.432353][ T7169] netlink: 'syz.1.8407': attribute type 8 has an invalid length. [ 1112.444292][ T7157] bond11 (unregistering): Released all slaves [ 1112.452732][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8407'. [ 1112.481066][ T7158] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1112.510506][ T7158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.519305][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8405'. [ 1112.567131][ T7175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1112.602603][ T8920] : left promiscuous mode [ 1112.955095][ T8920] : left promiscuous mode [ 1113.138643][ T8920] tipc: Left network mode [ 1113.286174][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8417'. [ 1113.319811][ T7215] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1113.627167][ T7225] netlink: 'syz.2.8416': attribute type 58 has an invalid length. [ 1113.909689][ T7227] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8421'. [ 1114.100645][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8422'. [ 1114.128246][ T7227] syzkaller0: entered promiscuous mode [ 1114.133771][ T7227] syzkaller0: entered allmulticast mode [ 1114.626394][ T7254] ip6gre4: entered promiscuous mode [ 1114.633264][ T7254] ip6gre4: entered allmulticast mode [ 1114.707146][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8430'. [ 1114.716190][ T7259] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1114.831444][ T7259] netlink: 1000 bytes leftover after parsing attributes in process `syz.2.8430'. [ 1115.030411][T10058] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1115.060698][ T9504] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1115.060715][T10058] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1115.271202][ T7293] (: renamed from bridge_slave_0 (while UP) [ 1115.647352][ T8920] hsr_slave_0: left promiscuous mode [ 1115.687572][ T8920] hsr_slave_1: left promiscuous mode [ 1115.960561][ T9504] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1116.145205][ T9516] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1116.395560][ T7341] FAULT_INJECTION: forcing a failure. [ 1116.395560][ T7341] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.408218][ T7341] CPU: 1 UID: 0 PID: 7341 Comm: syz.0.8449 Not tainted syzkaller #0 PREEMPT(full) [ 1116.408244][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.408255][ T7341] Call Trace: [ 1116.408265][ T7341] [ 1116.408274][ T7341] dump_stack_lvl+0xe8/0x150 [ 1116.408308][ T7341] should_fail_ex+0x40c/0x560 [ 1116.408336][ T7341] should_failslab+0xa8/0x100 [ 1116.408367][ T7341] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1116.408390][ T7341] ? local_lock_release+0x9c/0x160 [ 1116.408418][ T7341] ? __alloc_skb+0x1d7/0x7a0 [ 1116.408441][ T7341] ? __alloc_skb+0x1d7/0x7a0 [ 1116.408472][ T7341] __alloc_skb+0x1d7/0x7a0 [ 1116.408502][ T7341] alloc_skb_with_frags+0xc6/0x760 [ 1116.408526][ T7341] ? __lock_acquire+0x683/0x2cf0 [ 1116.408551][ T7341] ? __lock_acquire+0x683/0x2cf0 [ 1116.408578][ T7341] sock_alloc_send_pskb+0x878/0x990 [ 1116.408615][ T7341] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1116.408638][ T7341] ? sock_def_readable+0xae/0x550 [ 1116.408664][ T7341] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1116.408690][ T7341] unix_dgram_sendmsg+0x4da/0x17b0 [ 1116.408730][ T7341] ? __lock_acquire+0x683/0x2cf0 [ 1116.408754][ T7341] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1116.408781][ T7341] ? aa_sock_msg_perm+0xda/0x1b0 [ 1116.408802][ T7341] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1116.408825][ T7341] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1116.408846][ T7341] sock_sendmsg_nosec+0x13a/0x180 [ 1116.408872][ T7341] ____sys_sendmsg+0x54e/0x850 [ 1116.408906][ T7341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.408945][ T7341] ? import_iovec+0x73/0xa0 [ 1116.408983][ T7341] ___sys_sendmsg+0x2a5/0x360 [ 1116.409017][ T7341] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.409044][ T7341] ? __lock_acquire+0x683/0x2cf0 [ 1116.409110][ T7341] __sys_sendmmsg+0x273/0x4d0 [ 1116.409140][ T7341] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1116.409174][ T7341] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1116.409214][ T7341] ? ksys_write+0x242/0x270 [ 1116.409244][ T7341] ? __pfx_ksys_write+0x10/0x10 [ 1116.409276][ T7341] __x64_sys_sendmmsg+0xa0/0xc0 [ 1116.409302][ T7341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.409321][ T7341] do_syscall_64+0x174/0x580 [ 1116.409345][ T7341] ? trace_irq_disable+0x3b/0x140 [ 1116.409368][ T7341] ? clear_bhb_loop+0x40/0x90 [ 1116.409392][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.409411][ T7341] RIP: 0033:0x7f8bf459de59 [ 1116.409430][ T7341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.409447][ T7341] RSP: 002b:00007f8bf53f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1116.409468][ T7341] RAX: ffffffffffffffda RBX: 00007f8bf4825fa0 RCX: 00007f8bf459de59 [ 1116.409481][ T7341] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1116.409494][ T7341] RBP: 00007f8bf53f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.409506][ T7341] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1116.409519][ T7341] R13: 00007f8bf4826038 R14: 00007f8bf4825fa0 R15: 00007ffd29676668 [ 1116.409549][ T7341] [ 1116.941750][ T7356] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1116.950323][ T7356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1117.029950][ T7360] __nla_validate_parse: 3 callbacks suppressed [ 1117.029970][ T7360] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8454'. [ 1117.090728][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8456'. [ 1117.149433][ T7365] syzkaller0: entered promiscuous mode [ 1117.154963][ T7365] syzkaller0: entered allmulticast mode [ 1117.164620][ T7365] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003 [ 1117.755518][ T7393] FAULT_INJECTION: forcing a failure. [ 1117.755518][ T7393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.770791][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.3.8463 Not tainted syzkaller #0 PREEMPT(full) [ 1117.770819][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.770831][ T7393] Call Trace: [ 1117.770839][ T7393] [ 1117.770848][ T7393] dump_stack_lvl+0xe8/0x150 [ 1117.770882][ T7393] should_fail_ex+0x40c/0x560 [ 1117.770909][ T7393] _copy_from_user+0x2d/0xb0 [ 1117.770937][ T7393] ___sys_sendmsg+0x1c6/0x360 [ 1117.770972][ T7393] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.770998][ T7393] ? __lock_acquire+0x683/0x2cf0 [ 1117.771073][ T7393] __sys_sendmmsg+0x273/0x4d0 [ 1117.771107][ T7393] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1117.771144][ T7393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1117.771186][ T7393] ? ksys_write+0x242/0x270 [ 1117.771215][ T7393] ? __pfx_ksys_write+0x10/0x10 [ 1117.771248][ T7393] __x64_sys_sendmmsg+0xa0/0xc0 [ 1117.771275][ T7393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.771295][ T7393] do_syscall_64+0x174/0x580 [ 1117.771322][ T7393] ? trace_irq_disable+0x3b/0x140 [ 1117.771346][ T7393] ? clear_bhb_loop+0x40/0x90 [ 1117.771370][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.771389][ T7393] RIP: 0033:0x7feaabd9de59 [ 1117.771408][ T7393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.771425][ T7393] RSP: 002b:00007feaacd32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1117.771455][ T7393] RAX: ffffffffffffffda RBX: 00007feaac025fa0 RCX: 00007feaabd9de59 [ 1117.771470][ T7393] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1117.771483][ T7393] RBP: 00007feaacd32090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.771495][ T7393] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1117.771508][ T7393] R13: 00007feaac026038 R14: 00007feaac025fa0 R15: 00007fff2d248bb8 [ 1117.771539][ T7393] [ 1118.072423][ T7395] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8465'. [ 1118.081431][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8465'. [ 1118.175845][ T7404] netlink: 'syz.0.8466': attribute type 1 has an invalid length. [ 1118.332893][ T7404] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1118.348929][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8466'. [ 1118.357846][ T7404] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8466'. [ 1118.406860][ T7404] bond8: (slave geneve3): making interface the new active one [ 1118.415791][ T7404] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1118.427220][ T7174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.436131][ T7174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.472467][ T7174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.480719][ T7174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.582397][ T7417] syzkaller0: entered promiscuous mode [ 1118.597298][ T7417] syzkaller0: entered allmulticast mode [ 1118.634418][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8471'. [ 1118.676676][ T7425] netlink: 'syz.0.8471': attribute type 1 has an invalid length. [ 1118.699850][ T7425] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1118.717208][ T7425] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1118.822167][ T8920] IPVS: stop unused estimator thread 0... [ 1118.892577][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8472'. [ 1118.908079][ T7437] ip6gre1: entered promiscuous mode [ 1118.915532][ T7437] ip6gre1: entered allmulticast mode [ 1119.157865][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1119.285786][ T7446] FAULT_INJECTION: forcing a failure. [ 1119.285786][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.298448][ T7446] CPU: 1 UID: 0 PID: 7446 Comm: syz.0.8478 Not tainted syzkaller #0 PREEMPT(full) [ 1119.298473][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1119.298483][ T7446] Call Trace: [ 1119.298492][ T7446] [ 1119.298500][ T7446] dump_stack_lvl+0xe8/0x150 [ 1119.298534][ T7446] should_fail_ex+0x40c/0x560 [ 1119.298557][ T7446] should_failslab+0xa8/0x100 [ 1119.298584][ T7446] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1119.298606][ T7446] ? local_lock_release+0x9c/0x160 [ 1119.298632][ T7446] ? __alloc_skb+0x1d7/0x7a0 [ 1119.298654][ T7446] ? __alloc_skb+0x1d7/0x7a0 [ 1119.298684][ T7446] __alloc_skb+0x1d7/0x7a0 [ 1119.298712][ T7446] alloc_skb_with_frags+0xc6/0x760 [ 1119.298733][ T7446] ? __lock_acquire+0x683/0x2cf0 [ 1119.298755][ T7446] ? __lock_acquire+0x683/0x2cf0 [ 1119.298779][ T7446] sock_alloc_send_pskb+0x878/0x990 [ 1119.298816][ T7446] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1119.298835][ T7446] ? sock_def_readable+0xae/0x550 [ 1119.298856][ T7446] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1119.298876][ T7446] unix_dgram_sendmsg+0x4da/0x17b0 [ 1119.298909][ T7446] ? __lock_acquire+0x683/0x2cf0 [ 1119.298929][ T7446] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1119.298953][ T7446] ? aa_sock_msg_perm+0xda/0x1b0 [ 1119.298971][ T7446] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1119.298989][ T7446] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1119.299005][ T7446] sock_sendmsg_nosec+0x13a/0x180 [ 1119.299025][ T7446] ____sys_sendmsg+0x54e/0x850 [ 1119.299053][ T7446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1119.299083][ T7446] ? import_iovec+0x73/0xa0 [ 1119.299106][ T7446] ___sys_sendmsg+0x2a5/0x360 [ 1119.299133][ T7446] ? __pfx____sys_sendmsg+0x10/0x10 [ 1119.299153][ T7446] ? __lock_acquire+0x683/0x2cf0 [ 1119.299211][ T7446] __sys_sendmmsg+0x273/0x4d0 [ 1119.299238][ T7446] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1119.299267][ T7446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1119.299303][ T7446] ? ksys_write+0x242/0x270 [ 1119.299327][ T7446] ? __pfx_ksys_write+0x10/0x10 [ 1119.299354][ T7446] __x64_sys_sendmmsg+0xa0/0xc0 [ 1119.299377][ T7446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.299394][ T7446] do_syscall_64+0x174/0x580 [ 1119.299414][ T7446] ? trace_irq_disable+0x3b/0x140 [ 1119.299434][ T7446] ? clear_bhb_loop+0x40/0x90 [ 1119.299452][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.299468][ T7446] RIP: 0033:0x7f8bf459de59 [ 1119.299484][ T7446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.299499][ T7446] RSP: 002b:00007f8bf53f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1119.299516][ T7446] RAX: ffffffffffffffda RBX: 00007f8bf4825fa0 RCX: 00007f8bf459de59 [ 1119.299528][ T7446] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1119.299539][ T7446] RBP: 00007f8bf53f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.299549][ T7446] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 1119.299559][ T7446] R13: 00007f8bf4826038 R14: 00007f8bf4825fa0 R15: 00007ffd29676668 [ 1119.299585][ T7446] [ 1119.974169][ T7457] hsr0 speed is unknown, defaulting to 1000 [ 1120.397393][ T8920] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.405818][ T8920] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.414193][ T8920] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.488258][ T8920] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.791413][ T7491] xt_hashlimit: size too large, truncated to 1048576 [ 1120.899006][ T7491] xt_hashlimit: size too large, truncated to 1048576 [ 1121.101684][ T7508] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8490'. [ 1121.133459][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8490'. [ 1121.155018][ T7507] vlan3: entered promiscuous mode [ 1121.160103][ T7507] gretap0: entered promiscuous mode [ 1121.480488][ T7523] tipc: Cannot configure node identity twice [ 1121.897308][ T7552] hsr0 speed is unknown, defaulting to 1000 [ 1121.988549][ T7558] bridge_slave_0: left allmulticast mode [ 1122.010850][ T7558] bridge_slave_0: left promiscuous mode [ 1122.029182][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.055793][ T7558] bridge_slave_1: left allmulticast mode [ 1122.062621][ T7558] bridge_slave_1: left promiscuous mode [ 1122.072207][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.090882][ T7558] bond0: (slave bond_slave_0): Releasing backup interface [ 1122.120092][ T7558] bond0: (slave bond_slave_1): Releasing backup interface [ 1122.173060][ T7558] team0: Port device team_slave_0 removed [ 1122.181310][ T7558] team0: Port device team_slave_1 removed [ 1122.187462][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.195557][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.210810][ T7558] bond6: (slave gretap1): Removing an active aggregator [ 1122.221510][ T7558] bond6: (slave gretap1): Releasing backup interface [ 1122.232182][ T7558] bond8: (slave geneve2): Releasing active interface [ 1122.240311][ T7558] batman_adv: batadv0: Interface deactivated: gretap2 [ 1122.247120][ T7558] batman_adv: batadv0: Removing interface: gretap2 [ 1122.299614][ T7564] bond0: (slave wlan0): Opening slave failed [ 1122.528807][ T7594] FAULT_INJECTION: forcing a failure. [ 1122.528807][ T7594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.542122][ T7594] CPU: 1 UID: 0 PID: 7594 Comm: syz.1.8511 Not tainted syzkaller #0 PREEMPT(full) [ 1122.542149][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1122.542161][ T7594] Call Trace: [ 1122.542170][ T7594] [ 1122.542178][ T7594] dump_stack_lvl+0xe8/0x150 [ 1122.542213][ T7594] should_fail_ex+0x40c/0x560 [ 1122.542240][ T7594] _copy_to_user+0x31/0xb0 [ 1122.542271][ T7594] bpf_verifier_vlog+0x496/0x900 [ 1122.542303][ T7594] btf_verifier_log+0x11d/0x1a0 [ 1122.542324][ T7594] ? __kvmalloc_node_noprof+0x53f/0x860 [ 1122.542348][ T7594] ? btf_parse_type_sec+0x517/0x2360 [ 1122.542373][ T7594] ? btf_new_fd+0x487/0xbb0 [ 1122.542399][ T7594] ? __sys_bpf+0xd2e/0xd90 [ 1122.542425][ T7594] ? __pfx_btf_verifier_log+0x10/0x10 [ 1122.542461][ T7594] __btf_verifier_log_type+0x45d/0x6a0 [ 1122.542495][ T7594] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1122.542524][ T7594] ? rcu_is_watching+0x15/0xb0 [ 1122.542552][ T7594] ? trace_kmalloc+0x2a/0xf0 [ 1122.542575][ T7594] btf_enum64_check_meta+0x21c/0xe20 [ 1122.542604][ T7594] ? rcu_is_watching+0x15/0xb0 [ 1122.542631][ T7594] ? kfree+0x4d/0x640 [ 1122.542658][ T7594] btf_parse_type_sec+0x3cf/0x2360 [ 1122.542692][ T7594] ? btf_parse_hdr+0x1da/0x810 [ 1122.542728][ T7594] ? btf_parse_hdr+0x5f2/0x810 [ 1122.542751][ T7594] ? btf_parse_str_sec+0x244/0x2f0 [ 1122.542781][ T7594] btf_new_fd+0x487/0xbb0 [ 1122.542815][ T7594] __sys_bpf+0xd2e/0xd90 [ 1122.542846][ T7594] ? __pfx___sys_bpf+0x10/0x10 [ 1122.542881][ T7594] ? __fget_files+0x2a/0x420 [ 1122.542922][ T7594] ? ksys_write+0x242/0x270 [ 1122.542952][ T7594] ? __pfx_ksys_write+0x10/0x10 [ 1122.542985][ T7594] __x64_sys_bpf+0xba/0xd0 [ 1122.543008][ T7594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.543029][ T7594] do_syscall_64+0x174/0x580 [ 1122.543056][ T7594] ? trace_irq_disable+0x3b/0x140 [ 1122.543080][ T7594] ? clear_bhb_loop+0x40/0x90 [ 1122.543104][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.543123][ T7594] RIP: 0033:0x7fd3e779de59 [ 1122.543142][ T7594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.543159][ T7594] RSP: 002b:00007fd3e8704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1122.543180][ T7594] RAX: ffffffffffffffda RBX: 00007fd3e7a25fa0 RCX: 00007fd3e779de59 [ 1122.543194][ T7594] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 1122.543207][ T7594] RBP: 00007fd3e8704090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.543219][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1122.543230][ T7594] R13: 00007fd3e7a26038 R14: 00007fd3e7a25fa0 R15: 00007ffeb402ccb8 [ 1122.543260][ T7594] [ 1123.004498][ T7603] __nla_validate_parse: 5 callbacks suppressed [ 1123.004517][ T7603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8514'. [ 1123.017431][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8513'. [ 1123.093588][ T7607] netlink: 'syz.1.8516': attribute type 1 has an invalid length. [ 1123.110135][ T7607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.549552][ T7629] FAULT_INJECTION: forcing a failure. [ 1123.549552][ T7629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.564842][ T7629] CPU: 0 UID: 0 PID: 7629 Comm: syz.1.8524 Not tainted syzkaller #0 PREEMPT(full) [ 1123.564869][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1123.564880][ T7629] Call Trace: [ 1123.564888][ T7629] [ 1123.564897][ T7629] dump_stack_lvl+0xe8/0x150 [ 1123.564932][ T7629] should_fail_ex+0x40c/0x560 [ 1123.564960][ T7629] _copy_to_user+0x31/0xb0 [ 1123.565001][ T7629] bpf_verifier_vlog+0x496/0x900 [ 1123.565034][ T7629] __btf_verifier_log+0xe2/0x140 [ 1123.565055][ T7629] ? __kvmalloc_node_noprof+0x53f/0x860 [ 1123.565080][ T7629] ? btf_parse_type_sec+0x517/0x2360 [ 1123.565106][ T7629] ? btf_new_fd+0x487/0xbb0 [ 1123.565131][ T7629] ? __sys_bpf+0xd2e/0xd90 [ 1123.565158][ T7629] ? __pfx___btf_verifier_log+0x10/0x10 [ 1123.565193][ T7629] __btf_verifier_log_type+0x4a0/0x6a0 [ 1123.565228][ T7629] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1123.565257][ T7629] ? rcu_is_watching+0x15/0xb0 [ 1123.565290][ T7629] ? trace_kmalloc+0x2a/0xf0 [ 1123.565314][ T7629] btf_enum64_check_meta+0x21c/0xe20 [ 1123.565344][ T7629] ? rcu_is_watching+0x15/0xb0 [ 1123.565372][ T7629] ? kfree+0x4d/0x640 [ 1123.565398][ T7629] btf_parse_type_sec+0x3cf/0x2360 [ 1123.565433][ T7629] ? btf_parse_hdr+0x1da/0x810 [ 1123.565463][ T7629] ? btf_parse_hdr+0x5f2/0x810 [ 1123.565487][ T7629] ? btf_parse_str_sec+0x244/0x2f0 [ 1123.565517][ T7629] btf_new_fd+0x487/0xbb0 [ 1123.565551][ T7629] __sys_bpf+0xd2e/0xd90 [ 1123.565584][ T7629] ? __pfx___sys_bpf+0x10/0x10 [ 1123.565620][ T7629] ? __fget_files+0x2a/0x420 [ 1123.565661][ T7629] ? ksys_write+0x242/0x270 [ 1123.565693][ T7629] ? __pfx_ksys_write+0x10/0x10 [ 1123.565726][ T7629] __x64_sys_bpf+0xba/0xd0 [ 1123.565749][ T7629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.565770][ T7629] do_syscall_64+0x174/0x580 [ 1123.565798][ T7629] ? trace_irq_disable+0x3b/0x140 [ 1123.565821][ T7629] ? clear_bhb_loop+0x40/0x90 [ 1123.565845][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.565865][ T7629] RIP: 0033:0x7fd3e779de59 [ 1123.565883][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.565900][ T7629] RSP: 002b:00007fd3e8704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1123.565919][ T7629] RAX: ffffffffffffffda RBX: 00007fd3e7a25fa0 RCX: 00007fd3e779de59 [ 1123.565933][ T7629] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 1123.565946][ T7629] RBP: 00007fd3e8704090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.565958][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.565969][ T7629] R13: 00007fd3e7a26038 R14: 00007fd3e7a25fa0 R15: 00007ffeb402ccb8 [ 1123.566008][ T7629] [ 1123.861147][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8518'. [ 1123.918314][ T7635] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1124.018526][ T7639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1124.040288][ T7639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1124.194751][ T7650] netlink: 'syz.1.8530': attribute type 7 has an invalid length. [ 1124.303135][ T7650] bridge0: port 1(vlan3) entered blocking state [ 1124.311177][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8532'. [ 1124.346479][ T7650] bridge0: port 1(vlan3) entered disabled state [ 1124.352107][ T7661] FAULT_INJECTION: forcing a failure. [ 1124.352107][ T7661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.366310][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.2.8535 Not tainted syzkaller #0 PREEMPT(full) [ 1124.366334][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.366345][ T7661] Call Trace: [ 1124.366352][ T7661] [ 1124.366359][ T7661] dump_stack_lvl+0xe8/0x150 [ 1124.366389][ T7661] should_fail_ex+0x40c/0x560 [ 1124.366413][ T7661] _copy_to_user+0x31/0xb0 [ 1124.366441][ T7661] bpf_log_attr_finalize+0x124/0x1e0 [ 1124.366462][ T7661] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1124.366484][ T7661] ? btf_parse_hdr+0x5f2/0x810 [ 1124.366509][ T7661] ? btf_parse_str_sec+0x244/0x2f0 [ 1124.366537][ T7661] btf_new_fd+0x35e/0xbb0 [ 1124.366570][ T7661] __sys_bpf+0xd2e/0xd90 [ 1124.366602][ T7661] ? __pfx___sys_bpf+0x10/0x10 [ 1124.366636][ T7661] ? __fget_files+0x2a/0x420 [ 1124.366677][ T7661] ? ksys_write+0x242/0x270 [ 1124.366705][ T7661] ? __pfx_ksys_write+0x10/0x10 [ 1124.366737][ T7661] __x64_sys_bpf+0xba/0xd0 [ 1124.366760][ T7661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.366780][ T7661] do_syscall_64+0x174/0x580 [ 1124.366806][ T7661] ? trace_irq_disable+0x3b/0x140 [ 1124.366830][ T7661] ? clear_bhb_loop+0x40/0x90 [ 1124.366854][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.366873][ T7661] RIP: 0033:0x7f189819de59 [ 1124.366891][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.366908][ T7661] RSP: 002b:00007f1898f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1124.366929][ T7661] RAX: ffffffffffffffda RBX: 00007f1898425fa0 RCX: 00007f189819de59 [ 1124.366943][ T7661] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 1124.366964][ T7661] RBP: 00007f1898f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.366976][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1124.366987][ T7661] R13: 00007f1898426038 R14: 00007f1898425fa0 R15: 00007ffdb0216328 [ 1124.367017][ T7661] [ 1124.367929][ T7650] vlan3: entered allmulticast mode [ 1124.580091][ T7650] geneve0: entered allmulticast mode [ 1124.715154][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8536'. [ 1124.720629][ T7678] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8538'. [ 1125.183686][ T50] block nbd10: Receive control failed (result -32) [ 1125.183734][T18997] block nbd10: Receive control failed (result -32) [ 1125.194900][T30210] block nbd10: Receive control failed (result -32) [ 1125.366768][ T7704] Cannot find add_set index 2 as target [ 1125.431327][ T7709] netlink: 'syz.2.8547': attribute type 1 has an invalid length. [ 1125.467737][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8548'. [ 1125.703001][ T7720] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1125.885580][ T7726] bond10: option min_links: invalid value (18446744073709551612) [ 1125.900694][ T7726] bond10: option min_links: allowed values 0 - 2147483647 [ 1125.912901][ T7726] bond10 (unregistering): Released all slaves [ 1126.553672][ T7764] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1126.754796][ T7769] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1126.765746][ T7769] Unknown options in mask 6 [ 1127.083581][ T7777] netlink: 'syz.1.8566': attribute type 30 has an invalid length. [ 1127.830468][ T7787] netlink: 'syz.2.8569': attribute type 4 has an invalid length. [ 1127.862654][ T7814] netlink: 'syz.0.8578': attribute type 1 has an invalid length. [ 1128.037620][ T7814] bond10: entered promiscuous mode [ 1128.043246][ T7814] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1128.072964][ T7827] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1128.081986][ T7827] bond10: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1128.101485][ T7827] bond10: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1128.131247][ T7827] bond10: (slave xfrm1): making interface the new active one [ 1128.139795][ T7827] xfrm1: entered promiscuous mode [ 1128.148414][ T7832] __nla_validate_parse: 9 callbacks suppressed [ 1128.148432][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1128.185561][ T7827] bond10: (slave xfrm1): Enslaving as an active interface with an up link [ 1133.169428][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1133.220149][ T7872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1133.232051][ T7865] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1133.279513][ T7876] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1133.350684][ T7883] netlink: 'syz.3.8595': attribute type 1 has an invalid length. [ 1133.408430][ T7883] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1133.516861][ T7892] macvtap1: entered promiscuous mode [ 1133.522221][ T7892] bridge0: entered promiscuous mode [ 1133.792892][ T7904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8602'. [ 1133.992898][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8601'. [ 1134.008281][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8602'. [ 1134.019038][ T7910] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1134.098674][ T7894] netlink: 'syz.1.8596': attribute type 4 has an invalid length. [ 1134.112482][ T7894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1134.142771][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1134.190585][ T7894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1134.277781][ T7920] mac80211_hwsim hwsim63 syzkaller0: entered promiscuous mode [ 1134.285376][ T7920] mac80211_hwsim hwsim63 syzkaller0: entered allmulticast mode [ 1134.526461][ T7929] netlink: 'syz.1.8606': attribute type 4 has an invalid length. [ 1134.534717][ T7929] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8606'. [ 1134.820007][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8611'. [ 1135.003678][ T7952] syzkaller1: entered promiscuous mode [ 1135.009511][ T7952] syzkaller1: entered allmulticast mode [ 1135.121933][ T7958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1135.231105][ T7960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.242617][ T7960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1135.392486][ T7970] netlink: 'syz.3.8620': attribute type 4 has an invalid length. [ 1135.542880][ T7979] Cannot find add_set index 0 as target [ 1136.141686][ T8020] gre0: entered promiscuous mode [ 1136.150620][ T8020] gre0: entered allmulticast mode [ 1136.226882][ T7174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1136.238689][ T7174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1136.267614][ T7174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1136.292472][ T7174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1136.628642][ T8032] syz_tun: left allmulticast mode [ 1136.633741][ T8032] syz_tun: left promiscuous mode [ 1136.638916][ T8032] bridge0: port 2(syz_tun) entered disabled state [ 1136.812204][ T8032] bridge_slave_0: left allmulticast mode [ 1136.819302][ T8032] bridge_slave_0: left promiscuous mode [ 1136.826294][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.995830][ T8032] bond0: (slave 07ÿ): Releasing backup interface [ 1137.011863][ T29] audit: type=1800 audit(1783773726.859:27): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8636" name="memory.events" dev="tmpfs" ino=2233 res=0 errno=0 [ 1137.042416][ T8032] ÿ: left promiscuous mode [ 1137.083506][ T8032] team0: Port device team_slave_0 removed [ 1137.179119][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.190709][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.202549][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.214920][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.244178][ T8062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.267562][ T8032] team0: Port device team_slave_1 removed [ 1137.274363][ T8032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.281778][ T8032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.290528][ T8032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.297941][ T8032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.310488][ T8032] bond4: (slave macvlan1): Releasing backup interface [ 1137.325148][ T8032] bond1: (slave ip6gretap1): Releasing active interface [ 1137.504616][ T8063] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1138.225254][ T8099] netlink: 'syz.0.8656': attribute type 1 has an invalid length. [ 1138.243052][ T8097] __nla_validate_parse: 10 callbacks suppressed [ 1138.243080][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8655'. [ 1138.479553][ T8099] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1138.600666][ T8100] bond12: entered allmulticast mode [ 1138.955650][ T8116] syzkaller1: entered promiscuous mode [ 1138.962912][ T8116] syzkaller1: entered allmulticast mode [ 1139.059379][ T8129] xt_TCPMSS: Only works on TCP SYN packets [ 1139.286410][ T8136] xt_hashlimit: max too large, truncated to 1048576 [ 1139.300035][ T8136] xt_hashlimit: overflow, try lower: 2/0 [ 1140.240544][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8672'. [ 1142.936013][ T8186] netlink: 'syz.0.8674': attribute type 3 has an invalid length. [ 1143.177692][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8677'. [ 1143.369048][ T8199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.385062][ T8199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.559392][ T8199] ip6gre1: left promiscuous mode [ 1143.564357][ T8199] ip6gre1: left allmulticast mode [ 1143.570066][ T8199] geneve2: left promiscuous mode [ 1143.575128][ T8199] geneve2: left allmulticast mode [ 1143.580348][ T8199] macvtap1: left promiscuous mode [ 1143.585558][ T8199] hsr1: left promiscuous mode [ 1143.590731][ T8199] mac80211_hwsim hwsim72 syzkaller0: left promiscuous mode [ 1143.598729][ T8199] mac80211_hwsim hwsim72 syzkaller0: left allmulticast mode [ 1143.616071][ T8199] vlan2: left allmulticast mode [ 1143.621816][ T8199] bond0: left allmulticast mode [ 1143.626712][ T8199] gretap1: left allmulticast mode [ 1143.632728][ T8199] bond4: left promiscuous mode [ 1143.637519][ T8199] gre1: left promiscuous mode [ 1143.674024][ T8199] gretap2: left allmulticast mode [ 1143.688330][ T8199] vxlan2: left promiscuous mode [ 1143.693226][ T8199] vxlan2: left allmulticast mode [ 1143.703119][ T8199] batman_adv: batadv0: Interface deactivated: gretap3 [ 1143.712419][ T8199] bond7: left promiscuous mode [ 1143.717232][ T8199] bond7: left allmulticast mode [ 1143.736432][ T8199] veth3: left allmulticast mode [ 1143.749994][ T8199] bond10: left promiscuous mode [ 1143.754924][ T8199] bridge4: left promiscuous mode [ 1143.766806][ T8199] geneve3: left promiscuous mode [ 1144.029351][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8682'. [ 1144.048418][ T8206] ÿ: entered promiscuous mode [ 1144.066672][ T8206] ÿ: entered allmulticast mode [ 1144.153929][ T7174] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.164075][ T7174] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.173586][ T7174] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.182889][ T7174] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.192036][ T8224] netlink: 'syz.4.8682': attribute type 12 has an invalid length. [ 1144.288895][ T8243] xt_nfacct: accounting object `syz1' does not exist [ 1144.294390][ T8222] bond12: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1144.314010][ T8222] bond12 (unregistering): Released all slaves [ 1144.338674][ T7174] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.347592][ T7174] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.356573][ T8233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8681'. [ 1144.521452][ T7174] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.530372][ T7174] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.547246][ T8242] can: request_module (can-proto-0) failed. [ 1144.585537][ T8248] bridge8: entered promiscuous mode [ 1144.590857][ T8248] bridge8: entered allmulticast mode [ 1144.700286][ T8261] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8689'. [ 1144.703868][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8688'. [ 1145.048993][ T8281] syzkaller0: entered promiscuous mode [ 1145.054519][ T8281] syzkaller0: entered allmulticast mode [ 1145.077501][ T8271] netlink: 36764 bytes leftover after parsing attributes in process `syz.3.8694'. [ 1145.197375][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8694'. [ 1145.207832][ T8274] tipc: Enabled bearer , priority 0 [ 1145.245003][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8695'. [ 1145.267313][ T8274] tipc: Resetting bearer [ 1145.280929][ T8272] tipc: Resetting bearer [ 1145.324306][ T8272] tipc: Disabling bearer [ 1145.363858][ T8293] netlink: 'syz.0.8696': attribute type 4 has an invalid length. [ 1145.415566][ T8295] netlink: 'syz.0.8696': attribute type 4 has an invalid length. [ 1145.468150][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8696'. [ 1145.488187][ T8292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8696'. [ 1145.988948][ T8318] tap0: tun_chr_ioctl cmd 1074025677 [ 1146.005143][ T8318] tap0: linktype set to 780 [ 1146.893120][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8712'. [ 1147.627457][ T8399] netlink: 'syz.4.8720': attribute type 1 has an invalid length. [ 1147.690710][ T8399] bond8: (slave geneve5): making interface the new active one [ 1147.699143][ T8399] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 1147.726449][ T7165] netdevsim netdevsim4 eth0: set [1, 3] type 2 family 0 port 20000 - 0 [ 1147.766432][ T8399] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1147.829272][ T7165] netdevsim netdevsim4 eth1: set [1, 3] type 2 family 0 port 20000 - 0 [ 1147.852729][ T7165] netdevsim netdevsim4 eth2: set [1, 3] type 2 family 0 port 20000 - 0 [ 1147.889752][ T7165] netdevsim netdevsim4 eth3: set [1, 3] type 2 family 0 port 20000 - 0 [ 1147.968984][ T8410] xt_bpf: check failed: parse error [ 1148.319494][ T8432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.323739][ T8433] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1148.587002][ T8445] hsr0 speed is unknown, defaulting to 1000 [ 1148.946927][ T8459] tipc: Enabled bearer , priority 2 [ 1149.262478][ T8475] __nla_validate_parse: 7 callbacks suppressed [ 1149.262498][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1149.306869][ T8480] IPv6: sit2: Disabled Multicast RS [ 1149.398255][ T8482] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1149.431421][ T9506] IPVS: starting estimator thread 0... [ 1149.518084][ T8486] IPVS: using max 26 ests per chain, 62400 per kthread [ 1149.871208][ T8500] openvswitch: netlink: Message has 4 unknown bytes. [ 1150.218743][ T9501] tipc: Node number set to 204472167 [ 1150.453080][ T8521] netlink: 'syz.3.8757': attribute type 361 has an invalid length. [ 1150.514865][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8758'. [ 1150.524352][ T8521] netlink: 'syz.3.8757': attribute type 361 has an invalid length. [ 1150.596957][ T8536] netlink: 'syz.0.8761': attribute type 1 has an invalid length. [ 1150.800320][ T8536] bond13: entered promiscuous mode [ 1150.805676][ T8549] netlink: 'syz.1.8765': attribute type 10 has an invalid length. [ 1150.805968][ T8536] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1150.967276][ T8536] bond13: (slave veth9): making interface the new active one [ 1150.973733][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8769'. [ 1150.975643][ T8536] veth9: entered promiscuous mode [ 1151.010300][ T8536] bond13: (slave veth9): Enslaving as an active interface with an up link [ 1151.030306][ T8559] vlan2: entered allmulticast mode [ 1151.035478][ T8559] bond0: entered allmulticast mode [ 1151.047616][ T8564] geneve0: entered promiscuous mode [ 1151.053182][ T8564] macvlan3: entered promiscuous mode [ 1151.293556][ T8576] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8772'. [ 1151.302638][ T8576] tc_dump_action: action bad kind [ 1151.492216][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8776'. [ 1151.560302][ T8596] netlink: 'syz.1.8779': attribute type 1 has an invalid length. [ 1151.683105][ T8596] bond6: entered promiscuous mode [ 1151.774385][ T8596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1151.797375][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8781'. [ 1151.815272][ T8608] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8780'. [ 1151.831629][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8781'. [ 1152.222404][ T8619] netlink: 368 bytes leftover after parsing attributes in process `syz.0.8784'. [ 1152.231489][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8784'. [ 1152.732217][ T8644] syzkaller1: entered promiscuous mode [ 1152.737741][ T8644] syzkaller1: entered allmulticast mode [ 1152.910770][ T8654] netlink: 'syz.3.8794': attribute type 11 has an invalid length. [ 1153.353662][T18997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1153.367204][T18997] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1153.376706][T18997] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1153.385405][T18997] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1153.393804][T18997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1153.472005][T30210] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1153.504807][T30210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1153.514707][T30210] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1153.552209][T30210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1153.565272][T30210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1153.683564][ T8692] syzkaller1: entered promiscuous mode [ 1153.689087][ T8692] syzkaller1: entered allmulticast mode [ 1153.893439][T29118] team0: Port device syz_tun removed [ 1154.163585][ T8703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1154.405919][ T8676] hsr0 speed is unknown, defaulting to 1000 [ 1154.893844][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.902676][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.910701][ T8676] bridge_slave_0: entered allmulticast mode [ 1154.918479][ T8676] bridge_slave_0: entered promiscuous mode [ 1154.932488][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.939751][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.946962][ T8676] bridge_slave_1: entered allmulticast mode [ 1154.954662][ T8676] bridge_slave_1: entered promiscuous mode [ 1155.090977][ T8676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.130465][ T8749] syzkaller1: entered promiscuous mode [ 1155.135986][ T8749] syzkaller1: entered allmulticast mode [ 1155.148017][ T8676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.161663][ T8753] pim6reg1: entered promiscuous mode [ 1155.175241][ T8753] pim6reg1: entered allmulticast mode [ 1155.250068][ T8753] __nla_validate_parse: 4 callbacks suppressed [ 1155.250088][ T8753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8812'. [ 1155.638598][T30210] Bluetooth: hci3: command tx timeout [ 1156.201510][ T8676] team0: Port device team_slave_0 added [ 1156.211597][ T8676] team0: Port device team_slave_1 added [ 1156.304756][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.311848][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.363127][ T8676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.375721][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.382693][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.413313][ T8676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.515485][ T8764] syzkaller0: entered promiscuous mode [ 1156.521102][ T8764] syzkaller0: entered allmulticast mode [ 1156.563904][ T8676] hsr_slave_0: entered promiscuous mode [ 1156.571997][ T8676] hsr_slave_1: entered promiscuous mode [ 1156.578364][ T8676] debugfs: 'hsr0' already exists in 'hsr' [ 1156.608578][ T8771] netlink: 'syz.2.8817': attribute type 1 has an invalid length. [ 1156.625849][ T8676] Cannot create hsr debugfs directory [ 1156.888886][ T8780] netlink: 'syz.4.8824': attribute type 1 has an invalid length. [ 1157.802268][T30210] Bluetooth: hci3: command tx timeout [ 1159.882662][T30210] Bluetooth: hci3: command tx timeout [ 1161.969061][T30210] Bluetooth: hci3: command tx timeout [ 1162.089029][ T8786] bond9: (slave gretap2): making interface the new active one [ 1162.097042][ T8786] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 1162.216254][ T8920] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1162.332268][ T8801] x_tables: duplicate underflow at hook 1 [ 1162.368286][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1162.465162][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1162.719704][ T8920] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1162.732235][ T8814] can: request_module (can-proto-0) failed. [ 1162.962535][ T8920] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1162.993685][ T8827] netlink: 'syz.2.8831': attribute type 4 has an invalid length. [ 1163.046352][ T8827] netlink: 'syz.2.8831': attribute type 4 has an invalid length. [ 1163.060529][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8831'. [ 1163.062887][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8832'. [ 1163.070267][ T8827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8831'. [ 1163.170983][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8832'. [ 1163.183688][ T8920] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1163.232402][ T8844] nbd: socks must be embedded in a SOCK_ITEM attr [ 1163.430844][T10054] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1163.443474][T10054] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1163.570141][T10054] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1163.632877][ T8861] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8837'. [ 1163.709311][ T8905] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1163.740838][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8836'. [ 1163.825029][ T8920] pim6reg: left allmulticast mode [ 1163.996038][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8838'. [ 1164.314685][ T8856] udevd[8856]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1164.343119][ T8856] udevd[8856]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1164.400587][ T8889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1164.518609][ T8920] bond10 (unregistering): (slave xfrm1): Releasing backup interface [ 1164.526805][ T8920] xfrm1 (unregistering): left promiscuous mode [ 1166.010714][ T8920] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1166.018832][ T8920] gretap1 (unregistering): left allmulticast mode [ 1166.098249][ T8920] bond8 (unregistering): (slave geneve3): Releasing active interface [ 1166.128489][ T8920] bridge0 (unregistering): left promiscuous mode [ 1166.312259][ T8920] bond0 (unregistering): Released all slaves [ 1166.322920][ T8920] bond1 (unregistering): (slave veth3): Releasing active interface [ 1166.330858][ T8920] batadv0: entered promiscuous mode [ 1166.337387][ T8920] bond1 (unregistering): (slave batadv0): Releasing active interface [ 1166.346324][ T8920] bond1 (unregistering): Released all slaves [ 1166.360258][ T8920] bond2 (unregistering): Released all slaves [ 1166.374272][ T8920] bond3 (unregistering): Released all slaves [ 1166.387269][ T8920] bond4 (unregistering): Released all slaves [ 1166.402286][ T8920] bond5 (unregistering): Released all slaves [ 1166.437907][ T8920] bond6 (unregistering): Released all slaves [ 1166.453400][ T8920] bond7 (unregistering): Released all slaves [ 1166.468771][ T8920] bond8 (unregistering): Released all slaves [ 1166.485270][ T8920] bond9 (unregistering): Released all slaves [ 1166.501894][ T8920] bond10 (unregistering): Released all slaves [ 1166.517248][ T8920] bond11 (unregistering): Released all slaves [ 1166.566958][ T8920] bond12 (unregistering): Released all slaves [ 1166.581665][ T8920] bond13 (unregistering): (slave veth9): Releasing backup interface [ 1166.590674][ T8920] veth9: left promiscuous mode [ 1166.597060][ T8920] bond13 (unregistering): Released all slaves [ 1166.774268][ T8676] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1166.856999][ T8912] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8850'. [ 1167.243789][ T8920] : left promiscuous mode [ 1167.402093][ T8929] __nla_validate_parse: 3 callbacks suppressed [ 1167.402113][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8851'. [ 1167.546861][ T8676] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1167.812652][ T8933] geneve3: entered promiscuous mode [ 1167.819042][ T7174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.833954][ T8932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8853'. [ 1167.881266][ T7174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.923860][ T8920] tipc: Disabling bearer [ 1167.952589][ T8920] tipc: Left network mode [ 1167.997441][ T7174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.007893][T10058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.017699][ T8947] hsr0 speed is unknown, defaulting to 1000 [ 1168.147540][ T8676] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1168.478703][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1168.493997][ T8962] syzkaller1: entered promiscuous mode [ 1168.500428][ T8962] syzkaller1: entered allmulticast mode [ 1168.697478][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8857'. [ 1168.824872][ T8676] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1169.144868][ T8980] netlink: 'syz.3.8859': attribute type 58 has an invalid length. [ 1169.605560][ T8999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8863'. [ 1169.824297][ T8676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1169.845824][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1169.855624][ T8676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1169.867261][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1169.869516][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8868'. [ 1169.875792][ T8676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1169.904578][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1169.948024][ T8676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1169.966287][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1170.159428][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8870'. [ 1170.188689][ T8676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.206712][ T8676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.218635][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.225731][T10053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.238775][T30766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.245918][T30766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.485025][ T9034] netlink: 'syz.4.8872': attribute type 1 has an invalid length. [ 1170.549885][ T9034] bond10: entered promiscuous mode [ 1170.555115][ T9034] bond10: entered allmulticast mode [ 1170.560826][ T9034] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1170.600330][ T9034] erspan1: entered allmulticast mode [ 1170.621331][ T9034] bond10: (slave erspan1): making interface the new active one [ 1170.628944][ T9034] erspan1: entered promiscuous mode [ 1170.656639][ T9034] [ 1170.659010][ T9034] ============================================ [ 1170.665168][ T9034] WARNING: possible recursive locking detected [ 1170.671344][ T9034] syzkaller #0 Not tainted [ 1170.675771][ T9034] -------------------------------------------- [ 1170.681927][ T9034] syz.4.8872/9034 is trying to acquire lock: [ 1170.687916][ T9034] ffff888054b3a558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1170.697926][ T9034] [ 1170.697926][ T9034] but task is already holding lock: [ 1170.705297][ T9034] ffff88807fe88958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1170.715150][ T9034] [ 1170.715150][ T9034] other info that might help us debug this: [ 1170.723202][ T9034] Possible unsafe locking scenario: [ 1170.723202][ T9034] [ 1170.730642][ T9034] CPU0 [ 1170.733998][ T9034] ---- [ 1170.737265][ T9034] lock(&qdisc_xmit_lock_key#4); [ 1170.742294][ T9034] lock(&qdisc_xmit_lock_key#4); [ 1170.747317][ T9034] [ 1170.747317][ T9034] *** DEADLOCK *** [ 1170.747317][ T9034] [ 1170.755449][ T9034] May be due to missing lock nesting notation [ 1170.755449][ T9034] [ 1170.763773][ T9034] 9 locks held by syz.4.8872/9034: [ 1170.768889][ T9034] #0: ffffffff9058f448 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1170.778391][ T9034] #1: ffffffff9002c000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1170.787811][ T9034] #2: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 1170.797824][ T9034] #3: ffff888034285228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 1170.810439][ T9034] #4: ffff88807fe88958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1170.820716][ T9034] #5: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 1170.829684][ T9034] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 1170.839435][ T9034] #7: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 1170.849349][ T9034] #8: ffff8880774d6228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 1170.861965][ T9034] [ 1170.861965][ T9034] stack backtrace: [ 1170.867843][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.4.8872 Not tainted syzkaller #0 PREEMPT(full) [ 1170.867862][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.867873][ T9034] Call Trace: [ 1170.867881][ T9034] [ 1170.867889][ T9034] dump_stack_lvl+0xe8/0x150 [ 1170.867918][ T9034] print_deadlock_bug+0x279/0x290 [ 1170.867948][ T9034] __lock_acquire+0x24df/0x2cf0 [ 1170.867976][ T9034] ? __pfx_netif_skb_features+0x10/0x10 [ 1170.868075][ T9034] ? unwind_next_frame+0x8f/0x2550 [ 1170.868114][ T9034] ? rcu_is_watching+0x15/0xb0 [ 1170.868142][ T9034] ? __kasan_check_byte+0x12/0x40 [ 1170.868173][ T9034] ? __lock_acquire+0x683/0x2cf0 [ 1170.868199][ T9034] ? sch_direct_xmit+0x15f/0x4c0 [ 1170.868224][ T9034] lock_acquire+0x106/0x350 [ 1170.868249][ T9034] ? sch_direct_xmit+0x15f/0x4c0 [ 1170.868280][ T9034] _raw_spin_lock+0x2e/0x40 [ 1170.868306][ T9034] ? sch_direct_xmit+0x15f/0x4c0 [ 1170.868330][ T9034] sch_direct_xmit+0x15f/0x4c0 [ 1170.868358][ T9034] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1170.868388][ T9034] __dev_queue_xmit+0x1754/0x37f0 [ 1170.868420][ T9034] ? __dev_queue_xmit+0x29b/0x37f0 [ 1170.868439][ T9034] ? add_lock_to_list+0xc7/0x100 [ 1170.868466][ T9034] ? lockdep_unlock+0x5d/0xd0 [ 1170.868483][ T9034] ? __lock_acquire+0x13e8/0x2cf0 [ 1170.868504][ T9034] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1170.868531][ T9034] ? ip_finish_output2+0x972/0x10b0 [ 1170.868555][ T9034] ip_finish_output2+0xbda/0x10b0 [ 1170.868576][ T9034] ? ip_finish_output2+0x3de/0x10b0 [ 1170.868601][ T9034] ip_output+0x29f/0x450 [ 1170.868620][ T9034] ? ip_output+0x5a/0x450 [ 1170.868639][ T9034] iptunnel_xmit+0x626/0xd10 [ 1170.868697][ T9034] ip_tunnel_xmit+0x195b/0x2040 [ 1170.868749][ T9034] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1170.868771][ T9034] ? __pfx_gre_build_header+0x10/0x10 [ 1170.868833][ T9034] ? kfree+0x1c5/0x640 [ 1170.868848][ T9034] ? pskb_expand_head+0x469/0x13a0 [ 1170.868865][ T9034] __gre_xmit+0x19e/0x240 [ 1170.868883][ T9034] ? __pfx___gre_xmit+0x10/0x10 [ 1170.868904][ T9034] erspan_xmit+0xad5/0x1590 [ 1170.868927][ T9034] ? __pfx_erspan_xmit+0x10/0x10 [ 1170.868948][ T9034] dev_hard_start_xmit+0x2cd/0x830 [ 1170.868969][ T9034] sch_direct_xmit+0x257/0x4c0 [ 1170.868991][ T9034] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1170.869010][ T9034] ? do_set_master+0x4a0/0x720 [ 1170.869035][ T9034] __dev_queue_xmit+0x1754/0x37f0 [ 1170.869054][ T9034] ? __dev_queue_xmit+0x29b/0x37f0 [ 1170.869073][ T9034] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1170.869088][ T9034] ? rcu_is_watching+0x15/0xb0 [ 1170.869109][ T9034] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1170.869127][ T9034] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1170.869143][ T9034] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 1170.869161][ T9034] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1170.869178][ T9034] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1170.869200][ T9034] ? __alloc_skb+0x4cc/0x7a0 [ 1170.869222][ T9034] ? alb_send_lp_vid+0x14e/0x550 [ 1170.869296][ T9034] alb_send_lp_vid+0x348/0x550 [ 1170.869318][ T9034] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1170.869339][ T9034] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 1170.869361][ T9034] alb_send_learning_packets+0x12c/0x300 [ 1170.869382][ T9034] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1170.869410][ T9034] ? alb_swap_mac_addr+0x230/0x340 [ 1170.869432][ T9034] alb_fasten_mac_swap+0x45d/0xf70 [ 1170.869452][ T9034] ? dev_addr_mod+0x1ba/0x350 [ 1170.869517][ T9034] bond_alb_handle_active_change+0xc85/0xf50 [ 1170.869540][ T9034] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 1170.869560][ T9034] ? __hw_addr_add_ex+0x182/0x520 [ 1170.869582][ T9034] ? __local_bh_enable_ip+0xd0/0x130 [ 1170.869606][ T9034] bond_change_active_slave+0x1098/0x36d0 [ 1170.869648][ T9034] ? __pfx_do_sync_core+0x10/0x10 [ 1170.869681][ T9034] ? smp_call_function_many_cond+0x112a/0x14b0 [ 1170.869712][ T9034] ? __pfx_bond_change_active_slave+0x10/0x10 [ 1170.869734][ T9034] ? __pfx_do_sync_core+0x10/0x10 [ 1170.869753][ T9034] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1170.869774][ T9034] ? bond_start_xmit+0x92/0x19e0 [ 1170.869795][ T9034] ? __pfx___text_poke+0x10/0x10 [ 1170.869820][ T9034] bond_select_active_slave+0x8a6/0xcd0 [ 1170.869841][ T9034] ? __pfx_bond_select_active_slave+0x10/0x10 [ 1170.869864][ T9034] bond_enslave+0x239c/0x3b10 [ 1170.869891][ T9034] ? __pfx_bond_enslave+0x10/0x10 [ 1170.869908][ T9034] ? __dev_notify_flags+0x3d4/0x510 [ 1170.869934][ T9034] ? __pfx___dev_change_flags+0x10/0x10 [ 1170.869957][ T9034] ? mutex_is_locked+0x17/0x50 [ 1170.869980][ T9034] do_set_master+0x563/0x720 [ 1170.870005][ T9034] rtnl_newlink_create+0x4c8/0x7b0 [ 1170.870029][ T9034] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1170.870073][ T9034] ? __pfx___mutex_lock+0x10/0x10 [ 1170.870099][ T9034] ? ns_capable+0x89/0xe0 [ 1170.870117][ T9034] rtnl_newlink+0x167f/0x1bd0 [ 1170.870143][ T9034] ? __pfx_rtnl_newlink+0x10/0x10 [ 1170.870162][ T9034] ? do_syscall_64+0x174/0x580 [ 1170.870183][ T9034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.870212][ T9034] ? kasan_quarantine_put+0xbb/0x1f0 [ 1170.870230][ T9034] ? lockdep_hardirqs_on+0x7a/0x110 [ 1170.870253][ T9034] ? nlmon_xmit+0xb0/0x100 [ 1170.870367][ T9034] ? kmem_cache_free+0x182/0x650 [ 1170.870391][ T9034] ? __lock_acquire+0x683/0x2cf0 [ 1170.870419][ T9034] ? __dev_queue_xmit+0x29b/0x37f0 [ 1170.870435][ T9034] ? __local_bh_enable_ip+0xd0/0x130 [ 1170.870452][ T9034] ? lockdep_hardirqs_on+0x7a/0x110 [ 1170.870472][ T9034] ? __dev_queue_xmit+0x29b/0x37f0 [ 1170.870486][ T9034] ? __local_bh_enable_ip+0xd0/0x130 [ 1170.870502][ T9034] ? __dev_queue_xmit+0x29b/0x37f0 [ 1170.870519][ T9034] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1170.870545][ T9034] ? __pfx_rtnl_newlink+0x10/0x10 [ 1170.870564][ T9034] rtnetlink_rcv_msg+0x802/0xc00 [ 1170.870586][ T9034] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1170.870605][ T9034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1170.870625][ T9034] ? ref_tracker_free+0x689/0x830 [ 1170.870684][ T9034] ? __pfx_ref_tracker_free+0x10/0x10 [ 1170.870706][ T9034] netlink_rcv_skb+0x226/0x4a0 [ 1170.870731][ T9034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1170.870751][ T9034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1170.870778][ T9034] ? netlink_deliver_tap+0x2e/0x1b0 [ 1170.870801][ T9034] ? netlink_deliver_tap+0x2e/0x1b0 [ 1170.870825][ T9034] netlink_unicast+0x7bb/0x940 [ 1170.870849][ T9034] netlink_sendmsg+0x813/0xb40 [ 1170.870867][ T9034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1170.870883][ T9034] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1170.870903][ T9034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1170.870916][ T9034] sock_sendmsg_nosec+0x13a/0x180 [ 1170.870936][ T9034] ____sys_sendmsg+0x54e/0x850 [ 1170.870960][ T9034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1170.870985][ T9034] ? import_iovec+0x73/0xa0 [ 1170.871008][ T9034] ___sys_sendmsg+0x2a5/0x360 [ 1170.871029][ T9034] ? __lock_acquire+0x683/0x2cf0 [ 1170.871050][ T9034] ? __pfx____sys_sendmsg+0x10/0x10 [ 1170.871073][ T9034] ? futex_wake+0x51b/0x5f0 [ 1170.871099][ T9034] ? __fget_files+0x2a/0x420 [ 1170.871119][ T9034] ? __fget_files+0x3a2/0x420 [ 1170.871141][ T9034] __x64_sys_sendmsg+0x1b1/0x290 [ 1170.871164][ T9034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1170.871193][ T9034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.871209][ T9034] do_syscall_64+0x174/0x580 [ 1170.871229][ T9034] ? trace_irq_disable+0x3b/0x140 [ 1170.871248][ T9034] ? clear_bhb_loop+0x40/0x90 [ 1170.871265][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.871281][ T9034] RIP: 0033:0x7f3ee699de59 [ 1170.871297][ T9034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.871311][ T9034] RSP: 002b:00007f3ee780e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.871328][ T9034] RAX: ffffffffffffffda RBX: 00007f3ee6c25fa0 RCX: 00007f3ee699de59 [ 1170.871340][ T9034] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1170.871351][ T9034] RBP: 00007f3ee6a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1170.871361][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.871371][ T9034] R13: 00007f3ee6c26038 R14: 00007f3ee6c25fa0 R15: 00007ffef809d358 [ 1170.871389][ T9034] [ 1171.759896][ T9034] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 1171.828988][ T8920] hsr_slave_0: left promiscuous mode [ 1171.871211][ T9040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1171.999704][ T9047] netlink: 'syz.1.8873': attribute type 7 has an invalid length. [ 1172.007603][ T9047] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1172.023195][ T9053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8872'. [ 1172.131161][T30766] smbdirect: ib_dev[syz2] removed [ 1172.355442][ T8676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.380354][ T8676] veth0_vlan: entered promiscuous mode [ 1172.389348][ T8676] veth1_vlan: entered promiscuous mode [ 1172.412070][ T8676] veth0_macvtap: entered promiscuous mode [ 1172.420978][ T8676] veth1_macvtap: entered promiscuous mode [ 1172.432698][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.444182][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.455191][ T7174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.464012][ T7174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.473122][ T7174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.482355][ T7174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.503469][ T8676] ieee80211 phy91: Selected rate control algorithm 'minstrel_ht' [ 1172.552089][T30766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.553616][ T8676] ieee80211 phy92: Selected rate control algorithm 'minstrel_ht' [ 1172.559945][T30766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.589604][T30766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.597463][T30766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.765282][ T9034] syz.4.8872 (9034) used greatest stack depth: 17864 bytes left [ 1173.099493][ T8920] IPVS: stop unused estimator thread 0...