last executing test programs: 2.729016871s ago: executing program 0 (id=5232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x23}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) r11 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0xc8, 0x8, 0x160, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@limit={{0x48}, {0xd, 0xfd, 0x10000, 0x3, 0x5, 0x9, 0x4}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x65e747d8f2e59170, 0x5, 0x9, 0x2, 0xfff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xffffffff, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xffffffff], 0x2803, 0xa31}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x5, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f, [{0x1, 0x69d, 0x8, 0x5}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="290e29bd7000fbdbdf052700000008000200", @ANYRES32=r8, @ANYBLOB="b1124200de8b8c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 2.589459706s ago: executing program 2 (id=5234): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@nested={0x14, 0x9a, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @uid}, @nested={0x8, 0x2e, 0x0, 0x1, [@nested={0x4, 0xfd}]}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00090000000808004b0000400000000000069078ac1e0001ac141423890ba2e0000002ffffffff440405038606ffffffff0000004e220000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078539cd6cfb354dbbaea4af4124008761c9eb400004bf926ba1c57607267b8cf6638f2dceb033103eca7d94dad7e096ec900005694e96815569c5b94f3e0fe8b5161c700"/88], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.334404797s ago: executing program 2 (id=5237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c020000000000000502000905"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000280)=@sco={0x1f, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff1fff3922ff65b4352b5dc1474e085e953d23d254", 0x18}, {&(0x7f00000001c0)="2cf2565b0e50820500000043e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c5905f800641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0x44}], 0x2}, 0x44000) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x3261e) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000180)={0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3e, 0x4}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1.903407754s ago: executing program 1 (id=5240): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16b9e}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x1}]}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47fc}]}]}]}]}, 0x40}}, 0x20000000) 1.861458669s ago: executing program 3 (id=5241): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) 1.840972547s ago: executing program 1 (id=5242): r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001900)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000001a00)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002c00), &(0x7f0000002c40)=0xc) r3 = getuid() sendmsg$netlink(r0, &(0x7f0000006d00)={&(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006c80)=[{&(0x7f0000000640)={0x1290, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x15c, 0x0, 0x0, @u32=0x5d}, @generic="4c6f9b81dad0d3b81f6f1d5cf1f4b54c751493b80cbc2d57cec6b89dab288343e49415ee1430f5b2a141235a6048ef7112f2aa36f9625696deabbda574187b65c227775336ba7e7c62c0c8c20fb5c753931171c3b0d17024054538773b5b90bb845dfe1440eb5a383f42590cdc0c86ade6d298fb29ea288c48cbf665faeca2c5c533b1a840146ddb40e5c2ffeee920b877fc0aac7488b1dc8575ba34e3ea0a997d529ebe2b2096ef58920f8f70c9d1f0b380d5b2b30048cfcc616710c1456b8279585c37beacddda7d711ceceb0e", @generic="81045edd9357bbca9c14273b2b2a76bbd02aea930bce41ed48f4fd8c1956b742137ab343a31907279ec5828f2190a24fdb7302bafc79e0b78575a73adbdee28790356d2faa938789c9b5cb7937f66f9dc85e398e1dbca49e0736d64055f11d191e00ccacc094765d689e7bd1c5d52e64250fdfe62e89df616be5d00cd178ebf116f6a93752e2", @generic="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", @nested={0x78, 0x138, 0x0, 0x1, [@nested={0x4, 0x62}, @nested={0x4, 0x14}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x120}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@private1}, @generic="9088ab3bee2cb7cf242abe7a1c54b096c042581a54869ccdc1bc7a86265c01db4b2dc9c2930b9c4a591a32b9c20c09e20836314b45dfcd3b997636dea62412f4"]}, @generic="15803fe239fcbbfd8201e7799f5375035abd00c5b31c2dc00370df4c680558b5861a7cf70edfaaa57ddb8e806e55fb385b199de3c5baab43b0e2ea7594efc9a42623af2b2c391ca56a24a3dbca13ea94e8b418a2ddf9d263ae06098ce5636c7a065f6131dd4a6e02cbfeaec32fd8f90bc018574e548c8e50840e994ef2fdfab32bd77ce3a4545c37329688e4806c5bb582f60ae16e90d8e46079f61098b2c8c07d4e7ddf28c23f2030"]}, 0x1290}, {&(0x7f0000001a40)={0x11ac, 0x2e, 0x800, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x164, 0x120, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="07a6b494b1e411", @generic="8af4106055d771610ea348fc30e9d9725a7351767304a853838b80a7ab2516fc6dc339e5d3f926297c02fc09f374840845a065ea97bd4144d1a57ad1cd857d7d0ba6d4f587c8c41fde09502f2eef289dadb5e07dabc63af05cc47868ceb835c4a3f030e4e8cf21d321ee5384f9222e57531e30e9bc5eaa257ce1417f00e56698aa78f23e12173ccf27320c1f12c17fc295ab8e25bf5d3b42712abe93459999635acbee77eecf7b8e1475fbe9e4783a532db8192f8486fe19af48afbaef3177507da5d6f12044b3e048f9b449cc26c23674ba3dbc4afa3766c7addb18f8f97f34792f54ac71126ecfb4d020ad7c58f0dc9788", @typed={0x8, 0x99, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="f870e83baec2375beff1b5f824e5a39857aca0b4b6dd229a2602b7587abccbf7027cad19b247409fb1713fe0e3f6d8a016591136265ae9f394aeb9453d71cf02e88b5c"]}, @generic="456527b25acfdcebd685e09cceaac9218ba6bd235d41a9a144efe032ce9d032d78598f0f4baed2d789faa141ee1790e4e93e5c4000fd1d6d6e752f0f2e52236f149a9efba8c7301a660e88530466184d01e39d28db1281ab5ec0f9bd5cb3ea1fdc508275902ab7fb7f477ae9f20f6ec5fdd4a1488bf255fe60279247713273e27f84eef5132310085243043c7148f23edfadeaae29d74436fa8ba940a97e01b920b01e28e812cc10e08c10b767d94db11898681a4b0e30660db2fdf2e2a54a12be15c382b0d49ba4c82e85441146fe9c77a51d26b45971886ed5d337ad8934c6190abffe2f507cdb13a9590c3d3b51ff0648b142f19a219c4643eba880cd3b6a08b26198c0fd50aa93b1734fec7713626d3f8c502f5dcbe6df4a0ae9e16e10b4b848e801f402bc7b6fc96c5e3d7471f8b5411daeed54ff010579233fefa3f80d8fb0794d9dc476853c27abf4b21e820857e4bb711c971bb413883cdfa7239701095f8ec3a4bc5400ac43269168d5a52831f48d529dc236d60e40c73c7e9e9e94855a10e3bab6b1e844f9c0f5a13c20ebd14f007c0a891ffaeccb7e576a2a6122c365ab035d7287fe252b02fabe4e55f2da6563fe71e2c715dd064f472c221709fb13cfcee1f9ea495e0731326c11f9f683d183923681f44821201f61dc9aa3b57c4360659206f3823b9ee69f70a72d976762ca0f8b2000f27228e7c1acc794dc9ff1b5d077850d3c729d8507c9b7044bfedba1e5b203f5c193cf5f358648670417656471f4c7b478879400e70c7c94136c11c3a4cceb043829887cb39edd26e238952414878d6b58133ba07d28e238a6c6d5edeb1ca0ad01e18fa65fce2fb8c86d7f971541f883f13af4240b8a714422a7c682eb044e5e98f08d76f52e6b031e81c003d8007099c0d1af82b5540f8287d3e29b11e1d724205e7409ef48c5ab35856f4aa8433aa38509751f83be82776306608e8716df1de6bf1ee95faea86d32435ddaf42928de465c58ef42579ae815de9c5c5bc136f74a70f14ea364dff4797b72c797b54789478c255c90a9ced8826267f18a3dd63ced0ee5de8f1e72614d47868bb2225731e07f83e04f9bf979ac74080b01dfa8eb1bef6f8f67ad13c9c360c15e52ba4ea8bdef1814717c85e5deaa358b18cb6550224e5acbae714142ae1d2b10f2f548c718e18394b9eef0dd2d2bead816aea82ab29cffe4204a634c4058286daee86c4a41b354de93d7e2912507facfc6720ddf633b44de06799b25fd6a90c877edc1cacd625cebb46aa064b85f9f6ff12dff719f3af4ee72584c1c12374d2f38d6585d61470a68bc0ecbce031a40e166405eefb70e4555c7a6558381c3942432446adfc92ae6b0513453d09f27d1af78b760ffec8724946ee0f52f6d6fee801612721f3b4431e7f0df85cac5c87beed120d54276120b7dc6ba0bf19be80e6a4ffcc4d5621911df9cdd74653cb3ab85fc95e96c0ee6cecb0c71b20374c044d7ecfacaf14a2221a1fb78a6094d94e45395d3ae97c9de0e79f00b1f3a61220b9a1d1ebee88bc034fa3c559ed8aa10e73a9b13f63b3a40c944418182cc7c1ee1bb509cbce59c4f2106add84faf4b1cfa0e20b2de2dde10138a65db3ee7a98b6b6bc38e278666f73c2ceb820eae910e2e359462f2f9f356de108a9190839d4e84b3f67f985885dbda72175490f2e3e725384cd983593ef1ed6937ebc6933c82b156225fc35029ac3250e038eb772b48467f2981a203d057a0dcdebd377252602baab0e85120d09c0ad9e87d627d024f0bff62ed37927daf4e2030b68bba50341224320cc45a4beb318f3c49316ff7fc7696812e19ab948103708d454ba6a8998ea0af247330c966d61023a75ac7e1111ca09823f115613c71c406db6c2085bf5b7b09dc5cf524ef3a9e23bfe4a19dc91495d7f45bacf6719fc318aeb7ec20319b9a5cf244d6babe2018df3bfa2f41852ae29af888d8d40cde88b3c0a1130f0c7a4cc86f5b9c1df6258406eac11c91de16843629de49d4c0c3ea9d2cc5bccbbc1e212add2a0adb76eb98ff7a6ebeae87269b629fa94af484c0fbbd7ba1d14b0c55d421b824c40d93cf8041197dec9b365178c82f3e268c6e8a39ca7b5ee9e2bb10bd6dea4b6f662c4254467f22efd2f2d01cd7af5af05ac58b7c31359a75b54f7f44d5ba4b98d987180a2efb848ed49115796490fb7c689140f83692ccb2328b20a9daec0ee3d57b3155a4e115ebcd7a4906570f2360b7edfb44f019d6c737cf9232b30b422d59922362a38ba632e800ad2c9cde1fd3082f6d01592fb0808aab3363919cc9bdc507513ca18c13f39fccb7972f465f52bd89892d8a923e6eef865c16dc65e9d2fbf6adda015acaeea7f3600f207706257a2b6f15902625233f9c7934a3f5116a0a08baff403b0570ccb3f7b9342019644ba4ba2c198247ebdd8f4277371e84459a168b6dd30d2aeced461a7687ffe602d5201e355c7f01267707a11507f0b6a41dc89b76bcd829f0f711f0a5205fe33fc5443dcde5d702bf3d56a5c69b7008e0cc3537a2d1c2287d5cda87cb1d5914898ac7f14ff6f58fc01086e738d828e125289be22031210af7fa790b4a2a7cf0de3a75570f12dc53684cf824f9efa82ff4fdc2c6e3c25396d81742cff420ea9ec0dda7b254192e46f667fb25df3860396bbe39bea94a8b9ea87d0041b592ab475e3ec977df81ec33bc8d2d6c66bca37629b99399add4e55920800b26f539ce7a4b0f6dbab4b66e7b50ad036f6aec7d6d2a15b5ca93d575c8c2ec53325029fea107dbaaccd3adf72725a1684d54ac79f7d3226cbd9a6813b188700771dd6fbff65952799e3f2e74203af96793e3e5e29b03f8faa4241f1d9c92058e8bd83ee6398a65e0b339a28294f5ad16321b834a69bfb5b0dd3c485395b14664f1076644bbfd648c30f51e72937389b2afa884411d211d5947336973e12af762ffb068164e6d93b3d5ac9c8f0becb30b36783476ec560b7dc99d8f35cb255a1c15fca949998ab9893ef8195cc84b279787a5af6b837848f5b2e14f9ebd1b877c748a7034dca2fcff32f43b173ed1349ea91ca1a08f1cd96f1e1cc097d80036d633c375e0042e16b4d88ac6abad91f0123eda017cfcd4dd33cf5d405ca063505b300b490b50755982b723c286f5526d1fb7c3edf2bb670f2de66e60c1ebc6f258007d9a0bccb45cac99482ca782a10ecc1d4e425992f14f0053a09af963c82e5a76b35beb08152f6810354b4440dc2f7ec32ece4f50449320e0f475a8f261a9a4d0673c9cafb56370ddf6be8f3f724088db2926eb8a5613f0f90302485f81baa42936a86b44f3413c8ea4b36a9a5932997806a01ebb6c352f299185c68003fea4b057d718b5b19b484bae7591f4097c00e2b06db22965c0f12b0fbb41da2526af63a5fec3f50d3f3945a8d6df5ecda26fb54cb25159053edf206416450f394a3fe8d498917fc992307f31f8140024f95acf236ca5d402f0dd989add5d83c4d4bf075ec49f3cd97c9087e98c8653075f763b696c82760eaf182b01ae612e7252afd5496f3550fa30870c675b947d78f45ebfbc2110358548f6596e2d86c702ad35c2571dbda4a15e0ab40a0e154911cb9dc46231c8161dcaf9fce6aa13062c2f61cfec2c6f572cee60f48eec9cce93c9f7f87ce0336fd221210a450a7018af7ab2664be81c44dccfb22f2878228259e94d880e19436f3ceee661aec150fd9fe8bd71b6eddaa8204de968cc1319bc2d1930bf33a141d76b62788594020a423a6d6e0848f529af8ef1f0e649824fb564d8d558e7e61ce41367876dae1bb80a5530a11f1d6200beedb8138cbcf32232c24481b81c4a84e88a475bce0e66c43a5b400e56796c06308e8b2ed6b1f7a6a8ab5c5b65b6ca481784cf2e71d78749a2db84d300ab9d4925730ee20d6619ed326311fccb77e9fe522a694fa4cdff3395b34f2822359c263f4c3a20802019da17b715eb0fc3d3199181d42e67f466af799a6cfba90d6e813e709f811dbe6ca065744ce625bcdfe8d76759d4ce414fd763c0ecc9759388ace8cc7eba6937ed8c11277c9801a8a47a0e94dc2352ca22dbeab0b35f01e3fa21599ea5ff1bacf2022c2d1dabeb40063d1e3c412ddddd74067b65d1e998fbd051f63bdb406f4323417d83c349972e337f7fc27eebf4e992e2d06f09010c00532a0f264ff52b2019b5123ceea8a8c03b1e6df41de2a5118273253066f5d89035ff3683d3930a43a05acdb75b23bfc42b966bf07fb73e91f3d1cccf5bbf006379c05556be14d748b6e517444a3a20b2fdf74e63532e4624ac28267da2f9d0640969c8e45be9809ce2ff578e0e1e4b8fda71282f29d2ba5e7d9c9feb771c4ad46210f20d125b17f47bbab7d810a8651590e590ee88ca83cc209b12b724213094f230e207ef663c29e8cd50581fac8696a4bd3130c2d82897bdb48fbf5c3ef01e65481c6d9e912d61df6becb64e77c233ac103e2398a1e5c6bff92e5b8eed9818af5e6a0d9c35bbca7a429a445cca66782f3f23175ce68679b33cf1f8362994804b785c4e75ae146d0c153bb9bd910f2543c367fe0cb0a3ec701655faf9605f959ae43ebade85aeb92a3ea13e6126297ad10c6a99fc58270c4ee3953b25646cb4edda255de16601c1e0a835a4a5b3a7e7805ed3bcdd2bc3f200c03b48e6695783b3bce50777dfea3a46deeb6afe5a161ae9f1f30f3f29f8e7611c5a989d6598b7950affb35e0084b1052648fb47dcd2151c7a94c13c84339e3e1e953cab1053035eb5599ed096319db952fe23b3f0991a92445a4c5693333c5c7d819f8041e123bce30a6c5143f84171d56ca4aa6c02c337f7caf19c06869311580659b2f78100b4ea80dea5b6605266246e7b42b4aa780186c6c4e26b8a0ba1de03860ed25def24170ca2d2c61e7306c5636d9037d238fb5a0d3971c8783648f7c6ef19bf750a479c610dfd285c96ee9c4373a6e5a066d3b9207fe8bc6322bfa6a47328f921f9cbc84846d96b9b4b4ecc675985bd939f346c9da348d55093a3b1173ea5b1b3fa12908423b2084bdca812fc2af18f2993a120b002e91cf06dae6b0f525fd6ea4b1a2074c7a3496d98422fd4b6bb5c29c34e01fb7e6a9c917783d1f5a3bb48404cd571d152d613cce9845563df76cbc351faac18accd16badec5dfd0a11d8454a2835a28b536d730153bb40c8fbecbd1bb94e512333e0ca176de11c1e4c0f54064d32904dc4db3fb024dc8311601170d151645d909a9298380ee79dc929d72489ca8e48eb52a1e9473d8f2362232956802ad5648cf7bfb5edb289584c0ab8055388117c7acca9e2958a235ad1467dcf2211a85c0faafe3ee1b901df8d2603efd50c53ec6bdb5a386de6559ea013d8f725039eee0a52c5fe54f873fc49d83193dde1891ba12525d435ca9df6ad4d0b5d6f7bd7a8e91d356f5bcf3fe0df68b5125c477e0da8f8797d51bac4faa71788851bc5885b9711fca56bb7cd76afa1a2711169e735edce56c5d721fb9759a56622fc1aaa82eae7d9906cda9c09d4949ce4e760ddfb48f8bb85101bdb14acffc339e3e93776a67df2ebe9132964caaf5568366c693987134c3bea69c270d08c1930a5cdf68eb406180523920e205dd27551a6bca6fe3a99fdbc63cd3ec9d8f83368cdbe00330e5495d5af1f15991b66314b825e5b7c29a12733dd0b195392f2cae448c2f4b0863b250323bb1a88e600cec0da60c9b6466b110355440fe993b860ab6ffd78c02a8283faf28bd68e0f9d39b7e96684591b36b4bd2eb15eaac54d4", @generic="3926ca2cdacb938b536fce849345c01d941f878cb930ede4593771b3db2cb7f97d9860c24bebba95c150c2d26a99821c85a0cb92dcbb15a5"]}, 0x11ac}, {&(0x7f0000002c80)={0x118c, 0x24, 0x8, 0x70bd27, 0x25dfdbfd, "", [@generic="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", @generic="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", @typed={0x8, 0xf0, 0x0, 0x0, @u32=0xa}]}, 0x118c}, {&(0x7f0000006540)={0x34c, 0x12, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1ca, 0x95, 0x0, 0x1, [@nested={0x4, 0xcd}, @generic="726ee8fb90e6625d6b2803a2d3a122111195cbc8ca9816d8480ef25cd22a00ab8bd86793e3bf82a89c053b63d30a5ab7ad2e5c50dee2b1edc180fbafbc311ee3fd9ca3de3c5db62eed77425c2e06e1fa5710dc74532001132752cd8df8bf255959bdfddd47b51d4de3435aeffe7a1362c25303fbbbef771a851840bb98814623ffac3c94d910275f94ef1187c6b8d3d26b3e4a900b2d8c297ac3fd5955e477fa4921eaaa7adf8c", @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x104}, @nested={0x4, 0x97}, @generic="6ccde4fe5161638edda5eae8a2d3911cc6261367881dca1985e8f6d347900fa84e0e916b9066c06d4d9569ef5b2f71eeb562d85ea4341b44d8acc962a5ca", @typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="2dcc2ecd5fb974cfe6ac391b575f04044a05ee669f8997051c5e03c5f132cc71e53f4f895753502bf9f14d90e6cf112275293b6d0962e11535d2ee5f59e7ba1d787d35adaacb3e02549a424f3998314fadae7f17f522d2518667b578fa9e6b883f1da2df6f2b56843a017cba3c48f5eca05a442173bcfde2c555eaa24152af8a8a2fcd4b767242a3d83f29c61d0dbd1d489298e38d86f85edf1834d736c8601ff24cf6a9f39487c460e8863d3a65b4e88560bc43c3d2177dfb8791a64d898832dd"]}, @generic="2cbbfba4ec1dae6dafa1fc5f7e3b1a1aa0fdbdf44421dbf10a7f8a87b77d3e9525776f41ab42be586eb3280379f1f3364ff71b95e5eac899353402207470d9ba5c6d066eae8cfce47db27b58dfbccf42c88a591d21fd7ce9ebc08690dc809f26448e935c80d3e214fac946c67bed310307d4f538c24a8d41", @nested={0xeb, 0xdf, 0x0, 0x1, [@generic, @nested={0x4, 0x12b}, @typed={0x8, 0xfe, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="b14b99e590fc85915cecd680eabdadd91f4591907f96a1d7a1a974252183f0833caabf66ff83ed4d8a9995716637e9eb76667b1b25da4d01db6a3cb8cf17afeb988ab322ed07e6200d1a9f041c8108845d6560241a3acd6a2267078f824d4a7920f4c77c6e375d0e74d13c2a1450886418f88e9a4b763e0a46b4d7540d34601cad27922d52ffe46933944aef2c8539646f0525ef220df5193b99bb08397303550a060602190171d5d367980257ef11821d19aba3c5e3e0fc87e8c8b0802d65b10d2537fa52f22042400c74d9f782b7af45d0c9", @typed={0x8, 0x5d, 0x0, 0x0, @u32=0x1}]}, @typed={0xc, 0x54, 0x0, 0x0, @u64=0x5}]}, 0x34c}, {&(0x7f0000003e80)={0x350, 0x21, 0x10, 0x70bd2c, 0x25dfdbff, "", [@nested={0x27b, 0x13, 0x0, 0x1, [@generic="a37deb42babbcceca004b9b7df471381ddd83d5a233d9bac2db88b8dee2fb4b570821dc614299b3dd070d42df0a36e48114d5720cad1c5cd7612779154a080d7bd50794a05ba693bad8968042c5c7a258f9d29aa7ff74ab9aed05118aa7b54db6d9522354021322f04c503a594f089e56a287dcc19df24fcf279f1", @generic="7669c09f18588b86ab66d0c730b8944399dfc18cde3ce432329b4cc84d002394a6440dbfefcdbaa703431efb1728e685a5c54e", @typed={0xdb, 0x49, 0x0, 0x0, @binary="6683e31aa3c57608b483f2601c975ee7586ef6498443a625788a08a17bc0fd97a5f85bea0d34d1c68cdfa174f7cc76c900dc52164fca40b540a9f59f8127d0ef76316e9311820e0799ed78a0b00685dce95ddc008fc531bf6b4e2b75eebd07d2c3d0b7eda30348d18d4365856970b0cbd7829f9d210555a6277d55bbdbd76e2eacbad9dd2e1bc399f1055ace4b5ed3ff4d113f5e2db1dd960bdb84510b134f32dc294ee06ba8cc48e9117e7a37063869e68a10b23dc7e4fc9d5166fc8030df2f3f5e630738d103b331ef07e60b1d009390fb11b47eed1e"}, @nested={0x4, 0xf1}, @generic="81a5b9526990aac19a8a2a37e52ea825b77d67061e414e65afee7cf3ba05e2fb673545f6c26673a3f22256b0695408347c2ea3a5005535d2f7a360a76a4cda4dad2b7ba409135094642fa74f4bfc8f51eb7230a48455f4535e92b15d7f7b01d865ed3afce7bfc368dc634f29f04bc0c8ded0f68f1d0b610ffcb89cfb34de1c0887c4ec557c99ca069226402e60c2851275f8a95c742cefa903c4d0b16c61ed5a3e153623fdeca40a1109e44b880921bae6cbcb3a742223405ce615dfba01ab9c1f51c6a771f10fcc0612233dd0be43e6266b26ad2ba7ef92c558163ec623bfe4ab", @nested={0x4, 0xa1}, @nested={0x4, 0x2e}]}, @nested={0x96, 0x3a, 0x0, 0x1, [@generic="39f8", @typed={0x8, 0x169, 0x0, 0x0, @u32=0xc}, @typed={0x82, 0x11b, 0x0, 0x0, @binary="de06d9252e60c881146af3b4df649ae756cc1929f3218c07b44f0bd11d668b8ce7f9872bd9b9899458bb7e1ea61a33e8a3500b7b441757239720fb9bb8f0c1a08617f0892cfe0691a00d6e8de246d6972f514fc89c239e46c50ef163c5bf3ddc337581306ee3529a114b404e3a86407e053d624617e60e5f1bac00e755e1"}, @nested={0x4, 0xa6}]}, @nested={0x24, 0x9f, 0x0, 0x1, [@typed={0x14, 0xf8, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xb8, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x8}]}, @typed={0x8, 0xfd, 0x0, 0x0, @u32=0x1}]}, 0x350}, {&(0x7f0000006c00)={0x10, 0x11, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x10}, {&(0x7f0000006c40)={0x18, 0x35, 0x4, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x7, 0x0, 0x0, 0x20004000}, 0x41) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800010a00000000ffffffff021000100000fe08000000000800050000"], 0x2c}}, 0x4040818) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r8, &(0x7f0000000600), 0x0}, 0x20) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x5, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="000000000700000018270000", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1, 0x7f, &(0x7f0000000180)=""/127, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xf, 0x8000, 0x1}, 0x10, 0x1f20e, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x3, 0xe, 0x7}, {0x2, 0x4, 0x2, 0x1}], 0x10, 0x8}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r9}, 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000380)=""/98, 0x62, 0x0, &(0x7f0000000440)=""/77, 0x4d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000800000000000000000611073000000000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r9, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004480)={{0x1, 0xffffffffffffffff}, &(0x7f00000043c0), &(0x7f0000004400)}, 0x20) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000004a00)={{r6, &(0x7f00000044c0)='\x00', 0x141084, &(0x7f0000004500)={@_ha_fsid={[0xfffffca4, 0xffffffff]}, {0x1, 0x3, 0x2, 0xa}}, 0x1000, &(0x7f0000004540), &(0x7f0000004580)=0xdf53}, 0x4, &(0x7f0000004980)=[{0x2, 0x9, &(0x7f00000045c0)='veth1_to_hsr\x00', &(0x7f0000004600)="319ff3fc337acf3e9d470675e2d94869ea50bd628829fb87bf2067b6710128788bfe4e818f1fbe43e90051e25c6a3bca5a4dcee44bcb41a1355566098d9df14f1c6ceab98816d24897b2449e2f042b82659f07972663d847df6b5c02bc0336e4d1ad8a31c13cfa055796", 0x6a, 0x12}, {0x3, 0x0, &(0x7f0000004680)='\x00', &(0x7f00000046c0)="49c648c7d90ef73b7a3c09a9a798a5c00b87e57febf8da4e39b6b5c547309d73c2bb7a082f69ce6d49c2b8bc9eddf205425975f1bdb77978c01accd8bd369fb4cdfde95b64ebad3e0cc3cdeabafe", 0x4e, 0x30}, {0x1, 0x7, &(0x7f0000004740)='\x00', &(0x7f0000004780)="f11fb3f0257f7639760b0b82a2eeef379a44380670b2f0e14f1cf528b0337ffbb8a9c3ae84cd97ad7d71b6babf6921548773a1b3a7e55713daf7e4a518d44a89d0a134eae69a722e299469fbb1a66db0c5b58a08d208bb821339af7059216abd1145c00117981064ea49d2c3c8e5bb54826b05ed4bb041885a5cbb0ef9923f3715adb840b5e61e6056c8bdb48cc0092e1d5d2010143185d49fdf4a92f18871ddf7662ff3fbf5e46c6b5687d294d128dd89272f2dde3278b1267a91ee2faba487", 0xc0, 0x1a}, {0x2, 0x0, &(0x7f0000004840)='&^{&}#\x00', &(0x7f0000004880)="9d44bd6f5e5d48a60a03cf1866f74f1aabf513ca4d2aa77c4044f2e73db6b7fccd81d9a6d96e1d4ee067469199b157dea9cad9db56543e5d4d2b28e42d0f807fc0fb06def309fed5f9aa0e94ef1cf479c1be1b3ceef220f694b550c4be1d2e29620a21c4f6c8cc545703535303168cc9e5ba548c9b40cc60ad82cab058e67d4d930682035af84edf36b59b9146bce4e50a8051609ecc1fba692d721cafd858dc73d0a90980ffb98a4bde8bd2a2832a16d493bdc64401f3cce44a11505724df9ea4dd69db22285633596097", 0xcb, 0x2}]}) bpf$PROG_LOAD(0x5, &(0x7f0000004b00)={0xc, 0x15, &(0x7f0000004200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0x10, 0x6, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000042c0)='GPL\x00', 0x876e, 0x73, &(0x7f0000004300)=""/115, 0x41100, 0x1, '\x00', r1, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004380)={0x4, 0x3, 0x1}, 0x10, r10, 0xffffffffffffffff, 0x1, &(0x7f0000004a80)=[0xffffffffffffffff, r4, r11, r12], &(0x7f0000004ac0)=[{0x0, 0x5, 0x3, 0x1}], 0x10, 0x401}, 0x94) (async) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, r5, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) (async) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xad}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xf20, 0xa87]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7fff, 0x44, 0x5, 0x34, 0x5]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xd, 0x9, 0x2]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010327bd7000ffdbdf2502000008"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r13, @ANYBLOB="36e81db8a43ab919c9fdda1c4db8d0b848ca78f860c84dcbb45861df8f6b1f75fe0d0c6405dc4b84d71633d7f5e4dba14f4e0f33de5f8a699b3994ae58c279ef2119c07a96bae5addf315042fc633a898196aff8b641ecaa48124699e6af2a14773496bbe2e953b209ce2af671d54d2a3c763947287bda2a8571881e9b8b15b8d7b8a675db3f790097727349719dcb52f9a4b7252dfb8349dc614887c83a91d2383c628383c5e8103bb635630b6a8f434261adc8cdd4ef06a6f16faef2ee88330d9b4a44d34a1a184ec0", @ANYRESDEC=r13, @ANYRESDEC=r13, @ANYRESOCT=r13, @ANYRESOCT=r13, @ANYRES64=r13], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x21666b51c9b99792) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000f7b40a000000000000850000009900000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x41) 1.786239861s ago: executing program 0 (id=5243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) 1.784195883s ago: executing program 3 (id=5244): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) unshare(0x22020600) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000"], 0x50) r7 = socket$inet6(0xa, 0x6, 0x1ff) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4044050) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000280)="7a1035318ff52cec32f865adddf0e17a59b8253958a05d48487254819aee300e519ccf01317a8ff03ad974716a54d3e167ea3ae303666f47fe8f1ba37f7e89a1629d0b0ffe5c6b1b4a5ff7e3c1f05d3b2b496c3f354fed4b3851a67918", 0x5d}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="71cd20a658b933035002d64c8322a6207a98cf9e30e0eb9d56c36c01f92f26978b2b1444a665318c39c1eb96", 0x2c}, {&(0x7f0000001580)="2da1b37ea135d85124945108b462e4273214606cc7f6dbc626820f4c52f7bad17d6b342d99cc53feefcbb645fa9045384cbaa6d482eac654754a57f7ee741d9f63aa114f96272641ef71278c260d73eab9b4a3672c71ae2e167447e34a58d7ba0679c4db0a042a4a1907031b04a87ab57795449e562c5eb420ca34709770b0f9ba357ac4bc10497754b0f085c513b817874169db255e14f9caa884794b39507e3318b752fdcf61428bb4d730b9850f3ad399692a67133217181ac24c77", 0xbd}, {&(0x7f0000001640)="648ca4864dc71b74da4cedd18e186f6c0b4d0b0c0eb3b73035326aaf34eb20c46b958b7cd2c20cae0e3084bcca8cc3866d095ea4bdfdfcecd8f3ae1a5682c449be817b9f93ef0c379ceed6f8c958ff2998", 0x51}, {&(0x7f00000016c0)="56ddd58c1f97cd8850e7176c00c0b8b9f8cb5652f957d45571e7524e223e6a3fd87feeaff5f91f267778cfc269d2cae23af7f47f13c6ad2badf9a169fb84abff5c5a5b43fbec3d77ecbbcf080018b3c536cb566e21ef613cf93efb66919814bf07dd082d4de979e11edf226a3027e7896519b9485ce0f7d512152b9daaec8d9baf3a819982cc05529b1693503d5900aababdf2f52af3257bcf2781a90df2521bf2f1e1ba1890f890f4c1172ebab9a95d4f71658ba7da98c982e40bff7834a81fe344691e458e89ff4c6ba7fc588bfff0fdd3026a776e5057e351db8c92ad84f602238ad318302642dc81e3a3c3", 0xed}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="3fcd029e1f326fe7fb172e784e15b61a9d651b2dd8e33b8ea7333809e1c30b478406a96c9f7e692cfd1749a8fee55837f52c0d111ed36df006b385bc9a2803d66a4a9328cce0604e06d21191aa57448cbf6c8d756c298dc1bf7947b3ea86b0d4be0ef2211dd218d19e58bb3740b2bed783078892f4dc3e4e97bc2b0bbb6219f51421d15d", 0x84}], 0x8, &(0x7f0000002b00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="e00000027f00000100000000140000000000000000000000010000000800000000000000140000450000000000000000020000001f00000000000000140000000000000008000000010000005509000000000000"], 0x188}}], 0x1, 0x48004) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendto$inet6(r7, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 1.761305245s ago: executing program 2 (id=5245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x27}, @remote}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xbfff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x80) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.627268401s ago: executing program 1 (id=5246): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r0}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x228, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x4, 0x9, 'kmp\x00', "8720b47ff1417a3bff3c9fb7cb7997b7514931bd2f540a0169229b60036088bc4b070ddf15ad01f5487588c1ed8d19aeeffe74207d6c3fbc5c8908dfd46a2d73e34d3682f1902e6fe9931f5c46655ac763857fb1f199f35e4b6bd971c28e3406ee0818032d78766642778cb5355db37c410a656d9819fc9d0d4593b98a6d48f4", 0x33, 0x6, {0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0x52e6, 0x18, 0x8}, {0x7800}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xa, 0x0, 0x9d6, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [], 'macvlan1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x10, 0x5], 0x0, 0x0, 0x2}}, @common=@icmp6={{0x28}, {0x11, "b6a7"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x478) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdb}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sendmsg$inet6(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="ef172103b78ee681efec00cb5b9cf721c2f0445723e4b2157465c51eb9591e3d774e859f3efe94d2b8b08e1b1971b89dbc05265dcb81dc169493105f716888d73d016292720b8279eecc1066af9676de28950fe276d4bd50e86ac65fa65e04cfc2533fe47e932cc2e62df0916f2cad78b812b08cd42dcb5351d81ae21712a343bdcd352ed46fafa90aa5690bbf26ffd3b0077fbe4ee20ed567424b6b6593b4589446a612d24240692e26a4f7337eea5e5e747fb2e898d9ba5a45d4da85f86a2d0cd35ee440e2b8f8caf0d0408a12f860e2f47817e771720dfc052d5ee88003000000c6c6fa8fb6cebfdb71ab7c6c547fcb227237ef9615", 0xffffffffffffffb1}, {&(0x7f0000000080)="79919a18ad3f70bf59551af9017541619a3854eb5c41e9de8b54a0b0d13af5cfb5eeb8fc54549dd0c07aa0c0fe656624db4a46d212dbe907f220840f5b631f27c307aa33b0b870", 0x47}], 0x2, &(0x7f00000002c0)=[@hoplimit_2292={{0xfffffffffffffdf6, 0x29, 0x8, 0xf94}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x90}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 1.620742774s ago: executing program 4 (id=5247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x3, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="7f415152fe96a295fc64f41901c2", 0x0, 0xe06, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.450418874s ago: executing program 4 (id=5248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000000901010000000000000000000000001000048008000140000000000c000280050001000000000014000280080001000000000008000200ac141400080005"], 0x58}}, 0x0) 1.371807159s ago: executing program 4 (id=5249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a78ff00000000bfa200000000000007020000f8ffffffb703000008000000ae38000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.297835716s ago: executing program 2 (id=5250): r0 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x22020600) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r1, 0x852ac000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x296, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x52, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1e, 0x44, 0x67, 0x0, 0x8, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x7, [{@broadcast, 0x5}, {@loopback}, {@multicast1, 0xd1}]}]}}, {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8000, 0x0, 0xfffe}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x81, 0x0, 0xf, 0x11, 0x7, 0x4, 0xa, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0xa, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x34ae, 0x1, 0x9, 0x7f, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) shutdown(r0, 0x1) 1.206959352s ago: executing program 1 (id=5251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf2503"], 0x18}}, 0x840) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x20b, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xfff1, 0xffe0}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001000370400"/20, @ANYRES32=r6, @ANYBLOB="03d6afe1a367b307ea575910479807f8da1c07000000000014001280"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.150270345s ago: executing program 4 (id=5252): r0 = socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) (async) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) accept$unix(r0, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x62, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0x104, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x3, 0x0, 0x8}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x0, @in6=@mcast1, 0x4, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}]}]}, 0x1bc}}, 0x80c4) 1.098750745s ago: executing program 2 (id=5253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) unshare(0x20000400) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) epoll_create(0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r5, 0x29, 0xdb, &(0x7f0000000040)=0x9f, 0x4) write$cgroup_pid(r4, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000008, 0x6e071, 0xffffffffffffffff, 0x80000000) connect$can_bcm(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0x22}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000340)="17199dce5817b0f57f659aa8d4fd38ca01c162da040db329c064116e4c6f710000e6c368b0b4643ecd2634baa095b8c291e285758f9b875a9b7bfbc9207536", 0x3f}], 0x3) 988.414319ms ago: executing program 1 (id=5254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000003}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r12) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000000)={0xa, [0x7, 0xbdcf, 0x94c4, 0xfff9, 0x7, 0x5, 0x3, 0x965, 0x1, 0x6]}, &(0x7f0000000080)=0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=r11, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 938.117309ms ago: executing program 4 (id=5255): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="38ce00000000ee9ab3eaafb70597afa669ff45c5e9007ac700000052e2040000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x14000, 0x0) write$rfkill(r9, &(0x7f0000000340)={0x400, 0x2, 0x2, 0xf6}, 0x8) close(0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x850) r10 = socket$netlink(0x10, 0x3, 0xb) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001d1a000004020c011100"], 0x15c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x4, 0xffffffffffffff82) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r12) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r13, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRES32=r6, @ANYBLOB="0000000000000400b702000014000000b7030000000000008500000083040000bf09dfff0000000055090100000000feffffff0000000000bf910800000006000000008500000085000000b7000000cdc7401e2001bdda0400dcf4ebf6ee0b014fd3070916e14c318145ed0000"], &(0x7f00000006c0)='GPL\x00', 0x1892, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 846.429844ms ago: executing program 0 (id=5256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000b0000000025cc1e", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYRESHEX=r1, @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 770.204696ms ago: executing program 3 (id=5257): r0 = epoll_create(0x2) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001bebc5eb3130bcadd0edddaf69d3fbffffffffffffff00000000"], 0x50) (async, rerun: 32) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083007c0dbf0900000000000055090100000000009500000000000000bf07000000000000b702000002000000850000000000dd0200000000000000009500000000007f00"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x3, 0x2}}}}]}, 0x3e}, 0x1, 0x0, 0x0, 0x408c1}, 0x4004061) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, &(0x7f00000005c0)="00800800", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @remote}, 0x14) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001840)={0x90000001}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r10, 0x2, {0x1, 0x0, 0x4}, 0xff}, 0x18) (async, rerun: 32) r11 = socket(0x200000000000011, 0x2, 0xd) (rerun: 32) bind$packet(r11, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x200000000000011, 0x2, 0xd) (async) r12 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r12, &(0x7f0000000340)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa080045000078006600020011907800000000000000000000fffc00649078020000000200000002000000e5410e86db87a41f716be86b200d6357e182d774568a715b52efe1fa0fe2fb143899778cc5c15c1337404bb3971a42adfcbb6b0897a74ec0fc0c17d7b032591c2a7eb609eb8d2d9d1528ee7b0e6c6484"], 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=@gettaction={0x198, 0x32, 0x400, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40000005}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x30}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x403}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x227}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb3d}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x198}}, 0xc8c0) 554.530083ms ago: executing program 0 (id=5258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000000)=0x40) 534.542529ms ago: executing program 3 (id=5259): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000300)=0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x8, 0xa, 0xa, 0x1, 0x6, 0x0, 0x0, 0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_ifreq(r3, 0x8932, &(0x7f00000000c0)={'netdevsim0\x00', @ifru_data=0x0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r2, 0xc}, &(0x7f00000000c0)=0x8) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e21, 0x6, @local, 0xffff7dae}, 0x1c) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000002c0)=0xe) 494.297684ms ago: executing program 0 (id=5260): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x810, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x7, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffd, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 270.774481ms ago: executing program 1 (id=5261): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0xfffc, 0xe, 0x0, 0x2000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f00000000c0)=0x4, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000000000000080000000066a6c3477e5ecd1d9eef448fff09b53bd5fae86840725fc3b8a42258e8c110ca224e088dec6131f1250c48aebc8d7f94e6dda80af741", @ANYRES32=0x0], 0x3c}}, 0x4000000) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x0, @dev}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) (async) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x79, &(0x7f0000000180)=""/121, 0x41000, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x79, &(0x7f0000000180)=""/121, 0x41000, 0x4}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 185.428373ms ago: executing program 2 (id=5262): socket$netlink(0x10, 0x3, 0x9) (async) r0 = epoll_create1(0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x181802, 0x0) (rerun: 32) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x4b}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES8=r0, @ANYRESOCT=r4], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffc02, 0x81, 0xfffffffc, 0x4}}]}]}}}]}, 0x64}}, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96}, 0x28) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f0000000780)=0x6, 0x4) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r8) (async) r10 = socket(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000240)=0x2a76, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000000002000100010000000000031600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) (async, rerun: 32) sendmsg$inet6(r10, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="c6e73300000000", 0x7}, {&(0x7f00000006c0)="9e91d91a9cfc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f00000004c0)="e3cb8bc7195b", 0x6}], 0x3}, 0x20004b88) (async, rerun: 32) sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x88c0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r6) 184.076656ms ago: executing program 3 (id=5263): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0005"], 0x28}}, 0x0) 10.299154ms ago: executing program 4 (id=5264): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="40000000000000000002000000270000002619031abc19302403df3af640c9fbfa0bd5a80685a77e63fe0ec8ca1cc5be17ffda2790174ecb05a719415b1c5ea59f88c905e0644100000000"], 0x40, 0x20008000}], 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0xf7, 0x2, 0x7}, {0xc7, 0x2, 0x0, 0xb}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) 9.722487ms ago: executing program 3 (id=5265): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x52, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r1, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}}]}, 0x64}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x15, 0xf9, 0x6, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x5, 0x5e, 0xa0, 0x0, @in6={0xa, 0x4e20, 0x0, @remote, 0x8}}]}, 0x38}}, 0x40000) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0xfffffffc, @mcast2}, 0x1, {[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff]}}, 0x5c) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r8], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)={0x28, r12, 0x1, 0x70bd29, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}]}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b40)={0x304, r12, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "8c01b810aff5b38c9696efcaf03ed1a4e3bd1ca89ef3865a0f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x103, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x12, 0x3, "3c2cc2442357d4cdf9ff38570854"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}]}, @TIPC_NLA_BEARER={0x160, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10001, @loopback, 0xd}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @empty, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x602}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) (async) r13 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711033000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) getsockname$packet(r13, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 0s ago: executing program 0 (id=5266): syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x11f, 0xe964, 0x7, 0x5}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x11f, 0xe964, 0x7, 0x5}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xe, 0x1ba3e52e13ed3a17, 0xfffffffffffffffd, 0x7fffffff}, &(0x7f00000001c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xe, 0x1ba3e52e13ed3a17, 0xfffffffffffffffd, 0x7fffffff}, &(0x7f00000001c0)=0x18) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe4, 0x0, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_RULES={0xa4, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x180}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xdb5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x62c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc11}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1000}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x94}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2800000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, r6, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x12}]}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2ce}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2bd}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x13}, 0x4004090) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000680)={0x0, 'veth1_vlan\x00', {0x4}}) accept4$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @private}, &(0x7f0000000700)=0x10, 0xc0000) (async) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @private}, &(0x7f0000000700)=0x10, 0xc0000) accept4$inet(r7, &(0x7f0000000740)={0x2, 0x0, @loopback}, &(0x7f0000000780)=0x10, 0x0) getsockopt$inet_mreqsrc(r7, 0x0, 0x0, &(0x7f00000007c0)={@private, @rand_addr, @multicast1}, &(0x7f0000000800)=0xc) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f00000008c0)={0x1, &(0x7f0000000880)=[{0x8000, 0x0, 0x35, 0xdf}]}) (async) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f00000008c0)={0x1, &(0x7f0000000880)=[{0x8000, 0x0, 0x35, 0xdf}]}) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x0, 0x160, 0x290, 0x290, 0xc8, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, &(0x7f0000000900), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x84, 0x0, 0x22}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x6], 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x3}}}, {{@ip={@remote, @rand_addr=0x64010100, 0xffffff00, 0xffffffff, 'wg2\x00', 'gre0\x00', {}, {}, 0x73, 0x1}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x9, @private=0xa010102, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000e00)) (async) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000e00)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r9, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000010) getsockname$packet(r8, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001080)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x98, r9, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x48000}, 0x4000841) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x98, r9, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x48000}, 0x4000841) syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r8) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r8) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x154, r12, 0xb02, 0x70bd26, 0x36, {}, [@ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x41}, 0x4040010) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000001480)={0x91c9, 0x800, 0x8200, 0x3, 0x1, 0x5, 0xaf, 0x7fff, r3}, &(0x7f00000014c0)=0x20) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x19}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2e}]}, 0x38}, 0x1, 0x0, 0x0, 0x6008000}, 0x10) kernel console output (not intermixed with test programs): ppressed [ 666.098803][T20517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3547'. [ 666.145875][T20517] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3547'. [ 666.518966][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 666.602343][T20536] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 666.636152][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3554'. [ 666.722301][T20539] ip6tnl2: entered allmulticast mode [ 666.731511][ T73] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 666.801650][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 667.072748][T20557] syzkaller0: entered promiscuous mode [ 667.080934][T20557] syzkaller0: entered allmulticast mode [ 667.614924][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3570'. [ 667.762094][T20593] tipc: Enabled bearer , priority 0 [ 667.773586][T20597] tipc: Enabling of bearer rejected, already enabled [ 667.782223][T20593] syzkaller0: entered promiscuous mode [ 667.795010][T20593] syzkaller0: entered allmulticast mode [ 667.869754][T20600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3574'. [ 668.007169][T20593] batadv_slave_1: entered promiscuous mode [ 668.047807][T20591] batadv_slave_1: left promiscuous mode [ 668.168782][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3578'. [ 668.230423][T20611] syz.2.3576 (20611) used obsolete PPPIOCDETACH ioctl [ 668.249361][T20591] tipc: Resetting bearer [ 668.253487][T20615] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3578'. [ 668.298406][T20591] tipc: Disabling bearer [ 668.961359][T20650] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 668.968885][T20650] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 669.675723][T20674] veth1_to_hsr: entered promiscuous mode [ 669.716915][T20674] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3587'. [ 669.726183][T20674] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 669.871949][T20681] TCP: TCP_TX_DELAY enabled [ 670.641021][T20700] syzkaller0: entered promiscuous mode [ 670.646655][T20700] syzkaller0: entered allmulticast mode [ 670.928178][T20713] sctp: [Deprecated]: syz.0.3603 (pid 20713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.928178][T20713] Use struct sctp_sack_info instead [ 671.067915][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 671.163257][T20728] netlink: 'syz.4.3605': attribute type 1 has an invalid length. [ 671.177128][T20728] Cannot find set identified by id 0 to match [ 671.256506][T20734] __nla_validate_parse: 2 callbacks suppressed [ 671.256528][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 671.316875][T20731] bond3 (unregistering): Released all slaves [ 671.349886][T20739] netlink: 'syz.3.3609': attribute type 15 has an invalid length. [ 671.535685][T20755] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3615'. [ 671.663211][T20761] erspan0: entered promiscuous mode [ 671.699471][T20761] erspan0: entered allmulticast mode [ 671.785507][T20764] syzkaller0: entered promiscuous mode [ 671.791142][T20764] syzkaller0: entered allmulticast mode [ 671.895144][T20770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3619'. [ 671.927142][T20770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.056599][T20773] sctp: [Deprecated]: syz.1.3620 (pid 20773) Use of int in max_burst socket option. [ 672.056599][T20773] Use struct sctp_assoc_value instead [ 672.134978][T20773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3620'. [ 672.367737][T20782] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 672.684790][T20795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 672.764505][T20798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 673.014303][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 673.493330][T20826] syzkaller0: entered promiscuous mode [ 673.498970][T20826] syzkaller0: entered allmulticast mode [ 673.612538][T20826] tipc: Enabled bearer , priority 0 [ 673.700146][T20826] tipc: Resetting bearer [ 673.738539][T20826] tipc: Resetting bearer [ 673.760669][T20826] tipc: Disabling bearer [ 674.363342][T20866] syzkaller0: entered promiscuous mode [ 674.379772][T20866] syzkaller0: entered allmulticast mode [ 674.523542][T20868] vlan3: entered allmulticast mode [ 674.530010][T20872] netlink: 'syz.4.3656': attribute type 1 has an invalid length. [ 674.537884][T20872] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3656'. [ 674.568335][T20868] bond0: entered allmulticast mode [ 674.574058][T20868] bond_slave_0: entered allmulticast mode [ 674.579817][T20868] bond_slave_1: entered allmulticast mode [ 674.607462][T20868] bridge0: port 3(vlan3) entered blocking state [ 674.614543][T20868] bridge0: port 3(vlan3) entered disabled state [ 674.623874][T20868] vlan3: entered promiscuous mode [ 674.629050][T20868] bond0: entered promiscuous mode [ 674.634204][T20868] bond_slave_0: entered promiscuous mode [ 674.640318][T20868] bond_slave_1: entered promiscuous mode [ 674.647815][T20868] bridge0: port 3(vlan3) entered blocking state [ 674.654410][T20868] bridge0: port 3(vlan3) entered forwarding state [ 674.919908][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3659'. [ 675.097459][T20891] openvswitch: netlink: Duplicate or invalid key (type 0). [ 675.105339][T20891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.279794][T20895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3663'. [ 675.304325][T20895] macsec2: entered promiscuous mode [ 675.818005][T20907] syzkaller0: entered promiscuous mode [ 675.837360][T20907] syzkaller0: entered allmulticast mode [ 675.861416][T20910] openvswitch: netlink: Actions may not be safe on all matching packets [ 676.201486][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3671'. [ 676.403798][T20917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3672'. [ 676.412962][T20917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3672'. [ 676.427948][T20917] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3672'. [ 676.941390][T20940] veth1_to_hsr: entered promiscuous mode [ 676.950761][T20940] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3679'. [ 676.961349][T20940] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 677.090852][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 677.264779][T20949] syzkaller0: entered promiscuous mode [ 677.270727][T20949] syzkaller0: entered allmulticast mode [ 677.284976][T20949] tipc: Enabled bearer , priority 0 [ 677.293874][T20948] tipc: Resetting bearer [ 677.320232][T20948] tipc: Disabling bearer [ 677.583544][T20951] syzkaller0: entered promiscuous mode [ 677.591193][T20951] syzkaller0: entered allmulticast mode [ 677.895616][T20962] netlink: zone id is out of range [ 677.900892][T20962] netlink: zone id is out of range [ 677.906216][T20962] netlink: zone id is out of range [ 677.935232][T20962] netlink: zone id is out of range [ 677.940869][T20962] netlink: zone id is out of range [ 677.949647][T20967] Cannot find del_set index 0 as target [ 677.954336][T20962] netlink: zone id is out of range [ 677.970729][T20962] netlink: zone id is out of range [ 677.998383][T20962] netlink: zone id is out of range [ 678.006306][T20962] netlink: zone id is out of range [ 678.017693][T20962] netlink: zone id is out of range [ 678.107656][T20974] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3691'. [ 678.206932][T20978] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 678.224257][T20978] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3694'. [ 678.254145][T20981] tipc: Enabling of bearer rejected, already enabled [ 679.534799][T20999] x_tables: duplicate underflow at hook 2 [ 679.694439][T21008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 679.701723][T21008] IPv6: NLM_F_CREATE should be set when creating new route [ 679.709084][T21008] IPv6: NLM_F_CREATE should be set when creating new route [ 679.990185][T21017] syzkaller0: entered promiscuous mode [ 679.995728][T21017] syzkaller0: entered allmulticast mode [ 680.007295][T21017] tipc: Enabled bearer , priority 0 [ 680.017029][T21015] tipc: Resetting bearer [ 680.055566][T21015] tipc: Disabling bearer [ 680.353456][T21022] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3709'. [ 680.411279][T21024] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3710'. [ 680.517804][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 681.949574][T21070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 682.029940][T21068] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3721'. [ 682.165290][T21078] netlink: 'syz.4.3724': attribute type 2 has an invalid length. [ 682.348547][T21080] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3725'. [ 682.363618][T21082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3721'. [ 682.404939][T21087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3728'. [ 682.454281][T21083] syzkaller0: entered promiscuous mode [ 682.460106][T21083] syzkaller0: entered allmulticast mode [ 682.471920][T21083] tipc: Enabled bearer , priority 0 [ 682.486249][T21081] tipc: Resetting bearer [ 682.518168][T21081] tipc: Disabling bearer [ 682.582980][T21090] netlink: 'syz.1.3729': attribute type 8 has an invalid length. [ 682.700599][T21093] syzkaller0: entered promiscuous mode [ 682.706334][T21093] syzkaller0: entered allmulticast mode [ 682.955049][T21096] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3731'. [ 683.210479][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 683.435690][T21105] veth1_to_team: entered allmulticast mode [ 683.870445][T21109] net_ratelimit: 25 callbacks suppressed [ 683.872157][T21109] openvswitch: netlink: Key type 242 is out of range max 32 [ 683.887741][T21110] FAULT_INJECTION: forcing a failure. [ 683.887741][T21110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.917888][T21112] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 683.928221][T21110] CPU: 0 UID: 0 PID: 21110 Comm: syz.4.3736 Not tainted syzkaller #0 PREEMPT(full) [ 683.928251][T21110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 683.928263][T21110] Call Trace: [ 683.928271][T21110] [ 683.928281][T21110] dump_stack_lvl+0xe8/0x150 [ 683.928318][T21110] should_fail_ex+0x40c/0x560 [ 683.928348][T21110] _copy_from_user+0x2d/0xb0 [ 683.928387][T21110] ___sys_sendmsg+0x1c6/0x360 [ 683.928410][T21110] ? __lock_acquire+0x683/0x2cf0 [ 683.928442][T21110] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.928460][T21110] ? __lock_acquire+0x683/0x2cf0 [ 683.928492][T21110] ? kstrtouint+0x6e/0xe0 [ 683.928558][T21110] __sys_sendmmsg+0x273/0x4d0 [ 683.928585][T21110] ? __pfx___sys_sendmmsg+0x10/0x10 [ 683.928616][T21110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 683.928654][T21110] ? ksys_write+0x242/0x270 [ 683.928686][T21110] ? __pfx_ksys_write+0x10/0x10 [ 683.928721][T21110] __x64_sys_sendmmsg+0xa0/0xc0 [ 683.928741][T21110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.928761][T21110] do_syscall_64+0x174/0x580 [ 683.928781][T21110] ? trace_irq_disable+0x3b/0x140 [ 683.928804][T21110] ? clear_bhb_loop+0x40/0x90 [ 683.928815][T21112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3735'. [ 683.928829][T21110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.928851][T21110] RIP: 0033:0x7fbdf739de99 [ 683.928871][T21110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.928886][T21110] RSP: 002b:00007fbdf8211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 683.928906][T21110] RAX: ffffffffffffffda RBX: 00007fbdf7625fa0 RCX: 00007fbdf739de99 [ 683.928919][T21110] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 683.928932][T21110] RBP: 00007fbdf8211090 R08: 0000000000000000 R09: 0000000000000000 [ 683.928942][T21110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.928953][T21110] R13: 00007fbdf7626038 R14: 00007fbdf7625fa0 R15: 00007ffc83557408 [ 683.928982][T21110] [ 685.162008][T21122] netlink: 'syz.4.3740': attribute type 11 has an invalid length. [ 685.472742][T21124] syzkaller0: entered promiscuous mode [ 685.478758][T21124] syzkaller0: entered allmulticast mode [ 685.489427][T21124] tipc: Enabled bearer , priority 0 [ 685.504236][T21123] tipc: Resetting bearer [ 685.574118][T21123] tipc: Disabling bearer [ 686.035107][T21135] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3744'. [ 686.125255][T21133] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3743'. [ 686.183577][T21138] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3743'. [ 686.200703][T21133] gretap0: entered promiscuous mode [ 686.259791][T21138] 0ªî{X¹¦: renamed from gretap0 [ 686.326232][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.390888][T21138] 0ªî{X¹¦: left promiscuous mode [ 686.396402][T21138] 0ªî{X¹¦: entered allmulticast mode [ 686.430714][T21138] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 686.610091][T21148] FAULT_INJECTION: forcing a failure. [ 686.610091][T21148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.656426][T21150] nbd: must specify a device to reconfigure [ 686.673079][T21148] CPU: 0 UID: 0 PID: 21148 Comm: syz.2.3747 Not tainted syzkaller #0 PREEMPT(full) [ 686.673108][T21148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.673121][T21148] Call Trace: [ 686.673128][T21148] [ 686.673137][T21148] dump_stack_lvl+0xe8/0x150 [ 686.673175][T21148] should_fail_ex+0x40c/0x560 [ 686.673206][T21148] _copy_to_user+0x31/0xb0 [ 686.673240][T21148] simple_read_from_buffer+0xe1/0x170 [ 686.673284][T21148] proc_fail_nth_read+0x1bb/0x230 [ 686.673317][T21148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.673348][T21148] ? rw_verify_area+0x24a/0x4c0 [ 686.673378][T21148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.673406][T21148] vfs_read+0x213/0xa80 [ 686.673442][T21148] ? __pfx___mutex_lock+0x10/0x10 [ 686.673467][T21148] ? __pfx_vfs_read+0x10/0x10 [ 686.673503][T21148] ? __fget_files+0x2a/0x420 [ 686.673534][T21148] ? __fget_files+0x3a2/0x420 [ 686.673557][T21148] ? __fget_files+0x2a/0x420 [ 686.673593][T21148] ksys_read+0x150/0x270 [ 686.673626][T21148] ? __pfx_ksys_read+0x10/0x10 [ 686.673674][T21148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.673697][T21148] do_syscall_64+0x174/0x580 [ 686.673726][T21148] ? trace_irq_disable+0x3b/0x140 [ 686.673752][T21148] ? clear_bhb_loop+0x40/0x90 [ 686.673778][T21148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.673798][T21148] RIP: 0033:0x7f336a35e6ce [ 686.673817][T21148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 686.673836][T21148] RSP: 002b:00007f336b218fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.673866][T21148] RAX: ffffffffffffffda RBX: 00007f336b2196c0 RCX: 00007f336a35e6ce [ 686.673880][T21148] RDX: 000000000000000f RSI: 00007f336b2190a0 RDI: 0000000000000004 [ 686.673893][T21148] RBP: 00007f336b219090 R08: 0000000000000000 R09: 0000000000000000 [ 686.673905][T21148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 686.673917][T21148] R13: 00007f336a626038 R14: 00007f336a625fa0 R15: 00007ffd8b6e9208 [ 686.673952][T21148] [ 686.913266][T21151] lo: entered allmulticast mode [ 686.930004][T21151] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3746'. [ 687.399781][T21153] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3748'. [ 687.774664][T21165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3752'. [ 687.967441][T21171] team0: Device vlan4 is already an upper device of the team interface [ 688.184482][T21175] netlink: 428 bytes leftover after parsing attributes in process `syz.1.3756'. [ 688.197838][T21175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3756'. [ 688.371520][T21181] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3758'. [ 688.453686][T21183] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3760'. [ 688.739427][T21196] netlink: zone id is out of range [ 688.834796][T21203] sctp: [Deprecated]: syz.3.3765 (pid 21203) Use of int in max_burst socket option. [ 688.834796][T21203] Use struct sctp_assoc_value instead [ 688.851826][T21203] netlink: 'syz.3.3765': attribute type 1 has an invalid length. [ 688.859705][T21203] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3765'. [ 689.448444][T21222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3770'. [ 689.865163][T21231] tipc: Enabled bearer , priority 10 [ 690.094724][T21240] nbd: must specify a size in bytes for the device [ 690.168709][T21221] can: request_module (can-proto-0) failed. [ 690.340665][T21238] bridge0: port 3(vlan3) entered disabled state [ 690.347324][T21238] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.355279][T21238] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.401456][T21238] tipc: Resetting bearer [ 690.507372][T21238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.524434][T21238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.752607][ T6916] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 690.776945][ T6916] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.813887][ T6916] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 690.849628][ T6916] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.883534][ T6916] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 690.918697][ T6916] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.942612][ T6916] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 690.952198][ T6916] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.965391][T21252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3779'. [ 691.472242][T21253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3777'. [ 691.481277][T21253] netlink: 'syz.2.3777': attribute type 3 has an invalid length. [ 691.490035][T21253] netlink: 'syz.2.3777': attribute type 2 has an invalid length. [ 691.497806][T21253] netlink: 'syz.2.3777': attribute type 2 has an invalid length. [ 691.547452][T21249] netlink: 'syz.0.3778': attribute type 2 has an invalid length. [ 691.581968][T21249] netlink: 'syz.0.3778': attribute type 2 has an invalid length. [ 695.663894][T21286] __nla_validate_parse: 8 callbacks suppressed [ 695.663918][T21286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3788'. [ 695.911605][T21300] sctp: [Deprecated]: syz.2.3793 (pid 21300) Use of int in max_burst socket option. [ 695.911605][T21300] Use struct sctp_assoc_value instead [ 695.952413][T21303] netlink: 'syz.4.3788': attribute type 9 has an invalid length. [ 695.986839][T21300] netlink: 'syz.2.3793': attribute type 1 has an invalid length. [ 696.003678][T21300] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3793'. [ 696.202992][T21306] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3794'. [ 696.230690][T13365] IPVS: starting estimator thread 0... [ 696.498755][T21312] IPVS: using max 27 ests per chain, 64800 per kthread [ 696.505014][T21325] netlink: 'syz.1.3799': attribute type 11 has an invalid length. [ 696.773906][T21334] xt_cgroup: invalid path, errno=-2 [ 697.086154][T21347] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3806'. [ 697.094223][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3805'. [ 697.095814][ T30] audit: type=1800 audit(1784765454.676:5): pid=21332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3801" name="cgroup.controllers" dev="tmpfs" ino=432 res=0 errno=0 [ 697.180030][T21345] bridge0: port 1(dummy0) entered blocking state [ 697.186926][T21345] bridge0: port 1(dummy0) entered disabled state [ 697.193564][T21345] dummy0: entered allmulticast mode [ 697.212232][T21345] dummy0: entered promiscuous mode [ 697.220371][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'. [ 697.240759][T21345] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 697.249168][T21345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3805'. [ 697.254297][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'. [ 697.297303][T21353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3808'. [ 697.301612][T21345] bridge0: port 1(dummy0) entered blocking state [ 697.313570][T21345] bridge0: port 1(dummy0) entered forwarding state [ 697.323921][T21345] dummy0: left allmulticast mode [ 697.329248][T21345] bridge0: port 1(dummy0) entered disabled state [ 697.466702][T21360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3811'. [ 697.752672][T21373] sctp: [Deprecated]: syz.3.3814 (pid 21373) Use of int in max_burst socket option. [ 697.752672][T21373] Use struct sctp_assoc_value instead [ 697.778338][T21373] netlink: 'syz.3.3814': attribute type 1 has an invalid length. [ 697.787981][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 698.309642][T21386] block nbd1: server does not support multiple connections per device. [ 698.329805][T21386] block nbd1: shutting down sockets [ 698.421304][T21396] netlink: 'syz.0.3820': attribute type 1 has an invalid length. [ 698.441281][T21386] netlink: 'syz.2.3819': attribute type 1 has an invalid length. [ 698.925076][T21417] unsupported nla_type 36131 [ 699.099241][T21423] Bluetooth: MGMT ver 1.23 [ 700.451997][ T5353] IPVS: starting estimator thread 0... [ 700.459848][T21450] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 700.617821][T21457] IPVS: using max 32 ests per chain, 76800 per kthread [ 701.290063][T21469] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 701.313655][T21469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 701.393569][T21477] __nla_validate_parse: 4 callbacks suppressed [ 701.393590][T21477] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3844'. [ 701.478630][T21482] tipc: Enabling of bearer rejected, already enabled [ 701.617408][T21489] netlink: 'syz.2.3848': attribute type 11 has an invalid length. [ 701.691651][T21491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3849'. [ 701.739159][T21491] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3849'. [ 702.459130][T21514] openvswitch: netlink: Message has 8 unknown bytes. [ 702.586096][T21517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3857'. [ 703.157067][T21535] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3861'. [ 703.189624][T21532] netlink: 'syz.2.3860': attribute type 11 has an invalid length. [ 703.444041][T21542] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3862'. [ 703.504821][T21543] xt_hashlimit: max too large, truncated to 1048576 [ 703.511751][T21543] xt_hashlimit: overflow, try lower: 137438953472/8 [ 703.511838][T21544] syz.2.3862: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 703.538384][T21544] CPU: 1 UID: 0 PID: 21544 Comm: syz.2.3862 Not tainted syzkaller #0 PREEMPT(full) [ 703.538411][T21544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.538422][T21544] Call Trace: [ 703.538431][T21544] [ 703.538439][T21544] dump_stack_lvl+0xe8/0x150 [ 703.538476][T21544] warn_alloc+0x24c/0x270 [ 703.538504][T21544] ? stack_depot_save_flags+0x33/0x800 [ 703.538532][T21544] ? __pfx_warn_alloc+0x10/0x10 [ 703.538559][T21544] ? kasan_save_track+0x3e/0x80 [ 703.538583][T21544] ? __kasan_kmalloc+0x93/0xb0 [ 703.538611][T21544] ? xsk_setsockopt+0x52a/0x960 [ 703.538640][T21544] ? do_sock_setsockopt+0x17c/0x1b0 [ 703.538659][T21544] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 703.538677][T21544] ? do_syscall_64+0x174/0x580 [ 703.538697][T21544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.538730][T21544] __vmalloc_node_range_noprof+0x12c/0x1730 [ 703.538787][T21544] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 703.538817][T21544] ? __kasan_kmalloc+0x93/0xb0 [ 703.538845][T21544] ? __kmalloc_cache_noprof+0x32d/0x660 [ 703.538869][T21544] ? __kmalloc_cache_noprof+0x150/0x660 [ 703.538893][T21544] vmalloc_user_noprof+0xad/0xe0 [ 703.538916][T21544] ? xskq_create+0xbf/0x170 [ 703.538936][T21544] xskq_create+0xbf/0x170 [ 703.538958][T21544] xsk_init_queue+0x8a/0xe0 [ 703.539000][T21544] xsk_setsockopt+0x52a/0x960 [ 703.539029][T21544] ? __fget_files+0x2a/0x420 [ 703.539057][T21544] ? __pfx_xsk_setsockopt+0x10/0x10 [ 703.539088][T21544] ? __pfx_aa_sk_perm+0x10/0x10 [ 703.539124][T21544] ? aa_sock_opt_perm+0xff/0x1a0 [ 703.539149][T21544] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 703.539170][T21544] ? __pfx_xsk_setsockopt+0x10/0x10 [ 703.539202][T21544] do_sock_setsockopt+0x17c/0x1b0 [ 703.539228][T21544] __x64_sys_setsockopt+0x13d/0x1b0 [ 703.539252][T21544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.539275][T21544] do_syscall_64+0x174/0x580 [ 703.539295][T21544] ? trace_irq_disable+0x3b/0x140 [ 703.539321][T21544] ? clear_bhb_loop+0x40/0x90 [ 703.539348][T21544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.539368][T21544] RIP: 0033:0x7f336a39de99 [ 703.539389][T21544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.539407][T21544] RSP: 002b:00007f336b1f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 703.539430][T21544] RAX: ffffffffffffffda RBX: 00007f336a626090 RCX: 00007f336a39de99 [ 703.539444][T21544] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 703.539457][T21544] RBP: 00007f336a433eaf R08: 0000000000000004 R09: 0000000000000000 [ 703.539468][T21544] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.539479][T21544] R13: 00007f336a626128 R14: 00007f336a626090 R15: 00007ffd8b6e9208 [ 703.539512][T21544] [ 703.539520][T21544] Mem-Info: [ 703.552242][T21542] netlink: 'syz.2.3862': attribute type 2 has an invalid length. [ 703.560745][T21544] active_anon:8884 inactive_anon:0 isolated_anon:0 [ 703.560745][T21544] active_file:0 inactive_file:43940 isolated_file:0 [ 703.560745][T21544] unevictable:768 dirty:219 writeback:0 [ 703.560745][T21544] slab_reclaimable:11564 slab_unreclaimable:128368 [ 703.560745][T21544] mapped:29892 shmem:1425 pagetables:1396 [ 703.560745][T21544] sec_pagetables:0 bounce:0 [ 703.560745][T21544] kernel_misc_reclaimable:0 [ 703.560745][T21544] free:1263643 free_pcp:14171 free_cma:0 [ 703.560807][T21544] Node 0 active_anon:35536kB inactive_anon:0kB active_file:0kB inactive_file:175560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119568kB dirty:872kB writeback:0kB shmem:4164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14348kB pagetables:5432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 703.560861][T21544] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 703.560914][T21544] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 703.560976][T21544] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 703.561025][T21544] Node 0 DMA32 free:1099456kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35536kB inactive_anon:0kB active_file:0kB inactive_file:175560kB unevictable:1536kB writepending:872kB zspages:0kB present:3129332kB managed:2548684kB mlocked:0kB bounce:0kB free_pcp:56684kB local_pcp:21208kB free_cma:0kB [ 703.561095][T21544] lowmem_reserve[]: 0 0 0 0 0 [ 703.561140][T21544] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 703.561198][T21544] lowmem_reserve[]: 0 0 0 0 0 [ 703.561336][T21544] Node 1 Normal free:3939756kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 703.561494][T21544] lowmem_reserve[]: 0 0 0 0 0 [ 703.561538][T21544] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 703.561678][T21544] Node 0 DMA32: 1498*4kB (UME) 1209*8kB (UME) 925*16kB (UME) 271*32kB (UME) 6*64kB (UME) 51*128kB (UME) 49*256kB (UM) 15*512kB (UM) 9*1024kB (UME) 4*2048kB (M) 248*4096kB (UM) = 1099488kB [ 703.561888][T21544] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 703.562009][T21544] Node 1 Normal: 1*4kB (U) 13*8kB (UM) 4*16kB (UM) 2*32kB (UM) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939756kB [ 703.562223][T21544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.562242][T21544] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 703.562258][T21544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.562275][T21544] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 703.562293][T21544] 45361 total pagecache pages [ 703.562301][T21544] 0 pages in swap cache [ 703.562310][T21544] Free swap = 124996kB [ 703.562320][T21544] Total swap = 124996kB [ 703.562330][T21544] 2097051 pages RAM [ 703.562339][T21544] 0 pages HighMem/MovableOnly [ 703.562347][T21544] 428199 pages reserved [ 703.562356][T21544] 0 pages cma reserved [ 703.698024][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 703.711993][T21542] netlink: 'syz.2.3862': attribute type 1 has an invalid length. [ 704.153802][T21559] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3868'. [ 704.233235][T21563] veth1_to_hsr: entered promiscuous mode [ 704.265577][T21559] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3868'. [ 704.294642][T21563] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3865'. [ 704.305236][T21563] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 704.578639][T21571] openvswitch: netlink: Missing key (keys=40, expected=100) [ 704.702021][T21578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3871'. [ 704.715724][T21578] netlink: 'syz.0.3871': attribute type 3 has an invalid length. [ 704.726821][T21578] netlink: 'syz.0.3871': attribute type 2 has an invalid length. [ 704.736301][T21578] netlink: 'syz.0.3871': attribute type 2 has an invalid length. [ 705.242766][T21587] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 705.360940][T21598] batman_adv: batadv0: Interface deactivated: dummy0 [ 705.469159][T21598] batman_adv: batadv0: Removing interface: dummy0 [ 705.512042][T21596] netlink: 'syz.0.3877': attribute type 10 has an invalid length. [ 705.532275][T21596] dummy0: entered promiscuous mode [ 706.419342][T21619] netlink: 'syz.2.3883': attribute type 3 has an invalid length. [ 708.221388][T21590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 708.234370][T21610] __nla_validate_parse: 6 callbacks suppressed [ 708.234433][T21610] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3881'. [ 708.497854][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3890'. [ 708.502417][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3888'. [ 708.530009][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 708.555880][T21640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.563783][T21640] IPv6: NLM_F_CREATE should be set when creating new route [ 708.571780][T21640] IPv6: NLM_F_CREATE should be set when creating new route [ 708.602788][T21641] syz_tun: entered allmulticast mode [ 708.789867][T21647] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 708.803326][T21647] bond5 (unregistering): Released all slaves [ 708.834728][T21638] syz_tun: left allmulticast mode [ 708.975393][T21662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3895'. [ 709.049924][T21662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.070564][T21671] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 709.094931][T21662] netlink: 'syz.1.3895': attribute type 10 has an invalid length. [ 709.112339][T21662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3895'. [ 709.140564][T21662] dummy0: entered promiscuous mode [ 709.149370][T21662] bond3: (slave dummy0): Releasing backup interface [ 709.232878][T21676] netlink: 'syz.0.3899': attribute type 11 has an invalid length. [ 709.240428][T21678] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3900'. [ 709.818280][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 709.825334][T21701] batadv2: entered promiscuous mode [ 709.832704][T21701] batadv2: entered allmulticast mode [ 709.839654][T21701] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 710.101242][T21714] netlink: 'syz.0.3911': attribute type 11 has an invalid length. [ 710.728367][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 710.857072][T21749] netlink: 'syz.3.3920': attribute type 8 has an invalid length. [ 711.072711][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3921'. [ 711.565662][T21774] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 711.737451][T21779] tipc: Resetting bearer [ 712.023206][T21779] batman_adv: batadv0: Interface deactivated: gretap1 [ 712.074168][T21781] hsr0: entered allmulticast mode [ 712.079847][T21781] hsr_slave_0: entered allmulticast mode [ 712.085583][T21781] hsr_slave_1: entered allmulticast mode [ 712.106475][T21784] hsr_slave_0: left promiscuous mode [ 712.117871][T21784] hsr_slave_1: left promiscuous mode [ 712.137257][T21784] hsr0 (unregistering): left allmulticast mode [ 712.191536][ T73] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.206723][ T73] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.240629][ T73] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.285274][ T73] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.316839][T21801] syzkaller0: entered promiscuous mode [ 712.324807][T21801] syzkaller0: entered allmulticast mode [ 712.412254][T21805] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 713.282885][T21841] netlink: 'syz.3.3945': attribute type 1 has an invalid length. [ 713.661863][T21860] netlink: 'syz.3.3949': attribute type 2 has an invalid length. [ 713.756885][T21866] __nla_validate_parse: 9 callbacks suppressed [ 713.756909][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3950'. [ 713.871288][T21854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3947'. [ 713.880412][T21854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3947'. [ 713.890213][T21854] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3947'. [ 713.933018][T21854] netlink: 'syz.0.3947': attribute type 3 has an invalid length. [ 713.941377][T21854] netlink: 'syz.0.3947': attribute type 2 has an invalid length. [ 713.949314][T21854] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3947'. [ 713.958578][T21854] netlink: 'syz.0.3947': attribute type 2 has an invalid length. [ 714.090411][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3953'. [ 714.343132][T21895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3959'. [ 714.739475][T21906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3962'. [ 714.994831][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3968'. [ 715.008805][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3968'. [ 715.230398][T21930] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 716.066047][T21966] netlink: 'syz.2.3983': attribute type 1 has an invalid length. [ 716.241666][T21970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 716.256205][T21970] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 717.000891][T21999] geneve2: entered promiscuous mode [ 717.206342][T22012] netlink: 'syz.2.3991': attribute type 4 has an invalid length. [ 718.307117][T22057] x_tables: duplicate underflow at hook 1 [ 718.458311][T22065] syzkaller0: entered promiscuous mode [ 718.474214][T22065] syzkaller0: entered allmulticast mode [ 718.508624][T22065] tc action pedit offset must be on 32 bit boundaries [ 718.787018][T22078] 0ªî{X¹¦: left allmulticast mode [ 718.817897][T22078] dummy0: left promiscuous mode [ 718.886840][T22078] veth1_to_team: left allmulticast mode [ 718.896451][T22078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.912600][T22078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.933857][T22078] veth1_to_hsr: left promiscuous mode [ 719.176151][ T4936] Bluetooth: hci4: command 0x0406 tx timeout [ 719.187201][T22078] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 719.195313][T22078] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 719.291014][T22078] ip6tnl2: left allmulticast mode [ 719.304485][T22078] batadv2: left promiscuous mode [ 719.312242][T22078] batadv2: left allmulticast mode [ 719.321345][T22076] syzkaller0: entered promiscuous mode [ 719.327879][T22076] syzkaller0: entered allmulticast mode [ 719.351951][T22080] tipc: Enabled bearer , priority 0 [ 719.398639][T22087] tipc: Resetting bearer [ 719.404946][ T6640] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.414081][ T6640] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.423091][ T6640] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.432131][ T6640] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.444090][T22085] syzkaller0: entered promiscuous mode [ 719.449948][T22085] syzkaller0: entered allmulticast mode [ 719.461252][T22085] tipc: Enabled bearer , priority 0 [ 719.469721][T22084] tipc: Resetting bearer [ 719.483979][T22103] __nla_validate_parse: 12 callbacks suppressed [ 719.484002][T22103] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4016'. [ 719.595964][T22107] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4016'. [ 719.674882][T22084] tipc: Disabling bearer [ 719.684418][T22075] tipc: Resetting bearer [ 719.704984][T22075] tipc: Disabling bearer [ 719.714454][T22104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4016'. [ 719.858561][T22109] netlink: 'syz.1.4017': attribute type 12 has an invalid length. [ 719.953416][T22114] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4020'. [ 720.020524][T22117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4021'. [ 720.255416][T22127] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.307412][T22129] netlink: 'syz.0.4025': attribute type 83 has an invalid length. [ 720.389788][T22134] IPVS: set_ctl: invalid protocol: 103 172.20.20.56:20004 [ 720.401872][T22134] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4027'. [ 720.474931][T22140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4028'. [ 720.484052][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4028'. [ 720.561418][T22143] syzkaller0: entered promiscuous mode [ 720.566963][T22143] syzkaller0: entered allmulticast mode [ 720.577538][T22143] tipc: Enabled bearer , priority 0 [ 720.585310][T22142] tipc: Resetting bearer [ 720.632712][T22142] tipc: Disabling bearer [ 721.365750][T22174] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4032'. [ 721.415921][T22168] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4031'. [ 721.580838][T22174] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.588900][T22174] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.683231][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.887919][ T4936] Bluetooth: hci0: command 0x0406 tx timeout [ 757.558865][T22249] bridge_slave_0: entered promiscuous mode [ 757.566296][T22249] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 757.575237][T22251] __nla_validate_parse: 1 callbacks suppressed [ 757.575279][T22251] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4042'. [ 757.585054][T22248] syzkaller0: entered promiscuous mode [ 757.605318][T22248] syzkaller0: entered allmulticast mode [ 757.616830][T22248] tipc: Enabled bearer , priority 0 [ 757.624751][T22246] tipc: Resetting bearer [ 757.651749][T22246] tipc: Disabling bearer [ 758.026797][T22262] netlink: 'syz.4.4045': attribute type 30 has an invalid length. [ 758.133813][T22268] syzkaller0: entered promiscuous mode [ 758.141828][T22268] syzkaller0: entered allmulticast mode [ 758.239016][T22268] 0: reclassify loop, rule prio 0, protocol 800 [ 758.250449][T22268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 758.858716][T22266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.396919][T22299] netlink: 'syz.4.4055': attribute type 4 has an invalid length. [ 759.473940][T22299] netlink: 'syz.4.4055': attribute type 4 has an invalid length. [ 759.576270][T22305] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4058'. [ 759.760801][T22309] netlink: 'syz.1.4059': attribute type 2 has an invalid length. [ 759.768933][T22309] netlink: 'syz.1.4059': attribute type 2 has an invalid length. [ 759.777470][T22309] netlink: 'syz.1.4059': attribute type 2 has an invalid length. [ 759.777470][T22310] netlink: 'syz.1.4059': attribute type 2 has an invalid length. [ 759.777493][T22309] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.4059'. [ 759.785228][T22310] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.4059'. [ 759.786919][T22310] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 759.836516][T22310] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 759.845734][T22311] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 759.928935][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 761.616624][T22368] batadv_slave_1: entered promiscuous mode [ 761.644180][T22366] batadv_slave_1: left promiscuous mode [ 761.686247][T22375] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4080'. [ 761.781619][T22377] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4081'. [ 762.016829][T22386] netlink: 'syz.0.4085': attribute type 3 has an invalid length. [ 762.033281][T22388] netlink: 'syz.3.4086': attribute type 11 has an invalid length. [ 762.365736][T22396] block nbd1: server does not support multiple connections per device. [ 762.378143][T22396] block nbd1: shutting down sockets [ 762.783771][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4093'. [ 762.804571][T22425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4093'. [ 763.046759][T22413] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 763.052742][T22413] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 763.086781][T22413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 763.092764][T22413] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 763.123266][T22413] tipc: Resetting bearer [ 763.174138][T22413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 763.180120][T22413] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 763.212578][T22413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 763.218550][T22413] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 763.284286][T22413] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 763.290257][T22413] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 763.540475][T22440] netlink: 'syz.0.4099': attribute type 11 has an invalid length. [ 763.815027][T22452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4103'. [ 763.825400][T22450] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4104'. [ 763.908211][T22452] vlan2: entered promiscuous mode [ 763.925220][T22452] erspan0: entered promiscuous mode [ 763.956319][T22452] vlan2: entered allmulticast mode [ 763.967386][T22452] erspan0: entered allmulticast mode [ 764.068751][T22453] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 764.213213][T22480] sctp: [Deprecated]: syz.0.4111 (pid 22480) Use of int in max_burst socket option. [ 764.213213][T22480] Use struct sctp_assoc_value instead [ 764.247412][T22481] netlink: 'syz.3.4112': attribute type 11 has an invalid length. [ 764.328839][T22485] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 764.335255][T22485] syzkaller1: linktype set to 769 [ 765.250803][T22510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4118'. [ 765.341854][T22512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4120'. [ 765.403477][T22512] ip6gre2: entered promiscuous mode [ 765.417605][T22512] ip6gre2: entered allmulticast mode [ 765.429850][T22512] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4120'. [ 765.505914][T22512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.623672][T22515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4121'. [ 765.714375][T22517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4122'. [ 765.779932][T22517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.285257][T22529] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4125'. [ 767.977418][T22559] __nla_validate_parse: 1 callbacks suppressed [ 767.977439][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4135'. [ 768.111890][T22562] netlink: zone id is out of range [ 768.120295][T22562] netlink: zone id is out of range [ 768.125585][T22562] netlink: zone id is out of range [ 768.132021][T22562] netlink: zone id is out of range [ 768.137267][T22562] netlink: zone id is out of range [ 768.143502][T22562] netlink: zone id is out of range [ 768.149093][T22562] netlink: zone id is out of range [ 768.154501][T22562] netlink: zone id is out of range [ 768.160116][T22562] netlink: zone id is out of range [ 768.166519][T22562] netlink: zone id is out of range [ 768.305764][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4139'. [ 768.318797][T22573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4139'. [ 768.436394][T22577] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4141'. [ 768.489225][T22584] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4143'. [ 768.737029][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4145'. [ 768.776076][ T6916] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.776164][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4145'. [ 768.789094][T22598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4147'. [ 768.789135][T22598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4147'. [ 768.789225][ T6916] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.789270][ T6916] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.789309][ T6916] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.839554][T22598] geneve2: entered promiscuous mode [ 768.884073][T22598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4147'. [ 770.179047][T22676] sctp: [Deprecated]: syz.0.4166 (pid 22676) Use of int in max_burst socket option. [ 770.179047][T22676] Use struct sctp_assoc_value instead [ 770.237609][T22679] IPVS: set_ctl: invalid protocol: 255 172.20.20.68:20004 [ 770.996138][T22706] netlink: 'syz.1.4180': attribute type 7 has an invalid length. [ 771.007063][T22706] netlink: 'syz.1.4180': attribute type 8 has an invalid length. [ 771.016488][T22706] netlink: 'syz.1.4180': attribute type 1 has an invalid length. [ 771.499337][T22724] netlink: 'syz.1.4189': attribute type 4 has an invalid length. [ 772.468977][T22772] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 772.478011][T22772] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 773.015076][T22790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.030690][T22790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.261663][T22789] net_ratelimit: 18 callbacks suppressed [ 773.261688][T22789] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 773.301482][ T6640] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.313136][ T6640] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.322176][ T6640] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.335865][ T6640] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.425065][T22812] netlink: 'syz.1.4228': attribute type 6 has an invalid length. [ 773.442260][T22812] netlink: 'syz.1.4228': attribute type 5 has an invalid length. [ 773.468924][T22812] __nla_validate_parse: 15 callbacks suppressed [ 773.468946][T22812] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4228'. [ 773.700565][T22831] xt_hashlimit: size too large, truncated to 1048576 [ 774.730450][T22879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4254'. [ 774.831671][T22885] netlink: 'syz.3.4255': attribute type 10 has an invalid length. [ 774.864560][T22887] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 774.890057][T22887] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4256'. [ 775.418565][T22909] tipc: Failed to remove unknown binding: 66,0,0/538698590:751083155/751083156 [ 775.508290][T22909] tipc: Failed to remove unknown binding: 66,0,0/538698590:751083155/751083156 [ 776.242834][T22946] syzkaller0: entered promiscuous mode [ 776.248585][T22946] syzkaller0: entered allmulticast mode [ 776.511112][T22959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4285'. [ 776.788159][T22974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4292'. [ 777.841741][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4318'. [ 778.353275][T23045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4326'. [ 779.232848][T23090] xt_hashlimit: size too large, truncated to 1048576 [ 779.613049][T23108] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4354'. [ 779.708302][T23111] mac80211_hwsim hwsim31 syzkaller0: Caught tx_queue_len zero misconfig [ 779.719101][T23111] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 779.726806][T23111] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 779.869882][T23117] netlink: 'syz.4.4357': attribute type 30 has an invalid length. [ 779.951297][T23123] netlink: 'syz.4.4360': attribute type 11 has an invalid length. [ 780.126285][T23127] vlan4: entered promiscuous mode [ 780.127385][T23130] ieee802154 phy0 wpan0: encryption failed: -22 [ 780.135309][T23127] bridge0: entered promiscuous mode [ 780.144894][T23130] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4362'. [ 780.164297][T23130] 0ªX¹¦À: renamed from batadv0 [ 780.170771][T23130] 0ªX¹¦À: entered allmulticast mode [ 780.177601][T23130] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 780.184955][T23130] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 780.236221][T23133] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 780.243301][T23133] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 780.251069][T23133] vlan2: left allmulticast mode [ 780.255947][T23133] gretap0: left allmulticast mode [ 780.261288][T23133] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 780.268606][T23133] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 780.276586][T23133] geneve2: left promiscuous mode [ 780.283336][T23133] ip6gre2: left promiscuous mode [ 780.288329][T23133] ip6gre2: left allmulticast mode [ 780.402327][T23138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4365'. [ 780.582069][T23142] bond4 (unregistering): Released all slaves [ 780.602678][T23138] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 780.716545][T23158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4372'. [ 780.866511][T23158] can: request_module (can-proto-0) failed. [ 780.965776][T23166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4374'. [ 780.978588][T23169] netlink: 'syz.4.4372': attribute type 4 has an invalid length. [ 781.947954][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4379'. [ 782.966376][T23210] netlink: 'syz.2.4382': attribute type 9 has an invalid length. [ 783.014516][T23216] sctp: [Deprecated]: syz.0.4385 (pid 23216) Use of int in max_burst socket option. [ 783.014516][T23216] Use struct sctp_assoc_value instead [ 783.207950][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 784.233562][T23241] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 784.294247][T23241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 784.565243][T23243] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 785.004683][T23253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4398'. [ 785.122315][T23256] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.138022][T23257] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4399'. [ 785.184397][T23168] Set syz1 is full, maxelem 65536 reached [ 785.193134][T23239] xt_NFQUEUE: number of total queues is 0 [ 785.250437][T23257] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 785.269162][T23257] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 785.308703][T23264] sctp: [Deprecated]: syz.3.4402 (pid 23264) Use of int in max_burst socket option. [ 785.308703][T23264] Use struct sctp_assoc_value instead [ 785.462712][T23273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4405'. [ 785.531104][T23266] block nbd1: server does not support multiple connections per device. [ 785.540180][T23266] block nbd1: shutting down sockets [ 785.871035][T23281] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4409'. [ 786.101533][T23289] netlink: 'syz.1.4412': attribute type 1 has an invalid length. [ 786.150558][T23289] bond4: entered promiscuous mode [ 786.159544][T23289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 786.221553][T23292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 786.232519][T23292] bond4: (slave bond5): making interface the new active one [ 786.240114][T23292] bond5: entered promiscuous mode [ 786.246326][T23292] bond4: (slave bond5): Enslaving as an active interface with an up link [ 786.471629][T23310] x_tables: duplicate underflow at hook 2 [ 786.498168][T23310] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 786.777047][T23317] tipc: Cannot configure node identity twice [ 786.941228][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4422'. [ 787.057674][T23332] tipc: Enabling of bearer rejected, already enabled [ 787.678336][T23356] syzkaller0: entered promiscuous mode [ 787.684086][T23356] syzkaller0: entered allmulticast mode [ 787.699832][T23356] tipc: Enabled bearer , priority 0 [ 787.747932][T23356] tipc: Resetting bearer [ 787.906806][T23355] tipc: Resetting bearer [ 788.072670][T23355] tipc: Disabling bearer [ 788.116078][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4430'. [ 788.183197][T23372] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4432'. [ 788.924797][T23396] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4433'. [ 788.935664][T23392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4434'. [ 788.935664][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4434'. [ 789.419944][T23410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.535519][T23422] xt_ecn: cannot match TCP bits for non-tcp packets [ 790.017951][T23441] __nla_validate_parse: 2 callbacks suppressed [ 790.017974][T23441] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4443'. [ 790.204738][T23447] sctp: [Deprecated]: syz.3.4444 (pid 23447) Use of int in max_burst socket option. [ 790.204738][T23447] Use struct sctp_assoc_value instead [ 791.969943][T23493] syzkaller0: entered promiscuous mode [ 791.984175][T23493] syzkaller0: entered allmulticast mode [ 792.042145][T23493] IPVS: set_ctl: invalid protocol: 41 172.30.0.5:20000 [ 792.402490][T23507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4455'. [ 792.583170][T23513] Unsupported ieee802154 address type: 0 [ 792.644575][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4457'. [ 792.653634][T23513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4457'. [ 792.770723][T23518] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20002 [ 793.229653][T23525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4461'. [ 793.623068][T23537] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 793.841459][T23537] block nbd1: server does not support multiple connections per device. [ 793.850523][T23537] block nbd1: shutting down sockets [ 793.891496][T23545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4466'. [ 794.339860][T23556] syzkaller1: entered promiscuous mode [ 794.349715][T23556] syzkaller1: entered allmulticast mode [ 794.380938][T23556] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 794.826410][T23572] tap0: tun_chr_ioctl cmd 1074025677 [ 794.842710][T23572] tap0: linktype set to 774 [ 794.942673][ T30] audit: type=1804 audit(1784765552.536:6): pid=23586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4480" name="/newroot/315/cgroup.controllers" dev="tmpfs" ino=1628 res=1 errno=0 [ 794.980117][ T30] audit: type=1800 audit(1784765552.536:7): pid=23586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4480" name="cgroup.controllers" dev="tmpfs" ino=1628 res=0 errno=0 [ 795.004149][T23588] nbd: must specify a device to reconfigure [ 795.015759][T23586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4480'. [ 795.229866][T23600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4483'. [ 795.261675][T23600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4483'. [ 795.270692][T23600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4483'. [ 795.308377][T23600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4483'. [ 795.358796][T23600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4483'. [ 795.499117][T23606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4485'. [ 795.626739][T23612] pimreg: entered allmulticast mode [ 795.683150][T23612] pimreg: left allmulticast mode [ 795.737708][T23627] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4486'. [ 795.746920][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4486'. [ 795.756081][T23627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4486'. [ 795.810357][T23625] sctp: [Deprecated]: syz.2.4489 (pid 23625) Use of int in max_burst socket option. [ 795.810357][T23625] Use struct sctp_assoc_value instead [ 796.136070][T23637] netlink: 'syz.2.4491': attribute type 10 has an invalid length. [ 796.144430][T23637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4491'. [ 796.157736][T23637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.182337][T23637] bridge0: port 4(bond0) entered blocking state [ 796.203976][T23637] bridge0: port 4(bond0) entered disabled state [ 796.506657][T23650] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 796.813964][T23655] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 796.873414][T23655] bond6 (unregistering): Released all slaves [ 797.650626][T23691] netlink: 'syz.0.4507': attribute type 3 has an invalid length. [ 797.681501][T23690] netlink: 'syz.0.4507': attribute type 3 has an invalid length. [ 798.194230][T23703] tipc: Bearer : already 2 bearers with priority 10 [ 798.225648][T23703] tipc: Bearer : trying with adjusted priority [ 798.272920][T23703] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 799.663932][T23744] netlink: 'syz.1.4526': attribute type 17 has an invalid length. [ 800.071866][T23756] tipc: Cannot configure node identity twice [ 800.207176][T23770] tipc: Enabling of bearer rejected, failed to enable media [ 800.665703][T23790] __nla_validate_parse: 4 callbacks suppressed [ 800.665725][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4537'. [ 800.728603][T23790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.169751][T23814] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4545'. [ 801.179140][T23814] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4545'. [ 801.197874][T23814] netlink: 'syz.3.4545': attribute type 13 has an invalid length. [ 801.208686][T23814] netlink: 'syz.3.4545': attribute type 17 has an invalid length. [ 801.253701][T23818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4545'. [ 801.282198][T23819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4542'. [ 801.464247][T23814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.486833][T23814] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.545485][T23814] 0ªX¹¦À: left allmulticast mode [ 801.710685][T23814] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 801.796389][T23814] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 801.820780][T23814] veth1_to_hsr: left promiscuous mode [ 801.826010][T23852] netlink: 'syz.0.4550': attribute type 1 has an invalid length. [ 801.867228][T23814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 801.877717][T23814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 801.902573][T23814] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 801.998039][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.005431][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.070614][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.077950][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.227947][T23863] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4553'. [ 802.299696][T23867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4552'. [ 802.318681][T23860] ip6gretap0: left promiscuous mode [ 802.331614][T23860] bridge0: port 4(bond0) entered blocking state [ 802.338166][T23860] bridge0: port 4(bond0) entered forwarding state [ 802.344991][T23860] bridge0: port 3(vlan3) entered blocking state [ 802.351574][T23860] bridge0: port 3(vlan3) entered forwarding state [ 802.362731][T23860] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.376009][T23860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.386369][T23860] tipc: Resetting bearer [ 802.462556][T23860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.492024][T23860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 802.511174][T23860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 802.557755][T23860] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 802.650299][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.657839][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.685926][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.693352][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.816616][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4556'. [ 802.902324][T23880] netlink: 'syz.4.4558': attribute type 11 has an invalid length. [ 803.126011][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4560'. [ 803.231497][T23884] netlink: 121 bytes leftover after parsing attributes in process `syz.2.4560'. [ 803.780164][T23902] syzkaller0: entered promiscuous mode [ 803.785947][T23902] syzkaller0: entered allmulticast mode [ 804.290060][T23923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.520471][T23935] ip6t_rpfilter: unknown options [ 804.854479][T23948] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 805.189373][T23957] syzkaller0: entered promiscuous mode [ 805.213169][T23957] syzkaller0: entered allmulticast mode [ 805.266760][T23951] tipc: Enabled bearer , priority 0 [ 805.296224][T23950] tipc: Resetting bearer [ 805.339253][T23950] tipc: Disabling bearer [ 805.846423][T23991] netlink: 'syz.4.4589': attribute type 1 has an invalid length. [ 805.961656][T23991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 806.052585][T24002] bond4: (slave veth7): Enslaving as an active interface with a down link [ 806.104876][T23991] netlink: 'syz.4.4589': attribute type 10 has an invalid length. [ 806.131007][T23991] __nla_validate_parse: 10 callbacks suppressed [ 806.131029][T23991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4589'. [ 806.146676][T23991] dummy0: entered promiscuous mode [ 806.192910][T24009] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4592'. [ 806.630722][T24030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4600'. [ 807.097007][T24045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'. [ 807.179639][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4605'. [ 807.564291][T24059] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 807.573492][T24059] syzkaller0: entered promiscuous mode [ 807.579106][T24059] syzkaller0: entered allmulticast mode [ 807.974684][T24077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4611'. [ 808.008006][T24077] Bluetooth: MGMT ver 1.23 [ 808.095539][T24084] netlink: 'syz.3.4614': attribute type 10 has an invalid length. [ 808.178428][T24084] team0: Port device dummy0 added [ 808.410763][T24091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.552081][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4619'. [ 809.177111][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.540476][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4630'. [ 809.784561][T24133] netlink: 'syz.3.4629': attribute type 1 has an invalid length. [ 810.164729][T24154] netlink: 'syz.3.4635': attribute type 10 has an invalid length. [ 810.225286][T24155] netlink: 'syz.3.4635': attribute type 10 has an invalid length. [ 810.283461][T24154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 810.295000][T24154] team0: Port device netdevsim1 added [ 810.492095][T24160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4636'. [ 810.549869][T24161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4637'. [ 810.624803][T24168] openvswitch: netlink: Duplicate or invalid key (type 0). [ 810.648262][T24168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.696709][T24161] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.726488][T24161] bridge_slave_1 (unregistering): left allmulticast mode [ 810.733839][T24161] bridge_slave_1 (unregistering): left promiscuous mode [ 810.746004][T24161] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.077301][T24184] tipc: Enabling of bearer rejected, failed to enable media [ 811.345464][T24190] __nla_validate_parse: 3 callbacks suppressed [ 811.345486][T24190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4643'. [ 811.576743][T24195] tipc: Enabled bearer , priority 0 [ 811.737028][T24193] tipc: Resetting bearer [ 811.914372][T24193] tipc: Disabling bearer [ 812.081171][T24217] openvswitch: netlink: Duplicate or invalid key (type 0). [ 812.113920][T24217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.448279][T24229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4653'. [ 812.532765][T24236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4651'. [ 812.660027][T24239] bridge3: entered promiscuous mode [ 813.019177][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4658'. [ 813.236420][T24252] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4657'. [ 813.284054][T24258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4658'. [ 813.921095][T24281] openvswitch: netlink: Duplicate or invalid key (type 0). [ 813.935248][T24281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.159432][T24287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 814.186776][T24285] netlink: 'syz.0.4663': attribute type 11 has an invalid length. [ 814.344221][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4666'. [ 814.428197][T24296] syzkaller0: entered promiscuous mode [ 814.433739][T24296] syzkaller0: entered allmulticast mode [ 814.993182][T24312] pim6reg: entered allmulticast mode [ 815.005478][T24312] pim6reg: left allmulticast mode [ 815.301857][T24318] openvswitch: netlink: Duplicate or invalid key (type 0). [ 815.309782][T24318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.479102][T24321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4675'. [ 815.752439][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4678'. [ 815.881546][T24338] syzkaller0: entered promiscuous mode [ 815.887540][T24338] syzkaller0: entered allmulticast mode [ 815.899340][T24338] tipc: Enabled bearer , priority 0 [ 815.911423][T24336] tipc: Resetting bearer [ 816.057470][T24343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4682'. [ 816.057730][T24336] tipc: Disabling bearer [ 816.107308][T24340] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1017796548/1017796550 [ 816.113410][T24350] openvswitch: netlink: Duplicate or invalid key (type 0). [ 816.116579][T24340] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1017796548/1017796550 [ 816.124278][T24350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.850649][T24384] openvswitch: netlink: Duplicate or invalid key (type 0). [ 816.858307][T24384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.023664][T24388] syzkaller0: entered promiscuous mode [ 817.029216][T24388] syzkaller0: entered allmulticast mode [ 817.080476][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 817.317002][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4702'. [ 817.533390][T24408] netlink: 'syz.4.4705': attribute type 2 has an invalid length. [ 817.754919][T24419] openvswitch: netlink: Duplicate or invalid key (type 0). [ 817.762978][T24419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.873426][T24423] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4712'. [ 820.436213][T24452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4717'. [ 820.553041][T24460] sctp: [Deprecated]: syz.0.4721 (pid 24460) Use of int in max_burst socket option. [ 820.553041][T24460] Use struct sctp_assoc_value instead [ 820.646085][T24465] sctp: [Deprecated]: syz.3.4723 (pid 24465) Use of int in max_burst socket option. [ 820.646085][T24465] Use struct sctp_assoc_value instead [ 820.671575][T24466] sctp: [Deprecated]: syz.3.4723 (pid 24466) Use of int in max_burst socket option. [ 820.671575][T24466] Use struct sctp_assoc_value instead [ 820.755215][T24468] openvswitch: netlink: Duplicate or invalid key (type 0). [ 820.774811][T24468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.295257][T24484] netlink: 'syz.2.4731': attribute type 2 has an invalid length. [ 821.304862][T24484] netlink: 1307 bytes leftover after parsing attributes in process `syz.2.4731'. [ 821.535931][T24489] tipc: Enabled bearer , priority 0 [ 821.544042][T24489] syzkaller0: entered promiscuous mode [ 821.549664][T24489] syzkaller0: entered allmulticast mode [ 821.600501][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4735'. [ 821.615821][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4735'. [ 821.626531][T24496] netlink: 'syz.2.4735': attribute type 11 has an invalid length. [ 821.634805][T24496] netlink: 'syz.2.4735': attribute type 14 has an invalid length. [ 821.653785][T24495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4736'. [ 821.852480][T24502] tipc: Resetting bearer [ 821.870541][T24486] tipc: Resetting bearer [ 821.901914][T24486] tipc: Disabling bearer [ 821.972682][T24505] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 821.980318][T24505] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 822.092160][T24511] netlink: 67 bytes leftover after parsing attributes in process `syz.4.4741'. [ 822.165826][T24511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.179556][T24511] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.191941][T24511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.238643][T24511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.250259][T24511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.269724][T24511] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 822.844480][T24529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4746'. [ 823.510507][T24560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4751'. [ 823.860350][T24565] nbd: socks must be embedded in a SOCK_ITEM attr [ 823.870114][T24565] block nbd1: shutting down sockets [ 824.083075][T24578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4755'. [ 824.385437][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4759'. [ 824.863598][T24613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4764'. [ 824.932803][T24613] netlink: 'syz.2.4764': attribute type 1 has an invalid length. [ 825.054008][T24613] bond3: option mode: invalid value (10) [ 825.062359][T24613] bond3 (unregistering): Released all slaves [ 825.893412][T24651] netlink: 'syz.1.4769': attribute type 7 has an invalid length. [ 825.935551][T24651] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4769'. [ 826.083507][T24662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4777'. [ 826.156904][T24669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4774'. [ 826.282078][T24669] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 826.360056][T24684] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4780'. [ 826.402667][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4780'. [ 826.689398][T24696] netlink: 'syz.3.4783': attribute type 11 has an invalid length. [ 826.854128][T24706] netlink: 'syz.1.4786': attribute type 1 has an invalid length. [ 826.993449][T24706] 8021q: adding VLAN 0 to HW filter on device bond7 [ 827.039912][T24706] bond6: (slave bond7): making interface the new active one [ 827.054121][T24706] bond6: (slave bond7): Enslaving as an active interface with an up link [ 827.666610][T24747] syzkaller0: entered promiscuous mode [ 827.672158][T24747] syzkaller0: entered allmulticast mode [ 827.829365][T24754] netlink: 'syz.3.4795': attribute type 11 has an invalid length. [ 828.052005][T24759] Can't find ip_set type bitmap:ip [ 828.091454][T24764] __nla_validate_parse: 4 callbacks suppressed [ 828.091474][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4796'. [ 828.270597][T24777] xt_l2tp: v2 tid > 0xffff: 37482740 [ 828.344478][T24775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4800'. [ 828.431271][T24787] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4803'. [ 828.841917][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4806'. [ 829.068199][T24822] netlink: 'syz.0.4808': attribute type 11 has an invalid length. [ 829.319353][T24829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4811'. [ 829.429403][T24830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4811'. [ 829.527726][T24827] macvlan1: entered promiscuous mode [ 829.533980][T24827] macvlan1: entered allmulticast mode [ 829.539495][T24827] veth1_vlan: entered allmulticast mode [ 829.893552][T24846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4814'. [ 829.975981][T24857] x_tables: duplicate underflow at hook 1 [ 830.592697][T24884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4825'. [ 830.989352][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4829'. [ 831.000711][T24899] netlink: 'syz.1.4829': attribute type 12 has an invalid length. [ 831.044469][ T6369] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.053690][ T6369] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.062493][ T6369] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.237620][ T6369] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.413932][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4834'. [ 831.538328][T24920] tipc: Enabled bearer , priority 0 [ 831.546104][T24920] syzkaller0: entered promiscuous mode [ 831.551686][T24920] syzkaller0: entered allmulticast mode [ 831.567768][T24920] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 831.610144][T24920] tipc: Resetting bearer [ 832.270144][T24919] tipc: Resetting bearer [ 832.330368][T24919] tipc: Disabling bearer [ 832.385484][T24950] sctp: [Deprecated]: syz.4.4845 (pid 24950) Use of int in max_burst socket option. [ 832.385484][T24950] Use struct sctp_assoc_value instead [ 833.899679][T24976] tipc: New replicast peer: 172.20.20.187 [ 833.928145][T24976] tipc: Enabled bearer , priority 10 [ 833.962584][T24975] syzkaller0: entered promiscuous mode [ 833.968154][T24975] syzkaller0: entered allmulticast mode [ 834.488756][T24986] vti0: entered promiscuous mode [ 834.494047][T24986] vti0: entered allmulticast mode [ 834.671077][T24989] bond0: (slave ip6tnl0): refused to change device type [ 834.901908][ T809] tipc: Node number set to 2904589927 [ 834.921689][T25005] pim6reg1: entered allmulticast mode [ 835.266381][T25013] syzkaller0: entered promiscuous mode [ 835.287411][T25013] syzkaller0: entered allmulticast mode [ 836.095420][T25044] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 836.117648][T25044] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 836.830769][T25072] syzkaller0: entered promiscuous mode [ 836.838826][T25072] syzkaller0: entered allmulticast mode [ 836.928440][T25083] __nla_validate_parse: 4 callbacks suppressed [ 836.928462][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4885'. [ 836.943647][T25083] netlink: 'syz.0.4885': attribute type 10 has an invalid length. [ 836.951498][T25083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4885'. [ 837.115743][T25078] netlink: 'syz.3.4884': attribute type 1 has an invalid length. [ 837.135653][T25086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4887'. [ 837.320484][T25099] ip6tnl1: entered allmulticast mode [ 837.338046][T25102] netlink: 'syz.2.4888': attribute type 3 has an invalid length. [ 837.356157][T25102] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4888'. [ 837.367095][T25101] netlink: 'syz.2.4888': attribute type 30 has an invalid length. [ 838.141616][T25142] bond0: Device is already in use. [ 838.350424][T25146] IPVS: set_ctl: invalid protocol: 30 10.1.1.0:20000 [ 838.390321][T25151] netlink: 'syz.3.4901': attribute type 58 has an invalid length. [ 838.398746][T25151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4901'. [ 839.137399][T25188] tipc: New replicast peer: 255.255.255.255 [ 839.148370][T25188] tipc: Enabled bearer , priority 10 [ 839.348969][T25197] netlink: 'syz.2.4919': attribute type 11 has an invalid length. [ 839.358001][T25188] netlink: 'syz.3.4916': attribute type 1 has an invalid length. [ 839.435667][T25188] netlink: 'syz.3.4916': attribute type 32 has an invalid length. [ 839.450102][T25188] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4916'. [ 839.588495][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4922'. [ 840.007507][T25221] netlink: 'syz.3.4931': attribute type 30 has an invalid length. [ 840.074548][T25227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4933'. [ 840.207757][T25233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4936'. [ 840.216819][T25231] sctp: [Deprecated]: syz.3.4934 (pid 25231) Use of int in max_burst socket option. [ 840.216819][T25231] Use struct sctp_assoc_value instead [ 840.231630][T25233] vlan0: entered promiscuous mode [ 840.246195][T25233] netlink: 91 bytes leftover after parsing attributes in process `syz.2.4936'. [ 840.336257][ T1166] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.377300][ T1166] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.390422][ T1166] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.460865][ T1166] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.389980][T25256] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 841.555595][T25256] bond6 (unregistering): Released all slaves [ 842.472960][T25290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 842.480286][T25290] bridge0: port 1(bond6) entered blocking state [ 842.486705][T25290] bridge0: port 1(bond6) entered disabled state [ 842.494667][T25290] bond6: entered allmulticast mode [ 842.502630][T25290] bond6: entered promiscuous mode [ 842.508702][T25290] bridge0: port 1(bond6) entered blocking state [ 842.515098][T25290] bridge0: port 1(bond6) entered forwarding state [ 842.635054][T25291] __nla_validate_parse: 4 callbacks suppressed [ 842.635076][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4949'. [ 842.650995][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4949'. [ 843.099729][T25312] openvswitch: netlink: Duplicate or invalid key (type 0). [ 843.135407][T25312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.617907][ T43] bridge0: port 1(bond6) entered disabled state [ 843.627855][T25316] openvswitch: netlink: Unknown key attributes 2 [ 844.109939][T25334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4960'. [ 844.132317][T25336] IPVS: persistence engine module ip_vs_pe_ not found [ 844.155490][T25341] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.274908][T25344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4963'. [ 844.293486][T25341] bridge_slave_1 (unregistering): left allmulticast mode [ 844.300608][T25341] bridge_slave_1 (unregistering): left promiscuous mode [ 844.307671][T25341] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.439318][T25337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4960'. [ 844.535154][T25355] openvswitch: netlink: Duplicate or invalid key (type 0). [ 844.550583][T25352] sock: sock_timestamping_bind_phc: sock not bind to device [ 844.575745][T25355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.691847][T25362] sctp: [Deprecated]: syz.1.4968 (pid 25362) Use of int in max_burst socket option. [ 844.691847][T25362] Use struct sctp_assoc_value instead [ 845.104241][T25389] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 845.118400][T25389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.294512][T25398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4980'. [ 845.323009][T25401] openvswitch: netlink: Duplicate or invalid key (type 0). [ 845.331723][T25401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.443878][T25404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4982'. [ 845.462551][T25404] lo speed is unknown, defaulting to 1000 [ 845.474632][T25404] lo speed is unknown, defaulting to 1000 [ 845.486530][T25404] lo speed is unknown, defaulting to 1000 [ 845.495480][T25404] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 845.520659][T25404] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 845.564725][T25404] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 845.590169][T25404] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 845.622020][T25418] netlink: 'syz.1.4986': attribute type 1 has an invalid length. [ 845.726213][T25418] 8021q: adding VLAN 0 to HW filter on device bond8 [ 845.752243][T25404] lo speed is unknown, defaulting to 1000 [ 845.772410][T25404] lo speed is unknown, defaulting to 1000 [ 845.788546][T25404] lo speed is unknown, defaulting to 1000 [ 845.814237][T25404] lo speed is unknown, defaulting to 1000 [ 845.822396][T25434] FAULT_INJECTION: forcing a failure. [ 845.822396][T25434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.845877][T25404] lo speed is unknown, defaulting to 1000 [ 845.858834][T25434] CPU: 1 UID: 0 PID: 25434 Comm: syz.0.4990 Not tainted syzkaller #0 PREEMPT(full) [ 845.858865][T25434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.858878][T25434] Call Trace: [ 845.858887][T25434] [ 845.858897][T25434] dump_stack_lvl+0xe8/0x150 [ 845.858944][T25434] should_fail_ex+0x40c/0x560 [ 845.858977][T25434] _copy_from_user+0x2d/0xb0 [ 845.859010][T25434] ___sys_sendmsg+0x1c6/0x360 [ 845.859036][T25434] ? __lock_acquire+0x683/0x2cf0 [ 845.859072][T25434] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.859131][T25434] ? __fget_files+0x2a/0x420 [ 845.859161][T25434] ? __fget_files+0x3a2/0x420 [ 845.859199][T25434] __x64_sys_sendmsg+0x1b1/0x290 [ 845.859225][T25434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 845.859266][T25434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.859291][T25434] do_syscall_64+0x174/0x580 [ 845.859317][T25434] ? trace_irq_disable+0x3b/0x140 [ 845.859345][T25434] ? clear_bhb_loop+0x40/0x90 [ 845.859371][T25434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.859393][T25434] RIP: 0033:0x7fd5ff39de99 [ 845.859414][T25434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.859431][T25434] RSP: 002b:00007fd600181028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.859453][T25434] RAX: ffffffffffffffda RBX: 00007fd5ff625fa0 RCX: 00007fd5ff39de99 [ 845.859468][T25434] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 845.859481][T25434] RBP: 00007fd600181090 R08: 0000000000000000 R09: 0000000000000000 [ 845.859492][T25434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.859504][T25434] R13: 00007fd5ff626038 R14: 00007fd5ff625fa0 R15: 00007ffc640fd408 [ 845.859536][T25434] [ 845.862223][T25404] lo speed is unknown, defaulting to 1000 [ 846.005810][T25438] syzkaller0: entered promiscuous mode [ 846.071820][T25438] syzkaller0: entered allmulticast mode [ 846.081663][T25404] lo speed is unknown, defaulting to 1000 [ 846.097408][T25404] lo speed is unknown, defaulting to 1000 [ 846.312094][T25447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4996'. [ 846.321477][T25447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4996'. [ 846.549680][T25456] sctp: [Deprecated]: syz.0.4998 (pid 25456) Use of int in max_burst socket option. [ 846.549680][T25456] Use struct sctp_assoc_value instead [ 846.918495][T25468] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5002'. [ 847.251824][T25458] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 847.286817][T25458] bond3 (unregistering): Released all slaves [ 847.903783][T25483] __nla_validate_parse: 1 callbacks suppressed [ 847.903806][T25483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5006'. [ 848.120179][T25480] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5005'. [ 848.151690][T25480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5005'. [ 848.669515][T25508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5013'. [ 848.993831][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5016'. [ 849.095212][T25517] siw: device registration error -23 [ 849.107873][T25517] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5017'. [ 849.827079][T25529] netlink: 'syz.2.5021': attribute type 11 has an invalid length. [ 850.070011][T25539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5024'. [ 850.292576][T25550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5028'. [ 850.306271][T25550] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 850.350246][T25550] ipt_ECN: cannot use operation on non-tcp rule [ 850.366929][T25544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5023'. [ 850.417038][T25550] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.576149][T25566] sctp: [Deprecated]: syz.4.5032 (pid 25566) Use of int in max_burst socket option. [ 850.576149][T25566] Use struct sctp_assoc_value instead [ 850.652443][T25566] FAULT_INJECTION: forcing a failure. [ 850.652443][T25566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.685892][T25566] CPU: 1 UID: 0 PID: 25566 Comm: syz.4.5032 Not tainted syzkaller #0 PREEMPT(full) [ 850.685923][T25566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.685935][T25566] Call Trace: [ 850.685943][T25566] [ 850.685952][T25566] dump_stack_lvl+0xe8/0x150 [ 850.685990][T25566] should_fail_ex+0x40c/0x560 [ 850.686020][T25566] _copy_from_user+0x2d/0xb0 [ 850.686051][T25566] ___sys_recvmsg+0x173/0x5a0 [ 850.686080][T25566] ? __pfx____sys_recvmsg+0x10/0x10 [ 850.686109][T25566] ? __fget_files+0x2a/0x420 [ 850.686178][T25566] do_recvmmsg+0x31a/0x7f0 [ 850.686209][T25566] ? __pfx_do_recvmmsg+0x10/0x10 [ 850.686246][T25566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 850.686273][T25566] ? __fget_files+0x3a2/0x420 [ 850.686310][T25566] __x64_sys_recvmmsg+0x198/0x250 [ 850.686336][T25566] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 850.686368][T25566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.686391][T25566] do_syscall_64+0x174/0x580 [ 850.686411][T25566] ? trace_irq_disable+0x3b/0x140 [ 850.686435][T25566] ? clear_bhb_loop+0x40/0x90 [ 850.686458][T25566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.686476][T25566] RIP: 0033:0x7fbdf739de99 [ 850.686492][T25566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.686506][T25566] RSP: 002b:00007fbdf8211028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 850.686525][T25566] RAX: ffffffffffffffda RBX: 00007fbdf7625fa0 RCX: 00007fbdf739de99 [ 850.686537][T25566] RDX: 0000000004000071 RSI: 0000200000002e80 RDI: 0000000000000005 [ 850.686548][T25566] RBP: 00007fbdf8211090 R08: 0000000000000000 R09: 0000000000000000 [ 850.686559][T25566] R10: 000000000000830b R11: 0000000000000246 R12: 0000000000000001 [ 850.686568][T25566] R13: 00007fbdf7626038 R14: 00007fbdf7625fa0 R15: 00007ffc83557408 [ 850.686594][T25566] [ 850.915962][T25574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5035'. [ 850.926461][T25574] netlink: 'syz.3.5035': attribute type 1 has an invalid length. [ 850.934936][T25574] netlink: 'syz.3.5035': attribute type 2 has an invalid length. [ 850.948675][T25577] FAULT_INJECTION: forcing a failure. [ 850.948675][T25577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.064068][T25579] netlink: 'syz.0.5037': attribute type 1 has an invalid length. [ 851.072468][T25577] CPU: 1 UID: 0 PID: 25577 Comm: syz.1.5036 Not tainted syzkaller #0 PREEMPT(full) [ 851.072497][T25577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 851.072509][T25577] Call Trace: [ 851.072518][T25577] [ 851.072526][T25577] dump_stack_lvl+0xe8/0x150 [ 851.072563][T25577] should_fail_ex+0x40c/0x560 [ 851.072593][T25577] _copy_from_user+0x2d/0xb0 [ 851.072624][T25577] ___sys_sendmsg+0x1c6/0x360 [ 851.072646][T25577] ? __lock_acquire+0x683/0x2cf0 [ 851.072680][T25577] ? __pfx____sys_sendmsg+0x10/0x10 [ 851.072741][T25577] ? __fget_files+0x2a/0x420 [ 851.072768][T25577] ? __fget_files+0x3a2/0x420 [ 851.072806][T25577] __x64_sys_sendmsg+0x1b1/0x290 [ 851.072832][T25577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 851.072874][T25577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.072898][T25577] do_syscall_64+0x174/0x580 [ 851.072921][T25577] ? trace_irq_disable+0x3b/0x140 [ 851.072947][T25577] ? clear_bhb_loop+0x40/0x90 [ 851.072973][T25577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.072994][T25577] RIP: 0033:0x7fd048b9de99 [ 851.073014][T25577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.073032][T25577] RSP: 002b:00007fd0499d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.073055][T25577] RAX: ffffffffffffffda RBX: 00007fd048e25fa0 RCX: 00007fd048b9de99 [ 851.073071][T25577] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 851.073084][T25577] RBP: 00007fd0499d8090 R08: 0000000000000000 R09: 0000000000000000 [ 851.073107][T25577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.073120][T25577] R13: 00007fd048e26038 R14: 00007fd048e25fa0 R15: 00007ffe6f884b58 [ 851.073154][T25577] [ 851.098547][T25579] netlink: 'syz.0.5037': attribute type 2 has an invalid length. [ 851.238021][T25582] dummy0: left promiscuous mode [ 851.320970][T25582] : renamed from dummy0 [ 851.844778][T25600] xt_CT: No such helper "snmp_trap" [ 852.181459][T25595] team0: Device vxcan1 is of different type [ 852.323236][T25616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.377295][T25616] tipc: Resetting bearer [ 852.383848][T25616] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.391132][T25616] tipc: Resetting bearer [ 852.402455][T25616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.549233][T25616] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 853.472307][T25651] __nla_validate_parse: 5 callbacks suppressed [ 853.472345][T25651] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5056'. [ 853.770399][T25670] sctp: [Deprecated]: syz.1.5059 (pid 25670) Use of int in max_burst socket option. [ 853.770399][T25670] Use struct sctp_assoc_value instead [ 854.326900][T25686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.335607][T25686] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.370055][T25686] dummy0: left promiscuous mode [ 854.436795][T25686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.440547][T25696] FAULT_INJECTION: forcing a failure. [ 854.440547][T25696] name failslab, interval 1, probability 0, space 0, times 0 [ 854.505258][T25696] CPU: 0 UID: 0 PID: 25696 Comm: syz.2.5063 Not tainted syzkaller #0 PREEMPT(full) [ 854.505289][T25696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.505302][T25696] Call Trace: [ 854.505311][T25696] [ 854.505321][T25696] dump_stack_lvl+0xe8/0x150 [ 854.505361][T25696] should_fail_ex+0x40c/0x560 [ 854.505393][T25696] should_failslab+0xa8/0x100 [ 854.505427][T25696] __kmalloc_noprof+0xfe/0x720 [ 854.505456][T25696] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 854.505487][T25696] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 854.505525][T25696] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 854.505564][T25696] genl_family_rcv_msg_doit+0xda/0x340 [ 854.505600][T25696] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 854.505639][T25696] ? apparmor_capable+0x126/0x170 [ 854.505742][T25696] ? bpf_lsm_capable+0x9/0x20 [ 854.505770][T25696] ? security_capable+0x7e/0x2c0 [ 854.505853][T25696] genl_rcv_msg+0x614/0x7a0 [ 854.505890][T25696] ? __pfx_genl_rcv_msg+0x10/0x10 [ 854.505919][T25696] ? __pfx_wg_set_device_doit+0x10/0x10 [ 854.505990][T25696] ? __pfx_ref_tracker_free+0x10/0x10 [ 854.506033][T25696] netlink_rcv_skb+0x226/0x4a0 [ 854.506059][T25696] ? __pfx_genl_rcv_msg+0x10/0x10 [ 854.506090][T25696] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 854.506132][T25696] ? down_read+0x2be/0x330 [ 854.506160][T25696] genl_rcv+0x28/0x40 [ 854.506185][T25696] netlink_unicast+0x7bb/0x940 [ 854.506225][T25696] netlink_sendmsg+0x813/0xb40 [ 854.506259][T25696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.506282][T25696] ? aa_sock_msg_perm+0xf1/0x1b0 [ 854.506310][T25696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.506332][T25696] sock_sendmsg_nosec+0x13a/0x180 [ 854.506364][T25696] ____sys_sendmsg+0x54e/0x850 [ 854.506394][T25696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.506426][T25696] ? import_iovec+0x73/0xa0 [ 854.506461][T25696] ___sys_sendmsg+0x2a5/0x360 [ 854.506480][T25696] ? __lock_acquire+0x683/0x2cf0 [ 854.506513][T25696] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.506577][T25696] ? __fget_files+0x2a/0x420 [ 854.506603][T25696] ? __fget_files+0x3a2/0x420 [ 854.506640][T25696] __x64_sys_sendmsg+0x1b1/0x290 [ 854.506665][T25696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.506710][T25696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.506733][T25696] do_syscall_64+0x174/0x580 [ 854.506754][T25696] ? trace_irq_disable+0x3b/0x140 [ 854.506780][T25696] ? clear_bhb_loop+0x40/0x90 [ 854.506806][T25696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.506827][T25696] RIP: 0033:0x7f336a39de99 [ 854.506847][T25696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.506865][T25696] RSP: 002b:00007f336b219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.506889][T25696] RAX: ffffffffffffffda RBX: 00007f336a625fa0 RCX: 00007f336a39de99 [ 854.506904][T25696] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 854.506917][T25696] RBP: 00007f336b219090 R08: 0000000000000000 R09: 0000000000000000 [ 854.506931][T25696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.506943][T25696] R13: 00007f336a626038 R14: 00007f336a625fa0 R15: 00007ffd8b6e9208 [ 854.506986][T25696] [ 854.896508][T25686] bridge_slave_0: left promiscuous mode [ 855.033019][T25686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.110120][T25710] sctp: [Deprecated]: syz.2.5064 (pid 25710) Use of int in max_burst socket option. [ 855.110120][T25710] Use struct sctp_assoc_value instead [ 855.110644][T25686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.156592][T25686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.167467][T25686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.200551][T25686] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 855.398900][T25719] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.5064'. [ 855.511790][T25719] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.5064'. [ 855.528321][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5068'. [ 855.557917][T25730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 855.686200][T25737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5071'. [ 855.742675][T25737] netlink: 'syz.1.5071': attribute type 1 has an invalid length. [ 855.790783][T25737] netlink: 'syz.1.5071': attribute type 2 has an invalid length. [ 855.821770][T25737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5071'. [ 856.113662][T25742] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5073'. [ 856.759810][T25746] FAULT_INJECTION: forcing a failure. [ 856.759810][T25746] name failslab, interval 1, probability 0, space 0, times 0 [ 856.772742][T25746] CPU: 1 UID: 0 PID: 25746 Comm: syz.3.5074 Not tainted syzkaller #0 PREEMPT(full) [ 856.772771][T25746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 856.772783][T25746] Call Trace: [ 856.772792][T25746] [ 856.772801][T25746] dump_stack_lvl+0xe8/0x150 [ 856.772843][T25746] should_fail_ex+0x40c/0x560 [ 856.772877][T25746] should_failslab+0xa8/0x100 [ 856.772910][T25746] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 856.772933][T25746] ? local_lock_release+0x9c/0x160 [ 856.772970][T25746] ? __alloc_skb+0x1d7/0x7a0 [ 856.772997][T25746] ? __alloc_skb+0x1d7/0x7a0 [ 856.773034][T25746] __alloc_skb+0x1d7/0x7a0 [ 856.773068][T25746] netlink_ack+0x136/0xb30 [ 856.773090][T25746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 856.773121][T25746] ? __pfx_ref_tracker_free+0x10/0x10 [ 856.773160][T25746] netlink_rcv_skb+0x2a4/0x4a0 [ 856.773191][T25746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 856.773221][T25746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 856.773260][T25746] ? down_read+0x2be/0x330 [ 856.773292][T25746] genl_rcv+0x28/0x40 [ 856.773318][T25746] netlink_unicast+0x7bb/0x940 [ 856.773361][T25746] netlink_sendmsg+0x813/0xb40 [ 856.773395][T25746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.773422][T25746] ? aa_sock_msg_perm+0xf1/0x1b0 [ 856.773451][T25746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.773472][T25746] sock_sendmsg_nosec+0x13a/0x180 [ 856.773504][T25746] ____sys_sendmsg+0x54e/0x850 [ 856.773532][T25746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 856.773563][T25746] ? import_iovec+0x73/0xa0 [ 856.773598][T25746] ___sys_sendmsg+0x2a5/0x360 [ 856.773618][T25746] ? __lock_acquire+0x683/0x2cf0 [ 856.773652][T25746] ? __pfx____sys_sendmsg+0x10/0x10 [ 856.773713][T25746] ? __fget_files+0x2a/0x420 [ 856.773740][T25746] ? __fget_files+0x3a2/0x420 [ 856.773778][T25746] __x64_sys_sendmsg+0x1b1/0x290 [ 856.773804][T25746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 856.773846][T25746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.773871][T25746] do_syscall_64+0x174/0x580 [ 856.773893][T25746] ? trace_irq_disable+0x3b/0x140 [ 856.773921][T25746] ? clear_bhb_loop+0x40/0x90 [ 856.773948][T25746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.773969][T25746] RIP: 0033:0x7f12c579de99 [ 856.773990][T25746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.774008][T25746] RSP: 002b:00007f12c66f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 856.774032][T25746] RAX: ffffffffffffffda RBX: 00007f12c5a25fa0 RCX: 00007f12c579de99 [ 856.774047][T25746] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 856.774061][T25746] RBP: 00007f12c66f2090 R08: 0000000000000000 R09: 0000000000000000 [ 856.774074][T25746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.774087][T25746] R13: 00007f12c5a26038 R14: 00007f12c5a25fa0 R15: 00007fffcaf7fb08 [ 856.774121][T25746] [ 857.644558][T25756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.088893][T25764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5079'. [ 858.996702][T25802] lo speed is unknown, defaulting to 1000 [ 859.159246][T25806] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5086'. [ 859.451515][T25810] syzkaller0: entered promiscuous mode [ 859.471638][T25810] syzkaller0: entered allmulticast mode [ 860.103601][T25820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5089'. [ 861.044054][T25831] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 864.071868][T25827] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 864.219297][T25824] lo speed is unknown, defaulting to 1000 [ 864.355639][T25839] netlink: 'syz.0.5095': attribute type 4 has an invalid length. [ 864.380040][T25839] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5095'. [ 864.563019][T25850] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 864.578323][T25850] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 864.720388][T25855] sctp: [Deprecated]: syz.0.5099 (pid 25855) Use of int in max_burst socket option. [ 864.720388][T25855] Use struct sctp_assoc_value instead [ 865.093732][T25871] bond3: Unable to set down delay as MII monitoring is disabled [ 865.103781][T25871] bond3 (unregistering): Released all slaves [ 866.222097][T25902] syzkaller0: entered promiscuous mode [ 866.256138][T25902] syzkaller0: entered allmulticast mode [ 866.262157][T25906] netlink: 'syz.4.5109': attribute type 2 has an invalid length. [ 866.353382][T25906] D†'|o: entered promiscuous mode [ 866.590399][T25916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5112'. [ 866.599558][T25916] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5112'. [ 866.903272][T25916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5112'. [ 866.968577][T25916] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5112'. [ 867.009841][T25916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5112'. [ 867.040624][T25916] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5112'. [ 867.056087][T25930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5113'. [ 867.069706][T25916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5112'. [ 867.078777][T25916] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5112'. [ 870.259491][T25933] __nla_validate_parse: 59 callbacks suppressed [ 870.259527][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5114'. [ 870.447187][T25940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5115'. [ 870.476248][T25940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5115'. [ 870.501309][T25947] sctp: [Deprecated]: syz.3.5117 (pid 25947) Use of int in max_burst socket option. [ 870.501309][T25947] Use struct sctp_assoc_value instead [ 870.518879][T25944] syzkaller0: entered promiscuous mode [ 870.524594][T25944] syzkaller0: entered allmulticast mode [ 870.531887][T25943] x_tables: duplicate underflow at hook 3 [ 870.630507][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.130254][T25968] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5121'. [ 871.152936][T25968] nbd: must specify an index to disconnect [ 871.423613][T25973] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5122'. [ 871.444237][T25973] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5122'. [ 871.793363][T25983] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 871.817914][T25983] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 871.899285][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5125'. [ 871.934195][T25980] netlink: 'syz.4.5124': attribute type 11 has an invalid length. [ 872.057025][T25980] lo speed is unknown, defaulting to 1000 [ 872.423559][T26001] syzkaller0: entered promiscuous mode [ 872.459245][T26001] syzkaller0: entered allmulticast mode [ 876.645247][T26010] tipc: Enabling of bearer rejected, failed to enable media [ 876.663102][T26014] syzkaller0: entered promiscuous mode [ 876.668810][T26014] syzkaller0: entered allmulticast mode [ 876.912567][T26039] netlink: 'syz.2.5138': attribute type 2 has an invalid length. [ 877.141150][T26053] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 877.174053][T26053] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 877.551102][T26067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5144'. [ 878.014271][T26088] netlink: 'syz.3.5148': attribute type 1 has an invalid length. [ 878.047673][T26088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 878.067584][T26088] vlan3: entered promiscuous mode [ 878.072698][T26088] bond4: entered promiscuous mode [ 878.078084][T26088] vlan3: entered allmulticast mode [ 878.083332][T26088] bond4: entered allmulticast mode [ 878.162133][T26088] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5148'. [ 878.244696][T26088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.256429][T26088] bond4: (slave batadv0): making interface the new active one [ 878.263956][T26088] batadv0: entered promiscuous mode [ 878.269541][T26088] batadv0: entered allmulticast mode [ 878.276439][T26088] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 878.304688][T26096] syzkaller0: entered promiscuous mode [ 878.350651][T26096] syzkaller0: entered allmulticast mode [ 878.736438][T26106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5153'. [ 878.737765][T26109] FAULT_INJECTION: forcing a failure. [ 878.737765][T26109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.775706][T26109] CPU: 0 UID: 0 PID: 26109 Comm: syz.2.5154 Not tainted syzkaller #0 PREEMPT(full) [ 878.775737][T26109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 878.775749][T26109] Call Trace: [ 878.775758][T26109] [ 878.775767][T26109] dump_stack_lvl+0xe8/0x150 [ 878.775806][T26109] should_fail_ex+0x40c/0x560 [ 878.775837][T26109] _copy_to_user+0x31/0xb0 [ 878.775870][T26109] bpf_test_finish+0x4ea/0x690 [ 878.775905][T26109] ? __pfx_bpf_test_finish+0x10/0x10 [ 878.775957][T26109] bpf_prog_test_run_skb+0x11fe/0x2230 [ 878.776003][T26109] ? __fget_files+0x3a2/0x420 [ 878.776029][T26109] ? __fget_files+0x2a/0x420 [ 878.776060][T26109] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 878.776084][T26109] bpf_prog_test_run+0x2c5/0x340 [ 878.776117][T26109] __sys_bpf+0xa22/0xd90 [ 878.776159][T26109] ? __pfx___sys_bpf+0x10/0x10 [ 878.776199][T26109] ? __fget_files+0x2a/0x420 [ 878.776244][T26109] ? ksys_write+0x242/0x270 [ 878.776280][T26109] ? __pfx_ksys_write+0x10/0x10 [ 878.776316][T26109] __x64_sys_bpf+0xba/0xd0 [ 878.776341][T26109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.776365][T26109] do_syscall_64+0x174/0x580 [ 878.776388][T26109] ? trace_irq_disable+0x3b/0x140 [ 878.776414][T26109] ? clear_bhb_loop+0x40/0x90 [ 878.776440][T26109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.776461][T26109] RIP: 0033:0x7f336a39de99 [ 878.776481][T26109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.776499][T26109] RSP: 002b:00007f336b219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.776523][T26109] RAX: ffffffffffffffda RBX: 00007f336a625fa0 RCX: 00007f336a39de99 [ 878.776538][T26109] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 878.776560][T26109] RBP: 00007f336b219090 R08: 0000000000000000 R09: 0000000000000000 [ 878.776573][T26109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.776585][T26109] R13: 00007f336a626038 R14: 00007f336a625fa0 R15: 00007ffd8b6e9208 [ 878.776620][T26109] [ 879.184940][T26119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5157'. [ 879.839580][T26146] ip6gre1: entered promiscuous mode [ 879.930574][T26146] ip6gre1: entered allmulticast mode [ 879.944988][T26131] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 880.379809][T26166] FAULT_INJECTION: forcing a failure. [ 880.379809][T26166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.393264][T26166] CPU: 1 UID: 0 PID: 26166 Comm: syz.4.5167 Not tainted syzkaller #0 PREEMPT(full) [ 880.393294][T26166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 880.393307][T26166] Call Trace: [ 880.393316][T26166] [ 880.393326][T26166] dump_stack_lvl+0xe8/0x150 [ 880.393365][T26166] should_fail_ex+0x40c/0x560 [ 880.393397][T26166] _copy_to_user+0x31/0xb0 [ 880.393431][T26166] bpf_test_finish+0x52e/0x690 [ 880.393465][T26166] ? __pfx_bpf_test_finish+0x10/0x10 [ 880.393503][T26166] bpf_prog_test_run_skb+0x11fe/0x2230 [ 880.393544][T26166] ? __fget_files+0x3a2/0x420 [ 880.393571][T26166] ? __fget_files+0x2a/0x420 [ 880.393600][T26166] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 880.393621][T26166] bpf_prog_test_run+0x2c5/0x340 [ 880.393654][T26166] __sys_bpf+0xa22/0xd90 [ 880.393689][T26166] ? __pfx___sys_bpf+0x10/0x10 [ 880.393726][T26166] ? __fget_files+0x2a/0x420 [ 880.393770][T26166] ? ksys_write+0x242/0x270 [ 880.393804][T26166] ? __pfx_ksys_write+0x10/0x10 [ 880.393842][T26166] __x64_sys_bpf+0xba/0xd0 [ 880.393866][T26166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.393889][T26166] do_syscall_64+0x174/0x580 [ 880.393911][T26166] ? trace_irq_disable+0x3b/0x140 [ 880.393937][T26166] ? clear_bhb_loop+0x40/0x90 [ 880.393963][T26166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.393984][T26166] RIP: 0033:0x7fbdf739de99 [ 880.394004][T26166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.394031][T26166] RSP: 002b:00007fbdf8211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.394055][T26166] RAX: ffffffffffffffda RBX: 00007fbdf7625fa0 RCX: 00007fbdf739de99 [ 880.394070][T26166] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 880.394084][T26166] RBP: 00007fbdf8211090 R08: 0000000000000000 R09: 0000000000000000 [ 880.394097][T26166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.394109][T26166] R13: 00007fbdf7626038 R14: 00007fbdf7625fa0 R15: 00007ffc83557408 [ 880.394143][T26166] [ 880.822637][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 880.831135][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 880.891713][T13365] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 881.530364][T26210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5172'. [ 881.562401][T26209] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 881.569943][T26209] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 881.777333][T14333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 881.790499][T26216] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5176'. [ 881.804684][T26216] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5176'. [ 881.841055][T26216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5176'. [ 881.899211][T26224] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5180'. [ 881.924015][T26216] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 881.937716][T26216] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 882.020856][T14333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 882.078121][T26231] syzkaller0: entered promiscuous mode [ 882.089258][T26231] syzkaller0: entered allmulticast mode [ 882.574382][T26249] netlink: 8500 bytes leftover after parsing attributes in process `syz.0.5186'. [ 882.636970][T26249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5186'. [ 884.003038][T26290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5195'. [ 884.063247][T26299] syzkaller0: entered promiscuous mode [ 884.069918][T26299] syzkaller0: entered allmulticast mode [ 884.313339][T26309] syzkaller0: entered promiscuous mode [ 884.332208][T26309] syzkaller0: entered allmulticast mode [ 884.940962][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.178531][T26326] geneve3: entered promiscuous mode [ 885.208389][ T6365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.221913][ T6365] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.241410][ T6365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.255139][T26332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5207'. [ 885.282390][ T6365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.319452][T26326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5205'. [ 885.357083][T26326] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 885.395368][T26326] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 885.417925][T26341] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5208'. [ 885.556793][ T30] audit: type=1800 audit(1784765643.126:8): pid=26344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5209" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072636F6E6E6563742061613A61613A61613A61613A61613A31302030 dev="tmpfs" ino=1774 res=0 errno=0 [ 885.835657][ T30] audit: type=1800 audit(1784765643.126:9): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5209" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072636F6E6E6563742061613A61613A61613A61613A61613A31302030 dev="tmpfs" ino=1774 res=0 errno=0 [ 886.093246][T26368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5214'. [ 887.666187][T26411] syzkaller0: entered promiscuous mode [ 887.671966][T26411] syzkaller0: entered allmulticast mode [ 888.136416][T26418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5228'. [ 888.510180][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5229'. [ 888.894426][T26446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.972764][T26447] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5236'. [ 889.012597][T26444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5235'. [ 889.051101][T26444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5235'. [ 889.216748][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5238'. [ 889.366662][T26453] geneve0: entered promiscuous mode [ 889.372547][T26453] macvlan2: entered promiscuous mode [ 889.554706][T26464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5242'. [ 889.578807][T26466] sctp: [Deprecated]: syz.3.5244 (pid 26466) Use of int in max_burst socket option. [ 889.578807][T26466] Use struct sctp_assoc_value instead [ 889.810644][T26474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5246'. [ 889.868039][T26480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5248'. [ 889.877438][T26480] netlink: 'syz.4.5248': attribute type 1 has an invalid length. [ 889.885296][T26480] netlink: 'syz.4.5248': attribute type 2 has an invalid length. [ 889.892690][T26474] vlan2: entered allmulticast mode [ 889.893915][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5248'. [ 889.906658][T26474] bridge5: entered allmulticast mode [ 889.934703][T26474] erspan0: left allmulticast mode [ 889.945068][T26474] bridge5: port 1(erspan0) entered blocking state [ 889.959212][T26474] bridge5: port 1(erspan0) entered disabled state [ 889.979727][T26474] erspan0: entered allmulticast mode [ 891.359369][T26534] netlink: 'syz.3.5265': attribute type 1 has an invalid length. [ 891.397820][T26534] 8021q: adding VLAN 0 to HW filter on device bond5 [ 891.449355][ C0] ================================================================== [ 891.457548][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 891.465722][ C0] Read of size 2 at addr ffff88814d08f474 by task syz.4.5264/26537 [ 891.474042][ C0] [ 891.476446][ C0] CPU: 0 UID: 0 PID: 26537 Comm: syz.4.5264 Not tainted syzkaller #0 PREEMPT(full) [ 891.476507][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 891.476519][ C0] Call Trace: [ 891.476528][ C0] [ 891.476538][ C0] dump_stack_lvl+0xe8/0x150 [ 891.476572][ C0] print_address_description+0x55/0x1e0 [ 891.476617][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 891.476642][ C0] print_report+0x58/0x70 [ 891.476666][ C0] kasan_report+0x117/0x150 [ 891.476694][ C0] ? __pskb_pull_tail+0x1235/0x1890 [ 891.476718][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 891.476745][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 891.476774][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 891.476836][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 891.476861][ C0] ? lock_acquire+0x106/0x350 [ 891.476902][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 891.476936][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 891.476962][ C0] ? __css_rstat_updated+0x235/0x540 [ 891.477006][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 891.477035][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 891.477070][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 891.477096][ C0] ? dev_gro_receive+0x1097/0x2380 [ 891.477174][ C0] napi_complete_done+0x299/0x730 [ 891.477202][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 891.477230][ C0] ? gro_cell_poll+0x175/0x5d0 [ 891.477305][ C0] gro_cell_poll+0x5ab/0x5d0 [ 891.477338][ C0] ? gro_cell_poll+0x175/0x5d0 [ 891.477366][ C0] __napi_poll+0xaa/0x330 [ 891.477393][ C0] net_rx_action+0x61d/0xf50 [ 891.477427][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 891.477453][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 891.477479][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 891.477504][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 891.477523][ C0] ? sched_clock+0x3f/0x60 [ 891.477565][ C0] handle_softirqs+0x225/0x840 [ 891.477592][ C0] ? do_softirq+0x76/0xd0 [ 891.477615][ C0] ? tun_rx_batched+0x185/0x790 [ 891.477645][ C0] do_softirq+0x76/0xd0 [ 891.477666][ C0] [ 891.477674][ C0] [ 891.477682][ C0] __local_bh_enable_ip+0xf8/0x130 [ 891.477704][ C0] ? tun_rx_batched+0x185/0x790 [ 891.477729][ C0] tun_rx_batched+0x616/0x790 [ 891.477759][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 891.477785][ C0] ? tun_get_user+0x2717/0x4370 [ 891.477812][ C0] ? tun_get_user+0x2717/0x4370 [ 891.477839][ C0] ? tun_get_user+0x23cb/0x4370 [ 891.477865][ C0] ? tun_get_user+0x23cb/0x4370 [ 891.477890][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 891.477912][ C0] ? tun_get_user+0x2717/0x4370 [ 891.477938][ C0] ? tun_get_user+0x2717/0x4370 [ 891.477964][ C0] tun_get_user+0x2b44/0x4370 [ 891.477998][ C0] ? aa_file_perm+0x18b/0x15f0 [ 891.478023][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 891.478044][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 891.478080][ C0] ? __lock_acquire+0x683/0x2cf0 [ 891.478108][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 891.478133][ C0] ? preempt_schedule_common+0x82/0xd0 [ 891.478154][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 891.478181][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 891.478207][ C0] ? tun_get+0x1c/0x2f0 [ 891.478233][ C0] ? tun_get+0x1c/0x2f0 [ 891.478261][ C0] ? tun_get+0x1c/0x2f0 [ 891.478285][ C0] ? tun_get+0x1c/0x2f0 [ 891.478313][ C0] tun_chr_write_iter+0x113/0x200 [ 891.478340][ C0] vfs_write+0x612/0xba0 [ 891.478373][ C0] ? __pfx_vfs_write+0x10/0x10 [ 891.478407][ C0] ? __fget_files+0x2a/0x420 [ 891.478436][ C0] ksys_write+0x150/0x270 [ 891.478465][ C0] ? __pfx_ksys_write+0x10/0x10 [ 891.478498][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.478519][ C0] do_syscall_64+0x174/0x580 [ 891.478540][ C0] ? trace_irq_disable+0x3b/0x140 [ 891.478563][ C0] ? clear_bhb_loop+0x40/0x90 [ 891.478585][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.478606][ C0] RIP: 0033:0x7fbdf739de99 [ 891.478626][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.478645][ C0] RSP: 002b:00007fbdf8211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 891.478669][ C0] RAX: ffffffffffffffda RBX: 00007fbdf7625fa0 RCX: 00007fbdf739de99 [ 891.478684][ C0] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 891.478698][ C0] RBP: 00007fbdf7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 891.478711][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.478724][ C0] R13: 00007fbdf7626038 R14: 00007fbdf7625fa0 R15: 00007ffc83557408 [ 891.478747][ C0] [ 891.478755][ C0] [ 891.937413][ C0] The buggy address belongs to the physical page: [ 891.943828][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14d08f [ 891.952850][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 891.960228][ C0] raw: 057ff00000000000 ffffea00053423c8 ffffea00053423c8 0000000000000000 [ 891.968913][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 891.977502][ C0] page dumped because: kasan: bad access detected [ 891.984018][ C0] page_owner info is not present (never set?) [ 891.990118][ C0] [ 891.992528][ C0] Memory state around the buggy address: [ 891.998227][ C0] ffff88814d08f300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 892.006391][ C0] ffff88814d08f380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 892.014524][ C0] >ffff88814d08f400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 892.022608][ C0] ^ [ 892.030348][ C0] ffff88814d08f480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 892.039114][ C0] ffff88814d08f500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 892.047256][ C0] ================================================================== [ 892.056157][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 892.063642][ C0] CPU: 0 UID: 0 PID: 26537 Comm: syz.4.5264 Not tainted syzkaller #0 PREEMPT(full) [ 892.073135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.083228][ C0] Call Trace: [ 892.086632][ C0] [ 892.089505][ C0] vpanic+0x56c/0xa60 [ 892.093639][ C0] ? __pfx_vpanic+0x10/0x10 [ 892.098272][ C0] panic+0xc5/0xd0 [ 892.102152][ C0] ? __pfx_panic+0x10/0x10 [ 892.106714][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 892.112400][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 892.118096][ C0] check_panic_on_warn+0x89/0xb0 [ 892.123200][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 892.128850][ C0] end_report+0x73/0x170 [ 892.133190][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 892.138830][ C0] kasan_report+0x128/0x150 [ 892.143337][ C0] ? __pskb_pull_tail+0x1235/0x1890 [ 892.148541][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 892.154268][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 892.159820][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 892.165555][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 892.171647][ C0] ? lock_acquire+0x106/0x350 [ 892.176427][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 892.182531][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 892.189037][ C0] ? __css_rstat_updated+0x235/0x540 [ 892.194341][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 892.200523][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 892.206881][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 892.213830][ C0] ? dev_gro_receive+0x1097/0x2380 [ 892.218983][ C0] napi_complete_done+0x299/0x730 [ 892.224012][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 892.229739][ C0] ? gro_cell_poll+0x175/0x5d0 [ 892.234514][ C0] gro_cell_poll+0x5ab/0x5d0 [ 892.239121][ C0] ? gro_cell_poll+0x175/0x5d0 [ 892.243898][ C0] __napi_poll+0xaa/0x330 [ 892.248236][ C0] net_rx_action+0x61d/0xf50 [ 892.252835][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 892.257994][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 892.263284][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 892.268596][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 892.273879][ C0] ? sched_clock+0x3f/0x60 [ 892.278333][ C0] handle_softirqs+0x225/0x840 [ 892.283192][ C0] ? do_softirq+0x76/0xd0 [ 892.287897][ C0] ? tun_rx_batched+0x185/0x790 [ 892.292766][ C0] do_softirq+0x76/0xd0 [ 892.296926][ C0] [ 892.299861][ C0] [ 892.302803][ C0] __local_bh_enable_ip+0xf8/0x130 [ 892.308010][ C0] ? tun_rx_batched+0x185/0x790 [ 892.312974][ C0] tun_rx_batched+0x616/0x790 [ 892.317685][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 892.322926][ C0] ? tun_get_user+0x2717/0x4370 [ 892.327814][ C0] ? tun_get_user+0x2717/0x4370 [ 892.332680][ C0] ? tun_get_user+0x23cb/0x4370 [ 892.337565][ C0] ? tun_get_user+0x23cb/0x4370 [ 892.342439][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 892.347821][ C0] ? tun_get_user+0x2717/0x4370 [ 892.352678][ C0] ? tun_get_user+0x2717/0x4370 [ 892.357620][ C0] tun_get_user+0x2b44/0x4370 [ 892.362399][ C0] ? aa_file_perm+0x18b/0x15f0 [ 892.367167][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 892.372104][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 892.377306][ C0] ? __lock_acquire+0x683/0x2cf0 [ 892.382338][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 892.387754][ C0] ? preempt_schedule_common+0x82/0xd0 [ 892.393215][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 892.398348][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 892.403814][ C0] ? tun_get+0x1c/0x2f0 [ 892.407989][ C0] ? tun_get+0x1c/0x2f0 [ 892.412148][ C0] ? tun_get+0x1c/0x2f0 [ 892.416311][ C0] ? tun_get+0x1c/0x2f0 [ 892.420492][ C0] tun_chr_write_iter+0x113/0x200 [ 892.425543][ C0] vfs_write+0x612/0xba0 [ 892.429824][ C0] ? __pfx_vfs_write+0x10/0x10 [ 892.434610][ C0] ? __fget_files+0x2a/0x420 [ 892.439208][ C0] ksys_write+0x150/0x270 [ 892.443549][ C0] ? __pfx_ksys_write+0x10/0x10 [ 892.448422][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.454669][ C0] do_syscall_64+0x174/0x580 [ 892.459265][ C0] ? trace_irq_disable+0x3b/0x140 [ 892.464293][ C0] ? clear_bhb_loop+0x40/0x90 [ 892.468971][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.474867][ C0] RIP: 0033:0x7fbdf739de99 [ 892.479285][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.498987][ C0] RSP: 002b:00007fbdf8211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 892.507490][ C0] RAX: ffffffffffffffda RBX: 00007fbdf7625fa0 RCX: 00007fbdf739de99 [ 892.515474][ C0] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 892.523529][ C0] RBP: 00007fbdf7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 892.531592][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.539613][ C0] R13: 00007fbdf7626038 R14: 00007fbdf7625fa0 R15: 00007ffc83557408 [ 892.547681][ C0] [ 892.551118][ C0] Kernel Offset: disabled [ 892.555436][ C0] Rebooting in 86400 seconds..