last executing test programs: 7.745184905s ago: executing program 4 (id=1434): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001700090025bdff0001dcc32506000089ef93c9afb84a1500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000010c0)={0x0, 0x4}, &(0x7f0000001100)=0x8) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000f40)=ANY=[@ANYBLOB="530adc1632abcc1fd448a5a4ee96a6127b1f41bf670a0fe1a2b4a4fa4b3f8137e47ed93218b055791618a9a7814b79ee6712712864e809c202ae4bc658dd611e6a12d50f642fafaeac9c8a7fbf1897b0fbd8e048ceec09a476f3553ebbb49c5e2d0ce3256e7e3eb3007214f269d90e95bb428e58bd48dd229692b3e9ee835c9b655e219f015b4b41c1580600", @ANYRES16=r9, @ANYBLOB="000126bd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800090007000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000800090006000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090004000000080001007063690011000200303030303a30303a31302e300000000008000300030000000800090005000000"], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0x99d, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x400001, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x4006, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0x1, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0xff, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x3, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0xa3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x8, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x6, 0x7, 0x692, 0x8f, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x5, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x1, 0x20044180) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) epoll_create(0x8000) 7.056383718s ago: executing program 2 (id=1441): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') write(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) 6.919308369s ago: executing program 4 (id=1443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x80) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) epoll_create1(0x0) 6.601543175s ago: executing program 3 (id=1447): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0xd3fe6f33b2bb7a2a, 0x4, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) listen(r0, 0x0) unshare(0x6020400) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000040)={0x7f, 0x8, 0x3, 0x7, 0x1000000007, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 6.343527553s ago: executing program 3 (id=1449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8800) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xe, 0x7, 0x6361, 0xfffffffd, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0xffffffff, 0x2, 0x1}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.28830026s ago: executing program 0 (id=1451): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@gettaction={0x48, 0x32, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000240)={r3, &(0x7f0000000040)='\x00', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x80000001]}, {0x5, 0x7, 0x115, 0xa7}}, 0xfffffff4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003300)={'tunl0\x00', &(0x7f0000000640)={'tunl0\x00', r5, 0x10, 0x1, 0x2, 0xc5, {{0x1f, 0x4, 0x2, 0x3, 0x7c, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x6, 0x11, "4843d006f54399fb67b0d2176d1012"}, {0x2, 0x7, "944b617286"}, {0xf, 0x5, "57d27b"}]}, @generic={0x44, 0x5, "17f1f3"}, @timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x9, [{@remote, 0x9}, {@loopback, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x30497830}]}, @ssrr={0x89, 0x1b, 0x18, [@loopback, @empty, @multicast1, @empty, @private=0xa010101, @empty]}]}}}}}) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000001) bind$inet(r3, &(0x7f00000001c0)={0x2, 0xfff9, @local}, 0x10) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}, 0x922bac8576b92dde) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000d854f33d1f7acd3a0001f228bd7000fddbdf2508000000", @ANYRES16=r6, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 5.231174083s ago: executing program 3 (id=1453): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x27) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x98, 0x14, 0xa, 0xa00, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x23, 0x8, "5a7447177183ee94c4f7130018fc588bdd60e00b4e9b6fc42aeb83e1217ddb"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELCHAIN={0x16c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x56cdc341}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x29a05b4a}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_HOOK={0x90, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4e34e92e}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5aefaaeb}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x22c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 5.226480044s ago: executing program 4 (id=1454): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x2}}, 0x1a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x4, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=0x6, 0xfda2) unshare(0x62040200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c081}, 0x4000000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x20, 0x1, 0x7, 0xd03, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xa053}, 0x20800) 4.901685715s ago: executing program 0 (id=1456): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x9c, 0x6, 0x17d8, 0xe, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1, 0x7, 0x8, 0x7ff}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001580)={{r1, &(0x7f0000000200)='\\[\\\x00', 0x1, &(0x7f0000000240)={@align=0x1, {0x7, 0x2, 0x5, 0x4}}, 0x9, &(0x7f0000000500), &(0x7f0000000540)=0x8}, {[0x46c, 0x2, 0x9, 0x7c3]}, 0x7fffffff, 0x1000, &(0x7f0000000580)=""/4096}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xff04}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r3}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in=@multicast1, 0x4e23, 0x0, 0x4e24, 0x2800, 0x2, 0x80, 0xa0, 0x3a, r2, r4}, {0x1, 0x2, 0x6, 0x3, 0x2, 0x9, 0x1, 0x6e7}, {0x1608, 0x7f4, 0x6, 0x5}, 0x6, 0x6e6bb3, 0x1, 0x1, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d3}, 0xa, @in=@local, 0x3507, 0x2, 0x2, 0x4, 0x2, 0x6, 0x4}}, 0xe8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r5, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x20048000) 4.732256896s ago: executing program 0 (id=1458): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff1e) (rerun: 64) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x9f47c777102a64be) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0, 0x1}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x52000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x80000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x89, &(0x7f0000000800)=""/137, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeef, 0x61e5cc96}, 0x94) (async) listen(r5, 0x80004) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="120000000400000004f6ffff110000000000000043f5d3178159a98f0e93d3042358a3af54170140530288a2be9242341ceb475c67d9b7af81616b425a4bc91dc96cf6e0f4f94d951dac13f3554c137add794ffd2499c482bb44e200bd078a8fd5e165ded63f1926486143660b2559a6b51e1fc0fe6e5c58abab8af1e33753359041c9930e934c8c1260914e566cad08e13ed3b3968056e8c0e88243a4b82d7bde424d8c7ca2f76b4dac79c0ebdd67aae93cf09ced63a24e4f01543003f763a9d745a7600c3a9428051fc2570c09fda6dd93d35dd9928afe1fbffa446c6fde2c6b35605fca", @ANYBLOB="4c4a127ab7e98b99be769d92604eeddedfd646f0d30ecf9b6c4d032c3179b9460a8605aff13fab6093af77f2334dce41aac47f4dbd33037544c21d37a6cd24e733d94fd4af9b0bc83a589421ab295c3620e1051ecb56a466934325b534b3968ee7d58bd9101fce371889b1eb9df5118e42853347c4912466ff6510a83edcea85665d7ede7f11adbea0def63bfebc01f234bcd4805e68aa4491ccee0570", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000cc0)="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", &(0x7f0000000a40)=@tcp6=r5}, 0x20) (async) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) socket(0x21, 0x800, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000200000000000000000000000010000000000000000000000000000000000000000000800000000052fa0ecb0a1b83a05c684b5d4cdbdc012a27cca8dc21898813ff2c30caec8825e8d8670fd430d0e70a7d9b19547f70512516199629965bba76cbb061bdafc31aad64"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYRES32=r4, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="060000000000000000100000000000001500"/28], 0x50) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0xea, 0x8, 0x0, 0x0}}, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) 4.149062817s ago: executing program 1 (id=1460): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0xa, 0x2) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3800, 0xb5a4}, &(0x7f0000000100)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000580)={&(0x7f0000000180), 0x14, &(0x7f0000000500)={&(0x7f0000000400)="cec4e26a2a5aff765f82b29a536a3980b464500a365a64167715276249710ff2af51de815d06c1b35de848ec730ada81229d65b82cc0236b81fe0b8ad860dd505857b114e00ed96822b8b6c551e49933fee3dd11ad92619703ed0858578b46f3de838f2c6d691a0a216c1dadff05da6af8d29f14cd9de153824087bb9a806106b5c19bf69a063dc8fc0026c0751317c557068a92f238332abbf8b63c9792eb806d4caef45f48a221b0c4b28c95bea7c7175299d6b8362751121bcc1b0052ca8a7f", 0xc1}, 0x1, 0x0, 0x0, 0x8004}, 0x48094) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bf2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 3.985815018s ago: executing program 1 (id=1461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000800090000000000"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000001900)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r7) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="029000000080040008000a00", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="029000000080040008000a00", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r9, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000a40)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x32, 0x4, 0x2, 0x8, 0x377, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x23, 0xb3, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @private=0xa010100, @multicast1, @remote, @local, @loopback]}, @generic={0x83, 0x2}, @cipso={0x86, 0x11, 0x1, [{0x2, 0xb, "4e46c56d257a2d674f"}]}, @ssrr={0x89, 0x1b, 0x95, [@loopback, @broadcast, @local, @empty, @local, @broadcast]}, @noop, @rr={0x7, 0x1f, 0xad, [@multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x2d}]}, @ssrr={0x89, 0x27, 0x50, [@dev={0xac, 0x14, 0x14, 0xa}, @loopback, @loopback, @loopback, @rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @empty]}, @end, @ssrr={0x89, 0x1b, 0xf3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x9f, 0x2, [0x4, 0x8], "d7b82157c4f2df13c0a8f3ed7ac6fa9debd95c93fafdb64b0e2561355df4c73bc792dd40d4fe10b9c42f0fa3874a0b9f7c3908f4ad62771027773eeffd6e40579e7b809451944587060e1ab0138bf3cbfe099c15a542b0f0465799fb84dcc3f4d08bdc8d67977d7c55fd66420cb6df7bac79de4781219452f7b94a91be99aa225e235c2f1eb0e31835db7ff12c243f206f0d6258fcb0f57ca610535257dc80"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x4], "6ec3789062047e2beea895f6b66383f1c5742cd447e2783d12f343fd5ef1cfa7e3ee7687dd673cd6404c5edc3de9135cf7f4ccfc797e88cec1a806f65d66aae2daa11de8877785698b8d6199fcd1af6537ae33efb77a827b1810645f712d6647ffcd2e9ffb2f398ed6acbca1fbebafe516583f80e05cba54b5414893b73f928cec02053b065674ca5af9aaa4ab55df61dcfec894d9d40c2aa67a6d47f21fb2c556c153d3a700708bc5bae8183170c9ac6d3023"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x1], "e821da5dea81c4d07b39a8dbadf21aff02da00f6c3135c0723fffb875d9eb781f5bb5f7bfceece1cd6ec60c1b815c2ad75cd86b543a0b57e226c4ad5884ac1e0bb9926f1ee0dd592618a53c5f05cce10231eb25b2cb53ab5db035b5182f7dc43d55f2dd37b39"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0xd, 0x3, 0x0, 0x2, 0x6, 0x6}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0xc0, 0x1, 0x0, 0x0, 0x4}, 0x2, {0x4, 0x7ff, 0x0, 0x9, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x2, "d9f3eb8b6800c30361bc4c5a6d467066f0d4ed130c8f275a9684516e11f902bf79a8e8334c6e9a94546e457eca2277b7368aee535ba753969afe106c434667185ac823b589a09e3bdc640432989e1bc02f23295134c4a0283dbbbb44e6c620242023fde84f7f2a3f41ce96746291b9a707279b72f2053f9cd10f224f214a18bd1fdd8f1aad579ecbbc6c800cbfe87109414ebf98ce08cd4aebe8df2b620b313c47f74cb9fc16b6a03c"}}}}, 0x385) 3.405680801s ago: executing program 1 (id=1462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f000000bcc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000300)=""/67, 0x43}], 0x1}, 0xf}], 0x1, 0x102, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 3.210857037s ago: executing program 1 (id=1463): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ad2000000000a01030000000000000000010005000000010073797a3000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000108000b40000000000900010073797a3000000c002c0004802800018008000100666962001c0002800800014000000011080003400000002e0800024099307359452e6500000002140000001100010000000000000000000000000ac0b087f85302051ad01d94f1ce71c6ce9e5f8594b9fd15957e54cbe6f28b2d5a402b2b64b56f6b055b81340749412747821d72e398176a361a8252330e38fc1014565435b440e2e31707ea6fc0ba43b149e18aea7f4d24471ee5f3818296870c2da56e92f912560ed89a99b605e1acc1b434373531fbe188302e5d9c38b8bc8fc8282e594eefab8249eb51b5416d7e1bfe61084288aeced72c975ac2104b6c42c3d11015c3767d3be510914fce9fbbf5a1ac9f3a9ffc33eaaa4a226ee8830c90c3400560135dfad6"], 0xdc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 32) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001040000000000000000ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 3.066145325s ago: executing program 1 (id=1464): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x8, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa963bffff5, 0x13012, r4, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000004c0)=@req={0x8, 0x9, 0x4, 0x5ca}, 0x10) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f00000021c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r7, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01072bbd00ba2c7470fd2b2b2316b7f8d280817000ffdbdf250100020082807a44", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x481}, 0x800) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414f6030490781200183f2500000000000000000100007f"], 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r10 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000000)) 2.697821424s ago: executing program 2 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r0, 0x0, 0x6c}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000100000000000500000018000380080004000000000008000200090000000400010018000180e2"], 0x44}, 0x1, 0x0, 0x0, 0x2004c810}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0xffffff07, &(0x7f0000000180)="0400d876d5620064d082778c3938adfc73342d7335a2c8807c6b14fcd634fee8b9af4c33956bdf18f076e3e588829d65ddc4825e1d13e9522736f20832e770322fc9addbb11eea2ae8f216ce86e35590b900bf5a7ecd89cbfeb1f2148b8138c4a79d8f8866d037343ae64f2b4f35455364fda4e89c96a72ecee8a784d6f6f03f1d769342ad53ce8fce4e5402d1745ffa69b1edf60fc36226", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xf}, 0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2.536567512s ago: executing program 2 (id=1466): recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/6, 0x6}, {&(0x7f0000001300)=""/112, 0x70}], 0x6}, 0x4}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001400)=""/238, 0xee}, {&(0x7f0000001500)=""/215, 0xd7}, {&(0x7f0000001600)=""/99, 0x63}, {&(0x7f0000001680)=""/27, 0x1b}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/13, 0xd}, {&(0x7f0000002700)=""/125, 0x7d}, {&(0x7f0000002780)=""/166, 0xa6}], 0x8, &(0x7f00000028c0)=""/245, 0xf5}, 0x6}, {{&(0x7f00000029c0)=@alg, 0x80, &(0x7f0000002a40), 0x0, &(0x7f0000002a80)=""/4096, 0x1000}, 0xb3}, {{&(0x7f0000003a80)=@x25, 0x80, &(0x7f0000004f40)=[{&(0x7f0000003b00)=""/77, 0x4d}, {&(0x7f0000003b80)=""/10, 0xa}, {&(0x7f0000003bc0)=""/234, 0xea}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/116, 0x74}, {&(0x7f0000004d40)=""/190, 0xbe}, {&(0x7f0000004e00)}, {&(0x7f0000004e40)=""/67, 0x43}, {&(0x7f0000004ec0)=""/107, 0x6b}], 0x9, &(0x7f0000005000)=""/75, 0x4b}, 0x1}, {{&(0x7f0000005080)=@qipcrtr, 0x80, &(0x7f0000005640)=[{&(0x7f0000005100)=""/148, 0x94}, {&(0x7f00000051c0)=""/158, 0x9e}, {&(0x7f0000005280)=""/103, 0x67}, {&(0x7f0000005300)=""/119, 0x77}, {&(0x7f0000005380)=""/220, 0xdc}, {&(0x7f0000005480)=""/250, 0xfa}, {&(0x7f0000005580)=""/191, 0xbf}], 0x7, &(0x7f00000056c0)=""/91, 0x5b}, 0x5}, {{&(0x7f0000005740)=@nfc, 0x80, &(0x7f0000005b40)=[{&(0x7f00000057c0)=""/85, 0x55}, {&(0x7f0000005840)=""/165, 0xa5}, {&(0x7f0000005900)=""/168, 0xa8}, {&(0x7f00000059c0)=""/141, 0x8d}, {&(0x7f0000005a80)=""/192, 0xc0}], 0x5, &(0x7f0000005bc0)=""/4096, 0x1000}, 0x7fffffff}, {{&(0x7f0000006bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006c40)=""/246, 0xf6}], 0x1, &(0x7f0000006d80)=""/4096, 0x1000}, 0x100}], 0x7, 0x10000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000007f40)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000008240)={0x11, 0x27, &(0x7f0000007f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6f5e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x71a85cd4}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000080c0)='GPL\x00', 0x0, 0x44, &(0x7f0000008100)=""/68, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000008180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000081c0)={0x4, 0xe, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000008200)=[{0x1, 0x5, 0x8, 0x8}, {0x3, 0x5, 0xf}, {0x1, 0x5, 0xe, 0x9}, {0x3, 0x4, 0x0, 0x9}], 0x10, 0x1}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000008300)={"4cd625798a4cf145352556b2a1278940", 0x0, 0x0, {0x3, 0x3}, {0x8, 0xef18}, 0x2, [0x0, 0x4, 0x2, 0x2, 0x4, 0x800, 0x100000000, 0x6, 0x5, 0x3, 0x6c5f76dd, 0x4, 0x7, 0x0, 0xbd, 0x80]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000008400)={'rose0\x00', 0x1000}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000008480)=@generic={&(0x7f0000008440)='./file0\x00', r2}, 0x18) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000084c0)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000008580)=@nat={'nat\x00', 0x1b, 0x5, 0x590, 0xf0, 0x298, 0xffffffff, 0x0, 0xf0, 0x4c0, 0x4c0, 0xffffffff, 0x4c0, 0x4c0, 0x5, &(0x7f0000008500), {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x9, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@empty, @gre_key=0x8b, @gre_key=0x3}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@mh={{0x28}, {"d2b7"}}, @common=@srh1={{0x90}, {0x21, 0x5, 0x2, 0x3, 0x9, @mcast1, @private0, @empty, [0xffffff00, 0xffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffff00, 0xffffff00, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0x103, 0x2059}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@remote, @ipv6=@mcast1, @port=0x4e21, @gre_key=0xc}}}, {{@ipv6={@mcast2, @local, [0x0, 0xffffffff, 0x1fffffe00, 0xffffffff], [0xff, 0x0, 0xff000000], 'dvmrp0\x00', 'vxcan1\x00', {}, {}, 0x5e, 0x0, 0x2, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x28, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x5, @ipv4=@multicast2, @ipv4=@broadcast, @port=0x4e21, @gre_key=0x400}}}, {{@ipv6={@private2, @mcast1, [0x0, 0x80ffff7f, 0xff, 0x101ffff00], [0xff000000, 0xff, 0x0, 0xff000000], 'hsr0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x8, 0x1, 0x20}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28}, {0x82, 0x43, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xbb, 0x3, 0xd, 0xb9e, 0x0, 0x7, 0x7, 0x28]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000008c80)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000008c40)={&(0x7f0000008bc0)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40008814) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000008d00)={0x100000001, 0x28, [0x7f6, 0x1000, 0xcbff, 0xffff], &(0x7f0000008cc0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000008d40)=""/23, &(0x7f0000008d80)=0x17) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000008dc0)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000008e00)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000008f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000008e80), &(0x7f0000008ec0)=r2}, 0x20) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000009040)={@mcast2, 0x0}, &(0x7f0000009080)=0x14) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000090c0), 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000009180)={0x0, 0xffff, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000009240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000091c0), &(0x7f0000009200)='%pS \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000092c0)=@o_path={&(0x7f0000009280)='./file0\x00', 0x0, 0x4, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000093c0)={0x6, 0x10, &(0x7f0000008f40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000008fc0)='syzkaller\x00', 0xfff, 0x3e, &(0x7f0000009000)=""/62, 0x1f00, 0x80, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000009100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000009140)={0x2, 0x7, 0x80000000, 0xc2d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000009300)=[r8, r9, r10], &(0x7f0000009340)=[{0x4, 0x2, 0xe, 0xc}, {0x3, 0x3, 0x10, 0x5}, {0x4, 0x4, 0xf, 0x5}, {0x5, 0x3, 0x2, 0xb}, {0x2, 0x4, 0x5, 0x2}], 0x10, 0xa}, 0x94) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000009480)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000009880)={'macvlan0\x00', 0x20}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000009900)={0xffffffffffffffff, r6, 0x25, 0x1d, @val=@iter={&(0x7f00000098c0)=@map_fd=r5, 0x10}}, 0x20) write$rfkill(r4, &(0x7f0000009940)={0x81, 0x4, 0x1, 0x1, 0x1}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f000000aa80)={&(0x7f0000009980)="2306a4d2ebb1f16d14914cc04affb47034048f67a473689c5d684b7a96c7cb977a49f3013a7493e96800dac5d6848bc23d8b083a055822bc1462f2ef0f1d2cbcd7be0573aefc43d40dc6d7b0d17bbe638ff85f7d87c4da0ed5474eacabd6e77d750756fd30c1a2e7edb0bf43e7aae4565c", &(0x7f0000009a00)=""/14, &(0x7f0000009a40)="fe22cb2103a21f1e92d5434af367ad2b20", &(0x7f0000009a80)="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", 0x6, r4}, 0x38) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000000abc0)={0x0, 0x6, 0x1, 0x2d58}, &(0x7f000000ac00)=0x10) 2.37577485s ago: executing program 2 (id=1467): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5fffff7e}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x80}, 0x1, 0x7}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952fff"], 0x1d7) (async) socket$kcm(0x2, 0x200000000000001, 0x106) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r10, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c7821", 0x8f}, {&(0x7f00000002c0)="a01931a77deebe4f", 0x8}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a477647016ad9de5ce797b335cfd816d72e2cc01b12e54a3ccea2593bb0c99266bd87d0d80cc0b8e7101d736237e3fdf5c353e5625c9484f31d9e073594aa9372e588b79ecccd1926dd9a8b0749431aec47512d0f7623f6dd68c4c9b00e812164ff41514aaf10c9f05dd2627c38f8f4118380d5d3346b5460a87b68e6c58b0c3ba6eec887b885bbab0b0c2af50290034afbe9bdcd10948b465797b87c13c40c81bdc283025a5347ebe44880ae7f03", 0xe2}, {&(0x7f00000004c0)="9b1eb0aed9ba4b", 0x7}], 0x4) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 1.424330806s ago: executing program 3 (id=1468): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x10, 0x18, &(0x7f0000000100)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000), &(0x7f00000001c0)="76c75c7d8328bcdb1457", 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18feffffffffffffff2810bca90000107118800000000000ffffffff00000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$alg(r0, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe7", 0x11) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) epoll_create(0x10001) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xc, 0x10, &(0x7f00000014c0)=ANY=[@ANYBLOB="8510000008000c0018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018430000050000000000000000000000186a00000c000000000000001cb2000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008520000005000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1ff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x40, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x40}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="018321c0fc2bb11edb996ff12c3008c111aa97", 0x24a9d57e}], 0x1}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 1.284465508s ago: executing program 4 (id=1469): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x0, 0xfeffffbd, 0xffffbff4}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x821, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd60000400000005000000080009000200000008000d00a80a0000060001000700000008000b0020000000050012007f000000"], 0x3c}}, 0x20) 952.889063ms ago: executing program 0 (id=1470): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a700000001d0a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x4d89c374, 0x1, 0x8}, 0x1000b, 0xfffffffe, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x5, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 752.696698ms ago: executing program 4 (id=1471): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef64bd465b9780e2bbe408ccc58187feb0e3d43347f989007a7c63f6dae682ecb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259620618c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a30536455bb774f7f154263178151ea93f5774b56a7142047326f940e95b8489e1c5650f5c61299a295f79c88456521cffdef93e29f10f4a11f0ca134a375a7ecfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d9823659d1945258fc668950e5aacfa06e1a212661b3f57a266c90e64efc8d8f730867202a9ee94e6a1f851337c2c9671d98a19bdc132c153b3ad843bdd308a07ba8f50a20cfd2c8b94e86ea0af0a9e0e9789ffd38f9b86da101e2266700"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x4000, 0x10, 0x8, 0xfffffcd2, 0x0}}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, 0xb, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040894}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x20000800) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000800)=0x7, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f00000007c0)={r9, &(0x7f0000000180)='$\x00', 0x492400, &(0x7f0000000200)={@align=0x9, {0xfff, 0xecc8, 0x1, 0x7}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000780)=0x1200}) sendmsg$kcm(r6, &(0x7f0000001200)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, &(0x7f0000000e80)=[{&(0x7f00000008c0)="1b4d4ee6a9910794a03ad7ecb1ac42cf422dbc323ed2622653bb328bbcac9faf047fc8f2f299", 0x26}, {&(0x7f0000000c80)="4cc3d8e2eb037ed0d1ef28cb6447045042b966", 0x13}, {&(0x7f0000000cc0)="14dfaa0f7835f0e1d1133f409d09ca821257fd390fed95374f3856a5138de7007734723a8a13009ed90fffb95f334afe3bdee5e8209279978f8dd7a56c1749e303aa3bc08158955066f6370eb89057497d994848195bc5161be5534d9f870d01f2cdc0e689a169600da73e2fdcac19a17a01a7850f468dd3b03dc4049b8208246043a72144cde4a965a2e21454b1cade248d9f0b90769d227a3217457d9f2e235e0805407057da34ddfb4de03732b739e15052246c791c86e4a3fb5962de2cad399790e959395dc67b3a", 0xca}, {&(0x7f0000000dc0)="907c750ec56aa64f49781a197b3aba308a36284b4511751a9151f89664f61b73896205042278cc8466302833bc34326308fcc6cf75b1c7fdfb1dab76b1f7b7334217a2f7914a9f45bec1ad0b2a10edcf1a423f5ec681506c0376f001056380257cffb63e3ad8c4b3222721b5e13d583a8d02231f29071c3878569dd1c2a976e625bf", 0x82}], 0x4, &(0x7f0000000ec0)=[{0x48, 0x0, 0x5, "d1da5097ec3597260b98107174eb1fc56cc1769c4bd5543f14684026619e3bc8a3e94217a41b8b0c953f9ac540028f438cc7be497528"}, {0x30, 0x110, 0x66a2, "a9a9b766079f19445ccb217126027105f21748a8ee09394eeba70a01ae1a2e41"}, {0xd8, 0x3e64971b82887db4, 0x497, "8eb7a1e017d9da538a673a0033dd96262a359065f16701e82f9b9ac1b2e5c8611d6ce83351e6f443dda0207694eda737c30869dca5d0f5ae37957953eb486e55aa5d657aa97bce89afe67f69468ea6cc6641abee3a3dbd44e03149d6c5554e4502fd9e7c5d12828c82b38f3e669c43bc38ef3cd11baebabe02cab74c49693402a4153a259080f4f1192fe79cc05bee137c0f80f8efd44b64b5fb9656b6c27e7b766fe41a1aff8c95601b86a5a8c423756b804e5d9dc309c6799f7b40c53bae3a81031d8c"}, {0xe0, 0x113, 0x4, "8f66e9f9df082c78d2e9389ae28ef0fe1877e52568a76a2642ffaf21fbdf5a78b174bec6897e07e5e5098f77aba2aff94e49318bc647e39b1c64711943f6d051a4e3c9293aaa04781c8175cf351fa9997f783b7fe65a4416f5a1f4c01237e42d17e0a69a0b1756b0eef9834ef7faaa72e8f517fa3b2115862048d2a30f95d9cfec6aae0d3c9228e2125e720920dd30c1c962e2e9d12763490228ea307bc1f0dfd088003288d5a4a85794019d44e037fc013ad7ac799fd61fd1338a8731e7747c256935081e36eb60f6a5b8172b0548"}, {0x18, 0x84, 0x4, "faba5703"}, {0xd8, 0x110, 0x1, "0de5cc1ffd96a9c987f690fc4d13dcfde28b2cc1a2627b1ceb92bb901fb03509018d2d2e29b12e9239dccf1f9f74e61e554a9e70d2f92d34e95135bd55dd024d4e98c0926fca793e1e353563d5535b24fa71cf9e0c41eac2f23273a36b626ea8b2a40bdf83f85f9531aa8773afd2b2ef360b6e6fcc40e870ec508ba09003fc7dfc410d046f03069e3ee218a0fe2f9f59dc03bc9de3a1b573970f453c5b3cd2722b443ba0b0fcf8947b2250ed536b02369dc6ad0954bbc6e8f398724ec28f653132c485f22d"}], 0x320}, 0x40000810) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xffff, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'batadv0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg$inet(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000004c0)="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", 0x28b}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000002c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994ad6f6c9d158487301ef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xbc}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}, {{&(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000980)="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", 0x121}, {&(0x7f0000000100)="49c274c5fc8e21a738b161ef20ff597e18c777c2e3f445b0540427a41c09150e9d209e9b79", 0x25}, {&(0x7f0000000380)="0a615cdb002d9dccd4a4631e00cccb9193c7dbf6b80ff52cf977ff2562f1775797fa61f49cac71af04e1d29973f3cdcc8616476215584d1222a9b677c05724b7fa7a49f22dd9c47832f38f080559fd3fb9dc0f3c13898a13480757abf759b48dda88383ca39e6a812936055dbdcc487e468df57761c5125b88a26d468b20db56a13565e64233d13f6c3fe6c4ad98bb788773d41b65db1cc79c7f982bebc6545c0c4027a6ac612b8d67d4c13d358a0f996a9674d6f00f34fd1d9190ee918c2fb2d8a0132168c1a86957513562cd6933b47198d19b75352cd451ece16855e25d4f331236f0f5bfed8069e26f3138eac301634dc4c06b83af3344", 0xf9}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/317, @ANYRES32=r8, @ANYBLOB="ac1414bb7f0000010000000011000000000000000000000001000000010000000000000040000000000000000000000007000000070ffbac1414bb7f000001e000000294040000940401008617ffffffff000391060e448739cc5885e716130c3c9f0000"], 0x128}}, {{&(0x7f0000000940)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004140), 0x0, &(0x7f0000004180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x100}}], 0x3, 0x0) 702.350446ms ago: executing program 0 (id=1472): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x810) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e6576650000540002800500040001000000050009000000000005000900000000000500080000"], 0x94}}, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x0, 0x340, 0x120, 0x120, 0x340, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bridge0\x00', 'veth1_vlan\x00', {}, {0xff}}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x1f, @ipv6=@empty, 0x4e22}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [0x0, 0x0, 0x0, 0xff000000], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9b, 0x4, 0x9, 0x4, 0x3, 0x1000, 0x3, 0x9]}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'pimreg\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team_slave_0\x00', {0x1, 0x7, 0x7, 0x2, 0xb, 0x1, 0x5}, {0x400}}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) close(r2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000040)="f9c073436aee94c69ae4db66036c9f9631cb00a03fa06d4590120db70e4fb1e6fa4f9564f958313689f51fabd2dc249b9c1017af5232c80ec2fbfd8e63936754f4ba8f8c8bc530d57a8c5d3aa788e946456755eadbf282927f407bdbbf07131df1ba00", &(0x7f00000000c0)=""/3, 0x4}, 0x20) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f00000000c0)=ANY=[], 0x141) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r8, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1, 0x80, 0x0, 0x1, 0x1}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x10, &(0x7f0000000240)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000340)='syzkaller\x00', 0x4, 0xb, &(0x7f0000000380)=""/11, 0x41000, 0x48, '\x00', r8, @fallback=0x13, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x5, 0xffff8d79}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[r4, r3, r4, r4, r6, r6], &(0x7f0000000440)=[{0x0, 0x5, 0x2, 0xc}, {0x5, 0x5, 0x5, 0x4}, {0x4, 0x4, 0x4}, {0x4, 0x1, 0x3, 0x2}], 0x10, 0x5}, 0x94) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r5, 0x0, 0x0, 0x4000080) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r9, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x40002100) 613.601413ms ago: executing program 2 (id=1473): r0 = socket(0xa, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000040000000000000000000003000000000400000003000000bf0000000000000000000004d778dc0000000002000000000000080200000000006108252b27a74978f4"], 0x0, 0x4c}, 0x28) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x100, 0x2, 0x2, 0x81, 0x1fd, 0x5, 0x1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r4) accept4(r3, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0xfffffffffffffe88) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x23, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) close(0x3) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000440)={&(0x7f0000000880)={0x1d, r9}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{0x0, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "4c1ea5382b20f15c"}, 0x66}, 0x1, 0x0, 0x0, 0x2004c880}, 0x20000041) 590.77864ms ago: executing program 1 (id=1474): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c040}, 0x44000) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000140)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f0000000180)='{(\\\\\x00', 0x20002, &(0x7f00000001c0)={@align=0x3, {0x3, 0x9, 0x1}}, 0x4, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)}, 0x1, &(0x7f00000003c0)=[{0x1, 0x1, &(0x7f0000000280)='wlan1\x00', &(0x7f00000002c0)="4001805f4bb3a77c37b72565669e7b30609a2c1d628dab7ed20a249a114dda88f5e25fed440dfc895f9badec5a92e72c8216a014d9c3c399e3a68eb0c9432da921a4dbd0319e9fdc31e3c97a4917f002a4e3f5c26ab2415be47815105e4bed39bd17282b83842662c2911279d04acf398c6b5415ab8b31c5bd025d90d427cee28c7005cdb19f3c5082beb7ab819c82548f7f5cbb0390e0c1bfed9243d8a6e063ea64bdf8cb3e0d71f179ec65d0b651d8e455af1f4c0c939ff71f4b12927804410247339d5de9352f4075cc74d2c2775e7e5414", 0xd3, 0x38}]}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000480)={'veth1_to_batadv\x00', @local}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f00000004c0)={0x1, 'batadv_slave_1\x00', {}, 0x8}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x8, 0x2, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x700, 0x48, 0x4b9f, 0x36e1}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2d}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8120}, 0x44805) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000840)={'bond0\x00', @random="bb57385fd742"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000880)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x98, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x15c, 0x14, 0x100, 0x70bd27, 0x25dfdbfc, {0x3, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "22a90ef67f7ef8b8dce885fa6f3271cf9693c78b7c948c541277970e9d96a8909b76d7b202802efcbe57a46dde53e266a8d28fe51ae980d70795b04c6b8153610147154ee0c8db4a5922"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "3c082516759c255035f018ae0edea93ee1189dd56f1000f2bff031f8b8cf5fcaa0c163661fb1b3f6ee4a2a9058c2df8ae00b5831094f78baf48fd7ef10a4526144eb5b276fc968a08535953251b81334b67f21692b4d4ff3fc321907ac82704df136027edcc6a3a41bc76663ea77479ee0473469"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "da183712703051cb0a8ec76693efd3531a258c64534ae810240ca8bf8880e0406e2a86f5a1070e5580179dbe06606898070300cb94ad76cae8e6a169f77cc0af61a92a130a29046fa316fa70c403aab99ca0da9c71fb6e44180cc399d7fcced958b7bcae014e2107e34a4ad3aa2fbdd82ed890cab58acc95714c2468"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004}, 0xc009) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, 0x1406, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000804) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r2) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r7, &(0x7f0000001680)=[{{&(0x7f0000000f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/163, 0xa3}, {&(0x7f0000001080)=""/64, 0x40}], 0x2}, 0x4}, {{&(0x7f0000001100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001180)=""/221, 0xdd}, {&(0x7f0000001280)=""/23, 0x17}, {&(0x7f00000012c0)=""/69, 0x45}], 0x3, &(0x7f0000001380)=""/228, 0xe4}, 0x8}, {{&(0x7f0000001480)=@qipcrtr, 0x80, &(0x7f0000001540)=[{&(0x7f0000001500)=""/2, 0x2}], 0x1, &(0x7f0000001580)=""/193, 0xc1}, 0x2}], 0x3, 0x0, &(0x7f0000001740)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000001780)=0x2, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001800), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001840)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008044) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000019c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001a00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10002200}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, r12, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000001b40)={0x2, [0x0, 0x0]}, &(0x7f0000001b80)=0xc) 394.219735ms ago: executing program 0 (id=1475): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021008000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a00)=ANY=[@ANYBLOB="0000000000008000280012800a00010076786c616e00", @ANYBLOB="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", @ANYBLOB="500000001000010425bbe5ad600027842cf52300"], 0x50}}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="6e58c795fb08c76503c7a3efd34c28ff0b3b94aa", 0x14}], 0x1}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000540000000051400030076657468315f6d6163767461700000000900010073797a31"], 0x160}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000340)="8ecd25f2", 0x4}], 0x1}, 0x0) recvmsg$unix(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe800000000000000000f3ffffff00aaff020000000000000000000000000001042088be120000030c000800050086dd88a888be000000021609660501000000000088a89c0022eb000200002009f0080200000000000002000494030800655800000002592845e974dec8ee3f72972617c833b7623e7f0b34198b3a7529f89d09283ebd10bc48e876d403372f8ca2030f32e503c5453e8c16"], 0xfdef) 321.008282ms ago: executing program 3 (id=1476): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @local, 0x5}, 0x1c) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffb, 0x8}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000800)={{r0, &(0x7f00000006c0)='\x00', 0x212001, &(0x7f0000000700)={@_ha_fsid={[0x0, 0x7]}, {0xfff, 0x8, 0x4, 0x8}}, 0x40, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x2d}, {[0x7fff, 0x5421, 0x9c, 0x1000]}, 0x2, 0x31, &(0x7f00000007c0)=""/49}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x82, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pS \x00'}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000ac0)={r0, &(0x7f00000009c0)='+\x00', 0x90080, &(0x7f0000000a00)={@align=0x9, {0x1, 0x200, 0x1, 0x8}}, 0x6, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0x6}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x0, 0x1, 0x9669, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x40, 0x6, 0x2, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa228a472c795fb42}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x5890, 0xfe, &(0x7f0000000480)=""/254, 0x40f00, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xd, 0x5, 0x723c}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[r2, r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000bc0)=[{0x3, 0x1, 0x7, 0x5}, {0x5, 0x1, 0xe, 0xb}, {0x0, 0x2, 0xc, 0x6}, {0x3, 0x5, 0xc, 0x2}], 0x10, 0x2}, 0x94) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x34, [{}, {}, {}, {}]}, 0x68) r11 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r11, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018020000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 121.140006ms ago: executing program 4 (id=1477): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) 359.938µs ago: executing program 2 (id=1478): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000280), &(0x7f0000000500)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800090328bd7000000000000a0002000000000004000b000800410001000000"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 0s ago: executing program 3 (id=1479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000000000c02000000000000000100000d0100000000000000000000000000005f"], 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="e2ffffffff4df786ffffffd30000", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) kernel console output (not intermixed with test programs): .647748][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.658895][ T812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.761698][ T5849] netlink: 316 bytes leftover after parsing attributes in process `syz.1.9'. [ 94.803441][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.816748][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.931529][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.949229][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.048354][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.083053][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.294464][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.295963][ T5858] hsr0: entered promiscuous mode [ 95.311451][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.373023][ T5863] syzkaller0: entered promiscuous mode [ 95.394978][ T5863] syzkaller0: entered allmulticast mode [ 95.549545][ T5868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.696543][ T5860] hsr0: left promiscuous mode [ 95.761206][ T5870] Bluetooth: MGMT ver 1.23 [ 96.874176][ T5907] hsr0: entered promiscuous mode [ 97.139318][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 97.263897][ T5923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27'. [ 97.528010][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 97.601302][ T5931] tipc: Started in network mode [ 97.616726][ T5931] tipc: Node identity 7a613a4c6321, cluster identity 4711 [ 97.627008][ T5931] tipc: Enabled bearer , priority 0 [ 97.646057][ T5931] syzkaller0: entered promiscuous mode [ 97.660173][ T5931] syzkaller0: entered allmulticast mode [ 97.686234][ T5931] bridge0: mtu less than device minimum [ 97.715714][ T5930] tipc: Resetting bearer [ 97.793053][ T5930] tipc: Disabling bearer [ 98.178659][ T5952] x_tables: duplicate underflow at hook 1 [ 98.481019][ T5965] xt_ipcomp: unknown flags 1D [ 98.585355][ T5973] netlink: 'syz.1.41': attribute type 3 has an invalid length. [ 98.757508][ T5973] block nbd1: NBD_DISCONNECT [ 99.203420][ T5989] syz_tun: entered allmulticast mode [ 99.490618][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.49'. [ 99.625948][ T5994] veth1_macvtap: left promiscuous mode [ 99.640888][ T5994] macsec0: entered allmulticast mode [ 99.667324][ T6005] veth1_macvtap: entered promiscuous mode [ 99.699825][ T6005] veth1_macvtap: entered allmulticast mode [ 99.710587][ T6005] macsec0: left allmulticast mode [ 99.725012][ T6005] veth1_macvtap: left allmulticast mode [ 99.838145][ T6013] Zero length message leads to an empty skb [ 99.863943][ T6014] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.54'. [ 100.164124][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.407504][ T6019] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 100.451632][ T5988] syz_tun: left allmulticast mode [ 100.643797][ T6037] netlink: 'syz.2.58': attribute type 4 has an invalid length. [ 100.669789][ T6037] netlink: 17 bytes leftover after parsing attributes in process `syz.2.58'. [ 101.236276][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 101.264104][ T6065] nbd: device at index 2 is going down [ 101.862976][ T6093] openvswitch: netlink: Key type 142 is out of range max 32 [ 101.884042][ T5730] udevd[5730]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 101.949097][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.958377][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.007687][ T6093] bridge0: entered allmulticast mode [ 102.064970][ T6099] bridge_slave_1: left allmulticast mode [ 102.086271][ T6099] bridge_slave_1: left promiscuous mode [ 102.120342][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.263537][ T6099] bridge_slave_0: left allmulticast mode [ 102.284535][ T6099] bridge_slave_0: left promiscuous mode [ 102.317463][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.432413][ T6113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.593449][ T6101] tun0: tun_chr_ioctl cmd 1074025675 [ 102.610967][ T6101] tun0: persist enabled [ 102.635965][ T6095] tun0: tun_chr_ioctl cmd 1074025675 [ 102.651073][ T6095] tun0: persist disabled [ 102.910501][ T6123] sock: sock_timestamping_bind_phc: sock not bind to device [ 103.206177][ T6133] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 103.286019][ T6139] syz.4.80 (6139) used obsolete PPPIOCDETACH ioctl [ 103.356101][ T6145] netlink: 14 bytes leftover after parsing attributes in process `syz.1.78'. [ 103.804007][ T6154] sock: sock_set_timeout: `syz.1.83' (pid 6154) tries to set negative timeout [ 103.970855][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 104.035856][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 104.151676][ T6147] syz.2.81 (6147) used greatest stack depth: 17608 bytes left [ 104.488492][ T6188] netlink: 'syz.0.89': attribute type 32 has an invalid length. [ 104.499090][ T6188] warning: `syz.0.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.523489][ T6188] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 105.087091][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'. [ 105.120707][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'. [ 105.133849][ T6207] --map-set only usable from mangle table [ 105.141489][ T6208] netlink: 60 bytes leftover after parsing attributes in process `syz.3.95'. [ 105.166088][ T6206] netlink: 'syz.1.93': attribute type 6 has an invalid length. [ 105.193455][ T6206] netlink: 72 bytes leftover after parsing attributes in process `syz.1.93'. [ 105.236613][ T6214] netlink: 52 bytes leftover after parsing attributes in process `syz.2.94'. [ 105.353801][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.363294][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.408296][ T6208] syzkaller0: entered promiscuous mode [ 105.437039][ T6208] syzkaller0: entered allmulticast mode [ 105.625566][ T6226] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 105.901081][ T6234] netlink: 'syz.1.101': attribute type 11 has an invalid length. [ 105.953351][ T6239] netlink: 188 bytes leftover after parsing attributes in process `syz.1.101'. [ 105.989487][ T6241] tipc: Can't bind to reserved service type 2 [ 106.002327][ T6230] syz_tun: entered promiscuous mode [ 106.019085][ T6230] vlan0: entered promiscuous mode [ 106.091843][ T6232] netlink: 5000 bytes leftover after parsing attributes in process `syz.3.100'. [ 106.112274][ T6232] openvswitch: netlink: Flow key attr not present in new flow. [ 106.247434][ T6247] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 106.357869][ T6254] trusted_key: syz.4.106 sent an empty control message without MSG_MORE. [ 106.414912][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 106.537289][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 106.550926][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 107.170841][ T6276] netlink: 'syz.3.108': attribute type 16 has an invalid length. [ 107.309362][ T6278] syzkaller0: entered promiscuous mode [ 107.334026][ T6278] syzkaller0: entered allmulticast mode [ 107.546848][ T6285] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 108.784118][ T6319] x_tables: duplicate underflow at hook 2 [ 109.127865][ T6329] syzkaller0: entered promiscuous mode [ 109.145964][ T6329] syzkaller0: entered allmulticast mode [ 109.600128][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.655403][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.588940][ T6382] __nla_validate_parse: 11 callbacks suppressed [ 110.588961][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 110.655642][ T6382] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 110.657647][ T6388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.139'. [ 110.713706][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 110.725744][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'. [ 110.778790][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'. [ 110.790466][ T6383] syzkaller0: entered promiscuous mode [ 110.814603][ T6383] syzkaller0: entered allmulticast mode [ 111.112869][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 111.128748][ T6400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.142'. [ 111.471263][ T6408] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 111.581150][ T6409] netlink: 'syz.2.144': attribute type 16 has an invalid length. [ 111.672054][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 111.698506][ T6408] bond1: entered promiscuous mode [ 111.704733][ T6408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.913234][ T6409] bond1: (slave bridge1): making interface the new active one [ 111.924871][ T6409] bridge1: entered promiscuous mode [ 111.939348][ T6409] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 112.327999][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 112.366188][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 112.508694][ T6439] geneve2: entered promiscuous mode [ 112.523562][ T33] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.542059][ T33] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.577246][ T33] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.619132][ T33] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.985913][ T6469] syzkaller0: entered promiscuous mode [ 113.006166][ T6469] syzkaller0: entered allmulticast mode [ 115.355043][ T6434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.597318][ T6483] xt_hashlimit: max too large, truncated to 1048576 [ 115.820990][ T6497] __nla_validate_parse: 6 callbacks suppressed [ 115.821026][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 115.873705][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 115.894947][ T6496] netlink: 'syz.4.168': attribute type 39 has an invalid length. [ 116.223727][ T6508] geneve2: entered promiscuous mode [ 116.238874][ T5638] block nbd0: Receive control failed (result -32) [ 116.264006][ T6516] netlink: 'syz.0.172': attribute type 21 has an invalid length. [ 116.303278][ T6516] netlink: 128 bytes leftover after parsing attributes in process `syz.0.172'. [ 116.312637][ T6516] netlink: 3 bytes leftover after parsing attributes in process `syz.0.172'. [ 116.392960][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 116.446124][ T5363] IPVS: starting estimator thread 0... [ 116.549867][ T6523] IPVS: using max 26 ests per chain, 62400 per kthread [ 116.654348][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 116.977211][ T6525] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 117.098325][ T6525] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 117.523821][ T6527] hsr0: left promiscuous mode [ 117.618061][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.627602][ T6527] geneve2: left promiscuous mode [ 117.717558][ T9] IPVS: starting estimator thread 0... [ 117.820207][ T6567] IPVS: using max 25 ests per chain, 60000 per kthread [ 117.964369][ T6569] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 118.035140][ T6577] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 118.053270][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 118.091313][ T6578] Bluetooth: MGMT ver 1.23 [ 118.369571][ T6591] netlink: 'syz.0.190': attribute type 3 has an invalid length. [ 118.405693][ T6591] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 118.445153][ T6591] netlink: 196 bytes leftover after parsing attributes in process `syz.0.190'. [ 118.484985][ T6591] NCSI netlink: No device for ifindex 2147483648 [ 118.681069][ T6601] netlink: 104 bytes leftover after parsing attributes in process `syz.2.193'. [ 118.749422][ T6600] syzkaller0: entered promiscuous mode [ 118.765947][ T6600] syzkaller0: entered allmulticast mode [ 119.440155][ T6616] hsr0: entered promiscuous mode [ 119.476284][ T6621] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.201'. [ 119.504468][ T6621] netlink: ct family unspecified [ 119.588273][ T6616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 119.637708][ T6626] netlink: 'syz.0.200': attribute type 2 has an invalid length. [ 120.509205][ T6645] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.534670][ T6645] syzkaller0: entered promiscuous mode [ 120.540416][ T6645] syzkaller0: entered allmulticast mode [ 120.613920][ T6614] hsr0: left promiscuous mode [ 137.921626][ T6709] netlink: 280 bytes leftover after parsing attributes in process `syz.1.221'. [ 138.305740][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'. [ 138.682960][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 138.721009][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 138.741479][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 138.766556][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 139.428897][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 139.546412][ T6733] bond1: left promiscuous mode [ 139.555553][ T6733] bridge1: left promiscuous mode [ 139.565370][ T10] IPVS: starting estimator thread 0... [ 139.583642][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 139.680773][ T6755] IPVS: using max 27 ests per chain, 64800 per kthread [ 139.844398][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 139.866546][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 139.994923][ T6770] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 140.243198][ T6774] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 140.434174][ T6780] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.515782][ T6780] bond1: (slave lo): Enslaving as an active interface with an up link [ 140.538980][ T6780] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 141.164169][ T6807] netlink: 'syz.4.252': attribute type 3 has an invalid length. [ 141.177773][ T6802] syzkaller0: entered promiscuous mode [ 141.198662][ T6802] syzkaller0: entered allmulticast mode [ 141.455666][ T6817] tipc: Started in network mode [ 141.487056][ T6817] tipc: Node identity be2cc3476cda, cluster identity 4711 [ 141.505325][ T6817] tipc: Enabled bearer , priority 0 [ 141.541104][ T6821] syzkaller0: entered promiscuous mode [ 141.553697][ T6824] openvswitch: netlink: Duplicate key (type 3). [ 141.562872][ T6821] syzkaller0: entered allmulticast mode [ 141.685178][ T6817] tipc: Resetting bearer [ 142.007469][ T6834] netlink: 'syz.1.258': attribute type 4 has an invalid length. [ 142.031464][ T6834] netlink: 'syz.1.258': attribute type 4 has an invalid length. [ 142.185718][ T6815] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 142.206696][ T6816] tipc: Resetting bearer [ 142.256727][ T6816] tipc: Disabling bearer [ 142.432964][ T6839] Cannot find set identified by id 0 to match [ 142.532988][ T6853] netlink: 'syz.2.263': attribute type 11 has an invalid length. [ 142.763493][ T6863] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 142.794323][ T6858] vlan2: entered allmulticast mode [ 142.820730][ T6858] bond0: entered allmulticast mode [ 142.841992][ T6858] bond_slave_0: entered allmulticast mode [ 142.861036][ T6858] bond_slave_1: entered allmulticast mode [ 143.005565][ T6865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.053044][ T6865] bond_slave_0: left allmulticast mode [ 143.081596][ T6865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.121428][ T6865] bond_slave_1: left allmulticast mode [ 143.139808][ T6865] bond0 (unregistering): Released all slaves [ 143.389497][ T6884] __nla_validate_parse: 4 callbacks suppressed [ 143.389519][ T6884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.272'. [ 143.416583][ T5638] Bluetooth: hci3: command 0x0405 tx timeout [ 143.422769][ T6884] netlink: 47 bytes leftover after parsing attributes in process `syz.3.272'. [ 143.422809][ T6884] netlink: 'syz.3.272': attribute type 6 has an invalid length. [ 143.422840][ T6884] netlink: 'syz.3.272': attribute type 6 has an invalid length. [ 143.732183][ T6901] syzkaller0: entered promiscuous mode [ 143.756505][ T6901] syzkaller0: entered allmulticast mode [ 143.850027][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.278'. [ 143.968339][ T6905] ip6gre1: entered promiscuous mode [ 144.023806][ T6905] ip6gre1: entered allmulticast mode [ 144.055857][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 144.108040][ T6922] openvswitch: netlink: Message has 4 unknown bytes. [ 144.121033][ T6923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.134896][ T6922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.445402][ T6918] macvtap1: entered allmulticast mode [ 144.452002][ T6918] dummy0: entered allmulticast mode [ 144.459007][ T6918] dummy0: entered promiscuous mode [ 144.516978][ T6919] macvtap2: entered allmulticast mode [ 144.568985][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.616627][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.748563][ T6976] netlink: 'syz.3.297': attribute type 11 has an invalid length. [ 145.779139][ T6976] lo: entered allmulticast mode [ 145.785151][ T6976] tunl0: entered allmulticast mode [ 145.792871][ T6976] gre0: entered allmulticast mode [ 145.798725][ T6976] gretap0: entered allmulticast mode [ 145.805306][ T6976] erspan0: entered allmulticast mode [ 145.812053][ T6976] ip_vti0: entered allmulticast mode [ 145.818212][ T6976] ip6_vti0: entered allmulticast mode [ 145.823935][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 145.838203][ T6976] sit0: entered allmulticast mode [ 145.844775][ T6976] ip6tnl0: entered allmulticast mode [ 145.851107][ T6976] ip6gre0: entered allmulticast mode [ 145.857191][ T6976] syz_tun: entered allmulticast mode [ 145.870126][ T6976] ip6gretap0: entered allmulticast mode [ 145.884593][ T6976] vcan0: entered allmulticast mode [ 145.906302][ T6979] netlink: 183628 bytes leftover after parsing attributes in process `syz.0.296'. [ 145.919057][ T6976] bond0: entered allmulticast mode [ 145.930291][ T6976] bond_slave_0: entered allmulticast mode [ 145.937090][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'. [ 145.957637][ T6976] bond_slave_1: entered allmulticast mode [ 145.978761][ T6976] team0: entered allmulticast mode [ 145.986851][ T6976] team_slave_0: entered allmulticast mode [ 145.994203][ T6976] team_slave_1: entered allmulticast mode [ 146.001361][ T6976] dummy0: entered allmulticast mode [ 146.008676][ T6976] nlmon0: entered allmulticast mode [ 146.015177][ T6976] batadv0: entered allmulticast mode [ 146.021863][ T6976] vxcan0: entered allmulticast mode [ 146.027811][ T6976] vxcan1: entered allmulticast mode [ 146.034826][ T6976] veth0: entered allmulticast mode [ 146.042046][ T6976] veth1: entered allmulticast mode [ 146.048100][ T6976] wg0: entered allmulticast mode [ 146.055023][ T6976] wg1: entered allmulticast mode [ 146.062264][ T6976] wg2: entered allmulticast mode [ 146.076617][ T6976] veth0_to_bridge: entered allmulticast mode [ 146.090555][ T6976] bridge_slave_0: entered allmulticast mode [ 146.116568][ T6976] veth1_to_bridge: entered allmulticast mode [ 146.136001][ T6976] bridge_slave_1: entered allmulticast mode [ 146.152870][ T6976] veth0_to_bond: entered allmulticast mode [ 146.176922][ T6976] veth1_to_bond: entered allmulticast mode [ 146.193931][ T6976] veth0_to_team: entered allmulticast mode [ 146.207820][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 146.218744][ T6976] veth1_to_team: entered allmulticast mode [ 146.231617][ T6976] veth1_to_batadv: entered allmulticast mode [ 146.239114][ T6976] batadv_slave_1: entered allmulticast mode [ 146.248405][ T6976] xfrm0: entered allmulticast mode [ 146.257098][ T6976] veth0_to_hsr: entered allmulticast mode [ 146.264862][ T6976] hsr_slave_0: entered allmulticast mode [ 146.273167][ T6976] veth1_to_hsr: entered allmulticast mode [ 146.281902][ T6976] hsr_slave_1: entered allmulticast mode [ 146.293605][ T6976] hsr0: entered allmulticast mode [ 146.301510][ T6976] veth1_virt_wifi: entered allmulticast mode [ 146.308356][ T6976] veth0_virt_wifi: entered allmulticast mode [ 146.320208][ T6976] virt_wifi0: entered allmulticast mode [ 146.331477][ T6976] veth1_vlan: entered allmulticast mode [ 146.338889][ T6976] veth0_vlan: entered allmulticast mode [ 146.348160][ T6976] vlan0: entered allmulticast mode [ 146.355283][ T6976] vlan1: entered allmulticast mode [ 146.363246][ T6976] macvlan0: entered allmulticast mode [ 146.371904][ T6976] macvlan1: entered allmulticast mode [ 146.378574][ T6976] ipvlan0: entered allmulticast mode [ 146.397806][ T6976] ipvlan1: entered allmulticast mode [ 146.411009][ T6976] veth1_macvtap: entered allmulticast mode [ 146.419050][ T6976] veth0_macvtap: entered allmulticast mode [ 146.429294][ T6976] macvtap0: entered allmulticast mode [ 146.437368][ T6976] macsec0: entered allmulticast mode [ 146.447028][ T6976] geneve0: entered allmulticast mode [ 146.455784][ T6976] geneve1: entered allmulticast mode [ 146.463882][ T6976] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 146.475768][ T6976] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 146.487925][ T6976] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 146.499041][ T6976] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 146.508720][ T6976] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 146.521053][ T6976] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 146.533531][ T6976] ieee802154 phy0 wpan0: entered allmulticast mode [ 146.543434][ T6976] veth2: entered allmulticast mode [ 146.552546][ T6976] veth3: entered allmulticast mode [ 146.562717][ T6976] bridge0: entered allmulticast mode [ 146.571998][ T6976] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 146.581808][ T6976] ipvlan2: entered allmulticast mode [ 146.599568][ T6976] bond1: entered allmulticast mode [ 146.606593][ T6976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.615458][ T6976] bridge1: entered allmulticast mode [ 146.624075][ T6976] mac80211_hwsim hwsim8 s: entered allmulticast mode [ 146.655695][ T6978] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 147.345607][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.307'. [ 147.616894][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 147.719124][ T7021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.875017][ T7025] batman_adv: batadv0: Adding interface: macvtap3 [ 147.899245][ T7025] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.960991][ T7025] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 148.371370][ T7038] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 148.583546][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.716085][ T7047] bond0: (slave ip6gretap1): making interface the new active one [ 148.761962][ T7047] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.846258][ T7053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.335028][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 149.628776][ T7067] bond2: entered promiscuous mode [ 149.658056][ T7067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.771063][ T7069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.796768][ T7069] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 149.809994][ T7069] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 150.185869][ T7055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.315'. [ 150.994545][ T7087] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 151.356358][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 151.473534][ T7128] netlink: 3 bytes leftover after parsing attributes in process `syz.0.328'. [ 151.589104][ T7136] Cannot find del_set index 1 as target [ 152.082445][ T7128] 0ªX¹¦À: renamed from batadv0 (while UP) [ 152.147512][ T7128] 0ªX¹¦À: entered allmulticast mode [ 152.160495][ T7128] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 152.209741][ T5638] Bluetooth: hci0: command 0x0c20 tx timeout [ 152.624940][ T7155] netlink: 'syz.0.333': attribute type 11 has an invalid length. [ 152.828755][ T7159] batadv_slave_1: entered promiscuous mode [ 152.856578][ T7159] netlink: 44 bytes leftover after parsing attributes in process `syz.3.334'. [ 152.909391][ T7163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 152.941498][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.334'. [ 153.019075][ T7158] batadv_slave_1: left promiscuous mode [ 153.382022][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.336'. [ 153.860686][ T7185] syzkaller0: entered promiscuous mode [ 153.884649][ T7185] syzkaller0: entered allmulticast mode [ 154.528682][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 154.986201][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 155.145862][ T7246] vlan0: entered allmulticast mode [ 155.171599][ T7250] netlink: 14 bytes leftover after parsing attributes in process `syz.2.353'. [ 155.200274][ T7246] bond0: entered allmulticast mode [ 155.213825][ T7246] bond_slave_0: entered allmulticast mode [ 155.239295][ T7246] bond_slave_1: entered allmulticast mode [ 155.434359][ T7250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.475280][ T7250] bond_slave_0: left allmulticast mode [ 155.498231][ T7250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.530146][ T7250] bond_slave_1: left allmulticast mode [ 155.557200][ T7250] bond0 (unregistering): Released all slaves [ 155.948977][ T7274] erspan0: entered promiscuous mode [ 155.965245][ T7274] vlan2: entered promiscuous mode [ 156.315900][ T7281] netlink: zone id is out of range [ 156.631890][ T7296] netlink: 'syz.1.364': attribute type 13 has an invalid length. [ 156.662127][ T7296] netlink: 'syz.1.364': attribute type 17 has an invalid length. [ 156.779540][ T7299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.793592][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.801699][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.827195][ T7299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.003056][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 157.035671][ T7305] xt_CT: No such helper "syz0" [ 157.202233][ T7305] xt_CT: No such helper "syz0" [ 157.223185][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.270807][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.486593][ T7305] xt_CT: No such helper "syz0" [ 157.626550][ T7305] xt_CT: No such helper "syz0" [ 157.660881][ T7305] xt_CT: No such helper "syz0" [ 157.808434][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.829456][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.870199][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.025858][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.033329][ T7296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.084134][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'. [ 158.102459][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.109732][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.208778][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.266096][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.335619][ T7296] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 158.479083][ T47] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.527037][ T47] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.589735][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.654702][ T7331] gretap0: left allmulticast mode [ 158.696313][ T7331] netlink: 136 bytes leftover after parsing attributes in process `syz.3.368'. [ 158.743255][ T7331] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 158.858115][ T47] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.926509][ T7346] FAULT_INJECTION: forcing a failure. [ 158.926509][ T7346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.983763][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.1.370 Not tainted syzkaller #0 PREEMPT(full) [ 158.983793][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.983814][ T7346] Call Trace: [ 158.983826][ T7346] [ 158.983844][ T7346] dump_stack_lvl+0xe8/0x150 [ 158.983885][ T7346] should_fail_ex+0x412/0x560 [ 158.983920][ T7346] _copy_from_user+0x2d/0xb0 [ 158.983954][ T7346] ___sys_recvmsg+0x175/0x590 [ 158.983985][ T7346] ? __pfx____sys_recvmsg+0x10/0x10 [ 158.984015][ T7346] ? __fget_files+0x2a/0x420 [ 158.984077][ T7346] do_recvmmsg+0x334/0x800 [ 158.984112][ T7346] ? __pfx_do_recvmmsg+0x10/0x10 [ 158.984148][ T7346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.984190][ T7346] __x64_sys_recvmmsg+0x198/0x250 [ 158.984218][ T7346] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 158.984253][ T7346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.984276][ T7346] do_syscall_64+0x15f/0xf80 [ 158.984296][ T7346] ? trace_irq_disable+0x3b/0x140 [ 158.984328][ T7346] ? clear_bhb_loop+0x40/0x90 [ 158.984353][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.984375][ T7346] RIP: 0033:0x7f046219ce59 [ 158.984404][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.984426][ T7346] RSP: 002b:00007f04630d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 158.984452][ T7346] RAX: ffffffffffffffda RBX: 00007f0462416090 RCX: 00007f046219ce59 [ 158.984467][ T7346] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 158.984481][ T7346] RBP: 00007f04630d0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.984493][ T7346] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 158.984505][ T7346] R13: 00007f0462416128 R14: 00007f0462416090 R15: 00007fff70c17cb8 [ 158.984539][ T7346] [ 159.726362][ T7359] netlink: zone id is out of range [ 160.356210][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 160.811904][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 160.874207][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 161.526934][ T7422] netlink: zone id is out of range [ 161.956402][ T7433] netlink: 'syz.1.389': attribute type 7 has an invalid length. [ 164.163381][ T7434] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 164.271270][ T7456] syzkaller0: entered promiscuous mode [ 164.312239][ T7456] syzkaller0: entered allmulticast mode [ 164.493691][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 164.666733][ T7477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.398'. [ 164.849103][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 164.978101][ T6703] udevd[6703]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 165.148146][ T7497] netlink: zone id is out of range [ 165.482980][ T7505] netlink: 13 bytes leftover after parsing attributes in process `syz.1.408'. [ 165.577345][ T7510] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 166.203532][ T7534] netlink: zone id is out of range [ 166.442310][ T7543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 166.479346][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 166.522398][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'. [ 166.537783][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 166.543824][ T7546] netlink: 'syz.1.419': attribute type 2 has an invalid length. [ 166.559741][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'. [ 166.571229][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 166.633574][ T7546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.419'. [ 166.647882][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 166.665790][ T7552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 166.812279][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.857223][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.969562][ T7568] FAULT_INJECTION: forcing a failure. [ 166.969562][ T7568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.001042][ T7568] CPU: 1 UID: 0 PID: 7568 Comm: syz.1.426 Not tainted syzkaller #0 PREEMPT(full) [ 167.001071][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.001084][ T7568] Call Trace: [ 167.001092][ T7568] [ 167.001101][ T7568] dump_stack_lvl+0xe8/0x150 [ 167.001131][ T7568] should_fail_ex+0x412/0x560 [ 167.001165][ T7568] _copy_from_user+0x2d/0xb0 [ 167.001200][ T7568] ___sys_recvmsg+0x175/0x590 [ 167.001232][ T7568] ? __pfx____sys_recvmsg+0x10/0x10 [ 167.001261][ T7568] ? __fget_files+0x2a/0x420 [ 167.001317][ T7568] do_recvmmsg+0x334/0x800 [ 167.001350][ T7568] ? __pfx_do_recvmmsg+0x10/0x10 [ 167.001387][ T7568] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.001429][ T7568] __x64_sys_recvmmsg+0x198/0x250 [ 167.001457][ T7568] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 167.001491][ T7568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.001514][ T7568] do_syscall_64+0x15f/0xf80 [ 167.001534][ T7568] ? trace_irq_disable+0x3b/0x140 [ 167.001566][ T7568] ? clear_bhb_loop+0x40/0x90 [ 167.001591][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.001612][ T7568] RIP: 0033:0x7f046219ce59 [ 167.001632][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.001649][ T7568] RSP: 002b:00007f04630d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 167.001672][ T7568] RAX: ffffffffffffffda RBX: 00007f0462416090 RCX: 00007f046219ce59 [ 167.001687][ T7568] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 167.001700][ T7568] RBP: 00007f04630d0090 R08: 0000000000000000 R09: 0000000000000000 [ 167.001712][ T7568] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 167.001724][ T7568] R13: 00007f0462416128 R14: 00007f0462416090 R15: 00007fff70c17cb8 [ 167.001757][ T7568] [ 167.393379][ T7577] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 167.500768][ T7584] netlink: zone id is out of range [ 167.552436][ T7589] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 167.730550][ T7596] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 167.859218][ T7596] bond1: entered promiscuous mode [ 167.879287][ T7596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.301606][ T7625] FAULT_INJECTION: forcing a failure. [ 168.301606][ T7625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.334408][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.2.441 Not tainted syzkaller #0 PREEMPT(full) [ 168.334438][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.334451][ T7625] Call Trace: [ 168.334460][ T7625] [ 168.334469][ T7625] dump_stack_lvl+0xe8/0x150 [ 168.334499][ T7625] should_fail_ex+0x412/0x560 [ 168.334534][ T7625] _copy_from_user+0x2d/0xb0 [ 168.334568][ T7625] ___sys_recvmsg+0x175/0x590 [ 168.334600][ T7625] ? __pfx____sys_recvmsg+0x10/0x10 [ 168.334630][ T7625] ? __fget_files+0x2a/0x420 [ 168.334692][ T7625] do_recvmmsg+0x334/0x800 [ 168.334726][ T7625] ? __pfx_do_recvmmsg+0x10/0x10 [ 168.334772][ T7625] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.334815][ T7625] __x64_sys_recvmmsg+0x198/0x250 [ 168.334844][ T7625] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 168.334878][ T7625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.334901][ T7625] do_syscall_64+0x15f/0xf80 [ 168.334922][ T7625] ? trace_irq_disable+0x3b/0x140 [ 168.334954][ T7625] ? clear_bhb_loop+0x40/0x90 [ 168.334980][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.335001][ T7625] RIP: 0033:0x7eff8d59ce59 [ 168.335021][ T7625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.335037][ T7625] RSP: 002b:00007eff8e405028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 168.335060][ T7625] RAX: ffffffffffffffda RBX: 00007eff8d816090 RCX: 00007eff8d59ce59 [ 168.335075][ T7625] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 168.335089][ T7625] RBP: 00007eff8e405090 R08: 0000000000000000 R09: 0000000000000000 [ 168.335101][ T7625] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 168.335112][ T7625] R13: 00007eff8d816128 R14: 00007eff8d816090 R15: 00007ffe0f722b98 [ 168.335146][ T7625] [ 168.966679][ T7645] netlink: zone id is out of range [ 169.072033][ T7647] veth0: entered promiscuous mode [ 169.173446][ T7644] veth0: left promiscuous mode [ 171.695729][ T7634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.943070][ T7696] __nla_validate_parse: 5 callbacks suppressed [ 171.943091][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 172.123308][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 172.178236][ T7709] ip6gre1: entered promiscuous mode [ 172.196329][ T7709] ip6gre1: entered allmulticast mode [ 172.229887][ T7715] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 172.244429][ T7709] netlink: 'syz.0.455': attribute type 6 has an invalid length. [ 172.253993][ T7709] netlink: 72 bytes leftover after parsing attributes in process `syz.0.455'. [ 172.805500][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 172.867726][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 172.900004][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 172.927438][ T7726] netlink: 'syz.1.461': attribute type 11 has an invalid length. [ 173.027121][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 173.028024][ T7668] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.057069][ T7729] tipc: Cannot configure node identity twice [ 173.065350][ T7668] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.078607][ T7668] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.088576][ T7668] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.097897][ T7726] netlink: 'syz.1.461': attribute type 11 has an invalid length. [ 173.459532][ T7745] netlink: zone id is out of range [ 173.612972][ T7747] netlink: 1 bytes leftover after parsing attributes in process `syz.0.467'. [ 174.927379][ T7775] FAULT_INJECTION: forcing a failure. [ 174.927379][ T7775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.951943][ T7775] CPU: 1 UID: 0 PID: 7775 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT(full) [ 174.951973][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.951986][ T7775] Call Trace: [ 174.951994][ T7775] [ 174.952003][ T7775] dump_stack_lvl+0xe8/0x150 [ 174.952038][ T7775] should_fail_ex+0x412/0x560 [ 174.952073][ T7775] _copy_from_user+0x2d/0xb0 [ 174.952107][ T7775] ___sys_sendmsg+0x1c6/0x360 [ 174.952131][ T7775] ? __lock_acquire+0x6b5/0x2cf0 [ 174.952169][ T7775] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.952229][ T7775] ? __fget_files+0x2a/0x420 [ 174.952254][ T7775] ? __fget_files+0x3a0/0x420 [ 174.952290][ T7775] __x64_sys_sendmsg+0x1bd/0x2a0 [ 174.952317][ T7775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.952351][ T7775] ? __pfx_ksys_write+0x10/0x10 [ 174.952391][ T7775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.952414][ T7775] do_syscall_64+0x15f/0xf80 [ 174.952435][ T7775] ? trace_irq_disable+0x3b/0x140 [ 174.952472][ T7775] ? clear_bhb_loop+0x40/0x90 [ 174.952498][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.952519][ T7775] RIP: 0033:0x7f921c39ce59 [ 174.952538][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.952556][ T7775] RSP: 002b:00007f921a5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.952579][ T7775] RAX: ffffffffffffffda RBX: 00007f921c615fa0 RCX: 00007f921c39ce59 [ 174.952594][ T7775] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 174.952606][ T7775] RBP: 00007f921a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 174.952619][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.952631][ T7775] R13: 00007f921c616038 R14: 00007f921c615fa0 R15: 00007fff96088958 [ 174.952664][ T7775] [ 175.480811][ T7784] netlink: zone id is out of range [ 175.776255][ T7798] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 176.059474][ T7810] netlink: 'syz.0.485': attribute type 8 has an invalid length. [ 176.067500][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 176.085447][ T7810] veth1_to_team: entered promiscuous mode [ 176.093135][ T7810] gretap0: entered promiscuous mode [ 176.100008][ T7810] ip6gretap0: entered promiscuous mode [ 176.110528][ T7810] hsr1: entered promiscuous mode [ 176.207432][ T7817] FAULT_INJECTION: forcing a failure. [ 176.207432][ T7817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.221853][ T7817] CPU: 0 UID: 0 PID: 7817 Comm: syz.0.487 Not tainted syzkaller #0 PREEMPT(full) [ 176.221882][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.221895][ T7817] Call Trace: [ 176.221903][ T7817] [ 176.221912][ T7817] dump_stack_lvl+0xe8/0x150 [ 176.221943][ T7817] should_fail_ex+0x412/0x560 [ 176.221989][ T7817] _copy_from_iter+0x4ff/0x1670 [ 176.222031][ T7817] ? __pfx__copy_from_iter+0x10/0x10 [ 176.222063][ T7817] ? __lock_acquire+0x6b5/0x2cf0 [ 176.222109][ T7817] ping_v4_sendmsg+0x293/0x1810 [ 176.222156][ T7817] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 176.222224][ T7817] ? inet_sendmsg+0x14f/0x370 [ 176.222256][ T7817] ? __local_bh_enable_ip+0xd0/0x130 [ 176.222279][ T7817] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.222298][ T7817] ? inet_sendmsg+0x14f/0x370 [ 176.222327][ T7817] ? __local_bh_enable_ip+0xd0/0x130 [ 176.222350][ T7817] ? inet_sendmsg+0x2f4/0x370 [ 176.222385][ T7817] ____sys_sendmsg+0x80a/0x9f0 [ 176.222408][ T7817] ? __might_fault+0xaf/0x130 [ 176.222443][ T7817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.222476][ T7817] ? import_iovec+0x73/0xa0 [ 176.222512][ T7817] ___sys_sendmsg+0x2a5/0x360 [ 176.222533][ T7817] ? __lock_acquire+0x6b5/0x2cf0 [ 176.222561][ T7817] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.222621][ T7817] ? __fget_files+0x2a/0x420 [ 176.222647][ T7817] ? __fget_files+0x3a0/0x420 [ 176.222683][ T7817] __x64_sys_sendmsg+0x1bd/0x2a0 [ 176.222710][ T7817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.222744][ T7817] ? __pfx_ksys_write+0x10/0x10 [ 176.222783][ T7817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.222806][ T7817] do_syscall_64+0x15f/0xf80 [ 176.222825][ T7817] ? trace_irq_disable+0x3b/0x140 [ 176.222857][ T7817] ? clear_bhb_loop+0x40/0x90 [ 176.222884][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.222905][ T7817] RIP: 0033:0x7f921c39ce59 [ 176.222924][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.222941][ T7817] RSP: 002b:00007f921a5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.222963][ T7817] RAX: ffffffffffffffda RBX: 00007f921c615fa0 RCX: 00007f921c39ce59 [ 176.222988][ T7817] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 176.223001][ T7817] RBP: 00007f921a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 176.223013][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.223030][ T7817] R13: 00007f921c616038 R14: 00007f921c615fa0 R15: 00007fff96088958 [ 176.223063][ T7817] [ 177.368368][ T7853] netlink: 312 bytes leftover after parsing attributes in process `syz.1.498'. [ 177.431296][ T7853] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 177.494688][ T7858] FAULT_INJECTION: forcing a failure. [ 177.494688][ T7858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.532935][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.4.500 Not tainted syzkaller #0 PREEMPT(full) [ 177.532963][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.532977][ T7858] Call Trace: [ 177.532985][ T7858] [ 177.532994][ T7858] dump_stack_lvl+0xe8/0x150 [ 177.533029][ T7858] should_fail_ex+0x412/0x560 [ 177.533065][ T7858] _copy_to_user+0x31/0xb0 [ 177.533099][ T7858] simple_read_from_buffer+0xe1/0x170 [ 177.533132][ T7858] proc_fail_nth_read+0x1bb/0x230 [ 177.533164][ T7858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.533194][ T7858] ? rw_verify_area+0x2a6/0x4d0 [ 177.533223][ T7858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.533252][ T7858] vfs_read+0x20c/0xa70 [ 177.533294][ T7858] ? __pfx___mutex_lock+0x10/0x10 [ 177.533318][ T7858] ? __pfx_vfs_read+0x10/0x10 [ 177.533348][ T7858] ? __fget_files+0x2a/0x420 [ 177.533387][ T7858] ? __fget_files+0x3a0/0x420 [ 177.533411][ T7858] ? __fget_files+0x2a/0x420 [ 177.533446][ T7858] ksys_read+0x150/0x270 [ 177.533478][ T7858] ? __pfx_ksys_read+0x10/0x10 [ 177.533517][ T7858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.533540][ T7858] do_syscall_64+0x15f/0xf80 [ 177.533560][ T7858] ? trace_irq_disable+0x3b/0x140 [ 177.533591][ T7858] ? clear_bhb_loop+0x40/0x90 [ 177.533617][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.533637][ T7858] RIP: 0033:0x7fb67d35d68e [ 177.533656][ T7858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.533673][ T7858] RSP: 002b:00007fb67e2d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.533695][ T7858] RAX: ffffffffffffffda RBX: 00007fb67e2d56c0 RCX: 00007fb67d35d68e [ 177.533710][ T7858] RDX: 000000000000000f RSI: 00007fb67e2d50a0 RDI: 0000000000000004 [ 177.533723][ T7858] RBP: 00007fb67e2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 177.533735][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.533746][ T7858] R13: 00007fb67d616038 R14: 00007fb67d615fa0 R15: 00007ffe7b1bf678 [ 177.533780][ T7858] [ 177.865443][ T7861] netlink: 277 bytes leftover after parsing attributes in process `syz.0.501'. [ 177.974436][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 177.993681][ T7863] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 178.017365][ T7867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.502'. [ 178.129949][ T7870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.201211][ T7873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.281267][ T7875] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 178.370147][ T7879] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 178.386070][ T7878] tipc: Started in network mode [ 178.395694][ T7878] tipc: Node identity 6634c9ea232c, cluster identity 4711 [ 178.406004][ T7878] tipc: Enabled bearer , priority 0 [ 178.477928][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 178.572934][ T7879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.716070][ T7893] netlink: 'syz.0.510': attribute type 21 has an invalid length. [ 178.731161][ T7893] netlink: 168 bytes leftover after parsing attributes in process `syz.0.510'. [ 178.749032][ T7878] syzkaller0: entered promiscuous mode [ 178.764745][ T7878] syzkaller0: entered allmulticast mode [ 178.785361][ T7878] tipc: Resetting bearer [ 178.836270][ T7883] bond2: (slave gretap1): making interface the new active one [ 178.886656][ T7883] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 178.915414][ T7885] bond2 (unregistering): (slave gretap1): Releasing active interface [ 178.944227][ T7885] bond2 (unregistering): Released all slaves [ 179.537962][ T7670] tipc: Resetting bearer [ 179.591833][ T7906] netlink: 277 bytes leftover after parsing attributes in process `syz.1.514'. [ 179.639709][ T7876] tipc: Resetting bearer [ 179.832114][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'. [ 182.323579][ T7876] tipc: Disabling bearer [ 182.337068][ T24] tipc: Node number set to 1159252458 [ 182.435614][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 182.629186][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 182.639991][ T7948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.686394][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.944846][ T7915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.251993][ T7957] netlink: 288 bytes leftover after parsing attributes in process `syz.4.525'. [ 183.627992][ T7967] netlink: 277 bytes leftover after parsing attributes in process `syz.4.528'. [ 183.754022][ T7972] netlink: zone id is out of range [ 183.801607][ T7974] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 183.834324][ T7974] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 184.126557][ T7981] bridge_slave_1: invalid flags given to default FDB implementation [ 184.152195][ T7981] nbd: must specify a device to reconfigure [ 184.178497][ T7981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.532'. [ 184.299499][ T7986] netlink: 'syz.2.534': attribute type 4 has an invalid length. [ 184.366899][ T7988] netlink: 'syz.2.534': attribute type 4 has an invalid length. [ 185.102140][ T8018] netlink: zone id is out of range [ 185.127399][ T8022] netlink: 277 bytes leftover after parsing attributes in process `syz.0.541'. [ 185.310964][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.318234][ T8027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.325901][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.333136][ T8027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.377376][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 185.395458][ T8027] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 185.421896][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 185.476449][ T8032] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 185.494577][ T8032] ipvlan0: entered allmulticast mode [ 185.501357][ T8032] veth0_vlan: entered allmulticast mode [ 185.510447][ T8032] team0: Device ipvlan0 failed to register rx_handler [ 185.603105][ T8040] netlink: 'syz.0.548': attribute type 2 has an invalid length. [ 185.647427][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 185.726574][ T8045] syzkaller1: entered promiscuous mode [ 185.758175][ T8045] syzkaller1: entered allmulticast mode [ 185.920792][ T8054] netlink: 48 bytes leftover after parsing attributes in process `syz.4.551'. [ 186.645621][ T8065] bond2: entered promiscuous mode [ 186.681335][ T8065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.805374][ T8084] netlink: zone id is out of range [ 186.956894][ T8073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.970408][ T8073] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 186.985335][ T8073] bond2: (slave sit1): Error -95 calling set_mac_address [ 187.485071][ T8111] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 187.495504][ T8111] __nla_validate_parse: 9 callbacks suppressed [ 187.495525][ T8111] netlink: 1 bytes leftover after parsing attributes in process `syz.3.564'. [ 187.824189][ T8121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.567'. [ 187.864808][ T8125] netlink: 4612 bytes leftover after parsing attributes in process `syz.2.568'. [ 187.901642][ T8124] netlink: zone id is out of range [ 188.145514][ T8137] netlink: 277 bytes leftover after parsing attributes in process `syz.3.570'. [ 188.161231][ T30] audit: type=1800 audit(1779517667.515:2): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.571" name="memory.events" dev="tmpfs" ino=692 res=0 errno=0 [ 188.303010][ T8136] tipc: Started in network mode [ 188.339698][ T8136] tipc: Node identity ac14140f, cluster identity 4711 [ 188.376793][ T8136] tipc: New replicast peer: 255.255.255.255 [ 188.403988][ T8136] tipc: Enabled bearer , priority 10 [ 188.632986][ T8157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.576'. [ 188.704646][ T8147] pim6reg1: entered allmulticast mode [ 188.954715][ T8165] netlink: 'syz.3.581': attribute type 29 has an invalid length. [ 188.977408][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 189.050106][ T8170] netlink: zone id is out of range [ 189.275126][ T8177] netlink: 277 bytes leftover after parsing attributes in process `syz.1.585'. [ 189.302152][ T8172] syzkaller0: entered promiscuous mode [ 189.316682][ T8172] syzkaller0: entered allmulticast mode [ 189.689517][ T8188] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 191.780390][ T24] tipc: Node number set to 2886997007 [ 191.788844][ T8197] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 191.799409][ T8197] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 192.104422][ T8221] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 192.117655][ T8221] bond0 (unregistering): Released all slaves [ 192.178411][ T10] IPVS: starting estimator thread 0... [ 192.195190][ T8213] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.204274][ T8213] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.279753][ T8228] IPVS: using max 28 ests per chain, 67200 per kthread [ 192.653136][ T8192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.908843][ T8235] netlink: zone id is out of range [ 193.223033][ T8248] netlink: 'syz.0.599': attribute type 15 has an invalid length. [ 193.275830][ T8248] netlink: 666 bytes leftover after parsing attributes in process `syz.0.599'. [ 193.395935][ T3271] IPVS: stop unused estimator thread 0... [ 193.988141][ T8271] netlink: 64 bytes leftover after parsing attributes in process `syz.3.606'. [ 194.034702][ T8271] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20002 [ 194.387589][ T8283] netlink: zone id is out of range [ 194.396531][ T8283] netlink: zone id is out of range [ 194.403627][ T8283] netlink: zone id is out of range [ 194.408893][ T8283] netlink: zone id is out of range [ 194.422641][ T8283] netlink: zone id is out of range [ 194.450916][ T8283] netlink: zone id is out of range [ 194.499046][ T8283] netlink: zone id is out of range [ 194.526036][ T8283] netlink: zone id is out of range [ 194.540651][ T8283] netlink: zone id is out of range [ 194.545877][ T8283] netlink: zone id is out of range [ 195.053339][ T8296] netlink: 36 bytes leftover after parsing attributes in process `syz.3.616'. [ 195.101103][ T8296] netlink: 36 bytes leftover after parsing attributes in process `syz.3.616'. [ 195.211785][ T8299] netlink: 'syz.2.617': attribute type 7 has an invalid length. [ 195.645787][ T8308] pim6reg99999991: entered allmulticast mode [ 197.489971][ T5638] Bluetooth: hci3: command 0x0405 tx timeout [ 197.744568][ T7668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.757868][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 197.780666][ T8363] netlink: 'syz.4.631': attribute type 84 has an invalid length. [ 197.788529][ T7668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.829954][ T3282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.865159][ T3282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.069002][ T8372] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 198.112760][ T8378] netlink: 'syz.4.635': attribute type 32 has an invalid length. [ 198.125176][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 198.227559][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 198.257659][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 198.327952][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 198.350074][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 198.416590][ T8391] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 198.430541][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 198.434899][ T8391] syzkaller1: linktype set to 825 [ 198.456090][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 198.465138][ T8392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.640'. [ 198.512616][ T8388] netlink: 292 bytes leftover after parsing attributes in process `syz.4.638'. [ 198.557146][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 199.001684][ T8407] netlink: 192 bytes leftover after parsing attributes in process `syz.1.645'. [ 199.026632][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'. [ 199.050731][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 199.999434][ T8435] Unsupported ieee802154 address type: 0 [ 200.279539][ T8442] net_ratelimit: 170 callbacks suppressed [ 200.316399][ T8442] netlink: zone id is out of range [ 200.542799][ T8448] –: renamed from dummy0 (while UP) [ 211.819402][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 211.830527][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 211.836684][ T4947] Bluetooth: hci0: command 0x0c20 tx timeout [ 211.843283][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 220.907938][ T8478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.916799][ T8478] IPv6: NLM_F_CREATE should be set when creating new route [ 220.924204][ T8478] IPv6: NLM_F_CREATE should be set when creating new route [ 220.986100][ T8466] __nla_validate_parse: 2 callbacks suppressed [ 220.986120][ T8466] netlink: 1 bytes leftover after parsing attributes in process `syz.3.663'. [ 221.069709][ T8466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.228023][ T8471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.272354][ T8486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.492635][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 221.533083][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 221.567615][ T8508] netlink: 'syz.1.668': attribute type 11 has an invalid length. [ 221.705106][ T8510] netlink: zone id is out of range [ 222.133464][ T8522] netlink: 72 bytes leftover after parsing attributes in process `syz.2.671'. [ 222.189275][ T8529] netlink: 84 bytes leftover after parsing attributes in process `syz.0.676'. [ 222.364146][ T8532] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.677'. [ 222.705287][ T8557] netlink: zone id is out of range [ 222.745421][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 223.149468][ T8570] ip6gre2: entered promiscuous mode [ 223.398954][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 223.468767][ T8580] netlink: 64 bytes leftover after parsing attributes in process `syz.3.692'. [ 223.533224][ T8580] syzkaller1: entered promiscuous mode [ 223.559186][ T8580] syzkaller1: entered allmulticast mode [ 223.581514][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.694'. [ 223.827991][ T8597] netlink: zone id is out of range [ 224.367877][ T8620] veth1_to_hsr: entered allmulticast mode [ 224.822060][ T8604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.362066][ T8650] netlink: zone id is out of range [ 225.378428][ T8641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.944981][ T8669] veth1_to_hsr: left allmulticast mode [ 243.976229][ T8669] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 244.022449][ T5633] block nbd1: Receive control failed (result -32) [ 244.211140][ T8667] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.242724][ T8685] bridge0: port 3(vlan2) entered blocking state [ 244.249539][ T8685] bridge0: port 3(vlan2) entered disabled state [ 244.257642][ T8685] vlan2: entered allmulticast mode [ 244.276953][ T8685] vlan2: entered promiscuous mode [ 244.322891][ T8693] netlink: zone id is out of range [ 244.506198][ T8678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.158266][ T8678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.302962][ T8712] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 245.315359][ T8678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.539065][ T8678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.563193][ T8722] ipt_REJECT: TCP_RESET invalid for non-tcp [ 245.590409][ T8717] tipc: Enabled bearer , priority 0 [ 245.781929][ T8717] syzkaller0: entered promiscuous mode [ 245.798851][ T8717] syzkaller0: entered allmulticast mode [ 245.811793][ T8717] tipc: Resetting bearer [ 245.864854][ T8716] tipc: Resetting bearer [ 246.048616][ T8732] FAULT_INJECTION: forcing a failure. [ 246.048616][ T8732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.094245][ T8732] CPU: 1 UID: 0 PID: 8732 Comm: syz.4.731 Not tainted syzkaller #0 PREEMPT(full) [ 246.094275][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.094300][ T8732] Call Trace: [ 246.094309][ T8732] [ 246.094318][ T8732] dump_stack_lvl+0xe8/0x150 [ 246.094348][ T8732] should_fail_ex+0x412/0x560 [ 246.094383][ T8732] _copy_to_user+0x31/0xb0 [ 246.094418][ T8732] csum_and_copy_to_iter+0x83c/0x1c80 [ 246.094465][ T8732] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 246.094490][ T8732] ? __skb_recv_udp+0x4cc/0x990 [ 246.094512][ T8732] ? __skb_recv_udp+0x4cc/0x990 [ 246.094543][ T8732] ? __local_bh_enable_ip+0xd0/0x130 [ 246.094565][ T8732] ? lockdep_hardirqs_on+0x7a/0x110 [ 246.094585][ T8732] ? __skb_recv_udp+0x4cc/0x990 [ 246.094607][ T8732] ? __skb_recv_udp+0x898/0x990 [ 246.094630][ T8732] __skb_datagram_iter+0x89b/0x980 [ 246.094657][ T8732] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 246.094690][ T8732] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 246.094722][ T8732] ? csum_partial+0x239/0x2c0 [ 246.094747][ T8732] skb_copy_and_csum_datagram_msg+0x1e8/0x480 [ 246.094781][ T8732] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 246.094820][ T8732] udp_recvmsg+0x2d2/0xd00 [ 246.094855][ T8732] ? __pfx_udp_recvmsg+0x10/0x10 [ 246.094878][ T8732] ? __lock_acquire+0x6b5/0x2cf0 [ 246.094900][ T8732] ? sock_rps_record_flow+0x19/0x350 [ 246.094933][ T8732] ? inet_recvmsg+0xe2/0x120 [ 246.094963][ T8732] ? __pfx_inet_recvmsg+0x10/0x10 [ 246.094994][ T8732] sock_recvmsg+0x155/0x1b0 [ 246.095027][ T8732] ____sys_recvmsg+0x1e6/0x4a0 [ 246.095061][ T8732] ? __pfx_____sys_recvmsg+0x10/0x10 [ 246.095102][ T8732] ? import_iovec+0x73/0xa0 [ 246.095138][ T8732] ___sys_recvmsg+0x215/0x590 [ 246.095168][ T8732] ? __pfx____sys_recvmsg+0x10/0x10 [ 246.095197][ T8732] ? __fget_files+0x2a/0x420 [ 246.095242][ T8732] ? __fget_files+0x3a0/0x420 [ 246.095279][ T8732] do_recvmmsg+0x334/0x800 [ 246.095313][ T8732] ? __pfx_do_recvmmsg+0x10/0x10 [ 246.095350][ T8732] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.095391][ T8732] __x64_sys_recvmmsg+0x198/0x250 [ 246.095419][ T8732] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 246.095453][ T8732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.095476][ T8732] do_syscall_64+0x15f/0xf80 [ 246.095495][ T8732] ? trace_irq_disable+0x3b/0x140 [ 246.095527][ T8732] ? clear_bhb_loop+0x40/0x90 [ 246.095553][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.095574][ T8732] RIP: 0033:0x7fb67d39ce59 [ 246.095595][ T8732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.095615][ T8732] RSP: 002b:00007fb67e2b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 246.095638][ T8732] RAX: ffffffffffffffda RBX: 00007fb67d616090 RCX: 00007fb67d39ce59 [ 246.095653][ T8732] RDX: 0000000000000001 RSI: 0000200000002680 RDI: 0000000000000003 [ 246.095666][ T8732] RBP: 00007fb67e2b4090 R08: 0000000000000000 R09: 0000000000000000 [ 246.095684][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.095696][ T8732] R13: 00007fb67d616128 R14: 00007fb67d616090 R15: 00007ffe7b1bf678 [ 246.095730][ T8732] [ 247.010852][ T8743] netlink: zone id is out of range [ 248.911505][ T8716] tipc: Disabling bearer [ 249.011613][ T3318] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.167148][ T8752] __nla_validate_parse: 5 callbacks suppressed [ 249.167170][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 249.183248][ T33] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.286375][ T33] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.338504][ T8759] netlink: 52 bytes leftover after parsing attributes in process `syz.1.738'. [ 249.357035][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 249.369155][ T33] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.913446][ T8788] FAULT_INJECTION: forcing a failure. [ 249.913446][ T8788] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 249.940960][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.4.744 Not tainted syzkaller #0 PREEMPT(full) [ 249.940994][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.941008][ T8788] Call Trace: [ 249.941018][ T8788] [ 249.941028][ T8788] dump_stack_lvl+0xe8/0x150 [ 249.941061][ T8788] should_fail_ex+0x412/0x560 [ 249.941100][ T8788] prepare_alloc_pages+0x22a/0x650 [ 249.941147][ T8788] __alloc_frozen_pages_noprof+0x12f/0x380 [ 249.941189][ T8788] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 249.941232][ T8788] ? __pfx_policy_nodemask+0x10/0x10 [ 249.941275][ T8788] ? __lock_acquire+0x6b5/0x2cf0 [ 249.941306][ T8788] alloc_pages_mpol+0x235/0x490 [ 249.941352][ T8788] folio_alloc_mpol_noprof+0x39/0x160 [ 249.941392][ T8788] vma_alloc_folio_noprof+0xe1/0x1e0 [ 249.941419][ T8788] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 249.941444][ T8788] ? __pte_offset_map+0x29/0x240 [ 249.941475][ T8788] ? __pte_offset_map+0x29/0x240 [ 249.941508][ T8788] do_pte_missing+0x159d/0x33f0 [ 249.941558][ T8788] ? handle_mm_fault+0xee/0x3170 [ 249.941592][ T8788] handle_mm_fault+0x1bd9/0x3170 [ 249.941640][ T8788] ? handle_mm_fault+0xee/0x3170 [ 249.941684][ T8788] ? __pfx_handle_mm_fault+0x10/0x10 [ 249.941738][ T8788] ? lock_mm_and_find_vma+0xa7/0x340 [ 249.941774][ T8788] do_user_addr_fault+0x75b/0x1340 [ 249.941820][ T8788] exc_page_fault+0x6a/0xc0 [ 249.941867][ T8788] asm_exc_page_fault+0x26/0x30 [ 249.941890][ T8788] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 249.941920][ T8788] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 249.941939][ T8788] RSP: 0018:ffffc9000d5ff408 EFLAGS: 00050202 [ 249.941960][ T8788] RAX: ffffffff84b26601 RBX: 0000000000000094 RCX: 0000000000000094 [ 249.941975][ T8788] RDX: 0000000000000000 RSI: ffff88802076f19a RDI: 00002000000014c0 [ 249.941990][ T8788] RBP: ffffc9000d5ff5c8 R08: ffff88802076f22d R09: 1ffff110040ede45 [ 249.942006][ T8788] R10: dffffc0000000000 R11: ffffed10040ede46 R12: 0000200000001554 [ 249.942022][ T8788] R13: 00007ffffffff000 R14: ffff88802076f19a R15: 00002000000014c0 [ 249.942049][ T8788] ? _copy_to_user+0x1/0xb0 [ 249.942094][ T8788] _copy_to_user+0x8a/0xb0 [ 249.942132][ T8788] csum_and_copy_to_iter+0x83c/0x1c80 [ 249.942187][ T8788] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 249.942214][ T8788] ? __skb_recv_udp+0x4cc/0x990 [ 249.942240][ T8788] ? __skb_recv_udp+0x4cc/0x990 [ 249.942264][ T8788] ? __local_bh_enable_ip+0xd0/0x130 [ 249.942289][ T8788] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.942310][ T8788] ? __skb_recv_udp+0x4cc/0x990 [ 249.942335][ T8788] ? __skb_recv_udp+0x898/0x990 [ 249.942362][ T8788] __skb_datagram_iter+0x89b/0x980 [ 249.942392][ T8788] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 249.942423][ T8788] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 249.942457][ T8788] ? csum_partial+0x239/0x2c0 [ 249.942485][ T8788] skb_copy_and_csum_datagram_msg+0x1e8/0x480 [ 249.942521][ T8788] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 249.942566][ T8788] udp_recvmsg+0x2d2/0xd00 [ 249.942606][ T8788] ? __pfx_udp_recvmsg+0x10/0x10 [ 249.942632][ T8788] ? __lock_acquire+0x6b5/0x2cf0 [ 249.942656][ T8788] ? sock_rps_record_flow+0x19/0x350 [ 249.942694][ T8788] ? inet_recvmsg+0xe2/0x120 [ 249.942727][ T8788] ? __pfx_inet_recvmsg+0x10/0x10 [ 249.942763][ T8788] sock_recvmsg+0x155/0x1b0 [ 249.942800][ T8788] ____sys_recvmsg+0x1e6/0x4a0 [ 249.942847][ T8788] ? __pfx_____sys_recvmsg+0x10/0x10 [ 249.942893][ T8788] ? import_iovec+0x73/0xa0 [ 249.942936][ T8788] ___sys_recvmsg+0x215/0x590 [ 249.942971][ T8788] ? __pfx____sys_recvmsg+0x10/0x10 [ 249.943004][ T8788] ? __fget_files+0x2a/0x420 [ 249.943063][ T8788] ? __fget_files+0x3a0/0x420 [ 249.943105][ T8788] do_recvmmsg+0x334/0x800 [ 249.943144][ T8788] ? __pfx_do_recvmmsg+0x10/0x10 [ 249.943196][ T8788] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.943242][ T8788] __x64_sys_recvmmsg+0x198/0x250 [ 249.943274][ T8788] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 249.943322][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.943348][ T8788] do_syscall_64+0x15f/0xf80 [ 249.943370][ T8788] ? trace_irq_disable+0x3b/0x140 [ 249.943406][ T8788] ? clear_bhb_loop+0x40/0x90 [ 249.943436][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.943458][ T8788] RIP: 0033:0x7fb67d39ce59 [ 249.943479][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.943498][ T8788] RSP: 002b:00007fb67e2b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 249.943521][ T8788] RAX: ffffffffffffffda RBX: 00007fb67d616090 RCX: 00007fb67d39ce59 [ 249.943538][ T8788] RDX: 0000000000000001 RSI: 0000200000002680 RDI: 0000000000000003 [ 249.943553][ T8788] RBP: 00007fb67e2b4090 R08: 0000000000000000 R09: 0000000000000000 [ 249.943567][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.943580][ T8788] R13: 00007fb67d616128 R14: 00007fb67d616090 R15: 00007ffe7b1bf678 [ 249.943620][ T8788] [ 250.687142][ T8801] pim6reg: entered allmulticast mode [ 250.813457][ T8808] pim6reg: left allmulticast mode [ 250.958561][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 251.882291][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 252.754705][ T8864] SET target dimension over the limit! [ 253.229181][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'. [ 253.543947][ T8890] No such timeout policy "syz1" [ 253.738393][ T8890] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 253.797022][ T8894] netlink: zone id is out of range [ 253.807895][ T8896] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 254.134745][ T8896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.253987][ T8912] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20004 [ 254.278902][ T8899] bond4: (slave geneve3): making interface the new active one [ 254.349467][ T8902] netlink: 72 bytes leftover after parsing attributes in process `syz.4.772'. [ 254.384991][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 254.397330][ T8899] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 254.410360][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 254.710490][ T8921] xt_CT: No such helper "snmp_trap" [ 254.794304][ T8928] sctp: [Deprecated]: syz.0.776 (pid 8928) Use of int in max_burst socket option. [ 254.794304][ T8928] Use struct sctp_assoc_value instead [ 255.925820][ T8966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.781'. [ 255.953957][ T8970] netlink: 'syz.1.780': attribute type 8 has an invalid length. [ 256.580824][ T8985] netlink: zone id is out of range [ 256.952183][ T9000] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 257.098905][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 257.163122][ T9000] bond3: entered promiscuous mode [ 257.168978][ T9000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.228696][ T9012] geneve2: entered promiscuous mode [ 257.327448][ T9014] netlink: 136 bytes leftover after parsing attributes in process `syz.2.791'. [ 257.351192][ T9014] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 257.538638][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 257.622617][ T9021] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 257.866085][ T9021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.894559][ T9034] netlink: 'syz.4.795': attribute type 4 has an invalid length. [ 257.929367][ T9034] netlink: 17 bytes leftover after parsing attributes in process `syz.4.795'. [ 258.008815][ T9026] bond2: (slave gretap2): making interface the new active one [ 258.097146][ T9026] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 258.167160][ T9044] netlink: 148 bytes leftover after parsing attributes in process `syz.0.797'. [ 258.203715][ T9044] netlink: 116 bytes leftover after parsing attributes in process `syz.0.797'. [ 258.483851][ T9052] netlink: zone id is out of range [ 258.491249][ T9053] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.613092][ T9058] SET target dimension over the limit! [ 258.650405][ T9058] x_tables: unsorted entry at hook 2 [ 258.884448][ T9066] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 258.955475][ T9066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.722566][ T9073] bond4: (slave veth5): Enslaving as an active interface with a down link [ 259.789440][ T9080] batadv_slave_1: entered promiscuous mode [ 259.835825][ T9078] batadv_slave_1: left promiscuous mode [ 259.881185][ T9072] lo speed is unknown, defaulting to 1000 [ 259.954354][ T9072] lo speed is unknown, defaulting to 1000 [ 259.991389][ T9072] lo speed is unknown, defaulting to 1000 [ 260.254344][ T9103] netlink: zone id is out of range [ 260.607106][ T9114] __nla_validate_parse: 5 callbacks suppressed [ 260.607127][ T9114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.815'. [ 260.780060][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 260.801050][ T9072] infiniband syz0: set active [ 260.816184][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 260.827823][ T5733] lo speed is unknown, defaulting to 1000 [ 260.836271][ T9072] infiniband syz0: added lo [ 260.859754][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 260.881668][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 260.906434][ T9072] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 260.910430][ T9119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.817'. [ 260.918772][ T9072] infiniband syz0: Couldn't open port 1 [ 260.942969][ T9072] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 260.977456][ T9122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.817'. [ 260.997078][ T9072] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 261.018388][ T9072] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 261.082764][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.817'. [ 261.138221][ T9072] RDS/IB: syz0: added [ 261.155862][ T9072] smc: adding ib device syz0 with port count 1 [ 261.170265][ T9072] smc: ib device syz0 port 1 has no pnetid [ 261.186382][ T2172] lo speed is unknown, defaulting to 1000 [ 261.204119][ T9072] lo speed is unknown, defaulting to 1000 [ 261.285953][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 261.323797][ T9129] syzkaller0: entered promiscuous mode [ 261.329460][ T9129] syzkaller0: entered allmulticast mode [ 261.465016][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'. [ 261.699018][ T9072] lo speed is unknown, defaulting to 1000 [ 261.711690][ T9137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.790069][ T9139] syzkaller1: entered promiscuous mode [ 261.810781][ T9139] syzkaller1: entered allmulticast mode [ 262.466385][ T9072] lo speed is unknown, defaulting to 1000 [ 262.879253][ T9160] gtp1: entered promiscuous mode [ 262.892676][ T9160] gtp1: entered allmulticast mode [ 262.928325][ T9072] lo speed is unknown, defaulting to 1000 [ 263.316264][ T9170] openvswitch: netlink: Flow actions attr not present in new flow. [ 263.732573][ T9072] lo speed is unknown, defaulting to 1000 [ 264.205887][ T9196] bond0: entered promiscuous mode [ 264.223684][ T9196] bond0: entered allmulticast mode [ 264.799039][ T9211] hmac(sha2: entered promiscuous mode [ 265.008672][ T9227] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 265.030439][ T9227] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 265.038250][ T9226] tipc: Started in network mode [ 265.065606][ T9226] tipc: Node identity 080211000001, cluster identity 4711 [ 265.107856][ T9226] tipc: Enabled bearer , priority 0 [ 265.147169][ T9232] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 266.230060][ T5636] tipc: Node number set to 134418688 [ 266.310548][ T9287] __nla_validate_parse: 6 callbacks suppressed [ 266.310568][ T9287] netlink: 67 bytes leftover after parsing attributes in process `syz.0.861'. [ 266.600507][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'. [ 266.631420][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.863'. [ 266.787202][ T9297] lo speed is unknown, defaulting to 1000 [ 266.800333][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 267.409130][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.871'. [ 267.565696][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 268.152316][ T9340] bridge0: port 4(erspan0) entered blocking state [ 268.165305][ T9340] bridge0: port 4(erspan0) entered disabled state [ 268.172654][ T9340] erspan0: entered allmulticast mode [ 268.188615][ T9340] bridge0: port 4(erspan0) entered blocking state [ 268.195402][ T9340] bridge0: port 4(erspan0) entered forwarding state [ 268.300247][ T9353] netlink: 68 bytes leftover after parsing attributes in process `syz.1.876'. [ 268.373734][ T9344] erspan0: left allmulticast mode [ 268.379403][ T9344] bridge0: port 4(erspan0) entered disabled state [ 269.060315][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.067984][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.669121][ T9349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.701004][ T9349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.014776][ T7672] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.037904][ T7672] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.132128][ T1050] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.167463][ T1050] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.195972][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 270.313916][ T9396] netlink: 92 bytes leftover after parsing attributes in process `syz.2.886'. [ 270.629203][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 271.511686][ T9443] netlink: 'syz.1.902': attribute type 1 has an invalid length. [ 271.561623][ T9444] gretap3: entered allmulticast mode [ 272.438424][ T9486] __nla_validate_parse: 2 callbacks suppressed [ 272.438444][ T9486] netlink: 72 bytes leftover after parsing attributes in process `syz.4.906'. [ 272.575420][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.907'. [ 272.905819][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 272.977861][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 273.049459][ T9505] netlink: 'syz.1.910': attribute type 14 has an invalid length. [ 273.102849][ T9505] netlink: 'syz.1.910': attribute type 12 has an invalid length. [ 273.234412][ T9522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.913'. [ 273.285025][ T9514] can: request_module (can-proto-5) failed. [ 273.445993][ T9520] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 273.469196][ T9533] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 273.502398][ T9533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.281771][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.922'. [ 274.538810][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 274.794027][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.801552][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.942416][ T9587] sctp: [Deprecated]: syz.0.929 (pid 9587) Use of int in max_burst socket option deprecated. [ 274.942416][ T9587] Use struct sctp_assoc_value instead [ 274.978927][ T9567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.008336][ T9567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.107799][ T9567] ipvlan0: left allmulticast mode [ 275.133945][ T9567] veth0_vlan: left allmulticast mode [ 275.145908][ T9567] bond1: left promiscuous mode [ 275.169791][ T9567] gretap3: left allmulticast mode [ 275.186507][ T24] lo speed is unknown, defaulting to 1000 [ 275.206160][ T24] syz0: Port: 1 Link DOWN [ 275.228526][ T9378] lo speed is unknown, defaulting to 1000 [ 275.244755][ T3276] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.261530][ T3276] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.277186][ T47] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.307224][ T47] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.325337][ T47] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.352178][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.396343][ T47] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.439491][ T47] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.664962][ T9590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.696090][ T9590] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 275.789454][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 275.814720][ T9590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.827920][ T9590] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 275.877909][ T9590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.890887][ T9590] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 275.926624][ T9590] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.936087][ T9590] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 275.982545][ T9603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.007896][ T9611] lo speed is unknown, defaulting to 1000 [ 276.022886][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 276.620381][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 276.628581][ T9590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.650008][ T9590] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 276.895227][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 277.628710][ T9671] __nla_validate_parse: 3 callbacks suppressed [ 277.628731][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 277.692287][ T9383] bridge0: entered promiscuous mode [ 277.762755][ T9677] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 277.976702][ T9671] bond4: entered promiscuous mode [ 277.995564][ T9671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.163686][ T9677] bond3: entered promiscuous mode [ 278.169375][ T9677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.269999][ T9682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.295875][ T9682] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 278.305250][ T9692] sock: sock_timestamping_bind_phc: sock not bind to device [ 278.326936][ T9682] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 278.363269][ T9682] bond3: (slave ipip0): making interface the new active one [ 278.380988][ T9682] ipip0: entered promiscuous mode [ 278.398286][ T9682] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 278.418111][ T9668] lo speed is unknown, defaulting to 1000 [ 279.797706][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 279.877068][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 279.911384][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.963'. [ 279.991987][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 280.016539][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.963'. [ 282.903803][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.976'. [ 283.184492][ T9812] netlink: 'syz.0.978': attribute type 21 has an invalid length. [ 283.212152][ T9812] netlink: 128 bytes leftover after parsing attributes in process `syz.0.978'. [ 283.259745][ T9812] netlink: 'syz.0.978': attribute type 4 has an invalid length. [ 283.291600][ T9812] netlink: 'syz.0.978': attribute type 3 has an invalid length. [ 283.308576][ T9812] netlink: 3 bytes leftover after parsing attributes in process `syz.0.978'. [ 283.451720][ T9820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 283.900811][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 284.000593][ T9829] netlink: 'syz.0.984': attribute type 21 has an invalid length. [ 284.019783][ T9829] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.036759][ T9829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.044120][ T9829] IPv6: NLM_F_CREATE should be set when creating new route [ 284.051462][ T9829] IPv6: NLM_F_CREATE should be set when creating new route [ 284.058759][ T9829] IPv6: NLM_F_CREATE should be set when creating new route [ 284.114322][ T9836] netlink: 'syz.0.984': attribute type 21 has an invalid length. [ 284.131644][ T9836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.793099][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 284.820684][ T9854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 284.846988][ T9855] netlink: 'syz.3.989': attribute type 10 has an invalid length. [ 284.878358][ T9854] netlink: 'syz.1.990': attribute type 3 has an invalid length. [ 284.982911][ T9860] xt_bpf: check failed: parse error [ 286.236426][ T9855] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 286.253501][ T9855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.261960][ T9855] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 286.273264][ T9855] team0: Port device netdevsim1 added [ 286.571472][ T9874] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.996'. [ 286.576375][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 286.630112][ T9876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.704526][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 286.826756][ T9877] hmac(sha224: entered promiscuous mode [ 286.884484][ T9875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.573394][ T9909] tipc: Enabling of bearer rejected, already enabled [ 287.702267][ T9909] tipc: Resetting bearer [ 287.988194][ T9923] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.000569][ T9934] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 288.022887][ T9930] netlink: 'syz.0.1009': attribute type 8 has an invalid length. [ 288.105204][ T9930] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 288.187721][ T9923] bond6 (unregistering): (slave geneve4): Releasing backup interface [ 288.260879][ T9923] bond6 (unregistering): Released all slaves [ 288.500609][ T9952] __nla_validate_parse: 7 callbacks suppressed [ 288.500629][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'. [ 288.724523][ T9957] bond4: entered promiscuous mode [ 288.738562][ T9957] bond4: entered allmulticast mode [ 288.758628][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1018'. [ 289.643241][ T9995] netlink: 'syz.4.1024': attribute type 4 has an invalid length. [ 289.678320][ T9995] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1024'. [ 289.770160][ T9995] netlink: 'syz.4.1024': attribute type 3 has an invalid length. [ 289.819688][ T9995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1024'. [ 290.083249][T10018] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 290.271634][T10025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1032'. [ 290.386147][T10029] netlink: 'syz.4.1033': attribute type 1 has an invalid length. [ 290.416566][T10029] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1033'. [ 290.533316][T10036] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1035'. [ 290.611444][T10037] netlink: 'syz.4.1033': attribute type 10 has an invalid length. [ 290.696014][T10042] netlink: 'syz.4.1033': attribute type 10 has an invalid length. [ 290.732226][T10037] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 290.744783][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 291.512296][T10072] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 291.550135][T10072] netlink: 936 bytes leftover after parsing attributes in process `syz.1.1042'. [ 291.586861][T10074] netlink: 'syz.1.1042': attribute type 32 has an invalid length. [ 291.714469][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.722425][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.838842][T10041] 0ªX¹¦À: left allmulticast mode [ 292.243526][T10041] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 292.759216][T10041] macvtap1: left allmulticast mode [ 292.771227][T10041] dummy0: left allmulticast mode [ 292.776599][T10041] macvtap2: left allmulticast mode [ 292.803154][T10041] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 292.810563][T10041] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 292.818314][T10041] ip6gre1: left promiscuous mode [ 292.823840][T10041] ip6gre1: left allmulticast mode [ 292.830734][T10041] hsr1: left promiscuous mode [ 292.884330][T10039] syzkaller1: entered promiscuous mode [ 292.901101][T10039] syzkaller1: entered allmulticast mode [ 292.962676][ T7672] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.173532][ T7672] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.205754][ T7672] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.235724][ T7672] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.030386][T10103] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1049'. [ 294.178304][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 294.213330][T10105] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 294.557271][ T9] IPVS: starting estimator thread 0... [ 294.660256][T10117] IPVS: using max 25 ests per chain, 60000 per kthread [ 294.677782][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1057'. [ 294.725205][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 294.751476][T10121] netlink: 121 bytes leftover after parsing attributes in process `syz.1.1055'. [ 294.784033][T10121] netlink: 'syz.1.1055': attribute type 6 has an invalid length. [ 294.821281][T10129] xt_hashlimit: size too large, truncated to 1048576 [ 295.037127][T10138] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1061'. [ 295.348229][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'. [ 295.803769][T10161] netlink: 'syz.4.1067': attribute type 7 has an invalid length. [ 296.411998][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 296.623405][T10188] lo speed is unknown, defaulting to 1000 [ 296.726010][T10209] openvswitch: netlink: Multiple metadata blocks provided [ 296.784303][T10210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1076'. [ 297.283755][T10222] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1081'. [ 297.888915][T10244] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 298.567438][T10262] tc_dump_action: action bad kind [ 298.896878][T10271] lo speed is unknown, defaulting to 1000 [ 299.307992][T10284] __nla_validate_parse: 9 callbacks suppressed [ 299.308012][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 299.663581][T10284] team0: Port device team_slave_0 removed [ 299.830111][T10296] 5Ò: entered promiscuous mode [ 300.258144][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 301.064977][T10322] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 301.087134][T10322] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1108'. [ 301.130312][T10322] sch_fq: defrate 0 ignored. [ 301.237436][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 301.386934][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'. [ 301.426187][T10329] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 301.479680][T10337] ip6gre2: entered promiscuous mode [ 301.485066][T10337] ip6gre2: entered allmulticast mode [ 301.498756][ T9482] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.512943][ T9482] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.522185][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.547098][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 301.598259][T10333] openvswitch: netlink: Invalid VLAN frame [ 301.962541][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.013617][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.037257][T10368] tipc: Enabled bearer , priority 0 [ 302.123061][T10368] tipc: Disabling bearer [ 302.202042][T10376] netlink: 'syz.2.1118': attribute type 7 has an invalid length. [ 302.216084][T10373] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1119'. [ 302.227356][T10377] tipc: Enabled bearer , priority 10 [ 302.240099][T10377] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1120'. [ 302.250419][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'. [ 302.260949][T10377] netlink: 'syz.4.1120': attribute type 1 has an invalid length. [ 302.889342][T10406] Bluetooth: MGMT ver 1.23 [ 303.387045][T10425] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 303.408376][T10424] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 303.419293][T10419] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 303.441025][T10424] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 303.702471][T10436] ipt_rpfilter: unknown options [ 303.919008][T10441] »»»»»»: renamed from veth0_to_bond (while UP) [ 304.076391][T10454] x_tables: duplicate underflow at hook 1 [ 304.205673][T10458] pim6reg99999991: entered allmulticast mode [ 304.620211][T10487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.652163][T10485] __nla_validate_parse: 13 callbacks suppressed [ 304.652187][T10485] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1146'. [ 304.922439][T10498] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 304.942363][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'. [ 304.953083][T10498] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 305.127295][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 305.321041][T10511] netlink: 15620 bytes leftover after parsing attributes in process `syz.1.1155'. [ 305.338104][T10512] tipc: Enabling of bearer rejected, already enabled [ 305.382396][T10516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1157'. [ 305.456972][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 305.514071][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 305.649743][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 305.814376][T10533] syzkaller1: entered promiscuous mode [ 305.830357][T10533] syzkaller1: entered allmulticast mode [ 305.850096][T10533] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.1161'. [ 305.868391][T10536] tipc: Enabled bearer , priority 10 [ 305.882177][T10535] tipc: Enabling of bearer rejected, already enabled [ 305.891301][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 305.982500][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 306.043332][T10544] tipc: Enabling of bearer rejected, failed to enable media [ 306.733222][T10564] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 306.774646][T10564] 5nè: entered promiscuous mode [ 306.858690][T10566] tipc: Enabled bearer , priority 0 [ 307.034568][T10566] syzkaller0: entered promiscuous mode [ 307.046933][T10566] syzkaller0: entered allmulticast mode [ 307.058421][T10566] tipc: Resetting bearer [ 307.073853][ T5363] tipc: Node number set to 423639628 [ 307.135883][T10577] netlink: 'syz.0.1176': attribute type 11 has an invalid length. [ 307.181020][T10566] tipc: Resetting bearer [ 309.788919][T10566] tipc: Disabling bearer [ 309.881899][ T5363] tipc: Node number set to 3539387207 [ 310.263438][T10620] __nla_validate_parse: 6 callbacks suppressed [ 310.263459][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 310.311021][T10620] tunl0: left allmulticast mode [ 310.327743][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 310.364888][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'. [ 310.375727][T10620] gre0: left allmulticast mode [ 310.382784][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1187'. [ 310.397204][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 310.414533][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 310.452955][T10620] erspan0: left allmulticast mode [ 310.472133][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 310.507319][T10620] ip_vti0: left allmulticast mode [ 310.525803][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 310.561679][T10620] ip6_vti0: left allmulticast mode [ 310.577684][ T30] audit: type=1804 audit(1779517789.945:3): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1189" name="/newroot/254/memory.events" dev="tmpfs" ino=1310 res=1 errno=0 [ 310.589490][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 310.640659][T10620] sit0: left allmulticast mode [ 310.669168][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 310.696328][T10620] ip6tnl0: left allmulticast mode [ 310.727469][T10620] ip6gre0: left allmulticast mode [ 310.758240][T10620] syz_tun: left allmulticast mode [ 310.778269][T10620] ip6gretap0: left allmulticast mode [ 310.803142][T10620] bond0: left allmulticast mode [ 310.824789][T10620] team0: left allmulticast mode [ 310.841824][T10620] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 310.872501][T10620] –: left allmulticast mode [ 310.901255][T10620] nlmon0: left allmulticast mode [ 310.955424][T10620] batadv0: left allmulticast mode [ 310.989459][T10620] veth0: left allmulticast mode [ 311.012976][T10620] veth1: left allmulticast mode [ 311.028416][T10620] wg0: left allmulticast mode [ 311.048843][T10620] wg1: left allmulticast mode [ 311.096899][T10620] wg2: left allmulticast mode [ 311.119436][T10620] veth0_to_bridge: left allmulticast mode [ 311.141839][T10620] bridge_slave_0: left allmulticast mode [ 311.163329][T10620] veth1_to_bridge: left allmulticast mode [ 311.184185][T10620] bridge_slave_1: left allmulticast mode [ 311.204831][T10620] »»»»»»: left allmulticast mode [ 311.223131][T10620] bond_slave_0: left allmulticast mode [ 311.243054][T10620] veth1_to_bond: left allmulticast mode [ 311.261880][T10620] bond_slave_1: left allmulticast mode [ 311.272916][T10620] veth0_to_team: left allmulticast mode [ 311.295962][T10620] team_slave_0: left allmulticast mode [ 311.329921][T10620] veth1_to_team: left allmulticast mode [ 311.353998][T10620] team_slave_1: left allmulticast mode [ 311.389491][T10620] veth1_to_batadv: left allmulticast mode [ 311.414990][T10620] batadv_slave_1: left allmulticast mode [ 311.442778][T10620] xfrm0: left allmulticast mode [ 311.459925][T10620] veth0_to_hsr: left allmulticast mode [ 311.471175][T10620] veth1_to_hsr: left allmulticast mode [ 311.487001][T10620] hsr0: left allmulticast mode [ 311.498729][T10620] hsr_slave_0: left allmulticast mode [ 311.512042][T10620] hsr_slave_1: left allmulticast mode [ 311.528519][T10620] veth1_virt_wifi: left allmulticast mode [ 311.546906][T10620] veth0_virt_wifi: left allmulticast mode [ 311.564208][T10620] virt_wifi0: left allmulticast mode [ 311.586124][T10620] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 311.902535][T10663] netlink: zone id is out of range [ 311.916089][T10663] netlink: zone id is out of range [ 311.935097][T10663] netlink: zone id is out of range [ 311.942106][T10663] netlink: zone id is out of range [ 311.959273][T10663] netlink: zone id is out of range [ 311.981038][T10663] netlink: zone id is out of range [ 311.996554][T10663] netlink: zone id is out of range [ 312.015906][T10663] netlink: zone id is out of range [ 312.039824][T10663] netlink: zone id is out of range [ 312.416019][T10679] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 312.882243][T10698] bridge5: entered promiscuous mode [ 312.907520][T10698] bridge5: entered allmulticast mode [ 312.931433][T10698] team0: Port device bridge5 added [ 312.950007][T10699] bridge0: port 3(team0) entered blocking state [ 312.963357][T10699] bridge0: port 3(team0) entered disabled state [ 312.983590][T10699] team0: entered allmulticast mode [ 313.003768][T10699] team_slave_0: entered allmulticast mode [ 313.021564][T10699] team_slave_1: entered allmulticast mode [ 313.069398][T10699] team0: entered promiscuous mode [ 313.091453][T10699] team_slave_0: entered promiscuous mode [ 313.108532][T10699] team_slave_1: entered promiscuous mode [ 313.157674][T10696] lo speed is unknown, defaulting to 1000 [ 314.049979][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 314.896982][T10769] xt_l2tp: missing protocol rule (udp|l2tpip) [ 314.925550][T10770] xt_l2tp: missing protocol rule (udp|l2tpip) [ 315.468622][T10784] __nla_validate_parse: 45 callbacks suppressed [ 315.468643][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1227'. [ 315.548415][T10793] syzkaller0: entered promiscuous mode [ 315.563266][T10793] syzkaller0: entered allmulticast mode [ 315.753064][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'. [ 315.770682][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 315.795686][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1233'. [ 315.820112][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'. [ 315.851054][T10803] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1231'. [ 315.909391][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'. [ 315.919834][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 315.932500][T10803] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1231'. [ 315.993425][T10807] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1234'. [ 316.274082][T10797] ip6erspan1: entered allmulticast mode [ 316.306612][T10813] hsr0: entered promiscuous mode [ 316.832865][T10812] hsr0: left promiscuous mode [ 317.387357][T10861] netlink: 'syz.0.1249': attribute type 16 has an invalid length. [ 317.457331][T10861] netlink: 'syz.0.1249': attribute type 17 has an invalid length. [ 317.654356][ T30] audit: type=1107 audit(1779517797.025:4): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 317.738394][T10861] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.779360][T10861] dummy0: left promiscuous mode [ 317.798458][T10881] x_tables: duplicate underflow at hook 2 [ 317.803717][T10861] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 317.924857][T10861] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 317.950295][T10861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.961468][T10861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.979107][T10861] net_ratelimit: 47 callbacks suppressed [ 317.979129][T10861] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 318.012791][ T9482] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.020100][ T9482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.047050][ T9482] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.054342][ T9482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.265499][T10887] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 318.354644][T10867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.516826][ T7672] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.551346][ T7672] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.572765][ T7672] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.613050][ T7672] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.140839][T10916] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 319.148495][T10916] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 319.177376][T10913] syzkaller0: entered promiscuous mode [ 319.183355][T10913] syzkaller0: entered allmulticast mode [ 319.525982][T10933] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 319.670702][T10934] lo speed is unknown, defaulting to 1000 [ 320.163894][T10957] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 320.191052][T10957] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 320.430411][T10965] IPVS: set_ctl: invalid protocol: 60 172.20.20.41:20004 [ 320.474086][T10967] __nla_validate_parse: 11 callbacks suppressed [ 320.474108][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 320.632846][T10969] netlink: 'syz.0.1280': attribute type 12 has an invalid length. [ 320.870472][T10973] nbd: socks must be embedded in a SOCK_ITEM attr [ 321.064949][T10973] block nbd4: shutting down sockets [ 321.801501][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 321.859947][T11006] hsr_slave_0: left promiscuous mode [ 321.887826][T11006] hsr_slave_1: left promiscuous mode [ 321.896905][T11011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1288'. [ 321.983851][T11012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1288'. [ 322.128970][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 322.295430][T11022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1291'. [ 322.462528][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 322.627055][T11041] vlan3: entered promiscuous mode [ 322.650317][T11041] geneve1: entered promiscuous mode [ 322.664283][T11041] vlan3: entered allmulticast mode [ 322.693847][T11041] geneve1: entered allmulticast mode [ 322.753226][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1295'. [ 322.924505][T11061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1300'. [ 322.973870][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1299'. [ 324.155167][T11115] 8021q: adding VLAN 0 to HW filter on device bond6 [ 324.550262][T11135] x_tables: ip_tables: ah match: only valid for protocol 51 [ 324.842256][T11154] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 325.281754][T11157] bond5: (slave bridge7): Enslaving as a backup interface with an up link [ 325.352694][T11162] macvlan0: entered promiscuous mode [ 325.366286][T11162] macvlan0: entered allmulticast mode [ 325.383078][T11162] bond5: entered promiscuous mode [ 325.398779][T11162] bridge7: entered promiscuous mode [ 325.415885][T11162] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 325.508569][T11162] bond5: left promiscuous mode [ 325.515756][T11162] bridge7: left promiscuous mode [ 325.858305][T11195] __nla_validate_parse: 6 callbacks suppressed [ 325.858327][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1330'. [ 326.256244][T11208] syzkaller0: entered promiscuous mode [ 326.268272][T11208] syzkaller0: entered allmulticast mode [ 326.668824][T11220] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 326.723816][T11220] bond3 (unregistering): Released all slaves [ 327.037754][T11249] tipc: Enabled bearer , priority 2 [ 327.061676][T11230] netlink: 'syz.0.1342': attribute type 1 has an invalid length. [ 327.526951][T11260] xt_HMARK: proto mask must be zero with L3 mode [ 327.561919][T11264] syzkaller1: entered promiscuous mode [ 327.586041][T11264] syzkaller1: entered allmulticast mode [ 327.714636][T11278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1353'. [ 327.850496][T11285] netlink: 'syz.2.1354': attribute type 9 has an invalid length. [ 328.371173][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 328.475832][T11315] netlink: 'syz.1.1361': attribute type 2 has an invalid length. [ 329.320819][T11349] netlink: 'syz.4.1369': attribute type 14 has an invalid length. [ 329.390316][T11352] syzkaller0: entered promiscuous mode [ 329.396451][T11352] syzkaller0: entered allmulticast mode [ 329.441901][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1370'. [ 329.453161][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1370'. [ 329.463699][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 329.474110][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 329.623791][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 329.667459][T11359] netlink: 496 bytes leftover after parsing attributes in process `syz.3.1371'. [ 329.931207][T11378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1376'. [ 330.049722][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 330.817178][T11421] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 330.838254][T11420] lo speed is unknown, defaulting to 1000 [ 330.961545][T11421] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.051533][T11422] bond5: (slave gretap2): making interface the new active one [ 331.075463][T11422] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 331.254632][T11431] netlink: 'syz.4.1389': attribute type 21 has an invalid length. [ 331.335089][T11433] netlink: 'syz.1.1388': attribute type 13 has an invalid length. [ 331.409887][T11433] netlink: 'syz.1.1388': attribute type 17 has an invalid length. [ 331.661120][T11433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.692127][T11433] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.704240][T11433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.732399][T11433] tipc: Resetting bearer [ 331.753901][T11433] tipc: Resetting bearer [ 331.835083][T11433] bridge0: port 3(vlan2) entered blocking state [ 331.841671][T11433] bridge0: port 3(vlan2) entered forwarding state [ 331.883574][T11433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.905634][T11433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.971556][T11433] veth1_vlan: left promiscuous mode [ 331.996221][T11433] veth0_vlan: left promiscuous mode [ 332.030138][T11433] veth0_vlan: entered promiscuous mode [ 332.049260][T11433] veth1_vlan: entered promiscuous mode [ 332.095257][T11433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.131381][T11433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.167836][T11433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.184070][T11433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.198491][T11433] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 332.217013][ T807] lo speed is unknown, defaulting to 1000 [ 332.226611][ T807] syz0: Port: 1 Link ACTIVE [ 332.267769][T11440] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 332.296522][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.312145][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.394052][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.401385][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.491241][ T9479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.507510][ T9479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.522452][ T9479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.557341][ T807] lo speed is unknown, defaulting to 1000 [ 332.656393][T11462] pimreg: entered allmulticast mode [ 332.687019][T11462] pimreg: left allmulticast mode [ 333.080606][ T9479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.365097][T11482] __nla_validate_parse: 3 callbacks suppressed [ 333.365118][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 333.413348][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 333.655860][T11481] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 333.751051][T11481] bond6 (unregistering): Released all slaves [ 333.967388][T11500] syzkaller0: entered promiscuous mode [ 334.011805][T11500] syzkaller0: entered allmulticast mode [ 334.409229][T11518] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 334.416888][T11518] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 334.428057][T11518] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 334.724029][T11527] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1409'. [ 334.744008][T11527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1409'. [ 334.851083][T11532] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 334.884185][T11531] syzkaller0: entered promiscuous mode [ 334.884795][T11532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.899936][T11531] syzkaller0: entered allmulticast mode [ 335.014727][T11535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1413'. [ 335.235934][T11538] ip6gretap1: entered promiscuous mode [ 335.254861][T11538] ip6gretap1: entered allmulticast mode [ 335.307445][T11546] openvswitch: netlink: IP tunnel dst address not specified [ 335.368138][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1417'. [ 335.399038][T11551] xt_hashlimit: size too large, truncated to 1048576 [ 335.450707][T11553] syzkaller1: entered promiscuous mode [ 335.481732][T11553] syzkaller1: entered allmulticast mode [ 335.522488][T11556] sctp: [Deprecated]: syz.2.1414 (pid 11556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.522488][T11556] Use struct sctp_sack_info instead [ 335.534037][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1418'. [ 335.997763][ T30] audit: type=1800 audit(1779517815.365:5): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1422" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1579 res=0 errno=0 [ 336.233571][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1424'. [ 336.951157][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1433'. [ 336.969831][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1433'. [ 337.103761][T11629] bridge_slave_0 (unregistering): left allmulticast mode [ 337.120974][T11629] bridge_slave_0 (unregistering): left promiscuous mode [ 337.129348][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.643955][T11656] macvlan0: entered promiscuous mode [ 337.676318][T11656] macvlan0 (unregistering): left promiscuous mode [ 337.954177][T11664] lo speed is unknown, defaulting to 1000 [ 338.351660][T11684] tipc: Enabling of bearer rejected, already enabled [ 338.623571][T11695] tipc: Enabled bearer , priority 0 [ 338.743536][T11691] syzkaller0: entered promiscuous mode [ 338.772873][T11691] syzkaller0: entered allmulticast mode [ 339.042781][T11718] __nla_validate_parse: 3 callbacks suppressed [ 339.042801][T11718] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1450'. [ 339.218561][T11698] tipc: Resetting bearer [ 339.372243][T11698] tipc: Disabling bearer [ 339.517772][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 339.856042][T11730] lo speed is unknown, defaulting to 1000 [ 339.887803][T11738] IPVS: Unknown mcast interface: vcan0 [ 340.651711][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 340.791394][T11725] lo speed is unknown, defaulting to 1000 [ 340.843756][T11754] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 340.903711][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 340.907306][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 341.227158][T11742] lo speed is unknown, defaulting to 1000 [ 341.568987][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 341.949267][T11774] lo speed is unknown, defaulting to 1000 [ 342.045405][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1465'. [ 343.503953][T11793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.567810][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 343.633835][T11798] netlink: 'syz.4.1469': attribute type 13 has an invalid length. [ 343.683549][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1469'. [ 344.119359][T11806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.646877][T11827] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1475'. [ 344.713021][ C0] ================================================================== [ 344.721526][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 344.729571][ C0] Read of size 2 at addr ffff88815722eab4 by task syz.0.1475/11827 [ 344.737897][ C0] [ 344.740279][ C0] CPU: 0 UID: 0 PID: 11827 Comm: syz.0.1475 Not tainted syzkaller #0 PREEMPT(full) [ 344.740310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.740329][ C0] Call Trace: [ 344.740340][ C0] [ 344.740350][ C0] dump_stack_lvl+0xe8/0x150 [ 344.740400][ C0] print_address_description+0x55/0x1e0 [ 344.740429][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 344.740457][ C0] print_report+0x58/0x70 [ 344.740482][ C0] kasan_report+0x117/0x150 [ 344.740514][ C0] ? __netif_receive_skb_list_core+0x24d/0x810 [ 344.740550][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 344.740582][ C0] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 344.740619][ C0] __dev_queue_xmit+0x29a/0x3950 [ 344.740654][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 344.740680][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 344.740704][ C0] ? __pskb_pull_tail+0x11c3/0x17b0 [ 344.740748][ C0] ? __asan_memset+0x22/0x50 [ 344.740774][ C0] ? __skb_pad+0x405/0x610 [ 344.740799][ C0] ? __skb_put+0x49/0xe0 [ 344.740831][ C0] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 344.740869][ C0] hsr_forward_skb+0x167e/0x2a80 [ 344.740906][ C0] ? hsr_forward_skb+0xbb/0x2a80 [ 344.740938][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 344.740967][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 344.741000][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.741039][ C0] ? hsr_addr_is_self+0x26/0x3f0 [ 344.741064][ C0] ? hsr_handle_frame+0x6ab/0xa50 [ 344.741095][ C0] hsr_handle_frame+0x6b8/0xa50 [ 344.741129][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 344.741158][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 344.741190][ C0] ? unwind_next_frame+0xa6/0x2550 [ 344.741217][ C0] ? lock_acquire+0x106/0x350 [ 344.741243][ C0] ? lock_acquire+0x106/0x350 [ 344.741270][ C0] ? unwind_next_frame+0xa6/0x2550 [ 344.741296][ C0] ? lock_acquire+0x106/0x350 [ 344.741321][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 344.741353][ C0] ? unwind_next_frame+0xa6/0x2550 [ 344.741383][ C0] ? unwind_next_frame+0xa6/0x2550 [ 344.741409][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 344.741436][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 344.741466][ C0] __netif_receive_skb_list_core+0x24d/0x810 [ 344.741498][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 344.741529][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 344.741564][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 344.741590][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 344.741621][ C0] ? lock_acquire+0x106/0x350 [ 344.741646][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 344.741676][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 344.741705][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 344.741752][ C0] ? dev_gro_receive+0x1773/0x23c0 [ 344.741792][ C0] napi_complete_done+0x299/0x730 [ 344.741825][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 344.741856][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 344.741891][ C0] gro_cell_poll+0x5a9/0x5d0 [ 344.741928][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 344.741959][ C0] __napi_poll+0xae/0x340 [ 344.742008][ C0] ? skb_defer_free_flush+0x233/0x260 [ 344.742040][ C0] net_rx_action+0x627/0xf70 [ 344.742081][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 344.742119][ C0] ? sched_clock+0x3f/0x60 [ 344.742159][ C0] handle_softirqs+0x22a/0x840 [ 344.742184][ C0] ? do_softirq+0x76/0xd0 [ 344.742208][ C0] ? tun_rx_batched+0x185/0x790 [ 344.742240][ C0] do_softirq+0x76/0xd0 [ 344.742261][ C0] [ 344.742269][ C0] [ 344.742276][ C0] __local_bh_enable_ip+0xf8/0x130 [ 344.742298][ C0] ? tun_rx_batched+0x185/0x790 [ 344.742327][ C0] tun_rx_batched+0x617/0x790 [ 344.742361][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 344.742392][ C0] ? tun_get_user+0x2787/0x43e0 [ 344.742422][ C0] ? tun_get_user+0x2787/0x43e0 [ 344.742450][ C0] ? tun_get_user+0x2394/0x43e0 [ 344.742481][ C0] ? tun_get_user+0x2394/0x43e0 [ 344.742510][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 344.742533][ C0] tun_get_user+0x2bbc/0x43e0 [ 344.742563][ C0] ? tun_get_user+0x2787/0x43e0 [ 344.742598][ C0] ? aa_file_perm+0x192/0x15e0 [ 344.742630][ C0] ? aa_file_perm+0x50e/0x15e0 [ 344.742661][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 344.742692][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 344.742718][ C0] ? __pfx___futex_wait+0x10/0x10 [ 344.742763][ C0] ? ref_tracker_alloc+0x35c/0x4c0 [ 344.742794][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 344.742826][ C0] ? tun_get+0x1c/0x2f0 [ 344.742854][ C0] ? tun_get+0x1c/0x2f0 [ 344.742885][ C0] ? tun_get+0x1c/0x2f0 [ 344.742914][ C0] ? tun_get+0x1c/0x2f0 [ 344.742945][ C0] tun_chr_write_iter+0x113/0x200 [ 344.742977][ C0] vfs_write+0x61d/0xb90 [ 344.743015][ C0] ? __pfx_vfs_write+0x10/0x10 [ 344.743053][ C0] ? __fget_files+0x2a/0x420 [ 344.743085][ C0] ksys_write+0x150/0x270 [ 344.743116][ C0] ? __pfx_ksys_write+0x10/0x10 [ 344.743153][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.743176][ C0] do_syscall_64+0x15f/0xf80 [ 344.743198][ C0] ? trace_irq_disable+0x3b/0x140 [ 344.743230][ C0] ? clear_bhb_loop+0x40/0x90 [ 344.743249][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.743266][ C0] RIP: 0033:0x7f921c39ce59 [ 344.743284][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.743300][ C0] RSP: 002b:00007f921a5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.743320][ C0] RAX: ffffffffffffffda RBX: 00007f921c615fa0 RCX: 00007f921c39ce59 [ 344.743334][ C0] RDX: 000000000000fdef RSI: 0000200000000340 RDI: 0000000000000004 [ 344.743345][ C0] RBP: 00007f921c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 344.743359][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.743372][ C0] R13: 00007f921c616038 R14: 00007f921c615fa0 R15: 00007fff96088958 [ 344.743395][ C0] [ 344.743401][ C0] [ 345.349470][ C0] The buggy address belongs to the physical page: [ 345.356359][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15722e [ 345.365846][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 345.373117][ C0] raw: 057ff00000000000 ffffea00055c8b88 ffffea00055c8b88 0000000000000000 [ 345.381726][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 345.390728][ C0] page dumped because: kasan: bad access detected [ 345.397508][ C0] page_owner info is not present (never set?) [ 345.403601][ C0] [ 345.405953][ C0] Memory state around the buggy address: [ 345.411602][ C0] ffff88815722e980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 345.419697][ C0] ffff88815722ea00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 345.427779][ C0] >ffff88815722ea80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 345.435914][ C0] ^ [ 345.441577][ C0] ffff88815722eb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 345.449673][ C0] ffff88815722eb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 345.458018][ C0] ================================================================== [ 345.466317][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 345.473733][ C0] CPU: 0 UID: 0 PID: 11827 Comm: syz.0.1475 Not tainted syzkaller #0 PREEMPT(full) [ 345.483173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.493279][ C0] Call Trace: [ 345.496695][ C0] [ 345.499951][ C0] vpanic+0x56c/0xa60 [ 345.504701][ C0] ? __pfx_vpanic+0x10/0x10 [ 345.509270][ C0] ? irqentry_exit+0x218/0x760 [ 345.514492][ C0] panic+0xc5/0xd0 [ 345.518365][ C0] ? __pfx_panic+0x10/0x10 [ 345.522838][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 345.528537][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 345.534232][ C0] check_panic_on_warn+0x89/0xb0 [ 345.539232][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 345.545248][ C0] end_report+0x73/0x170 [ 345.549556][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 345.555244][ C0] kasan_report+0x128/0x150 [ 345.559819][ C0] ? __netif_receive_skb_list_core+0x24d/0x810 [ 345.566303][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 345.572269][ C0] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 345.577889][ C0] __dev_queue_xmit+0x29a/0x3950 [ 345.583083][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 345.588213][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 345.593656][ C0] ? __pskb_pull_tail+0x11c3/0x17b0 [ 345.598922][ C0] ? __asan_memset+0x22/0x50 [ 345.603664][ C0] ? __skb_pad+0x405/0x610 [ 345.608604][ C0] ? __skb_put+0x49/0xe0 [ 345.612909][ C0] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 345.619100][ C0] hsr_forward_skb+0x167e/0x2a80 [ 345.624116][ C0] ? hsr_forward_skb+0xbb/0x2a80 [ 345.629123][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 345.634462][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.639955][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.645920][ C0] ? hsr_addr_is_self+0x26/0x3f0 [ 345.651102][ C0] ? hsr_handle_frame+0x6ab/0xa50 [ 345.656206][ C0] hsr_handle_frame+0x6b8/0xa50 [ 345.661109][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 345.666546][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 345.672214][ C0] ? unwind_next_frame+0xa6/0x2550 [ 345.677381][ C0] ? lock_acquire+0x106/0x350 [ 345.682120][ C0] ? lock_acquire+0x106/0x350 [ 345.686849][ C0] ? unwind_next_frame+0xa6/0x2550 [ 345.691997][ C0] ? lock_acquire+0x106/0x350 [ 345.696705][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 345.702979][ C0] ? unwind_next_frame+0xa6/0x2550 [ 345.708121][ C0] ? unwind_next_frame+0xa6/0x2550 [ 345.713261][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 345.718220][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 345.723184][ C0] __netif_receive_skb_list_core+0x24d/0x810 [ 345.729284][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 345.734612][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 345.741781][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 345.747112][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 345.753305][ C0] ? lock_acquire+0x106/0x350 [ 345.758376][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 345.764941][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 345.771667][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 345.776820][ C0] ? dev_gro_receive+0x1773/0x23c0 [ 345.782055][ C0] napi_complete_done+0x299/0x730 [ 345.787115][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 345.792684][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 345.797488][ C0] gro_cell_poll+0x5a9/0x5d0 [ 345.802113][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 345.806906][ C0] __napi_poll+0xae/0x340 [ 345.811262][ C0] ? skb_defer_free_flush+0x233/0x260 [ 345.816671][ C0] net_rx_action+0x627/0xf70 [ 345.821297][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 345.826450][ C0] ? sched_clock+0x3f/0x60 [ 345.830901][ C0] handle_softirqs+0x22a/0x840 [ 345.835694][ C0] ? do_softirq+0x76/0xd0 [ 345.840048][ C0] ? tun_rx_batched+0x185/0x790 [ 345.844927][ C0] do_softirq+0x76/0xd0 [ 345.849277][ C0] [ 345.852230][ C0] [ 345.855179][ C0] __local_bh_enable_ip+0xf8/0x130 [ 345.860311][ C0] ? tun_rx_batched+0x185/0x790 [ 345.865560][ C0] tun_rx_batched+0x617/0x790 [ 345.870289][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 345.875528][ C0] ? tun_get_user+0x2787/0x43e0 [ 345.880409][ C0] ? tun_get_user+0x2787/0x43e0 [ 345.885287][ C0] ? tun_get_user+0x2394/0x43e0 [ 345.890875][ C0] ? tun_get_user+0x2394/0x43e0 [ 345.895790][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 345.901192][ C0] tun_get_user+0x2bbc/0x43e0 [ 345.905904][ C0] ? tun_get_user+0x2787/0x43e0 [ 345.911579][ C0] ? aa_file_perm+0x192/0x15e0 [ 345.916376][ C0] ? aa_file_perm+0x50e/0x15e0 [ 345.921167][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 345.926312][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 345.931708][ C0] ? __pfx___futex_wait+0x10/0x10 [ 345.936773][ C0] ? ref_tracker_alloc+0x35c/0x4c0 [ 345.941918][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 345.947407][ C0] ? tun_get+0x1c/0x2f0 [ 345.951763][ C0] ? tun_get+0x1c/0x2f0 [ 345.956317][ C0] ? tun_get+0x1c/0x2f0 [ 345.960534][ C0] ? tun_get+0x1c/0x2f0 [ 345.964825][ C0] tun_chr_write_iter+0x113/0x200 [ 345.970082][ C0] vfs_write+0x61d/0xb90 [ 345.974482][ C0] ? __pfx_vfs_write+0x10/0x10 [ 345.979301][ C0] ? __fget_files+0x2a/0x420 [ 345.983928][ C0] ksys_write+0x150/0x270 [ 345.988297][ C0] ? __pfx_ksys_write+0x10/0x10 [ 345.993181][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.999273][ C0] do_syscall_64+0x15f/0xf80 [ 346.003975][ C0] ? trace_irq_disable+0x3b/0x140 [ 346.009037][ C0] ? clear_bhb_loop+0x40/0x90 [ 346.013747][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.019658][ C0] RIP: 0033:0x7f921c39ce59 [ 346.024114][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.044007][ C0] RSP: 002b:00007f921a5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.052453][ C0] RAX: ffffffffffffffda RBX: 00007f921c615fa0 RCX: 00007f921c39ce59 [ 346.061251][ C0] RDX: 000000000000fdef RSI: 0000200000000340 RDI: 0000000000000004 [ 346.069265][ C0] RBP: 00007f921c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 346.077282][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.085938][ C0] R13: 00007f921c616038 R14: 00007f921c615fa0 R15: 00007fff96088958 [ 346.093992][ C0] [ 346.098136][ C0] Kernel Offset: disabled [ 346.102697][ C0] Rebooting in 86400 seconds..