last executing test programs: 5.037789468s ago: executing program 0 (id=1424): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x90000013}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x68, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 4.865382644s ago: executing program 1 (id=1427): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x24, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005, 0x0, 0x8010}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x3a, 0xe}, {0x20, 0x110, 0x1, "296c93a1efc8b97f01"}], 0x30}, 0x20000880) 4.586160283s ago: executing program 1 (id=1429): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf250500000008000200020000006bd64a37b7681fd6f60d9c153537460e76f9c0d5cdc5025bd7302a950147a6e45675eb6c70b83cf0d177ce5a2e939e362a3970aa"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f0000000180)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r8, 0x104, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x48091) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) (rerun: 32) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r10, &(0x7f00000000c0)={0x27, r9, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) r11 = socket(0x2d, 0x2, 0x0) connect$netlink(r11, &(0x7f0000000140)=@unspec={0x2d, 0xa00}, 0xc) (async) close(r1) 4.546766582s ago: executing program 0 (id=1430): unshare(0x68040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0xc, 0x81, &(0x7f0000000800)="1a000000fe0f0000a472b05a09d2f9ed422c6033a2c3f53097b98cbb4198c94a2c70000000004f99c7a50f059e7786bfa1a9ef95b7eec901f102af108f1c1bef09105b35a178373bb62a4f4041cffa838bc9c4b6037de47c2339adffa9f24e66788da2a32e4dacb47cf1aeda29d020fc38f817d7be06ddcead78cabffe12373ba7d875d233189892aa64e61442fce1fcedd61bddb919b3a79c2609bc0423e4cae14b328ab9da1db943fa207436f8ddcad97ac0da7574b6a674ece0691ca69260f46e55379a4e25f3f95e6a1c2692d87c3d4be85ee0848a26660c5057e76e40a728fcf258ab65000000000000000000000000003c6cde06f4d55e37c19418b61069a64bffd70c02342a0ad8d0881ecab7b75168a219aa021c3878ef5e8832bc636668a5fe69d3a041effbb99fcefb6a9e6fd2fcf8b3b05695fe3bedad55279ffd91dfa496f19f202bc77f58a1f38b28dccc599856da214682c392b913f49a7f8282253272d534b7c1a6b3eff5041ec04df22350d638b5082e4bae183006cc6b257f7613065b642bb6b6882068a77b442165cbf95628c3b4b2a9c814cc00c1f374fdb75cdd9b1181f481521ae692eb4eaf71bf141f53a0f907e78c3ec4783c5adc535480743f7c1a374fda7e00cba5b892b04d76b1392f39dbb270793d35e35b2c8a8083f2a78c9fd4570fd3fd46a3a958398c1d465f415022e3296d9cd76f8ef26ef4fbebef8150877c8c7442eeda358e9452a12ea6a7da64ad67810c0de317224e08", 0x222) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1128000, 0x1000, 0x4}, 0x20) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000680)={&(0x7f0000000600)=[{&(0x7f0000000080)="48e0d2dbc03778b748998137d126be20b375f0b7ef5a0e637336616f66a1c4e809eb91829c405ae17885a3e6", 0x2c}, {&(0x7f00000002c0)="d5e8bc5ef5dee5c7919b24823617b29e6f0aa60e3d9b6780f33830b230e00a905fda000856a2b9277fb19b5ec9bf36c734bd4426ac684962048e4f1650c4c7fba29e40a60a3140f346545cba5f08d9bfeaeec8874eeabb2aa49beb7ff137d05c508f7a878b309fe4f20028c490b84bd7a068fe6d1feb8a62a91bdeab70d90107a75220a13e0f72bfc4d933d1866225866dcb1276259abc3bab73eeeb99e6e64fc0b2d066d2c5d59d2eaca32b56cec84f3ddee996f3634190fc19ba1c5ec8bc45312bdd3c", 0xc4}, {&(0x7f00000003c0)="41b4b0c2317eb6c23a4c62eea5c48e89a48ded280d449b5136a46f0eeda311bef03d29d96c41f45895934f9cbd9b142b7b361139920df27518", 0x39}, {&(0x7f0000000400)="6b50363c869950967143814b4c69468c09e6cb5cb31a6a94ed4b20a79ca808049df33829ee5572754e7be945da1bb476b4243e161bfb48a0a22b7466e8551df0198771457e5e", 0x46}, {&(0x7f0000000480)="984beacdd5f686f2b7bfa7ff3ade5ebca267621a8c1e8673a140711187afb487921eabad5d0aa7ee03530be1da0f558345c8c1949e33de3e0e5a99d838040bec913923dfef8500070c046506c1c0f2d806d46ac0bcb43b7cae0e872602a496916e260ee53d0781b8ed963544a21b997f7ef448e0545c01b9e84db0b9b84d7c692a582993469264b38271d3e059eabb36a3", 0x91}, {&(0x7f0000000540)="68b1e4d640fef80a8ed64c9e2eafa5aa7ca06c631e804ad192661d8ea25b3e2c5fb6e9f5dc863d89a670005e1716551a715dfd0dd5c4e9c7c48e22f22c5b6b8cdb5b2d74266c6ac2a4627a9100456ed4e589dbdf5d2ab1e037eef4ac1fa1a8668d91a52da37f4c798f32a91008cc384ff241af72b6c8cc27f6e4e3395b4a0fc0b691547cd19d87389a5f6194d45406d124332cc30e09c16449b862e4679dae0b875e13fd90bd7a8a92766d1e437c90f652e25a8aa757", 0xb6}], 0x6, 0xd, 0x0, 0xeeb, 0x3, 0x4, 0x5, 0xfd}) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000006", 0x8) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e22, @empty}}) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x1000, 0x5, 0x6, 0x7, 0xfffffffffffffff8, 0x4], 0x1, 0x0, 0x0, [{}]}, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) 3.845941813s ago: executing program 3 (id=1436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x28, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000800000000000000000060ffd5505e1a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x2, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000680)={@loopback, @initdev, 0x0}, &(0x7f00000006c0)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0xff000000, 'dummy0\x00', 'ipvlan0\x00', {0xff}, {}, 0x73, 0x3, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xedd47732473098dc}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x80000001, 0x4, 0x1, 0x0, 0x0, "b130473c3113287a14b2984e26e5ff46eb81427191a1f41c9bfcf29a4cb60b90def126cff9aa7aff33caf874d1d1fca2b4b4520019e6d9b145f05d68d0304287"}}}, {{@ip={@rand_addr=0x64010100, @multicast2, 0x0, 0xff000000, 'batadv_slave_1\x00', '\x00', {0xff}, {}, 0x62, 0x3, 0x5c}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x3, 0x0, 0x0, 0x3, 0x4], 0x0, 0x2}, {0x0, [0x4, 0x4, 0x0, 0x1, 0x1, 0x2], 0x6, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000012c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x84c}, 0x1, 0x0, 0x0, 0x80}, 0x4000041) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x25, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x71800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0x3, 0xb, 0x3, 0x30, 0x10}]}, &(0x7f0000000640)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x40f00, 0x8, '\x00', r4, 0x25, r7, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xc, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000840)=[r9, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000880)=[{0x2, 0x5, 0x5, 0x3}, {0x0, 0x5, 0xa, 0x3}, {0x3, 0x3, 0x2, 0x3}, {0x5, 0x3, 0xb, 0x2}, {0x5, 0x1, 0xe, 0x1}, {0x2, 0x1, 0x8, 0x9}], 0x10, 0xb}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x40001}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r11 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r12, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r12, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 3.726334394s ago: executing program 3 (id=1437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x4, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="1f5d8aa44cec"}, 0x14) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfd53}, 0x98fd}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002880)=""/264, 0x108}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/152, 0x98}], 0x5}, 0x101}], 0x3, 0x20, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x24080090}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, 0x0, 0x44) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r7, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf68a75ccfdaeaba2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042cbd7000040000005c00000008000300", @ANYRES32=r10, @ANYBLOB="0c009900050000006e00000008006b000a000000"], 0x30}}, 0x10) 3.066172316s ago: executing program 3 (id=1439): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="08d7f7023a5d17220e4267c4a23b3fba497826f7f27ac9217af7b14f142682148bc577bf7211411b1c41191d2d9a7cef1f32781147e286466c3dbee6df6d798615a2f5863fe911a424c796e37d6f71b08ed6605dc866be71cb965656e8f33369f4ea276e8d5dc0725f5fdaaaded9c3af2843c8b61720f4ecbce443935272439faa76d5cbeb7b766b74fd4ef10991ac70b949d3586d2ddb0e949c20991fefa3a4bc462efc9cbc1d7110f44223e0eac04a03c7823367", 0xb5}, {&(0x7f0000000280)="c361d436f1dba5f758fefd25fc2b1d6f5c29d4ef06bb678b7fe9c2f9b5606233825ed4e6493b3eddbd5064b72ce5ee29a2621a96768dbeaccbda1e11cca55506675b11ef673fca74e5343232f0bd62288505ce8db4e8968f780b36cf87310330d82eee3ba9929b4a699d6091344e8e3d3abaeb308feebe5aa94df6f6ec744c", 0x7f}, {&(0x7f0000000300)="d9666b7d01bde4f15e2876a84fcb1bea1a2b01db4a0ebd076c061f91e94df77fdfb932f2a2edaad040e3e0f302a0757068456b03088151121fa4da5cf0294802d3e224e8cfb556f30c61ab4c8e89be660ae7032e2f760b74b176216d163cb85eed5486c091c51539b707dd6aa98a6532dcef132215ea6cb1e988b12a938eb76828525c5902c3879780575d087e19468b0758e4e01bda228a69381a1e4a04b6f58ba39e94a26e085bdbc7abb4e8c10ffd4215f3616db6b306877f5654a08d17509aa184ab47ee0a16456e6d19a0361f61c9addd54fe9509858988b5051f", 0xdd}], 0x3, &(0x7f0000000440)=[{0x58, 0x221, 0x9, "21c30b3805d02ba54ddea36e6dd27c01d23d69bfcc1733332654db8748e5cd0f0bcbe133a1fe85d9818667addc058554909152e6b509a76436b3f78f5e4481f571adeb"}, {0x10, 0x6, 0x2}, {0xa8, 0x108, 0x0, "b51c780d6a611f017da0d7efe8cf0553433193fac67d4cea547cb4451800fbf06032123a034e426ac3f771209c7596806d9cdb7521bc88c4e3478c09d5941f77e5729df3ed9212072c20082b06504d977752f53bfe8a1f59cb2880c550f85554b49189bf0205e794354a045bb7dbb449f586c37d5e30976205970629fce103243b74c6b1815a737b8c45f64bb68d4aadcb"}, {0x60, 0x0, 0x7, "569306aa86b3d2747cda1a00974b9846bdcbdb570a44fa1ecaa1cb2f770f81fe805b9cbdfd119377800688034909bf7f0944dedde4d8882dbc3799374d0dda7fb11665d3ef433ca90b6d7b"}], 0x170}, 0x40000) (async) listen(r0, 0xfffffffc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept$inet6(r0, 0x0, &(0x7f0000000240)) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 2.615818718s ago: executing program 4 (id=1442): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES32], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c14}, 0x4008840) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd069d254564c1698}, 0xc801) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0x4, 0x4}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000440), 0xf, 0x6) (async) syz_extract_tcp_res(&(0x7f0000000440)={0x41424344}, 0xf, 0x6) syz_extract_tcp_res(&(0x7f00000000c0), 0xffffffff, 0x6) (async) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0xffffffff, 0x6) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x30, 0x263, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local}, {{0x0, 0x4e22, 0x41424344, r6, 0x0, 0x2, 0x40000000000000de, 0x4, 0x0, 0x0, 0x0, {[@eol, @window={0x3, 0x3, 0xf8}, @mss={0x2, 0x4, 0x8}]}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xc6b, &(0x7f0000000800)={@multicast, @local, @void, {@ipv6={0x86dd, @esp={0x2, 0x6, "8facc6", 0xc35, 0x32, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x3b, 0x0, 0x35, 0x1, 0x0, 0x1c, 0x65}, @dstopts={0x2b, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xc14}, @jumbo={0xc2, 0x4, 0x80000001}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @srh={0x33, 0x6, 0x4, 0x3, 0x2, 0x68, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @routing={0xff, 0x12, 0x0, 0x3, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x2b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x8000, [0x2, 0x3, 0x100, 0xc5c000000, 0x0]}}]}, @fragment={0x73, 0x0, 0xc, 0x0, 0x0, 0x1e, 0x68}, @srh={0x89, 0x8, 0x4, 0x4, 0xfa, 0x0, 0x3, [@dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2]}, @srh={0x8e, 0xc, 0x4, 0x6, 0xeb, 0x58, 0xae78, [@dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x13}, @private1, @dev={0xfe, 0x80, '\x00', 0x27}]}], {0x4d2, 0x7fff, @cc={0x1, 0x0, 0x3, 0x7fffffff, 0x0, 0x8, 0x9, [@ipv6=@tcp={0x8, 0x6, "4b46e1", 0x11d, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x19}, @private2, {[@fragment={0x87, 0x0, 0x6, 0x0, 0x0, 0x2, 0x64}, @srh={0x87, 0xa, 0x4, 0x5, 0x9, 0x0, 0x9, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1]}, @routing={0x0, 0x4, 0x2, 0x2, 0x0, [@empty, @loopback]}], {{0x4e21, 0x4e20, r3, r4, 0x0, 0x0, 0x14, 0x8, 0x3ca9, 0x0, 0xff81, {[@mss={0x2, 0x4, 0x10}, @generic={0x0, 0x12, "fcbfb468f899e4692a9b94f14cd3fbe0"}, @fastopen={0x22, 0x3, "0f"}, @mptcp=@generic={0x61, 0xa, "b0994bcca0aaf282"}, @exp_fastopen={0xfe, 0x11, 0xf989, "797995b55685020cb98d4039eb"}, @exp_smc={0xfe, 0x6}]}}, {"49c34c337e0674f5fe8429b57dd90633ef557d9bc543b692b29e1121625c8d566f3781fffb1d13b29077f032001abed4377adb5f225b85c6aab3231cad8edb40447f39ecf6"}}}}, @ipv4=@udp={{0x30, 0x4, 0x0, 0x20, 0x108, 0x68, 0x0, 0xf, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@lsrr={0x83, 0x1b, 0xcc, [@broadcast, @empty, @local, @loopback, @local, @multicast2]}, @generic={0x82, 0xa, "4ca8f8491d74ba0e"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0xbe, [@local, @multicast2, @local, @loopback, @multicast2, @loopback, @multicast2, @remote, @remote]}, @timestamp_prespec={0x44, 0x54, 0x37, 0x3, 0xd, [{@multicast2, 0x9}, {@multicast1, 0x100}, {@local, 0xf1}, {@local, 0x3}, {@private=0xa010100, 0x5}, {@empty, 0x4}, {@private=0xa010100, 0xfff}, {@private=0xa010100, 0x3ff}, {@remote, 0x7}, {@broadcast, 0x39}]}, @generic={0x82, 0x6, "4af8cfb6"}]}}, {0x4e20, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "37c3868a266bba80f9ca8f7d2e67875f42200f113acfc0ce", "8fc61a521475d5ada06584721ad74ea2711d26eb58a5495d4e33b5b0450de683"}}}, @ipv4=@gre={{0xb, 0x4, 0x2, 0x36, 0x14f, 0x66, 0x0, 0x39, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0x3a, [@local, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x32, 0x3, 0xb, [{@local, 0x122f3f42}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x2b, 0x0, [], "123f7cab44571d42f9e9bc8968b438d56d590b451814ec4fef4213fd54935082b675457b4edec88ac9d577"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "63ef0f091f1307021e7cdd3ba66cf8cf34086beb252f3b44a3b12144617d2bd0b4"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x800, 0x7], "ed8a6cfcae504b26c53814ee6665c34521c709745ad756e35e794ec7a41f0de26aa1ea58e86f6f96123d9b7d1e05ba5db3ed4f749a7b1dd4c78a33d5da0a61360d9aea9ecab22735887d56fe97ebb0da4c84144b98a129b3c434f8f14c6afa00f1aeedb807e86972c4934206d4507d201cb16e387052be028478180105db64cdcccfb30536"}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x9, 0x0, 0x1, 0x2, 0x5, 0x4}, 0x1, {0xe}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0xe, 0x1, 0x0, 0x0, 0x6, 0x4}, 0x2, {0x18000000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "ce2c587bc7fcb98a"}}}, @ipv4=@tcp={{0x7, 0x4, 0x0, 0x25, 0xe2, 0x67, 0x0, 0x3, 0x6, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xdb, [@private=0xa010100]}]}}, {{0x4e23, 0x4e21, r5, 0x41424344, 0x1, 0x0, 0x16, 0x22, 0x34, 0x0, 0x3, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x10, 0x0, 0xffffffff}, @fastopen={0x22, 0x6, "6cbcf5be"}, @timestamp={0x8, 0xa, 0x3, 0x1000}, @window={0x3, 0x3, 0x8}, @md5sig={0x13, 0x12, "17f5cbb11b55abd162b859ecc9d5c74f"}, @mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x81, 0x8, 0x8}]}}, {"f4b8f8500d68655b88508d9a989721a6a185825d839443bcabc6985de83e70f7adc9cae171907f2677784288fb841cfc73dfdeadd49d49293e93c2fba911ed3f5f7ee57896c5b3eac1babe92d270f5eb4d47e6c23aa9d89b47df289f57475a0e745e6d35ea6fba49b71dc9e55220"}}}, @ipv4=@tcp={{0xf, 0x4, 0x3, 0x38, 0x16a, 0x68, 0x0, 0xa, 0x6, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x86, 0xd, "746e744019c51494f7b151"}, @noop, @ssrr={0x89, 0x17, 0x12, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102]}]}}, {{0x4e22, 0x4e21, r6, r7, 0x0, 0x0, 0x17, 0x2, 0x7, 0x0, 0x7ff, {[@generic={0xfe, 0x3, 'B'}, @eol, @generic={0x1, 0xe, "926e9ce479c39b4c91344088"}, @mptcp=@ack={0x1e, 0x12, 0x4, 0x4, "9d7f4646035d07d7e3c5a697fc7a"}, @exp_fastopen={0xfe, 0x14, 0xf989, "a4cf4241b29c33d7c7c8712e83d364c0"}, @generic={0x1, 0x4, "c8df"}, @fastopen={0x22, 0x9, "5f1410a3b003bf"}]}}, {"84ac880174987a6679df9f15e4a90a9884d8b945edba3c67272008511729345297dfd5875ac0689d21c7e2a7e64ef09d3300a5d29fb30d7ae3b0d192bc6326ead813b1dea3b3d9671b1ce0b72a6ae55db5fb960d886dde93b15c69ee769b6eb0e30db7e15812038497a2226ab49aac0b98f81f8dd656dc880fd54b9d096acd707d901ea2d2a4915d1f09092c2eb3f306425d362d985da7e149aaa18d173623ed45d2e042b79bd88d31d7888c49ccf8433f3fab396eaac433589daf3e33deaf6547675d246968d765f952e2a91e3cf8bd92ef"}}}, @runt="5d547d474b4f0b4b13b424c2098024", @ipv6=@tipc_packet={0xe, 0x6, "1f5198", 0x37b, 0x6, 0x0, @loopback, @empty, {[@fragment={0x89, 0x0, 0x2, 0x1, 0x0, 0x1, 0x66}, @hopopts={0x11, 0x29, '\x00', [@generic={0x5, 0x50, "0f526bd8b1ce297ab845d1355e37f32e1a23854e4e5fd8467e8291e1e5daa8c60c0ce72c21b9c81ee7ef01d5d4a3b79ae28da1f24bb14f198bdefff0c19fa76e9d16a510080fbf33d7cf9a4993af46dd"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x1, 0xd4, "41b3e1b3826484986de2fb53ae42c2472b6d4bf27c624fdc7b18c9cc4f8c9cd713fa49fafac6efe62f50c7484903f235bea5bd536988dc3cc2f89a88d2951faf8f382505a0007f738aa7a8f194ab4ce5b51702fea9d9ac93448e3ab65fc636dc18eff57e757e99a7a408a0d5fd475b7c8777165a30c82a971e5beef31fc5bdb5db203afc50709288b1d198a5c8d05367b33c3f511527461fc3683d266106bf4e63dfd39918e03b0edb62f55eb4268f46f24082b322ad1a636a5d51800e4263e20a58eeb9062a077ac0192d47612977003d08da1c"}]}, @srh={0x3c, 0x4, 0x4, 0x2, 0x2, 0x10, 0xd2f6, [@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @routing={0x2b, 0xe, 0x0, 0xc, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @empty]}, @fragment={0x2f, 0x0, 0x1, 0x0, 0x0, 0x14, 0x65}, @routing={0x2f, 0x2, 0x2, 0x6, 0x0, [@mcast2]}, @fragment={0x2f, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x67}, @routing={0x67, 0xe, 0x2, 0x60, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, @local, @dev={0xfe, 0x80, '\x00', 0x21}, @private1, @mcast2, @mcast2]}, @routing={0x5c, 0x2, 0x0, 0xf, 0x0, [@mcast2]}, @hopopts={0x32, 0x14, '\x00', [@ra={0x5, 0x2, 0xa3}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @local}, @generic={0x2, 0x7c, "46703690b8ec4f8ffee463efa4428dce2346d0dc95fc7428747fe68ac070eff1a033ba56257304c878b0b737cceb620196d0c651acfc579beb035997823207841c48f9b34609c00d96760c325aeec87ebea5ceea06a547bce3d92f9c0f03212a5a1ee5dcd34db8cdb423fcbc7852bc51b66cf8fcbd2daece1e93daa2"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}], @payload_conn={{{0x1b, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x4, 0x0, 0x1, 0x8, 0x3, 0x0, 0x8153, 0xfffa, 0x2, 0x8001, 0x4e21}}, [0x0, 0x0, 0x0]}}}, @ipv4=@icmp={{0xe, 0x4, 0x2, 0x5, 0x40, 0x67, 0x985, 0x81, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @empty, {[@timestamp_addr={0x44, 0x24, 0xf5, 0x1, 0x9, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x2b}]}]}}, @address_request={0x11, 0x0, 0x0, 0x6}}, @runt="4f9f84aeb03330aefe7c66de4fe664ef71ec0daf24c2bacd745021360d76493b350b7817ee86ba86aa39c0bf2d454dba23c54ee03113a1c4"]}, "11", 0x1}}}}}}, 0x0) (async) syz_emit_ethernet(0xc6b, &(0x7f0000000800)={@multicast, @local, @void, {@ipv6={0x86dd, @esp={0x2, 0x6, "8facc6", 0xc35, 0x32, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x3b, 0x0, 0x35, 0x1, 0x0, 0x1c, 0x65}, @dstopts={0x2b, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0xc14}, @jumbo={0xc2, 0x4, 0x80000001}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @srh={0x33, 0x6, 0x4, 0x3, 0x2, 0x68, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @routing={0xff, 0x12, 0x0, 0x3, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x2b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x8000, [0x2, 0x3, 0x100, 0xc5c000000, 0x0]}}]}, @fragment={0x73, 0x0, 0xc, 0x0, 0x0, 0x1e, 0x68}, @srh={0x89, 0x8, 0x4, 0x4, 0xfa, 0x0, 0x3, [@dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2]}, @srh={0x8e, 0xc, 0x4, 0x6, 0xeb, 0x58, 0xae78, [@dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x13}, @private1, @dev={0xfe, 0x80, '\x00', 0x27}]}], {0x4d2, 0x7fff, @cc={0x1, 0x0, 0x3, 0x7fffffff, 0x0, 0x8, 0x9, [@ipv6=@tcp={0x8, 0x6, "4b46e1", 0x11d, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x19}, @private2, {[@fragment={0x87, 0x0, 0x6, 0x0, 0x0, 0x2, 0x64}, @srh={0x87, 0xa, 0x4, 0x5, 0x9, 0x0, 0x9, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1]}, @routing={0x0, 0x4, 0x2, 0x2, 0x0, [@empty, @loopback]}], {{0x4e21, 0x4e20, r3, r4, 0x0, 0x0, 0x14, 0x8, 0x3ca9, 0x0, 0xff81, {[@mss={0x2, 0x4, 0x10}, @generic={0x0, 0x12, "fcbfb468f899e4692a9b94f14cd3fbe0"}, @fastopen={0x22, 0x3, "0f"}, @mptcp=@generic={0x61, 0xa, "b0994bcca0aaf282"}, @exp_fastopen={0xfe, 0x11, 0xf989, "797995b55685020cb98d4039eb"}, @exp_smc={0xfe, 0x6}]}}, {"49c34c337e0674f5fe8429b57dd90633ef557d9bc543b692b29e1121625c8d566f3781fffb1d13b29077f032001abed4377adb5f225b85c6aab3231cad8edb40447f39ecf6"}}}}, @ipv4=@udp={{0x30, 0x4, 0x0, 0x20, 0x108, 0x68, 0x0, 0xf, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@lsrr={0x83, 0x1b, 0xcc, [@broadcast, @empty, @local, @loopback, @local, @multicast2]}, @generic={0x82, 0xa, "4ca8f8491d74ba0e"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0xbe, [@local, @multicast2, @local, @loopback, @multicast2, @loopback, @multicast2, @remote, @remote]}, @timestamp_prespec={0x44, 0x54, 0x37, 0x3, 0xd, [{@multicast2, 0x9}, {@multicast1, 0x100}, {@local, 0xf1}, {@local, 0x3}, {@private=0xa010100, 0x5}, {@empty, 0x4}, {@private=0xa010100, 0xfff}, {@private=0xa010100, 0x3ff}, {@remote, 0x7}, {@broadcast, 0x39}]}, @generic={0x82, 0x6, "4af8cfb6"}]}}, {0x4e20, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "37c3868a266bba80f9ca8f7d2e67875f42200f113acfc0ce", "8fc61a521475d5ada06584721ad74ea2711d26eb58a5495d4e33b5b0450de683"}}}, @ipv4=@gre={{0xb, 0x4, 0x2, 0x36, 0x14f, 0x66, 0x0, 0x39, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0x3a, [@local, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x32, 0x3, 0xb, [{@local, 0x122f3f42}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x2b, 0x0, [], "123f7cab44571d42f9e9bc8968b438d56d590b451814ec4fef4213fd54935082b675457b4edec88ac9d577"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "63ef0f091f1307021e7cdd3ba66cf8cf34086beb252f3b44a3b12144617d2bd0b4"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x800, 0x7], "ed8a6cfcae504b26c53814ee6665c34521c709745ad756e35e794ec7a41f0de26aa1ea58e86f6f96123d9b7d1e05ba5db3ed4f749a7b1dd4c78a33d5da0a61360d9aea9ecab22735887d56fe97ebb0da4c84144b98a129b3c434f8f14c6afa00f1aeedb807e86972c4934206d4507d201cb16e387052be028478180105db64cdcccfb30536"}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x9, 0x0, 0x1, 0x2, 0x5, 0x4}, 0x1, {0xe}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0xe, 0x1, 0x0, 0x0, 0x6, 0x4}, 0x2, {0x18000000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "ce2c587bc7fcb98a"}}}, @ipv4=@tcp={{0x7, 0x4, 0x0, 0x25, 0xe2, 0x67, 0x0, 0x3, 0x6, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xdb, [@private=0xa010100]}]}}, {{0x4e23, 0x4e21, r5, 0x41424344, 0x1, 0x0, 0x16, 0x22, 0x34, 0x0, 0x3, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x10, 0x0, 0xffffffff}, @fastopen={0x22, 0x6, "6cbcf5be"}, @timestamp={0x8, 0xa, 0x3, 0x1000}, @window={0x3, 0x3, 0x8}, @md5sig={0x13, 0x12, "17f5cbb11b55abd162b859ecc9d5c74f"}, @mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x81, 0x8, 0x8}]}}, {"f4b8f8500d68655b88508d9a989721a6a185825d839443bcabc6985de83e70f7adc9cae171907f2677784288fb841cfc73dfdeadd49d49293e93c2fba911ed3f5f7ee57896c5b3eac1babe92d270f5eb4d47e6c23aa9d89b47df289f57475a0e745e6d35ea6fba49b71dc9e55220"}}}, @ipv4=@tcp={{0xf, 0x4, 0x3, 0x38, 0x16a, 0x68, 0x0, 0xa, 0x6, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x86, 0xd, "746e744019c51494f7b151"}, @noop, @ssrr={0x89, 0x17, 0x12, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102]}]}}, {{0x4e22, 0x4e21, r6, r7, 0x0, 0x0, 0x17, 0x2, 0x7, 0x0, 0x7ff, {[@generic={0xfe, 0x3, 'B'}, @eol, @generic={0x1, 0xe, "926e9ce479c39b4c91344088"}, @mptcp=@ack={0x1e, 0x12, 0x4, 0x4, "9d7f4646035d07d7e3c5a697fc7a"}, @exp_fastopen={0xfe, 0x14, 0xf989, "a4cf4241b29c33d7c7c8712e83d364c0"}, @generic={0x1, 0x4, "c8df"}, @fastopen={0x22, 0x9, "5f1410a3b003bf"}]}}, {"84ac880174987a6679df9f15e4a90a9884d8b945edba3c67272008511729345297dfd5875ac0689d21c7e2a7e64ef09d3300a5d29fb30d7ae3b0d192bc6326ead813b1dea3b3d9671b1ce0b72a6ae55db5fb960d886dde93b15c69ee769b6eb0e30db7e15812038497a2226ab49aac0b98f81f8dd656dc880fd54b9d096acd707d901ea2d2a4915d1f09092c2eb3f306425d362d985da7e149aaa18d173623ed45d2e042b79bd88d31d7888c49ccf8433f3fab396eaac433589daf3e33deaf6547675d246968d765f952e2a91e3cf8bd92ef"}}}, @runt="5d547d474b4f0b4b13b424c2098024", @ipv6=@tipc_packet={0xe, 0x6, "1f5198", 0x37b, 0x6, 0x0, @loopback, @empty, {[@fragment={0x89, 0x0, 0x2, 0x1, 0x0, 0x1, 0x66}, @hopopts={0x11, 0x29, '\x00', [@generic={0x5, 0x50, "0f526bd8b1ce297ab845d1355e37f32e1a23854e4e5fd8467e8291e1e5daa8c60c0ce72c21b9c81ee7ef01d5d4a3b79ae28da1f24bb14f198bdefff0c19fa76e9d16a510080fbf33d7cf9a4993af46dd"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x1, 0xd4, "41b3e1b3826484986de2fb53ae42c2472b6d4bf27c624fdc7b18c9cc4f8c9cd713fa49fafac6efe62f50c7484903f235bea5bd536988dc3cc2f89a88d2951faf8f382505a0007f738aa7a8f194ab4ce5b51702fea9d9ac93448e3ab65fc636dc18eff57e757e99a7a408a0d5fd475b7c8777165a30c82a971e5beef31fc5bdb5db203afc50709288b1d198a5c8d05367b33c3f511527461fc3683d266106bf4e63dfd39918e03b0edb62f55eb4268f46f24082b322ad1a636a5d51800e4263e20a58eeb9062a077ac0192d47612977003d08da1c"}]}, @srh={0x3c, 0x4, 0x4, 0x2, 0x2, 0x10, 0xd2f6, [@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @routing={0x2b, 0xe, 0x0, 0xc, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @empty]}, @fragment={0x2f, 0x0, 0x1, 0x0, 0x0, 0x14, 0x65}, @routing={0x2f, 0x2, 0x2, 0x6, 0x0, [@mcast2]}, @fragment={0x2f, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x67}, @routing={0x67, 0xe, 0x2, 0x60, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, @local, @dev={0xfe, 0x80, '\x00', 0x21}, @private1, @mcast2, @mcast2]}, @routing={0x5c, 0x2, 0x0, 0xf, 0x0, [@mcast2]}, @hopopts={0x32, 0x14, '\x00', [@ra={0x5, 0x2, 0xa3}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @local}, @generic={0x2, 0x7c, "46703690b8ec4f8ffee463efa4428dce2346d0dc95fc7428747fe68ac070eff1a033ba56257304c878b0b737cceb620196d0c651acfc579beb035997823207841c48f9b34609c00d96760c325aeec87ebea5ceea06a547bce3d92f9c0f03212a5a1ee5dcd34db8cdb423fcbc7852bc51b66cf8fcbd2daece1e93daa2"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}], @payload_conn={{{0x1b, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x4, 0x0, 0x1, 0x8, 0x3, 0x0, 0x8153, 0xfffa, 0x2, 0x8001, 0x4e21}}, [0x0, 0x0, 0x0]}}}, @ipv4=@icmp={{0xe, 0x4, 0x2, 0x5, 0x40, 0x67, 0x985, 0x81, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @empty, {[@timestamp_addr={0x44, 0x24, 0xf5, 0x1, 0x9, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x2b}]}]}}, @address_request={0x11, 0x0, 0x0, 0x6}}, @runt="4f9f84aeb03330aefe7c66de4fe664ef71ec0daf24c2bacd745021360d76493b350b7817ee86ba86aa39c0bf2d454dba23c54ee03113a1c4"]}, "11", 0x1}}}}}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0ea796cfd16", 0x8}], 0x1}], 0x1, 0x40800) 2.488482419s ago: executing program 1 (id=1443): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000040601030000000000000000000000040900020073797a32000000000900020073797a30004008000500010007000000"], 0x34}}, 0x4000000) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async, rerun: 64) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_hsr\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xcced, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x17, 0x0, [{0x3, 0xe, 0x8d, 0x8}, {0x1, 0xe, 0x6, 0x4}, {0x800, 0x9, 0x2, 0x100}, {0xb, 0x49, 0xfb, 0xfffff001}, {0x9, 0x9, 0xfd, 0x2}, {0x1000, 0x1, 0x9, 0xfffff801}, {0x6, 0x4, 0x3}, {0x1, 0x13, 0x1, 0x3}, {0xcec, 0x3, 0xaa, 0x80000001}, {0x6, 0xf6, 0xb6, 0xfffffffc}, {0x8, 0x57, 0x8e, 0xc}, {0x4, 0xad, 0x8}, {0x5, 0x0, 0xfb, 0x3}, {0xacde, 0x2, 0xfd, 0xd4db}, {0x87, 0x10, 0x6, 0x3ff}, {0x2820, 0x5, 0x6}, {0x3, 0x2, 0x89, 0x80000001}, {0x4, 0x8, 0x3, 0x10001}, {0x101, 0x80, 0x6, 0x7}, {0x2, 0x7, 0xc}, {0x9, 0x23, 0x71, 0x1}, {0x4, 0x7f, 0xa, 0x1ff}, {0x80, 0xa9, 0x7, 0x5}, {0x5, 0x3c, 0x9, 0x9}, {0x5, 0x7, 0x6, 0x8}, {0x9, 0xfe, 0xb, 0xd7}, {0x4, 0x81, 0x0, 0xf78000}, {0x4, 0x3, 0x6, 0x1000}, {0x56d, 0x7, 0x1, 0x2}, {0x5, 0x7, 0x0, 0x7}, {0x5, 0x43, 0x8a, 0x16c}, {0x0, 0x81, 0x2, 0x4}, {0x8, 0x1, 0x2, 0x2}, {0x9, 0x6, 0x4, 0x5}, {0x6, 0x12, 0x1, 0x7}, {0x4, 0x3, 0xfd, 0x7}, {0x4, 0xb, 0x6, 0x5}, {0x400, 0x6, 0xae, 0x80002}, {0x1a, 0x6, 0x8, 0x80}, {0x5, 0x8e, 0xe, 0x7fffffff}, {0x6, 0x5, 0x8, 0x8000}, {0x5e, 0x7, 0x4, 0x401}, {0xf, 0x5, 0x0, 0x1}, {0x2, 0x2, 0x3, 0x7}, {0x10, 0x3, 0x7, 0x1}, {0x5, 0xc, 0x3, 0x8}, {0x4, 0xd8, 0x6, 0x3}, {0x0, 0x6b, 0x3, 0x7}, {0x5, 0x6, 0xfd, 0x7fffffff}, {0x8, 0x8, 0x6, 0x7}, {0x95, 0x6, 0xb9, 0xd6cd}, {0x401, 0x3, 0xfc, 0x8}, {0x9, 0xfb, 0x5, 0x9}, {0x4, 0x8, 0x7, 0x5}, {0x0, 0x9, 0x47, 0x4}, {0x5, 0x4, 0x7, 0x7fff}, {0x8, 0xff, 0x1d, 0x2}, {0x81, 0x5, 0x2, 0x2}, {0x1, 0x4, 0x8, 0x5}, {0x1f1c, 0xc, 0x3, 0x6}, {0x3830, 0x3, 0x40, 0x7}, {0x9, 0x8, 0x4, 0x8}, {0x200, 0x2, 0x1, 0xa23}, {0x2, 0xe2, 0x5, 0xffffffff}], {0x400}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d, 0x0, 0x2a}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x9a, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r6, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000100)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r7 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000240)={0x80}) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r10, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf21, 0x2d}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7f}, @NL80211_ATTR_IE={0x42, 0x2a, [@preq={0x82, 0x25, {{0x1, 0x0, 0x1}, 0x9, 0x7a, 0xfac5, @device_a, 0x7, @void, 0xfff, 0x8001, 0x1, [{{0x1}, @broadcast, 0xfffffffe}]}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x1, 0x3, @device_b, 0x2, 0x8, 0x10001}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x73}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) bind(r7, &(0x7f0000000300)=@generic={0xb, "0000000000000100000000000000000000000000000000000000000000000000000000000000ed0000000200000000000000000700000000000004000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000001000"}, 0x80) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f0000000080)) 2.403075637s ago: executing program 4 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="00082abd7000fedbdf250b0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="28000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040091) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000180)}, 0x20) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x80}]}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010029bd7000fcdbdf2500000000", @ANYRESDEC=r3, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20008041}, 0x48880) 2.14180117s ago: executing program 4 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x30000}, [@map_fd={0x18, 0x7, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6020823bad875214, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.022120121s ago: executing program 3 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="dbdf250a808000fc0000000000040000de1b00110000001d4b58946c9dae59b8cccce5e62b0dfc420092a81d69fb85fdc6d8ecfa016b42cf48d1516eed07922659562f0b92691367fd6ba631482d76fcd974dc21cc482f5800919447f2aa9a8b16257fa9fba274d372b4b28739964bc1461c237e221fac526b902aa9eb4eea8de011f62529c9fe8673c9eadf7a76dd22cbe32cd43fbd2c6b9b3caba3426c3dbe99e62b89972baaee0140aea5f1be207aefc11d3e6720ca36c4736fe99ebbc61ad19fa0719400"/213], 0x24}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0x101d0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000100)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r9, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x20000040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000080) 1.855935495s ago: executing program 4 (id=1449): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.63438557s ago: executing program 2 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x278}}, 0x44004) listen(r2, 0x2) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = accept(r2, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000a40)="1c", 0x1, 0x4c090, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x1, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x50}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x3fffffc, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast2, 0x4e20, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x0, r7, r8}, {0x2, 0x80000000, 0x9, 0x7fffffffffffffff, 0x0, 0x8, 0x7840, 0x401}, {0x8, 0x4, 0x7, 0x1e}, 0x3, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x33}, 0x0, @in6=@remote, 0x3504, 0x5, 0x3, 0xa, 0x99, 0x4, 0x1}}, 0xe8) 1.634018996s ago: executing program 4 (id=1451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000280)="d5", 0x1) listen(r1, 0xe) accept$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xf) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) 1.525112373s ago: executing program 0 (id=1452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980), 0x35, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffe00001}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newsa={0xfc, 0x1a, 0x317, 0x0, 0x0, {{@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0xffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x5, 0x200000, 0x7, 0xffff}, {0x40000, 0x0, 0xae8}, 0xbfffffff, 0x0, 0x2, 0x4, 0x0, 0x70}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb4}}]}, 0xfc}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1c000000120005c0000100019083c41b4b4ba19973e8aa3080a5d7c7119ba48c0bf00d2414ef2d742e1812d4324aaa68c6f4757daaeb226f8302c505e3c6e7e5792df260", 0x44, 0x8050, 0x0, 0x0) 1.440780009s ago: executing program 2 (id=1453): r0 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004140)=[{0x0}, {0x0}, {0x0, 0xec}, {&(0x7f0000001440)={0x14, 0x37, 0x800, 0x70bd29, 0x25dfdbfe, "", [@nested={0x4, 0x4d}]}, 0x14}, {0x0}, {0x0}], 0x6}, 0x24000000) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000005c0)={0x470, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb899}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb01}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbfa9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe3}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f56}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3796}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x35}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x27}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x53}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x811}, 0x20000080) 1.35095009s ago: executing program 1 (id=1454): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x11, &(0x7f00000004c0)={@remote, @empty, @void, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x335}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 1.349375854s ago: executing program 0 (id=1455): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'pimreg1\x00', {0x4}, 0x4}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x20, 0x10000, 0x8, {{0x3e, 0x4, 0x2, 0x3, 0xf8, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x2b, 0x9c, [@private=0xa010100, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x39, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x9}, {@loopback, 0x5}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@multicast1, 0x3ff}, {@multicast2, 0xf}]}, @cipso={0x86, 0x15, 0x2, [{0x5, 0xf, "2446f62050629dd580cfceb7b8"}]}, @cipso={0x86, 0x2c, 0x2, [{0x2, 0x8, "244f445988c1"}, {0x0, 0x10, "ac49a642ff4dc9810636acd7ef72"}, {0x5, 0xc, "c709bc3b7f0fef8294c6"}, {0x2, 0x2}]}, @generic={0x82, 0x5, "1ff82b"}, @noop, @timestamp_addr={0x44, 0x2c, 0x35, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe7}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffe01}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x5}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xd, 0x5}, {0x10, 0x9}, {0x6, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}, @TCA_RATE={0x6, 0x5, {0xb, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x608}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c1}, 0x40) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.idle_time\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x400}, &(0x7f00000003c0)=0x8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x1402, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8005}, 0x2004c801) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000640)={0x0, 0x1, 0x2, 0x4}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000008c0)={0x9f9, 0x1, 0x4, 0x1, 0x3, 0x7, 0xb, 0x8, r3}, 0x20) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000900)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000940)={0x42, 0x0, 0x3}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x6) getsockname$tipc(r2, &(0x7f0000000980), &(0x7f00000009c0)=0x10) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000a00)={0x8, 0x0, {0x1, @struct={0x3}, 0x0, 0x2, 0x0, 0x10000, 0x7, 0x200, 0xc0, @struct={0xfff, 0x1}, 0xb73, 0x3, [0x1, 0x8, 0x800, 0xffff, 0x6, 0x50]}, {0x9, @usage=0x3073, 0x0, 0x15, 0x4, 0x2, 0x3, 0x7b, 0x80, @usage=0x8, 0xfffff000, 0x71d, [0x6, 0x0, 0x3, 0x10001, 0x2, 0x4]}, {0x8, @struct={0x39, 0x400}, 0x0, 0x10000, 0x2, 0x0, 0xfdf, 0x2, 0x50, @struct={0xfffffff8, 0x5}, 0x2895f442, 0x6, [0x9, 0x8, 0xfffffffffffffffc, 0x5, 0x9, 0x4]}, {0x7, 0x2, 0x7fffffffffffffff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000000e00)={r9, 0x2000000000, 0x100000001}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000001200)=""/176, 0xb0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001400)={'tunl0\x00', &(0x7f0000001340)={'gretap0\x00', r0, 0x40, 0x7800, 0x5, 0x0, {{0x1f, 0x4, 0x0, 0x2, 0x7c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0xe3, [@rand_addr=0x64010102, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @local, @loopback]}, @timestamp_addr={0x44, 0x4c, 0x50, 0x1, 0x6, [{@multicast1, 0x6}, {@loopback, 0x1c000000}, {@remote, 0xd86}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x42}, {@broadcast, 0x9}, {@multicast2, 0x7}, {@remote, 0xce}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000001600)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x55b76cc7061b7244}, 0xc, &(0x7f00000015c0)={&(0x7f0000001440)={0x180, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4800}, 0x40400c4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x7c, r12, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x21e9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ce}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r13 = accept4$inet6(r2, 0x0, &(0x7f00000017c0), 0x80000) ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000001800)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1e, r11}) 1.205803426s ago: executing program 2 (id=1456): r0 = socket$l2tp6(0xa, 0x2, 0x73) write(0xca, &(0x7f0000000040)="0414702a04004da270", 0x9) sendmmsg$inet6(r0, &(0x7f0000011040)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x1, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000003b0000002f000000000000001800000000000000290000003b"], 0x30}}], 0x1, 0xff00) 1.184098668s ago: executing program 1 (id=1457): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x409, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40880) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r3) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x2) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.047473746s ago: executing program 2 (id=1458): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000005c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x10, 0x4, 0x2, 0xc, 0xef2, 0x65, 0x1200, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, {[@rr={0x7, 0x1f, 0xc, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x11}]}, @generic={0x82, 0xa, "d7be0e425ec0e472"}]}}, "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"}}, 0xf00) 1.046188083s ago: executing program 0 (id=1459): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600000000000000000005000000ffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000100"/28], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18ead9df31000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@ifindex=r7, 0x36, 0x0, 0xff, &(0x7f0000000b80)=[0x0], 0x1, 0x0, &(0x7f0000000bc0)=[0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0]}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r9, 0xffffffffffffffff, 0x7, 0x0, @val=@netfilter={0x5, 0x1, 0xa93d}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x27, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000006000020000000008700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186100000c0000000000000000000100183000000100000000000000000000009500000000000000182a0000", @ANYRES32=r3, @ANYBLOB="0000000003000040185300000f00715f45eb3b0698770018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', r7, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x0, 0x8, 0x6}, 0x10, r8, r9, 0x8, 0x0, &(0x7f0000000a00)=[{0x3, 0x3, 0x2}, {0x2, 0x5, 0xc}, {0x4, 0x3, 0x3, 0xd}, {0x4, 0x3, 0x0, 0x4}, {0x5, 0x5, 0xd}, {0x5, 0x5, 0x10, 0x4}, {0x3, 0x1, 0xf, 0xb}, {0x2, 0x1, 0xa, 0x9}], 0x10, 0x80000001}, 0x94) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r10, 0x0, 0x2000000000002, &(0x7f0000000080)='\x00', 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r11 = socket$inet6(0xa, 0x2, 0x3a) mmap(0x0, 0x0, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xe, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x4c}, @exit, @ldst={0x0, 0x0, 0x0, 0x6, 0x8, 0x2, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc) 1.033336352s ago: executing program 3 (id=1460): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001, 0xf53a}, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131013710ff"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 623.222959ms ago: executing program 0 (id=1461): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010001abdd8cb5b7e3826b85cd076a22371c32b26383e117"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf2501000000000000000b"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r7, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) accept(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 622.997272ms ago: executing program 4 (id=1462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x9, 0x9ffffc}) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000180)={@loopback, @rand_addr=0x64010102, 0xffffffffffffffff, "db1ad0c9c51757078ca0e1c11298ae65db382df1743e578d9ba00f31a252e71a", 0x9, 0x9, 0x101, 0x8}, 0x3c) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20000000) r8 = socket(0x25, 0x3, 0x2) unshare(0x400) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r9, 0x29, 0x24, 0x0, &(0x7f0000000000)=0x5b) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x3, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 488.662399ms ago: executing program 1 (id=1463): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x4, 0x0, @local, @loopback}}}}, 0x3e) 164.794089ms ago: executing program 2 (id=1464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000380)={r0, &(0x7f0000000080)='GPL\x00', 0x94d82, &(0x7f00000000c0)={@align=0xb, {0x9, 0x1b9, 0x3, 0x7}}, 0x4849, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000340)=0x6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a00f2710010000000000000a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.989306ms ago: executing program 3 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x4c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0xfffff801}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24000884) (async) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x53, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000780)=[{0x30, 0x2, 0x7d, 0xfffff02c}, {0x6, 0xba, 0xff, 0xffff}]}, 0x10) write$bt_hci(r6, &(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x68) (async) socket(0x28, 0x2, 0x28) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0xc, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r11, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) 0s ago: executing program 2 (id=1466): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb0100200000000000000004000000680003000a0000000400030002"], 0x0, 0x8a, 0x0, 0x1, 0x4}, 0x28) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r5, 0x5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000280)="d5", 0x1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000140)={0xfffffff8}, 0x4) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x4) kernel console output (not intermixed with test programs): 117.575954][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.576147][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.576332][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.576514][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.576740][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.576925][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.577115][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.580364][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.580573][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.580766][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.581023][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.581214][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.581505][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.581688][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.581870][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.582057][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.582318][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.582598][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.582785][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.582968][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.583228][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.583413][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.583655][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.583834][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.584056][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.584241][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.584421][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.600002][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.600213][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.600392][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.603387][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.603574][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.603754][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.603931][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.604124][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.606154][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 117.606350][ T6486] Bluetooth: hci0: too big key_count value 38657 [ 118.122874][ T6506] bridge2: entered promiscuous mode [ 118.122895][ T6506] bridge2: entered allmulticast mode [ 118.158608][ T6506] team0: Port device bridge2 added [ 118.182511][ T6519] __nla_validate_parse: 13 callbacks suppressed [ 118.182533][ T6519] netlink: 80 bytes leftover after parsing attributes in process `syz.1.149'. [ 118.182573][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.149'. [ 118.400666][ T52] Bluetooth: hci2: connection err: -111 [ 118.588789][ T6542] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 118.624284][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 118.633664][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 118.670857][ T6542] tipc: Can't bind to reserved service type 2 [ 119.200905][ T31] audit: type=1804 audit(1791200746.483:2): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.161" name="/newroot/37/cgroup.controllers" dev="tmpfs" ino=210 res=1 errno=0 [ 119.201735][ T31] audit: type=1800 audit(1791200746.483:3): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.161" name="cgroup.controllers" dev="tmpfs" ino=210 res=0 errno=0 [ 119.202675][ T31] audit: type=1804 audit(1791200746.483:4): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.161" name="/newroot/37/cgroup.controllers" dev="tmpfs" ino=210 res=1 errno=0 [ 119.348341][ T6581] bridge1: entered promiscuous mode [ 119.348361][ T6581] bridge1: entered allmulticast mode [ 119.351731][ T6581] team0: Port device bridge1 added [ 119.406690][ T6578] netlink: 120 bytes leftover after parsing attributes in process `syz.3.163'. [ 119.676543][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 119.682120][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 119.682144][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 119.932866][ T6609] ip_tables: iptables: counters copy to user failed while replacing table [ 120.041130][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 120.041156][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 120.226937][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.228789][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.493846][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.507073][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.765690][ T102] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.765737][ T102] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.765770][ T102] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.765802][ T102] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.942106][ T6640] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 121.093825][ T6645] bridge1: entered promiscuous mode [ 121.093846][ T6645] bridge1: entered allmulticast mode [ 121.112111][ T6645] team0: Port device bridge1 added [ 121.276864][ T6650] syzkaller0: entered promiscuous mode [ 121.276887][ T6650] syzkaller0: entered allmulticast mode [ 121.357896][ T6665] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.760746][ T6688] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 124.475734][ T6697] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 124.507845][ T6699] ip_tables: iptables: counters copy to user failed while replacing table [ 124.507985][ T3361] IPVS: starting estimator thread 0... [ 124.597160][ T6701] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.878444][ T31] audit: type=1800 audit(1791200752.163:5): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name=CB dev="tmpfs" ino=262 res=0 errno=0 [ 124.962063][ T83] IPVS: starting estimator thread 0... [ 124.992288][ T6733] __nla_validate_parse: 2 callbacks suppressed [ 124.992307][ T6733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.194'. [ 125.050144][ T6741] netlink: 10 bytes leftover after parsing attributes in process `syz.2.189'. [ 125.050169][ T6741] netlink: 528 bytes leftover after parsing attributes in process `syz.2.189'. [ 125.050182][ T6741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'. [ 125.066605][ T6734] IPVS: using max 29 ests per chain, 69600 per kthread [ 126.182300][ T6717] netlink: 48 bytes leftover after parsing attributes in process `syz.0.196'. [ 126.182321][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 126.182339][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 126.548766][ T6758] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.940528][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 126.940552][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 127.123384][ T6788] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 127.181287][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 127.518275][ T6799] syzkaller0: entered promiscuous mode [ 127.518297][ T6799] syzkaller0: entered allmulticast mode [ 129.899141][ T6816] ipip0: entered allmulticast mode [ 130.008375][ T6823] syzkaller0: entered promiscuous mode [ 130.008400][ T6823] syzkaller0: entered allmulticast mode [ 130.180332][ T6848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.247409][ T6854] __nla_validate_parse: 2 callbacks suppressed [ 130.247428][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 131.586688][ T6849] ip6gre1: entered promiscuous mode [ 131.586709][ T6849] ip6gre1: entered allmulticast mode [ 131.587749][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 131.587914][ T6852] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 131.766539][ T6862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.828050][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.221'. [ 131.828073][ T6860] netlink: 356 bytes leftover after parsing attributes in process `syz.0.221'. [ 131.828087][ T6860] netlink: 68 bytes leftover after parsing attributes in process `syz.0.221'. [ 131.828104][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.221'. [ 131.880518][ T6866] Bluetooth: MGMT ver 1.23 [ 131.882160][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.224'. [ 132.075533][ T6878] netlink: 256 bytes leftover after parsing attributes in process `syz.1.227'. [ 132.076715][ T6878] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 132.324822][ T1150] IPVS: starting estimator thread 0... [ 132.422429][ T6897] IPVS: using max 27 ests per chain, 64800 per kthread [ 132.611790][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.612489][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.615100][ T6878] batman_adv: batadv0: Adding interface: syzkaller0 [ 132.615115][ T6878] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.615145][ T6878] batman_adv: batadv0: Interface activated: syzkaller0 [ 132.635782][ T6619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.837703][ T52] Bluetooth: hci3: connection err: -111 [ 132.838019][ T6880] syzkaller0: entered promiscuous mode [ 132.838038][ T6880] syzkaller0: entered allmulticast mode [ 132.875727][ T6902] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.878152][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 132.880362][ T6870] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 132.899026][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 132.949248][ T6619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.954068][ T6870] batman_adv: batadv0: Removing interface: syzkaller0 [ 132.995761][ T6619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.033608][ T6979] netlink: 'syz.2.237': attribute type 16 has an invalid length. [ 135.033630][ T6979] netlink: 'syz.2.237': attribute type 17 has an invalid length. [ 135.171053][ T6995] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.172264][ T6979] bridge0: left promiscuous mode [ 135.197050][ T6979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.199751][ T6979] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.223805][ T6979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.299718][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.302448][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.310348][ T7002] __nla_validate_parse: 1 callbacks suppressed [ 135.310365][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.3.239'. [ 135.341476][ T6979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.341499][ T6979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.390276][ T6979] veth1_vlan: left promiscuous mode [ 135.394137][ T6979] veth0_vlan: left promiscuous mode [ 135.407393][ T6979] veth0_vlan: entered promiscuous mode [ 135.445265][ T6979] veth1_vlan: entered promiscuous mode [ 135.450860][ T6979] veth1_macvtap: left promiscuous mode [ 135.451957][ T6979] veth0_macvtap: left promiscuous mode [ 135.453000][ T6979] veth0_macvtap: entered promiscuous mode [ 135.454095][ T6979] veth1_macvtap: entered promiscuous mode [ 135.495864][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.497284][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.499589][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.500896][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.548632][ T6979] bridge1: left promiscuous mode [ 135.548655][ T6979] bridge1: left allmulticast mode [ 135.555004][ T6979] ip6gre1: left promiscuous mode [ 135.555023][ T6979] ip6gre1: left allmulticast mode [ 135.577040][ T6619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.605784][ T3361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.606439][ T3361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.606464][ T3361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.606484][ T3361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.618653][ T6987] netlink: 108 bytes leftover after parsing attributes in process `syz.4.238'. [ 135.624929][ T6619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.633618][ T6987] netlink: 108 bytes leftover after parsing attributes in process `syz.4.238'. [ 135.655007][ T1222] bridge0: entered promiscuous mode [ 135.694616][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.694679][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.716786][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.716844][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.052247][ T7005] syzkaller0: entered promiscuous mode [ 136.052272][ T7005] syzkaller0: entered allmulticast mode [ 136.337694][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.578628][ T6627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.550905][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 137.550931][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 137.551688][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 137.551701][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 137.814470][ T7054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'. [ 137.814495][ T7054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'. [ 137.814535][ T7054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.248'. [ 137.916825][ T7049] IPv6: sit1: Disabled Multicast RS [ 137.932940][ T7059] syzkaller0: entered promiscuous mode [ 137.932962][ T7059] syzkaller0: entered allmulticast mode [ 138.081992][ T7070] ip_tables: iptables: counters copy to user failed while replacing table [ 138.083842][ T7070] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 138.248641][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.361904][ T7072] bond1: (slave gretap1): making interface the new active one [ 138.376696][ T7072] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 138.689343][ T7108] ip_tables: iptables: counters copy to user failed while replacing table [ 139.033352][ T7119] syzkaller1: entered promiscuous mode [ 139.033376][ T7119] syzkaller1: entered allmulticast mode [ 139.359813][ T7132] 8021q: VLANs not supported on tunl0 [ 139.606137][ T7140] syzkaller0: entered promiscuous mode [ 139.606167][ T7140] syzkaller0: entered allmulticast mode [ 139.871154][ T7166] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 140.174522][ T7173] IPVS: set_ctl: invalid protocol: 165 100.1.1.2:20001 [ 140.243756][ T7179] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 140.244635][ T7179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.272404][ T7178] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.321706][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.321706][ T7187] Use struct sctp_sack_info instead [ 140.321768][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.321768][ T7187] Use struct sctp_sack_info instead [ 140.321809][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.321809][ T7187] Use struct sctp_sack_info instead [ 140.321848][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.321848][ T7187] Use struct sctp_sack_info instead [ 140.321888][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.321888][ T7187] Use struct sctp_sack_info instead [ 140.322954][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.322954][ T7187] Use struct sctp_sack_info instead [ 140.325195][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.325195][ T7187] Use struct sctp_sack_info instead [ 140.325244][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.325244][ T7187] Use struct sctp_sack_info instead [ 140.325286][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.325286][ T7187] Use struct sctp_sack_info instead [ 140.325325][ T7187] sctp: [Deprecated]: syz.0.281 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.325325][ T7187] Use struct sctp_sack_info instead [ 140.552923][ T7174] xt_CT: No such helper "syz0" [ 140.911017][ T7207] netlink: 'syz.1.286': attribute type 11 has an invalid length. [ 140.911125][ T7207] __nla_validate_parse: 6 callbacks suppressed [ 140.911138][ T7207] netlink: 228 bytes leftover after parsing attributes in process `syz.1.286'. [ 140.921052][ T7207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.286'. [ 141.181500][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 141.201391][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 141.201422][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 141.790156][ T7248] bond1: option tlb_dynamic_lb: invalid value (128) [ 141.848159][ T7248] bond1 (unregistering): Released all slaves [ 142.584708][ T7287] netlink: 'syz.0.310': attribute type 10 has an invalid length. [ 142.668895][ T7295] netlink: 72 bytes leftover after parsing attributes in process `syz.0.310'. [ 142.716593][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 142.762070][ T7297] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 142.762091][ T7297] netlink: 'syz.4.312': attribute type 4 has an invalid length. [ 142.762103][ T7297] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.312'. [ 142.769943][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 142.879780][ T7287] team0 (unregistering): Port device bridge2 removed [ 142.934862][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 142.934895][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 142.951655][ T7281] bridge2: entered promiscuous mode [ 142.951676][ T7281] bridge2: entered allmulticast mode [ 143.167673][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'. [ 143.296945][ T52] Bluetooth: hci3: SCO packet too small [ 143.336962][ T7310] syz_tun: entered allmulticast mode [ 143.438580][ T7309] syz_tun: left allmulticast mode [ 143.616577][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.897533][ T7346] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 143.937394][ T7346] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 144.265514][ T7369] veth1_virt_wifi: entered allmulticast mode [ 144.910075][ T7384] syzkaller0: entered promiscuous mode [ 144.910097][ T7384] syzkaller0: entered allmulticast mode [ 145.115519][ T7387] openvswitch: netlink: Multiple metadata blocks provided [ 145.392874][ T7411] xt_hashlimit: size too large, truncated to 1048576 [ 145.465566][ T7412] ªªªªª7: renamed from veth1_to_hsr (while UP) [ 145.794855][ T7422] syzkaller0: entered promiscuous mode [ 145.794877][ T7422] syzkaller0: entered allmulticast mode [ 146.190025][ T7440] bridge3: entered promiscuous mode [ 146.190082][ T7440] bridge3: entered allmulticast mode [ 146.383988][ T7450] __nla_validate_parse: 4 callbacks suppressed [ 146.384008][ T7450] netlink: 44 bytes leftover after parsing attributes in process `syz.2.352'. [ 146.505701][ T7451] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.647998][ T7466] netlink: 'syz.3.357': attribute type 10 has an invalid length. [ 146.678947][ T7466] team0 (unregistering): Port device team_slave_0 removed [ 146.700502][ T7466] team0 (unregistering): Port device team_slave_1 removed [ 146.704688][ T7466] team0 (unregistering): Port device bridge1 removed [ 146.728001][ T7470] netlink: 72 bytes leftover after parsing attributes in process `syz.3.357'. [ 146.953377][ T7485] netlink: 128 bytes leftover after parsing attributes in process `syz.4.361'. [ 146.965501][ T7483] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 147.041709][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 147.099119][ T7483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.160594][ T7492] syzkaller1: entered promiscuous mode [ 147.160616][ T7492] syzkaller1: entered allmulticast mode [ 147.222208][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 147.222231][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 147.222254][ T7500] netlink: 'syz.4.365': attribute type 19 has an invalid length. [ 147.222269][ T7500] netlink: 'syz.4.365': attribute type 20 has an invalid length. [ 147.275926][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 147.275947][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 147.275970][ T7501] netlink: 'syz.4.365': attribute type 19 has an invalid length. [ 147.313773][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 147.313998][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 147.363668][ T7500] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 147.697279][ T7512] netlink: 'syz.0.369': attribute type 11 has an invalid length. [ 148.783215][ T7546] validate_nla: 1 callbacks suppressed [ 148.783235][ T7546] netlink: 'syz.3.378': attribute type 5 has an invalid length. [ 148.818525][ T7542] syzkaller1: entered promiscuous mode [ 148.818551][ T7542] syzkaller1: entered allmulticast mode [ 149.055266][ T7557] bridge2: entered promiscuous mode [ 149.055288][ T7557] bridge2: entered allmulticast mode [ 149.078671][ T7557] team0: Port device bridge2 added [ 149.347410][ T7572] netlink: 'syz.4.387': attribute type 19 has an invalid length. [ 149.348216][ T7572] netlink: 'syz.4.387': attribute type 19 has an invalid length. [ 149.394164][ T7577] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 149.811523][ T7591] netlink: 'syz.1.390': attribute type 2 has an invalid length. [ 149.958408][ T7591] : entered promiscuous mode [ 150.212577][ T7601] syzkaller1: entered promiscuous mode [ 150.212600][ T7601] syzkaller1: entered allmulticast mode [ 150.854791][ T7649] ip_tables: iptables: counters copy to user failed while replacing table [ 150.990902][ T7639] sock: sock_timestamping_bind_phc: sock not bind to device [ 151.437963][ T7676] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 151.439882][ T7675] syzkaller1: entered promiscuous mode [ 151.439903][ T7675] syzkaller1: entered allmulticast mode [ 151.441322][ T7676] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.441514][ T7676] xt_SECMARK: invalid mode: 9 [ 151.480497][ T7677] __nla_validate_parse: 25 callbacks suppressed [ 151.480516][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 151.904894][ T7686] netlink: 'syz.3.407': attribute type 12 has an invalid length. [ 151.904915][ T7686] netlink: 'syz.3.407': attribute type 29 has an invalid length. [ 151.904927][ T7686] netlink: 148 bytes leftover after parsing attributes in process `syz.3.407'. [ 151.904969][ T7686] netlink: 43 bytes leftover after parsing attributes in process `syz.3.407'. [ 152.185302][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.411'. [ 152.239201][ T7707] netlink: 56 bytes leftover after parsing attributes in process `syz.4.411'. [ 152.369528][ T7729] tipc: Started in network mode [ 152.369557][ T7729] tipc: Node identity ac14140f, cluster identity 4711 [ 152.370337][ T7729] tipc: New replicast peer: 255.255.255.255 [ 152.372074][ T7729] tipc: Enabled bearer , priority 10 [ 152.470541][ T7740] netlink: 96 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.491958][ T7740] vlan2: entered allmulticast mode [ 152.491983][ T7740] erspan0: entered allmulticast mode [ 152.507881][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.514283][ T7740] netlink: 96 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.515041][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.828175][ T7759] ip6gre3: entered promiscuous mode [ 153.151457][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 153.445214][ T7781] syzkaller1: entered promiscuous mode [ 153.445230][ T7781] syzkaller1: entered allmulticast mode [ 153.518215][ T6619] tipc: Node number set to 2886997007 [ 153.604055][ T7790] syzkaller1: entered promiscuous mode [ 153.604077][ T7790] syzkaller1: entered allmulticast mode [ 153.640564][ T7796] syzkaller1: entered promiscuous mode [ 153.640578][ T7796] syzkaller1: entered allmulticast mode [ 153.736325][ T7798] syzkaller0: entered promiscuous mode [ 153.736349][ T7798] syzkaller0: entered allmulticast mode [ 153.813856][ T7805] raw_sendmsg: syz.1.433 forgot to set AF_INET. Fix it! [ 153.896323][ T7813] IPVS: set_ctl: invalid protocol: 46 172.20.20.59:20004 [ 153.999394][ T7817] pimreg: entered allmulticast mode [ 154.150292][ T7827] syzkaller0: entered promiscuous mode [ 154.150315][ T7827] syzkaller0: entered allmulticast mode [ 154.733869][ T7862] syzkaller0: entered promiscuous mode [ 154.733893][ T7862] syzkaller0: entered allmulticast mode [ 154.940890][ T7874] xt_hashlimit: size too large, truncated to 1048576 [ 154.941080][ T7874] xt_hashlimit: max too large, truncated to 1048576 [ 155.968004][ T7912] netlink: 'syz.4.461': attribute type 4 has an invalid length. [ 156.128176][ T7900] bond0: (slave bond_slave_1): Releasing backup interface [ 156.202831][ T7908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.248374][ T7912] .`: renamed from bond0 [ 156.280769][ T7914] netlink: 'syz.0.462': attribute type 10 has an invalid length. [ 156.408121][ T7928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.486854][ T7906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.586456][ T7938] __nla_validate_parse: 15 callbacks suppressed [ 156.586483][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 156.666576][ T7942] netlink: 56 bytes leftover after parsing attributes in process `syz.0.469'. [ 157.023421][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 157.508567][ T7973] ip_tables: iptables: counters copy to user failed while replacing table [ 157.695561][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.801054][ T7995] netlink: 236 bytes leftover after parsing attributes in process `syz.1.484'. [ 157.857935][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.093200][ T7989] syzkaller0: entered promiscuous mode [ 158.093223][ T7989] syzkaller0: entered allmulticast mode [ 158.231009][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.480'. [ 158.231031][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 158.990865][ T8035] IPv6: NLM_F_REPLACE set, but no existing node found! [ 159.096082][ T8040] xt_IDLETIMER: label is empty or not nul-terminated [ 160.304597][ T8036] batman_adv: batadv0: Adding interface: syz_tun [ 160.304624][ T8036] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.304643][ T8036] batman_adv: batadv0: Interface activated: syz_tun [ 160.350293][ T8026] syzkaller0: entered promiscuous mode [ 160.350317][ T8026] syzkaller0: entered allmulticast mode [ 160.419587][ T8055] netlink: 'syz.0.492': attribute type 2 has an invalid length. [ 161.953618][ T8055] : entered promiscuous mode [ 162.164610][ T8080] netlink: 36 bytes leftover after parsing attributes in process `syz.3.498'. [ 162.180300][ T8080] openvswitch: netlink: IP tunnel TTL not specified. [ 162.180333][ T8080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.356157][ T8083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.499'. [ 162.365833][ T8086] bond0: (slave ip6tnl0): refused to change device type [ 162.366158][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 162.444094][ T8086] bond2: entered promiscuous mode [ 162.444117][ T8086] bond2: entered allmulticast mode [ 162.531446][ T52] Bluetooth: hci4: link tx timeout [ 162.531464][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.535163][ T52] Bluetooth: hci4: link tx timeout [ 162.535180][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.535259][ T52] Bluetooth: hci4: link tx timeout [ 162.535269][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.535291][ T52] Bluetooth: hci4: link tx timeout [ 162.535301][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.535516][ T52] Bluetooth: hci4: link tx timeout [ 162.535528][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.611221][ T52] Bluetooth: hci4: link tx timeout [ 162.611237][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.612802][ T52] Bluetooth: hci4: link tx timeout [ 162.612816][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.612841][ T52] Bluetooth: hci4: link tx timeout [ 162.612851][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.614390][ T52] Bluetooth: hci4: link tx timeout [ 162.614403][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.614427][ T52] Bluetooth: hci4: link tx timeout [ 162.614436][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.619088][ T52] Bluetooth: hci4: link tx timeout [ 162.619102][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.691448][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.506'. [ 162.691479][ T8107] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 162.721932][ T8114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 162.721964][ T8114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 162.776345][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 162.776391][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 162.782377][ T8110] netlink: 964 bytes leftover after parsing attributes in process `syz.3.507'. [ 162.782401][ T8110] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 162.798635][ T8114] erspan0: entered promiscuous mode [ 162.806428][ T8114] gretap0: entered promiscuous mode [ 163.080307][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 163.640450][ T8170] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 163.687999][ T8170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.694517][ T8173] openvswitch: netlink: IP tunnel dst address not specified [ 163.694546][ T8173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.774547][ T8182] macvlan4: entered promiscuous mode [ 163.774570][ T8182] macvlan4: entered allmulticast mode [ 163.867543][ T8190] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 163.923328][ T8192] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 164.580588][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 164.883512][ T8219] team0: Port device team_slave_0 removed [ 164.903903][ T8228] ip_tables: iptables: counters copy to user failed while replacing table [ 164.952063][ T8235] sock: sock_set_timeout: `syz.3.542' (pid 8235) tries to set negative timeout [ 165.081714][ T8239] netlink: 'syz.4.544': attribute type 4 has an invalid length. [ 165.861405][ T8264] syzkaller0: renamed from gre1 [ 166.630755][ T8302] netlink: 'syz.2.564': attribute type 2 has an invalid length. [ 166.651434][ T8298] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.694654][ T8302] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 166.742033][ T8302] team0: Port device dummy0 added [ 167.147088][ T8330] netlink: 'syz.0.570': attribute type 3 has an invalid length. [ 167.191225][ T8334] __nla_validate_parse: 26 callbacks suppressed [ 167.191246][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 167.338488][ T8332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 167.394569][ T8344] bond_slave_0: entered allmulticast mode [ 167.417548][ T8344] .`: (slave bond_slave_0): Releasing backup interface [ 167.422301][ T8344] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 167.464921][ T8349] Bluetooth: hci0: unsupported parameter 5135 [ 167.464942][ T8349] Bluetooth: hci0: unsupported parameter 8192 [ 167.464958][ T8349] Bluetooth: hci0: unsupported parameter 5135 [ 167.464969][ T8349] Bluetooth: hci0: unsupported parameter 8192 [ 167.510646][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 167.827311][ T8369] bond2: option arp_interval: invalid value (18446744073709551615) [ 167.827336][ T8369] bond2: option arp_interval: allowed values 0 - 2147483647 [ 167.831013][ T8369] bond2 (unregistering): Released all slaves [ 167.848563][ T8364] nbd0: detected capacity change from 0 to 63 [ 167.879504][ T8367] netlink: 'syz.2.580': attribute type 16 has an invalid length. [ 167.879524][ T8367] netlink: 156 bytes leftover after parsing attributes in process `syz.2.580'. [ 167.880567][ T8372] block nbd0: NBD_DISCONNECT [ 167.881338][ T8372] block nbd0: Disconnected due to user request. [ 167.881355][ T8372] block nbd0: shutting down sockets [ 167.898893][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.899085][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.900840][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.900913][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 167.900963][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.901018][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 167.901062][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.901116][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 167.901452][ T2764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 167.901478][ T2764] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.901512][ T2764] Buffer I/O error on dev nbd0, logical block 1, async page read [ 167.901526][ T2764] Buffer I/O error on dev nbd0, logical block 2, async page read [ 167.901539][ T2764] Buffer I/O error on dev nbd0, logical block 3, async page read [ 167.904133][ T2764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 167.904161][ T2764] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.904177][ T2764] Buffer I/O error on dev nbd0, logical block 1, async page read [ 167.904319][ T2764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 167.904473][ T2764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 167.904857][ T2764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 167.905085][ T2764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 167.905312][ T8078] ldm_validate_partition_table(): Disk read failed. [ 167.906080][ T8078] Dev nbd0: unable to read RDB block 0 [ 167.913661][ T8078] nbd0: unable to read partition table [ 167.934161][ T8078] ldm_validate_partition_table(): Disk read failed. [ 167.942178][ T8078] Dev nbd0: unable to read RDB block 0 [ 167.944765][ T8078] nbd0: unable to read partition table [ 168.229139][ T8391] ip_tables: iptables: counters copy to user failed while replacing table [ 168.469542][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 168.469562][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 168.702504][ T8412] syzkaller1: entered promiscuous mode [ 168.702530][ T8412] syzkaller1: entered allmulticast mode [ 168.889058][ T8421] syzkaller1: entered promiscuous mode [ 168.889082][ T8421] syzkaller1: entered allmulticast mode [ 168.968981][ T8429] tipc: Enabled bearer , priority 0 [ 168.971284][ T8429] syzkaller0: entered promiscuous mode [ 168.971303][ T8429] syzkaller0: entered allmulticast mode [ 169.027782][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'. [ 169.188777][ T8429] tipc: Resetting bearer [ 169.225552][ T8440] vlan2: entered promiscuous mode [ 169.225577][ T8440] bridge0: entered promiscuous mode [ 169.234596][ T8428] tipc: Resetting bearer [ 169.239373][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 169.322935][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 169.324542][ T8428] tipc: Disabling bearer [ 169.629319][ T8470] netlink: 52 bytes leftover after parsing attributes in process `syz.2.602'. [ 169.715953][ T8469] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 169.724374][ T8469] bond1 (unregistering): Released all slaves [ 169.883017][ T8476] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 169.903332][ T8475] bridge0: port 3(batadv1) entered blocking state [ 169.916165][ T8475] bridge0: port 3(batadv1) entered disabled state [ 169.916400][ T8475] batadv1: entered allmulticast mode [ 169.940192][ T8475] batadv1: entered promiscuous mode [ 170.133240][ T8490] GUP no longer grows the stack in syz.2.608 (8490): 200000003000-20000000a000 (200000001000) [ 170.133296][ T8490] CPU: 1 UID: 0 PID: 8490 Comm: syz.2.608 Not tainted syzkaller #0 PREEMPT(full) [ 170.133317][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.133335][ T8490] Call Trace: [ 170.133343][ T8490] [ 170.133351][ T8490] dump_stack_lvl+0xe8/0x150 [ 170.133392][ T8490] __get_user_pages+0x23b6/0x2750 [ 170.133423][ T8490] ? lock_acquire+0x115/0x350 [ 170.133460][ T8490] ? __gup_longterm_locked+0xc3b/0x15c0 [ 170.133495][ T8490] __gup_longterm_locked+0xd52/0x15c0 [ 170.133523][ T8490] ? lock_acquire+0x115/0x350 [ 170.133558][ T8490] gup_fast_fallback+0x1d92/0x20e0 [ 170.133583][ T8490] ? lockdep_hardirqs_on+0x7b/0x110 [ 170.133644][ T8490] ? __pfx_gup_fast_fallback+0x10/0x10 [ 170.133672][ T8490] ? lock_acquire+0x115/0x350 [ 170.133689][ T8490] ? is_valid_gup_args+0x11f/0x200 [ 170.133717][ T8490] ? get_user_pages_fast+0x4d/0xb0 [ 170.133745][ T8490] __iov_iter_get_pages_alloc+0x378/0xa40 [ 170.133777][ T8490] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 170.133802][ T8490] iov_iter_get_pages2+0x5e/0xa0 [ 170.133831][ T8490] __se_sys_vmsplice+0x7b5/0x1660 [ 170.133884][ T8490] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 170.133918][ T8490] ? __pfx_futex_wake+0x10/0x10 [ 170.134018][ T8490] do_syscall_64+0x166/0x520 [ 170.134045][ T8490] ? trace_irq_disable+0x3b/0x140 [ 170.134065][ T8490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.134100][ T8490] ? clear_bhb_loop+0x70/0xc0 [ 170.134124][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.134144][ T8490] RIP: 0033:0x7f950819e159 [ 170.134167][ T8490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.134188][ T8490] RSP: 002b:00007f9508ff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 170.134212][ T8490] RAX: ffffffffffffffda RBX: 00007f9508426360 RCX: 00007f950819e159 [ 170.134226][ T8490] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000002d [ 170.134239][ T8490] RBP: 00007f950823506b R08: 0000000000000000 R09: 0000000000000000 [ 170.134249][ T8490] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 170.134260][ T8490] R13: 00007f95084263f8 R14: 00007f9508426360 R15: 00007ffdb6c7f768 [ 170.134289][ T8490] [ 170.155481][ T8487] syzkaller1: entered promiscuous mode [ 170.155501][ T8487] syzkaller1: entered allmulticast mode [ 170.355874][ T1169] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 170.355890][ T1169] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 170.534103][ T8506] netlink: 'syz.3.613': attribute type 11 has an invalid length. [ 171.068411][ T8520] bond1: option arp_validate: invalid value (8192) [ 171.087232][ T8520] bond1 (unregistering): Released all slaves [ 171.193464][ T8530] syzkaller0: entered promiscuous mode [ 171.193487][ T8530] syzkaller0: entered allmulticast mode [ 171.195087][ T8530] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 171.266932][ T8529] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.691919][ T8543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.063205][ T8560] x_tables: duplicate underflow at hook 2 [ 172.100377][ T8559] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 172.190525][ T8559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.569756][ T8575] __nla_validate_parse: 12 callbacks suppressed [ 172.569777][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'. [ 172.569793][ T8575] nbd: must specify at least one socket [ 172.712693][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 172.713280][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 172.855777][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 173.077479][ T8614] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.569827][ T8625] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 173.596044][ T8625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.635152][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.647708][ T8625] bond1: (slave batadv1): making interface the new active one [ 173.649165][ T8625] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 173.682961][ T8622] bridge3: entered promiscuous mode [ 173.682985][ T8622] bridge3: entered allmulticast mode [ 173.692439][ T8636] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 173.700438][ T8637] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 173.726672][ T8622] team0: Port device bridge3 added [ 173.792473][ T8636] bond0: entered promiscuous mode [ 173.792898][ T8636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.063439][ T8636] bond0: (slave bridge2): making interface the new active one [ 174.063463][ T8636] bridge2: entered promiscuous mode [ 174.079181][ T8636] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 174.155585][ T8661] xt_policy: output policy not valid in PREROUTING and INPUT [ 174.339415][ T8673] syzkaller0: entered promiscuous mode [ 174.339438][ T8673] syzkaller0: entered allmulticast mode [ 174.347481][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 174.612575][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.646'. [ 174.612602][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.646'. [ 174.612617][ T8691] netlink: 'syz.4.646': attribute type 4 has an invalid length. [ 174.650749][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 174.848898][ T8693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 175.294825][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 175.301801][ T8720] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.324982][ T4936] block nbd0: Receive control failed (result -1) [ 175.411168][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'. [ 175.822467][ T6202] tipc: Subscription rejected, illegal request [ 176.201443][ T8758] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 176.291559][ T8764] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 176.367487][ T8767] tipc: Started in network mode [ 176.367525][ T8767] tipc: Node identity 8ef5db9d9bdb, cluster identity 4711 [ 176.367673][ T8767] tipc: Enabled bearer , priority 0 [ 176.373234][ T8767] syzkaller0: entered promiscuous mode [ 176.373254][ T8767] syzkaller0: entered allmulticast mode [ 176.425884][ T8767] tipc: Resetting bearer [ 176.473613][ T8765] tipc: Resetting bearer [ 176.530139][ T8765] tipc: Disabling bearer [ 176.547240][ T8778] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.038892][ T8789] .`: (slave bond_slave_1): Releasing backup interface [ 177.707187][ T8824] __nla_validate_parse: 8 callbacks suppressed [ 177.707207][ T8824] netlink: 104 bytes leftover after parsing attributes in process `syz.4.675'. [ 177.713799][ T8824] netlink: 48 bytes leftover after parsing attributes in process `syz.4.675'. [ 177.792369][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.676'. [ 177.850620][ T8832] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 177.900255][ T8830] batman_adv: batadv0: Adding interface: syzkaller0 [ 177.900274][ T8830] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.900305][ T8830] batman_adv: batadv0: Interface activated: syzkaller0 [ 178.633087][ T8857] netlink: 'syz.3.683': attribute type 49 has an invalid length. [ 178.742078][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 178.902527][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 178.915661][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 178.970794][ T8830] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 179.021238][ T8830] batman_adv: batadv0: Removing interface: syzkaller0 [ 179.044640][ T8874] ip_tables: iptables: counters copy to user failed while replacing table [ 179.069538][ T8873] ip_tables: iptables: counters copy to user failed while replacing table [ 179.083256][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.685'. [ 179.720828][ T8899] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 179.791052][ T8899] bond2: (slave geneve2): making interface the new active one [ 179.793345][ T8899] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 179.803864][ T8902] ip_tables: iptables: counters copy to user failed while replacing table [ 179.815695][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.815738][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.815770][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.815800][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.832810][ T8899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.692'. [ 179.838317][ T8899] bond2: entered promiscuous mode [ 179.838338][ T8899] geneve2: entered promiscuous mode [ 179.843200][ T8899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.262301][ T8921] netlink: 216 bytes leftover after parsing attributes in process `syz.3.699'. [ 180.319754][ T8923] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 180.443397][ T8923] ´: entered promiscuous mode [ 180.445095][ T8928] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 180.452805][ T8931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.700'. [ 180.543684][ T8923] batman_adv: batadv0: Adding interface: gretap1 [ 180.543707][ T8923] batman_adv: batadv0: Interface activated: gretap1 [ 180.700520][ T8938] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 180.764439][ T8938] bond2: entered promiscuous mode [ 180.764897][ T8938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.774439][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.775407][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.806349][ T8951] tipc: New replicast peer: 255.255.255.255 [ 180.808303][ T8951] tipc: Enabled bearer , priority 10 [ 180.908834][ T8938] veth3: entered allmulticast mode [ 181.209286][ T8971] netlink: 'syz.3.714': attribute type 21 has an invalid length. [ 181.209855][ T8972] netlink: 'syz.3.714': attribute type 21 has an invalid length. [ 181.850889][ T9013] ip_tables: iptables: counters copy to user failed while replacing table [ 181.871024][ T9012] syzkaller0: entered promiscuous mode [ 181.871058][ T9012] syzkaller0: entered allmulticast mode [ 182.149987][ T9027] veth1_to_bond: Caught tx_queue_len zero misconfig [ 182.436186][ T9038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.169568][ T9075] syzkaller0: entered promiscuous mode [ 183.169672][ T9075] syzkaller0: entered allmulticast mode [ 183.173952][ T9075] __nla_validate_parse: 12 callbacks suppressed [ 183.173971][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 183.288779][ T9042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.738519][ T9102] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.861121][ T9104] netlink: 9160 bytes leftover after parsing attributes in process `syz.2.749'. [ 183.883659][ T9104] sctp: [Deprecated]: syz.2.749 (pid 9104) Use of int in max_burst socket option. [ 183.883659][ T9104] Use struct sctp_assoc_value instead [ 184.073059][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'. [ 184.485059][ T9134] syzkaller0: entered promiscuous mode [ 184.485083][ T9134] syzkaller0: entered allmulticast mode [ 184.502555][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 184.731682][ T9152] netlink: 48 bytes leftover after parsing attributes in process `syz.4.764'. [ 184.839981][ T9159] erspan0: entered promiscuous mode [ 184.843954][ T9157] erspan0: left promiscuous mode [ 185.035040][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.768'. [ 185.215681][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.335600][ T9175] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 185.439786][ T9175] bond5: entered promiscuous mode [ 185.440210][ T9175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.542627][ T9175] bond5: (slave bridge5): making interface the new active one [ 185.546209][ T9175] bridge5: entered promiscuous mode [ 185.547440][ T9175] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 185.767339][ T9182] geneve1: Caught tx_queue_len zero misconfig [ 185.897668][ T9188] bridge3: entered promiscuous mode [ 185.897691][ T9188] bridge3: entered allmulticast mode [ 185.905288][ T9188] team0: Port device bridge3 added [ 186.589535][ T9182] infiniband syz0: set active [ 186.589556][ T9182] infiniband syz0: added bond_slave_1 [ 186.650223][ T9182] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 186.650261][ T9182] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 186.650301][ T9182] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 186.764513][ T9182] RDS/IB: syz0: added [ 186.765091][ T9182] smc: adding ib device syz0 with port count 1 [ 186.765219][ T9182] smc: ib device syz0 port 1 has no pnetid [ 186.818563][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 186.818586][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 186.938936][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 187.803493][ T9252] bridge3: entered promiscuous mode [ 187.803516][ T9252] bridge3: entered allmulticast mode [ 187.951306][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.794'. [ 188.242855][ T9281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.564353][ T9294] __nla_validate_parse: 1 callbacks suppressed [ 188.564380][ T9294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.803'. [ 188.564642][ T9295] netlink: 80 bytes leftover after parsing attributes in process `syz.2.803'. [ 188.800558][ T9300] bridge6: entered promiscuous mode [ 188.800582][ T9300] bridge6: entered allmulticast mode [ 188.808072][ T9300] team0: Port device bridge6 added [ 189.431303][ T31] audit: type=1107 audit(1791200816.713:6): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 189.955142][ T9352] bridge7: entered promiscuous mode [ 189.955164][ T9352] bridge7: entered allmulticast mode [ 189.991808][ T9352] team0: Port device bridge7 added [ 190.263539][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.822'. [ 190.334851][ T9368] tipc: New replicast peer: 255.255.255.255 [ 190.344755][ T9368] tipc: Enabled bearer , priority 10 [ 190.390683][ T9375] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 190.519823][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 190.539089][ T9379] bond2: (slave geneve2): making interface the new active one [ 190.540673][ T9379] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 190.541953][ T9375] bond2: entered promiscuous mode [ 190.541970][ T9375] geneve2: entered promiscuous mode [ 190.550285][ T9375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.576279][ T40] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.580260][ T1024] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.580297][ T1024] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.580328][ T1024] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.057893][ T9404] syzkaller0: entered promiscuous mode [ 191.057916][ T9404] syzkaller0: entered allmulticast mode [ 191.067162][ T9404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.834'. [ 191.148077][ T5627] Bluetooth: hci2: command 0x0401 tx timeout [ 191.148115][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 191.148138][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 191.148224][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.322268][ T9410] bond3 (unregistering): Released all slaves [ 191.446155][ T5824] tipc: Node number set to 2307478019 [ 191.483679][ T31] audit: type=1804 audit(1791200818.763:7): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.838" name="/newroot/156/cgroup.controllers" dev="tmpfs" ino=818 res=1 errno=0 [ 191.483729][ T31] audit: type=1800 audit(1791200818.763:8): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.838" name="cgroup.controllers" dev="tmpfs" ino=818 res=0 errno=0 [ 191.641247][ T9421] tipc: Enabling of bearer rejected, already enabled [ 191.657393][ T9424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.840'. [ 191.687959][ T9426] netlink: 48 bytes leftover after parsing attributes in process `syz.3.841'. [ 192.034750][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 192.180251][ T9460] bridge2: entered promiscuous mode [ 192.180273][ T9460] bridge2: entered allmulticast mode [ 192.281282][ T9466] netlink: 'syz.4.849': attribute type 10 has an invalid length. [ 192.328730][ T9466] team0 (unregistering): Port device team_slave_0 removed [ 192.374736][ T9466] team0 (unregistering): Port device team_slave_1 removed [ 192.429056][ T9466] team0 (unregistering): Port device bridge1 removed [ 192.540661][ T9466] team0 (unregistering): Port device bridge3 removed [ 192.589854][ T9474] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 192.812680][ T9471] gretap0: entered promiscuous mode [ 193.154279][ T9497] netlink: 9 bytes leftover after parsing attributes in process `syz.3.858'. [ 193.179576][ T9497] netlink: 9 bytes leftover after parsing attributes in process `syz.3.858'. [ 193.313329][ T9504] syzkaller0: entered promiscuous mode [ 193.313349][ T9504] syzkaller0: entered allmulticast mode [ 193.362869][ T9510] netlink: 'syz.4.861': attribute type 40 has an invalid length. [ 193.382791][ T9510] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 193.383368][ T9510] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 193.453087][ T9516] bridge8: entered promiscuous mode [ 193.453100][ T9516] bridge8: entered allmulticast mode [ 193.472258][ T9516] team0: Port device bridge8 added [ 193.595196][ T9521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.865'. [ 193.595219][ T9521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.865'. [ 193.601679][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 193.604871][ T9523] syzkaller0: entered promiscuous mode [ 193.604890][ T9523] syzkaller0: entered allmulticast mode [ 194.196946][ T52] Bluetooth: hci4: Malformed Event: 0x13 [ 194.219575][ T9547] netlink: 15 bytes leftover after parsing attributes in process `syz.4.871'. [ 194.415293][ T9554] netlink: 'syz.4.872': attribute type 1 has an invalid length. [ 194.847717][ T9562] syzkaller0: entered promiscuous mode [ 194.847741][ T9562] syzkaller0: entered allmulticast mode [ 194.880144][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 195.038989][ T9575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.200636][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 195.200662][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 195.296359][ T5616] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 195.323815][ T9587] pim6reg1: entered promiscuous mode [ 195.323835][ T9587] pim6reg1: entered allmulticast mode [ 195.518934][ T9594] netlink: 5 bytes leftover after parsing attributes in process `syz.2.882'. [ 195.693551][ T9609] bridge3: entered promiscuous mode [ 195.693576][ T9609] bridge3: entered allmulticast mode [ 196.397764][ T9639] syzkaller0: entered promiscuous mode [ 196.397788][ T9639] syzkaller0: entered allmulticast mode [ 196.405290][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 196.428366][ T9642] block nbd1: server does not support multiple connections per device. [ 196.428925][ T9642] block nbd1: shutting down sockets [ 196.504644][ T31] audit: type=1804 audit(1791200823.783:9): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.891" name="/newroot/164/cgroup.controllers" dev="tmpfs" ino=866 res=1 errno=0 [ 196.504696][ T31] audit: type=1800 audit(1791200823.783:10): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.891" name="cgroup.controllers" dev="tmpfs" ino=866 res=0 errno=0 [ 196.602599][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 196.811788][ T9659] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 197.232927][ T9669] syz.1.894 (9669) used greatest stack depth: 18088 bytes left [ 197.293599][ T9649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.293624][ T9649] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 197.361403][ T9649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.361427][ T9649] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 197.361528][ T9684] bridge4: entered promiscuous mode [ 197.361544][ T9684] bridge4: entered allmulticast mode [ 197.409729][ T9649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.409754][ T9649] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 197.455551][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 197.455651][ T9649] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 197.455668][ T9649] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 198.323451][ T9735] veth0: entered promiscuous mode [ 198.407620][ T9735] bond0: entered promiscuous mode [ 198.407643][ T9735] bond_slave_0: entered promiscuous mode [ 198.407831][ T9735] bond_slave_1: entered promiscuous mode [ 198.411529][ T9734] bond0: left promiscuous mode [ 198.411549][ T9734] bond_slave_0: left promiscuous mode [ 198.411718][ T9734] bond_slave_1: left promiscuous mode [ 198.423366][ T9734] veth0: left promiscuous mode [ 198.639752][ T9750] ip_tables: iptables: counters copy to user failed while replacing table [ 198.646562][ T9751] ip_tables: iptables: counters copy to user failed while replacing table [ 199.107969][ T9775] openvswitch: netlink: Flow actions attr not present in new flow. [ 199.120545][ T9775] __nla_validate_parse: 3 callbacks suppressed [ 199.120563][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 199.120577][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 199.120602][ T9775] netlink: 'syz.4.915': attribute type 18 has an invalid length. [ 199.144640][ T9777] lo: entered promiscuous mode [ 199.252209][ T9777] tunl0: entered promiscuous mode [ 199.254247][ T9777] gre0: entered promiscuous mode [ 199.334568][ T9777] ip_vti0: entered promiscuous mode [ 199.358023][ T9777] ip6_vti0: entered promiscuous mode [ 199.393575][ T9777] sit0: entered promiscuous mode [ 199.427618][ T9777] ip6tnl0: entered promiscuous mode [ 199.452498][ T9777] ip6gre0: entered promiscuous mode [ 199.465217][ T9777] syz_tun: entered promiscuous mode [ 199.499488][ T9777] ip6gretap0: entered promiscuous mode [ 199.531176][ T9777] bridge0: entered promiscuous mode [ 199.531420][ T9777] vcan0: entered promiscuous mode [ 199.550122][ T9777] bond0: entered promiscuous mode [ 199.550142][ T9777] bond_slave_0: entered promiscuous mode [ 199.550431][ T9777] bond_slave_1: entered promiscuous mode [ 199.588899][ T9777] team0: entered promiscuous mode [ 199.588922][ T9777] team_slave_1: entered promiscuous mode [ 199.634779][ T9777] dummy0: entered promiscuous mode [ 199.695052][ T9777] nlmon0: entered promiscuous mode [ 199.710964][ T9777] batadv0: entered promiscuous mode [ 199.733012][ T9777] vxcan0: entered promiscuous mode [ 199.739406][ T9777] vxcan1: entered promiscuous mode [ 199.741051][ T9777] veth0: entered promiscuous mode [ 199.757899][ T9777] veth1: entered promiscuous mode [ 199.781017][ T9777] wg0: entered promiscuous mode [ 199.802248][ T9777] wg1: entered promiscuous mode [ 199.825301][ T9777] wg2: entered promiscuous mode [ 199.841231][ T9777] veth0_to_bridge: entered promiscuous mode [ 199.863235][ T9777] veth1_to_bridge: entered promiscuous mode [ 199.874942][ T9777] veth0_to_bond: entered promiscuous mode [ 199.888888][ T9777] veth1_to_bond: entered promiscuous mode [ 199.913715][ T9777] veth1_to_team: entered promiscuous mode [ 199.929888][ T9777] veth0_to_batadv: entered promiscuous mode [ 199.949426][ T9777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.949637][ T9777] batadv_slave_0: entered promiscuous mode [ 199.963582][ T9777] xfrm0: entered promiscuous mode [ 199.981482][ T9777] veth0_to_hsr: entered promiscuous mode [ 200.007253][ T9777] veth1_to_hsr: entered promiscuous mode [ 200.012882][ T9777] hsr0: entered promiscuous mode [ 200.026569][ T9777] veth1_virt_wifi: entered promiscuous mode [ 200.029475][ T9777] veth0_virt_wifi: entered promiscuous mode [ 200.032116][ T9777] virt_wifi0: entered promiscuous mode [ 200.064180][ T9777] vlan0: entered promiscuous mode [ 200.072600][ T9777] vlan1: entered promiscuous mode [ 200.081607][ T9777] macvlan0: entered promiscuous mode [ 200.098088][ T9777] macvlan1: entered promiscuous mode [ 200.100787][ T9777] ipvlan0: entered promiscuous mode [ 200.100948][ T9777] ipvlan1: entered promiscuous mode [ 200.131358][ T9777] macvtap0: entered promiscuous mode [ 200.136255][ T9777] macsec0: entered promiscuous mode [ 200.139429][ T9777] geneve0: entered promiscuous mode [ 200.147024][ T9777] geneve1: entered promiscuous mode [ 200.161940][ T9777] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 200.164925][ T9777] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 200.189608][ T9777] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 200.194155][ T9777] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 200.212135][ T9777] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 200.212310][ T9777] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 200.230091][ T9777] gre1: entered promiscuous mode [ 200.268926][ T9777] hsr1: entered promiscuous mode [ 200.270582][ T9777] veth2: entered promiscuous mode [ 200.270739][ T9777] veth3: entered promiscuous mode [ 200.293264][ T9777] bond1: entered promiscuous mode [ 200.306233][ T9777] xfrm1: entered promiscuous mode [ 200.306507][ T9777] gtp0: entered promiscuous mode [ 200.309918][ T9777] batman_adv: batadv0: Interface deactivated: gretap1 [ 200.332613][ T9777] gretap1: entered promiscuous mode [ 200.344909][ T9777] syztnl2: entered promiscuous mode [ 200.345039][ T9777] syzkaller0: entered promiscuous mode [ 200.356874][ T9790] netlink: 'syz.0.916': attribute type 11 has an invalid length. [ 200.466372][ T9791] syzkaller0: entered allmulticast mode [ 200.581183][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.920'. [ 200.715939][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 202.336177][ T40] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.336224][ T40] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 202.336259][ T40] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.336283][ T40] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 202.336314][ T40] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.336338][ T40] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 202.336370][ T40] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.336393][ T40] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 202.569619][ T9855] tipc: Enabling of bearer rejected, failed to enable media [ 202.677427][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 202.719581][ T9852] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 202.850304][ T9871] ªªªªª: renamed from vlan0 [ 203.044248][ T9881] bridge4: entered promiscuous mode [ 203.044270][ T9881] bridge4: entered allmulticast mode [ 203.183765][ T9887] syzkaller1: entered promiscuous mode [ 203.183789][ T9887] syzkaller1: entered allmulticast mode [ 203.243566][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.939'. [ 203.261845][ T9893] netlink: 404 bytes leftover after parsing attributes in process `syz.3.939'. [ 203.451123][ T9910] netlink: 136 bytes leftover after parsing attributes in process `syz.1.935'. [ 203.574170][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 203.761698][ T9924] ip_tables: iptables: counters copy to user failed while replacing table [ 203.887038][ T9928] netlink: 'syz.2.945': attribute type 5 has an invalid length. [ 203.914142][ T9928] netlink: 'syz.2.945': attribute type 39 has an invalid length. [ 204.204095][ T9950] sctp: [Deprecated]: syz.3.952 (pid 9950) Use of int in max_burst socket option. [ 204.204095][ T9950] Use struct sctp_assoc_value instead [ 204.312128][ T9953] syzkaller1: entered promiscuous mode [ 204.312149][ T9953] syzkaller1: entered allmulticast mode [ 205.018816][ T9966] sctp: [Deprecated]: syz.1.956 (pid 9966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.018816][ T9966] Use struct sctp_sack_info instead [ 205.272097][ T9968] netlink: 'syz.4.957': attribute type 7 has an invalid length. [ 205.376501][ T9977] netlink: 200 bytes leftover after parsing attributes in process `syz.1.960'. [ 205.624946][ T78] IPVS: starting estimator thread 0... [ 205.664611][ T9993] netlink: 76 bytes leftover after parsing attributes in process `syz.3.964'. [ 205.710490][ T9995] IPVS: using max 52 ests per chain, 124800 per kthread [ 205.866923][T10004] syzkaller1: entered promiscuous mode [ 205.866947][T10004] syzkaller1: entered allmulticast mode [ 205.921554][T10009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.968'. [ 206.061597][T10009] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 206.159306][T10012] netlink: 'syz.1.972': attribute type 2 has an invalid length. [ 206.159329][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 206.393852][T10024] macsec0: entered promiscuous mode [ 206.397349][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 206.414129][T10024] veth1_macvtap: left promiscuous mode [ 206.451556][T10024] macsec0 (unregistering): left promiscuous mode [ 206.507483][T10024] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 206.789172][T10042] syzkaller0: entered promiscuous mode [ 206.789196][T10042] syzkaller0: entered allmulticast mode [ 206.822994][T10044] ipvlan2: entered promiscuous mode [ 206.823147][T10044] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.823165][T10044] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 206.823293][T10044] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 207.019831][T10058] syzkaller1: entered promiscuous mode [ 207.019855][T10058] syzkaller1: entered allmulticast mode [ 207.023689][T10057] syzkaller0: entered promiscuous mode [ 207.023707][T10057] syzkaller0: entered allmulticast mode [ 207.144503][T10055] syzkaller0: entered promiscuous mode [ 207.144528][T10055] syzkaller0: entered allmulticast mode [ 207.212574][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 207.752457][T10113] netlink: 52 bytes leftover after parsing attributes in process `syz.2.994'. [ 209.522372][T10107] netlink: 'syz.2.994': attribute type 4 has an invalid length. [ 209.801345][T10147] syzkaller0: entered promiscuous mode [ 209.801367][T10147] syzkaller0: entered allmulticast mode [ 209.907870][T10155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.998'. [ 209.943034][T10157] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 210.087377][T10161] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1005'. [ 210.121756][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 210.262092][T10167] ip6gre1: entered promiscuous mode [ 210.262116][T10167] ip6gre1: entered allmulticast mode [ 210.354176][T10171] IPVS: set_ctl: invalid protocol: 137 172.20.20.15:20004 [ 210.430874][T10173] __nla_validate_parse: 1 callbacks suppressed [ 210.430895][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1010'. [ 210.480294][T10173] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 210.553965][T10176] tipc: Enabled bearer , priority 0 [ 210.555146][T10177] tipc: Enabling of bearer rejected, already enabled [ 210.560410][T10176] syzkaller0: entered promiscuous mode [ 210.560427][T10176] syzkaller0: entered allmulticast mode [ 210.623243][T10176] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 210.627202][T10180] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1011'. [ 210.649359][T10176] tipc: Resetting bearer [ 210.682993][T10185] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 210.703354][T10185] syzkaller0: entered promiscuous mode [ 210.703377][T10185] syzkaller0: entered allmulticast mode [ 210.832140][T10187] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 210.853142][T10187] bond6 (unregistering): Released all slaves [ 210.933314][T10196] xt_hashlimit: size too large, truncated to 1048576 [ 210.933333][T10196] xt_hashlimit: max too large, truncated to 1048576 [ 211.167748][T10208] gretap0: entered promiscuous mode [ 211.167893][T10208] vlan3: entered promiscuous mode [ 211.285199][T10174] tipc: Resetting bearer [ 211.326472][T10174] tipc: Disabling bearer [ 211.360780][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1021'. [ 211.451025][T10223] FAULT_INJECTION: forcing a failure. [ 211.451025][T10223] name failslab, interval 1, probability 0, space 0, times 1 [ 211.451056][T10223] CPU: 0 UID: 0 PID: 10223 Comm: syz.0.1022 Not tainted syzkaller #0 PREEMPT(full) [ 211.451078][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.451089][T10223] Call Trace: [ 211.451096][T10223] [ 211.451104][T10223] dump_stack_lvl+0xe8/0x150 [ 211.451136][T10223] should_fail_ex+0x410/0x560 [ 211.451165][T10223] should_failslab+0xa8/0x100 [ 211.451191][T10223] __kmalloc_noprof+0xfe/0x720 [ 211.451209][T10223] ? rcu_is_watching+0x16/0xb0 [ 211.451232][T10223] ? tomoyo_realpath_from_path+0xef/0x640 [ 211.451258][T10223] ? tomoyo_realpath_from_path+0xef/0x640 [ 211.451292][T10223] tomoyo_realpath_from_path+0xef/0x640 [ 211.451329][T10223] ? tomoyo_path_number_perm+0x219/0x5f0 [ 211.451352][T10223] tomoyo_path_number_perm+0x246/0x5f0 [ 211.451378][T10223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 211.451404][T10223] ? sb_end_write+0xe8/0x190 [ 211.451428][T10223] ? vfs_write+0x9ce/0xba0 [ 211.451463][T10223] ? hook_file_ioctl+0x1f2/0x600 [ 211.451514][T10223] ? ksys_write+0x1fc/0x270 [ 211.451550][T10223] security_file_ioctl+0xc3/0x2a0 [ 211.451573][T10223] __se_sys_ioctl+0x47/0x170 [ 211.451598][T10223] do_syscall_64+0x166/0x520 [ 211.451626][T10223] ? trace_irq_disable+0x3b/0x140 [ 211.451645][T10223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.451665][T10223] ? clear_bhb_loop+0x70/0xc0 [ 211.451690][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.451709][T10223] RIP: 0033:0x7efed659e159 [ 211.451727][T10223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.451743][T10223] RSP: 002b:00007efed47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.451764][T10223] RAX: ffffffffffffffda RBX: 00007efed6825fa0 RCX: 00007efed659e159 [ 211.451778][T10223] RDX: 0000000000000017 RSI: 0000000040047452 RDI: 0000000000000003 [ 211.451791][T10223] RBP: 00007efed47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.451803][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.451815][T10223] R13: 00007efed6826038 R14: 00007efed6825fa0 R15: 00007ffc30316e88 [ 211.451848][T10223] [ 211.451856][T10223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.604357][T10228] syzkaller1: entered promiscuous mode [ 211.604378][T10228] syzkaller1: entered allmulticast mode [ 211.724468][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 211.724492][T10234] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.752101][T10229] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.767916][T10236] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1027'. [ 211.771543][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 211.948325][T10239] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1029'. [ 212.019427][T10252] netlink: 'syz.3.1029': attribute type 9 has an invalid length. [ 212.112110][T10256] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 212.179902][T10256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.198287][T10256] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 212.463288][T10264] netlink: 'syz.3.1033': attribute type 5 has an invalid length. [ 212.463308][T10264] netlink: 'syz.3.1033': attribute type 9 has an invalid length. [ 212.463320][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 212.560414][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 212.597523][T10274] syzkaller1: entered promiscuous mode [ 212.597546][T10274] syzkaller1: entered allmulticast mode [ 212.667897][T10278] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1034'. [ 212.681107][T10281] FAULT_INJECTION: forcing a failure. [ 212.681107][T10281] name failslab, interval 1, probability 0, space 0, times 0 [ 212.681137][T10281] CPU: 0 UID: 0 PID: 10281 Comm: syz.0.1037 Not tainted syzkaller #0 PREEMPT(full) [ 212.681158][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 212.681170][T10281] Call Trace: [ 212.681177][T10281] [ 212.681184][T10281] dump_stack_lvl+0xe8/0x150 [ 212.681214][T10281] should_fail_ex+0x410/0x560 [ 212.681241][T10281] should_failslab+0xa8/0x100 [ 212.681267][T10281] __kmalloc_noprof+0xfe/0x720 [ 212.681286][T10281] ? trace_kmalloc+0x2a/0xf0 [ 212.681301][T10281] ? tomoyo_encode+0x2ad/0x570 [ 212.681325][T10281] ? tomoyo_encode+0x2ad/0x570 [ 212.681359][T10281] tomoyo_encode+0x2ad/0x570 [ 212.681396][T10281] tomoyo_realpath_from_path+0x5fa/0x640 [ 212.681431][T10281] ? tomoyo_path_number_perm+0x219/0x5f0 [ 212.681453][T10281] tomoyo_path_number_perm+0x246/0x5f0 [ 212.681477][T10281] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.681498][T10281] ? __lock_acquire+0x747/0x2de0 [ 212.681531][T10281] ? hook_file_ioctl+0x1f2/0x600 [ 212.681573][T10281] ? __fget_files+0x2a/0x420 [ 212.681601][T10281] ? __fget_files+0x2a/0x420 [ 212.681625][T10281] ? __fget_files+0x3a2/0x420 [ 212.681649][T10281] ? __fget_files+0x2a/0x420 [ 212.681679][T10281] security_file_ioctl+0xc3/0x2a0 [ 212.681701][T10281] __se_sys_ioctl+0x47/0x170 [ 212.681724][T10281] do_syscall_64+0x166/0x520 [ 212.681751][T10281] ? trace_irq_disable+0x3b/0x140 [ 212.681770][T10281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.681789][T10281] ? clear_bhb_loop+0x70/0xc0 [ 212.681812][T10281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.681830][T10281] RIP: 0033:0x7efed659e159 [ 212.681848][T10281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.681863][T10281] RSP: 002b:00007efed47d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.681884][T10281] RAX: ffffffffffffffda RBX: 00007efed6826090 RCX: 00007efed659e159 [ 212.681897][T10281] RDX: 0000000000000017 RSI: 0000000040047452 RDI: 0000000000000003 [ 212.681909][T10281] RBP: 00007efed47d5090 R08: 0000000000000000 R09: 0000000000000000 [ 212.681920][T10281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.681931][T10281] R13: 00007efed6826128 R14: 00007efed6826090 R15: 00007ffc30316e88 [ 212.681961][T10281] [ 212.687891][T10281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.030422][T10286] syzkaller1: entered promiscuous mode [ 213.030445][T10286] syzkaller1: entered allmulticast mode [ 213.533596][T10325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.572976][T10327] netlink: 'syz.2.1049': attribute type 9 has an invalid length. [ 213.616389][ T52] block nbd1: Receive control failed (result -32) [ 213.618923][ T5616] block nbd1: Receive control failed (result -32) [ 213.716376][T10336] FAULT_INJECTION: forcing a failure. [ 213.716376][T10336] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 213.716406][T10336] CPU: 1 UID: 0 PID: 10336 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT(full) [ 213.716426][T10336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.716436][T10336] Call Trace: [ 213.716443][T10336] [ 213.716451][T10336] dump_stack_lvl+0xe8/0x150 [ 213.716481][T10336] should_fail_ex+0x410/0x560 [ 213.716509][T10336] _copy_to_user+0x31/0xb0 [ 213.716537][T10336] simple_read_from_buffer+0xe1/0x170 [ 213.716569][T10336] proc_fail_nth_read+0x1bb/0x230 [ 213.716586][T10336] ? common_file_perm+0x20e/0x2b0 [ 213.716612][T10336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.716635][T10336] ? rw_verify_area+0x24a/0x4c0 [ 213.716669][T10336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.716687][T10336] vfs_read+0x213/0xa80 [ 213.716730][T10336] ? __pfx___mutex_lock+0x10/0x10 [ 213.716760][T10336] ? __pfx_vfs_read+0x10/0x10 [ 213.716790][T10336] ? __fget_files+0x2a/0x420 [ 213.716821][T10336] ? __fget_files+0x3a2/0x420 [ 213.716846][T10336] ? __fget_files+0x2a/0x420 [ 213.716881][T10336] ksys_read+0x150/0x270 [ 213.716912][T10336] ? __pfx_ksys_read+0x10/0x10 [ 213.716953][T10336] do_syscall_64+0x166/0x520 [ 213.716982][T10336] ? trace_irq_disable+0x3b/0x140 [ 213.717002][T10336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.717021][T10336] ? clear_bhb_loop+0x70/0xc0 [ 213.717045][T10336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.717065][T10336] RIP: 0033:0x7f369775e98e [ 213.717082][T10336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.717098][T10336] RSP: 002b:00007f369870efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.717119][T10336] RAX: ffffffffffffffda RBX: 00007f369870f6c0 RCX: 00007f369775e98e [ 213.717133][T10336] RDX: 000000000000000f RSI: 00007f369870f0a0 RDI: 0000000000000003 [ 213.717145][T10336] RBP: 00007f369870f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.717158][T10336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.717169][T10336] R13: 00007f3697a26128 R14: 00007f3697a26090 R15: 00007fff03880be8 [ 213.717202][T10336] [ 213.904197][T10338] syzkaller1: entered promiscuous mode [ 213.904219][T10338] syzkaller1: entered allmulticast mode [ 214.108067][T10350] netlink: 'syz.0.1056': attribute type 21 has an invalid length. [ 214.110352][T10350] netlink: 'syz.0.1056': attribute type 4 has an invalid length. [ 214.113370][T10343] 0: reclassify loop, rule prio 0, protocol 03 [ 214.427445][T10360] syzkaller1: entered promiscuous mode [ 214.427469][T10360] syzkaller1: entered allmulticast mode [ 214.624218][T10348] xt_hashlimit: size too large, truncated to 1048576 [ 214.670809][T10369] syz.3.1060: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.671057][T10369] CPU: 0 UID: 0 PID: 10369 Comm: syz.3.1060 Not tainted syzkaller #0 PREEMPT(full) [ 214.671081][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.671093][T10369] Call Trace: [ 214.671101][T10369] [ 214.671110][T10369] dump_stack_lvl+0xe8/0x150 [ 214.671145][T10369] warn_alloc+0x24d/0x270 [ 214.671177][T10369] ? kasan_save_track+0x4f/0x80 [ 214.671199][T10369] ? kasan_save_track+0x3e/0x80 [ 214.671222][T10369] ? __pfx_warn_alloc+0x10/0x10 [ 214.671240][T10369] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 214.671266][T10369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.671304][T10369] __vmalloc_node_range_noprof+0x127/0x1540 [ 214.671359][T10369] ? rcu_is_watching+0x16/0xb0 [ 214.671390][T10369] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.671421][T10369] ? __kmalloc_cache_noprof+0x321/0x600 [ 214.671443][T10369] ? __kmalloc_cache_noprof+0x14d/0x600 [ 214.671462][T10369] ? xskq_create+0x56/0x220 [ 214.671494][T10369] xskq_create+0x148/0x220 [ 214.671520][T10369] ? xsk_init_queue+0x8a/0xe0 [ 214.671547][T10369] xsk_init_queue+0x8a/0xe0 [ 214.671576][T10369] xsk_setsockopt+0x52a/0x960 [ 214.671604][T10369] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.671634][T10369] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.671669][T10369] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 214.671694][T10369] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.671721][T10369] do_sock_setsockopt+0x17c/0x1b0 [ 214.671753][T10369] __x64_sys_setsockopt+0x13d/0x1b0 [ 214.671783][T10369] do_syscall_64+0x166/0x520 [ 214.671812][T10369] ? trace_irq_disable+0x3b/0x140 [ 214.671833][T10369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.671852][T10369] ? clear_bhb_loop+0x70/0xc0 [ 214.671875][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.671894][T10369] RIP: 0033:0x7ff5a799e159 [ 214.671914][T10369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.671932][T10369] RSP: 002b:00007ff5a8951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.671952][T10369] RAX: ffffffffffffffda RBX: 00007ff5a7c25fa0 RCX: 00007ff5a799e159 [ 214.671967][T10369] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 214.671979][T10369] RBP: 00007ff5a7a3506b R08: 0000000000000004 R09: 0000000000000000 [ 214.671992][T10369] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.672005][T10369] R13: 00007ff5a7c26038 R14: 00007ff5a7c25fa0 R15: 00007ffeddc88c68 [ 214.672036][T10369] [ 214.674585][T10369] Mem-Info: [ 214.674603][T10369] active_anon:12605 inactive_anon:0 isolated_anon:0 [ 214.674603][T10369] active_file:0 inactive_file:43540 isolated_file:0 [ 214.674603][T10369] unevictable:0 dirty:300 writeback:0 [ 214.674603][T10369] slab_reclaimable:10886 slab_unreclaimable:108115 [ 214.674603][T10369] mapped:32518 shmem:3420 pagetables:1254 [ 214.674603][T10369] sec_pagetables:0 bounce:0 [ 214.674603][T10369] kernel_misc_reclaimable:0 [ 214.674603][T10369] free:1303999 free_pcp:12283 free_cma:0 [ 214.676358][T10369] Node 0 active_anon:50420kB inactive_anon:0kB active_file:0kB inactive_file:173956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130072kB dirty:1200kB writeback:0kB shmem:13680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13356kB pagetables:4892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 214.676424][T10369] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 214.676480][T10369] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.676554][T10369] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 214.676594][T10369] Node 0 DMA32 free:1254684kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:50420kB inactive_anon:0kB active_file:0kB inactive_file:173956kB unevictable:0kB writepending:1200kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:49124kB local_pcp:23256kB free_cma:0kB [ 214.677187][T10367] xt_hashlimit: size too large, truncated to 1048576 [ 214.680827][T10369] lowmem_reserve[]: 0 0 0 0 0 [ 214.680880][T10369] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.680940][T10369] lowmem_reserve[]: 0 0 0 0 0 [ 214.680974][T10369] Node 1 Normal free:3945952kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.681036][T10369] lowmem_reserve[]: 0 0 0 0 0 [ 214.681138][T10369] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.681263][T10369] Node 0 DMA32: 1469*4kB (U) 333*8kB (UE) 468*16kB (U) 2*32kB (UM) 17*64kB (UM) 8*128kB (UE) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 5*2048kB (ME) 298*4096kB (UM) = 1254684kB [ 214.681418][T10369] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 214.681516][T10369] Node 1 Normal: 2*4kB (M) 7*8kB (UM) 6*16kB (UM) 6*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3945952kB [ 214.681671][T10369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.681688][T10369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.681704][T10369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.681720][T10369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.681736][T10369] 46956 total pagecache pages [ 214.681754][T10369] 0 pages in swap cache [ 214.681762][T10369] Free swap = 124996kB [ 214.681770][T10369] Total swap = 124996kB [ 214.681777][T10369] 2097051 pages RAM [ 214.681784][T10369] 0 pages HighMem/MovableOnly [ 214.681792][T10369] 428661 pages reserved [ 214.681799][T10369] 0 pages cma reserved [ 214.940265][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.940289][T10374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.952969][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.952991][T10374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.960245][T10374] batman_adv: batadv0: Interface deactivated: syz_tun [ 214.960265][T10374] batman_adv: batadv0: Removing interface: syz_tun [ 215.723215][T10409] syzkaller1: entered promiscuous mode [ 215.723238][T10409] syzkaller1: entered allmulticast mode [ 215.843121][T10412] syzkaller1: entered promiscuous mode [ 215.843143][T10412] syzkaller1: entered allmulticast mode [ 215.897829][T10421] __nla_validate_parse: 9 callbacks suppressed [ 215.897848][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 216.052131][T10430] ip_tables: iptables: counters copy to user failed while replacing table [ 216.313049][T10443] validate_nla: 3 callbacks suppressed [ 216.313067][T10443] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 216.313081][T10443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1078'. [ 216.601591][T10457] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1082'. [ 216.921932][T10466] syzkaller1: entered promiscuous mode [ 216.921956][T10466] syzkaller1: entered allmulticast mode [ 216.945173][T10467] syzkaller1: entered promiscuous mode [ 216.945194][T10467] syzkaller1: entered allmulticast mode [ 217.270597][T10477] tipc: Enabled bearer , priority 0 [ 217.312368][T10468] tipc: Disabling bearer [ 217.372266][T10483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1089'. [ 217.489926][T10489] netlink: zone id is out of range [ 217.489941][T10489] netlink: zone id is out of range [ 217.489949][T10489] netlink: zone id is out of range [ 217.489957][T10489] netlink: zone id is out of range [ 217.489965][T10489] netlink: zone id is out of range [ 217.489972][T10489] netlink: zone id is out of range [ 217.504309][T10489] netlink: zone id is out of range [ 217.504323][T10489] netlink: zone id is out of range [ 217.504337][T10489] netlink: zone id is out of range [ 217.504344][T10489] netlink: zone id is out of range [ 217.647547][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.649957][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.800121][T10488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.817828][T10488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.922143][T10488] bridge2: left promiscuous mode [ 217.922166][T10488] bridge2: left allmulticast mode [ 217.942531][T10488] bridge3: left promiscuous mode [ 217.942553][T10488] bridge3: left allmulticast mode [ 217.947418][T10488] bridge4: left promiscuous mode [ 217.947436][T10488] bridge4: left allmulticast mode [ 217.985914][T10088] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.985950][T10088] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.986876][T10088] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.986903][T10088] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.986966][T10088] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.986991][T10088] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.987025][T10088] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.987050][T10088] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.312364][T10513] netlink: 'syz.0.1092': attribute type 2 has an invalid length. [ 218.312385][T10513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1092'. [ 218.445579][T10534] syzkaller1: entered promiscuous mode [ 218.445602][T10534] syzkaller1: entered allmulticast mode [ 218.524492][T10535] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 218.524589][T10535] syzkaller1: linktype set to 776 [ 218.550199][T10537] syzkaller1: entered promiscuous mode [ 218.550223][T10537] syzkaller1: entered allmulticast mode [ 218.750970][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1102'. [ 218.763360][T10555] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1102'. [ 218.874188][T10562] batman_adv: batadv0: Adding interface: syzkaller0 [ 218.874208][T10562] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.874239][T10562] batman_adv: batadv0: Interface activated: syzkaller0 [ 219.150662][T10561] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 219.167673][T10561] batman_adv: batadv0: Removing interface: syzkaller0 [ 219.428840][T10580] syzkaller0: entered promiscuous mode [ 219.428864][T10580] syzkaller0: entered allmulticast mode [ 219.484293][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1110'. [ 219.523941][T10587] syzkaller1: entered promiscuous mode [ 219.523965][T10587] syzkaller1: entered allmulticast mode [ 222.061782][T10632] bridge4: entered promiscuous mode [ 222.061806][T10632] bridge4: entered allmulticast mode [ 222.062459][T10631] syzkaller1: entered promiscuous mode [ 222.062477][T10631] syzkaller1: entered allmulticast mode [ 222.514904][T10657] syzkaller1: entered promiscuous mode [ 222.514926][T10657] syzkaller1: entered allmulticast mode [ 222.672141][T10650] net_ratelimit: 32690 callbacks suppressed [ 222.672163][T10650] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 222.867860][T10661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.014637][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 223.019803][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 223.095717][T10672] vlan3: entered allmulticast mode [ 223.104485][T10672] batman_adv: batadv0: Adding interface: vlan3 [ 223.104497][T10672] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.104513][T10672] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 223.174887][T10678] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 223.309971][T10678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.310581][T10678] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 223.356236][T10678] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.356809][T10678] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 223.385997][T10678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.386673][T10678] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 223.540268][T10678] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.547374][T10678] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 223.633282][T10678] 8021q: adding VLAN 0 to HW filter on device bond7 [ 223.644380][T10678] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 223.762528][T10678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 223.776698][T10678] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 223.886518][T10678] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.893160][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 223.895274][T10706] syzkaller1: entered promiscuous mode [ 223.895295][T10706] syzkaller1: entered allmulticast mode [ 224.051356][T10718] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.244364][T10735] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 224.282036][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 224.468418][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 224.468452][T10751] netlink: 'syz.2.1150': attribute type 10 has an invalid length. [ 224.468467][T10751] netlink: 'syz.2.1150': attribute type 5 has an invalid length. [ 224.468479][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 224.471102][T10752] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1150'. [ 224.534343][T10751] geneve3: entered promiscuous mode [ 224.534364][T10751] geneve3: entered allmulticast mode [ 224.554383][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 224.588148][T10086] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 34641 - 0 [ 224.588194][T10086] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 34641 - 0 [ 224.588227][T10086] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 34641 - 0 [ 224.588260][T10086] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 34641 - 0 [ 224.772783][T10772] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.821158][T10774] syzkaller1: entered promiscuous mode [ 224.821181][T10774] syzkaller1: entered allmulticast mode [ 225.108968][T10789] IPVS: length: 77 != 24 [ 225.178396][T10794] IPv6: addrconf: prefix option has invalid lifetime [ 225.214761][T10795] batman_adv: batadv0: Adding interface: syzkaller0 [ 225.214780][T10795] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.214812][T10795] batman_adv: batadv0: Interface activated: syzkaller0 [ 225.298546][T10804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1162'. [ 225.298577][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 225.659986][T10791] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 225.705158][T10791] batman_adv: batadv0: Removing interface: syzkaller0 [ 225.951514][T10822] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 226.077146][T10829] syzkaller1: entered promiscuous mode [ 226.077169][T10829] syzkaller1: entered allmulticast mode [ 226.274817][T10835] lo: Caught tx_queue_len zero misconfig [ 226.294718][T10837] Bluetooth: hci0: unsupported parameter 5135 [ 226.294740][T10837] Bluetooth: hci0: unsupported parameter 8192 [ 226.294751][T10837] Bluetooth: hci0: unsupported parameter 5135 [ 226.294761][T10837] Bluetooth: hci0: unsupported parameter 8192 [ 226.673208][T10864] bridge11: entered promiscuous mode [ 226.673231][T10864] bridge11: entered allmulticast mode [ 226.680538][T10864] team0: Port device bridge11 added [ 227.011728][T10882] syzkaller1: entered promiscuous mode [ 227.011751][T10882] syzkaller1: entered allmulticast mode [ 227.090646][T10887] x_tables: duplicate underflow at hook 2 [ 227.173800][T10891] syzkaller0: entered promiscuous mode [ 227.173823][T10891] syzkaller0: entered allmulticast mode [ 227.190810][T10891] TC_ACT_REPEAT abuse ? [ 227.417790][T10906] bridge5: entered promiscuous mode [ 227.417813][T10906] bridge5: entered allmulticast mode [ 227.713778][T10926] syzkaller1: entered promiscuous mode [ 227.713802][T10926] syzkaller1: entered allmulticast mode [ 228.058272][T10088] IPVS: starting estimator thread 0... [ 228.150238][T10952] IPVS: using max 30 ests per chain, 72000 per kthread [ 228.349461][T10964] bridge6: entered promiscuous mode [ 228.349485][T10964] bridge6: entered allmulticast mode [ 228.659699][T10988] __nla_validate_parse: 8 callbacks suppressed [ 228.659721][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 228.698301][T10982] batman_adv: batadv0: Adding interface: syzkaller0 [ 228.698321][T10982] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.698355][T10982] batman_adv: batadv0: Interface activated: syzkaller0 [ 229.017167][T10994] syzkaller1: entered promiscuous mode [ 229.017190][T10994] syzkaller1: entered allmulticast mode [ 229.198169][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 229.203412][T11004] vši€Q: renamed from ip_vti0 [ 229.538356][T11004] vši€Q: entered allmulticast mode [ 229.538525][T11004] A link change request failed with some changes committed already. Interface vši€Q may have been left with an inconsistent configuration, please check. [ 229.540005][T10982] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 229.592455][T10982] batman_adv: batadv0: Removing interface: syzkaller0 [ 230.027139][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 230.032761][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1223'. [ 230.428199][T11032] syzkaller1: entered promiscuous mode [ 230.428222][T11032] syzkaller1: entered allmulticast mode [ 230.797137][T11043] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) ! [ 230.825790][T11042] bridge4: entered promiscuous mode [ 230.825813][T11042] bridge4: entered allmulticast mode [ 230.832890][T11042] team0: Port device bridge4 added [ 230.934705][T11047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.995113][T11049] syzkaller0: entered promiscuous mode [ 230.995160][T11049] syzkaller0: entered allmulticast mode [ 231.014129][T11049] validate_nla: 2 callbacks suppressed [ 231.014149][T11049] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 231.015080][T11049] syz_tun: left promiscuous mode [ 231.420899][T11060] syzkaller1: entered promiscuous mode [ 231.420922][T11060] syzkaller1: entered allmulticast mode [ 231.613922][T11068] syzkaller1: entered promiscuous mode [ 231.613946][T11068] syzkaller1: entered allmulticast mode [ 231.686764][T11070] bridge5: entered promiscuous mode [ 231.686786][T11070] bridge5: entered allmulticast mode [ 231.690610][T11070] team0: Port device bridge5 added [ 231.832341][T11076] netlink: zone id is out of range [ 231.832577][T11075] netlink: zone id is out of range [ 231.851548][T11079] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 231.881412][T11079] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.978102][T11080] bond5: (slave veth7): Enslaving as an active interface with a down link [ 231.999907][T11081] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 232.014388][T11081] bond5: (slave batadv1): making interface the new active one [ 232.019784][T11081] batadv1: entered promiscuous mode [ 232.029489][T11081] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 232.319943][T11101] bond_slave_0: Caught tx_queue_len zero misconfig [ 232.446622][T11104] batman_adv: batadv0: Adding interface: veth0 [ 232.446642][T11104] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.446674][T11104] batman_adv: batadv0: Interface activated: veth0 [ 232.573202][T11109] syzkaller1: entered promiscuous mode [ 232.573226][T11109] syzkaller1: entered allmulticast mode [ 232.658677][T11111] syzkaller1: entered promiscuous mode [ 232.658701][T11111] syzkaller1: entered allmulticast mode [ 232.707966][T11121] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1253'. [ 232.836082][T11132] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1255'. [ 232.952202][T11124] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.382822][T11162] batman_adv: batadv0: Adding interface: syzkaller0 [ 233.382840][T11162] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.382873][T11162] batman_adv: batadv0: Interface activated: syzkaller0 [ 233.468537][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 233.468560][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 233.468584][T11168] netlink: 'syz.2.1263': attribute type 14 has an invalid length. [ 233.793373][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 233.973412][T11192] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 234.067378][T11196] syzkaller1: entered promiscuous mode [ 234.067402][T11196] syzkaller1: entered allmulticast mode [ 234.205278][T11161] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 234.267314][T11199] ip_tables: iptables: counters copy to user failed while replacing table [ 234.297278][T11161] batman_adv: batadv0: Removing interface: syzkaller0 [ 234.453572][T11211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1273'. [ 234.611743][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1274'. [ 234.611962][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1274'. [ 234.761417][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1274'. [ 234.761637][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1274'. [ 234.894396][T11235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1279'. [ 234.905478][T11235] netlink: 'syz.3.1279': attribute type 1 has an invalid length. [ 234.940813][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 234.985996][T11238] syzkaller1: entered promiscuous mode [ 234.986019][T11238] syzkaller1: entered allmulticast mode [ 235.216018][T11247] batman_adv: batadv0: Adding interface: syzkaller0 [ 235.216036][T11247] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.216066][T11247] batman_adv: batadv0: Interface activated: syzkaller0 [ 235.630970][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'. [ 235.631920][T11253] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 235.662820][T11253] bond10: entered promiscuous mode [ 235.664509][T11253] 8021q: adding VLAN 0 to HW filter on device bond10 [ 235.729778][T11246] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 235.767712][T11246] batman_adv: batadv0: Removing interface: syzkaller0 [ 235.786551][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 235.841785][T11260] netlink: 'syz.0.1289': attribute type 12 has an invalid length. [ 235.879999][T11256] bridge12: entered promiscuous mode [ 235.880023][T11256] bridge12: entered allmulticast mode [ 235.891121][T11256] team0: Port device bridge12 added [ 235.918192][T11266] netlink: 'syz.0.1289': attribute type 12 has an invalid length. [ 235.956036][T10087] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.956081][T10087] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.956111][T10087] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.956141][T10087] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.491165][T11292] syzkaller1: entered promiscuous mode [ 236.491194][T11292] syzkaller1: entered allmulticast mode [ 236.633007][T11299] ip_tables: iptables: counters copy to user failed while replacing table [ 236.650368][T11299] tipc: New replicast peer: 172.20.20.187 [ 236.654966][T11299] tipc: Enabled bearer , priority 10 [ 236.836828][T11310] batman_adv: batadv0: Adding interface: syzkaller0 [ 236.836845][T11310] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.836873][T11310] batman_adv: batadv0: Interface activated: syzkaller0 [ 237.780646][T11308] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 237.802963][T11308] batman_adv: batadv0: Removing interface: syzkaller0 [ 237.816366][T11324] veth0: Caught tx_queue_len zero misconfig [ 238.002778][T11355] syzkaller0: entered promiscuous mode [ 238.002802][T11355] syzkaller0: entered allmulticast mode [ 238.076266][T11349] sch_fq: defrate 4 ignored. [ 238.243816][T11359] syzkaller1: entered promiscuous mode [ 238.243839][T11359] syzkaller1: entered allmulticast mode [ 238.624489][T11393] sctp: [Deprecated]: syz.0.1319 (pid 11393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.624489][T11393] Use struct sctp_sack_info instead [ 238.657374][T10089] IPVS: starting estimator thread 0... [ 238.703875][T11400] sctp_getsockopt_delayed_ack: 23 callbacks suppressed [ 238.703896][T11400] sctp: [Deprecated]: syz.3.1320 (pid 11400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.703896][T11400] Use struct sctp_sack_info instead [ 238.766668][T11398] IPVS: using max 30 ests per chain, 72000 per kthread [ 239.038638][T11426] __nla_validate_parse: 4 callbacks suppressed [ 239.038656][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 239.108738][T11431] syzkaller1: entered promiscuous mode [ 239.108754][T11431] syzkaller1: entered allmulticast mode [ 239.323455][T11433] netlink: zone id is out of range [ 239.323471][T11433] netlink: zone id is out of range [ 239.323479][T11433] netlink: zone id is out of range [ 239.323488][T11433] netlink: zone id is out of range [ 239.323496][T11433] netlink: zone id is out of range [ 239.323503][T11433] netlink: zone id is out of range [ 239.323515][T11433] netlink: zone id is out of range [ 239.323523][T11433] netlink: zone id is out of range [ 239.323531][T11433] netlink: zone id is out of range [ 239.381685][T11441] ªªªªªª: renamed from vlan0 (while UP) [ 239.827003][T11451] netlink: 'syz.2.1333': attribute type 10 has an invalid length. [ 239.834783][T11451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.841439][T11451] team0: Port device netdevsim1 added [ 239.900603][T11473] syzkaller1: entered promiscuous mode [ 239.900625][T11473] syzkaller1: entered allmulticast mode [ 239.915584][T11451] netlink: 'syz.2.1333': attribute type 10 has an invalid length. [ 239.968551][T11451] team0: Port device netdevsim1 removed [ 239.980713][T11451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.986427][T11451] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 240.133748][T11482] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1344'. [ 240.133871][T11482] gre0: entered allmulticast mode [ 240.255597][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.278528][T11490] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1346'. [ 240.465783][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 240.490454][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.490578][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.731909][T11508] syzkaller1: entered promiscuous mode [ 240.731933][T11508] syzkaller1: entered allmulticast mode [ 240.787091][T11512] SET target dimension over the limit! [ 240.830252][T11510] syzkaller1: entered promiscuous mode [ 240.830277][T11510] syzkaller1: entered allmulticast mode [ 240.970403][T11523] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 241.066388][T11525] syzkaller1: entered promiscuous mode [ 241.066411][T11525] syzkaller1: entered allmulticast mode [ 241.295013][T11532] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 241.508250][T11544] syzkaller0: entered promiscuous mode [ 241.508272][T11544] syzkaller0: entered allmulticast mode [ 241.694600][T11554] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1369'. [ 242.028968][T11567] syzkaller1: entered promiscuous mode [ 242.028990][T11567] syzkaller1: entered allmulticast mode [ 242.196052][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 242.354530][T11575] sctp: [Deprecated]: syz.3.1377 (pid 11575) Use of int in maxseg socket option. [ 242.354530][T11575] Use struct sctp_assoc_value instead [ 242.373775][T11578] net_ratelimit: 229 callbacks suppressed [ 242.373792][T11578] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 242.452300][T11580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.580710][T11587] block nbd2: server does not support multiple connections per device. [ 242.595098][T11587] block nbd2: shutting down sockets [ 242.794585][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 243.441303][T11626] syzkaller1: entered promiscuous mode [ 243.441325][T11626] syzkaller1: entered allmulticast mode [ 243.463312][T11632] x_tables: unsorted underflow at hook 2 [ 243.639681][T11643] xt_connbytes: Forcing CT accounting to be enabled [ 243.719532][T11647] veth0: entered promiscuous mode [ 243.829215][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 243.833850][T11647] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1393'. [ 243.964296][T11655] sctp: [Deprecated]: syz.2.1393 (pid 11655) Use of int in max_burst socket option. [ 243.964296][T11655] Use struct sctp_assoc_value instead [ 243.971360][T11658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 244.691073][T11672] netlink: 'syz.3.1401': attribute type 29 has an invalid length. [ 244.691093][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 244.693168][T11645] veth0: left promiscuous mode [ 244.725820][ T3361] batadv1: left promiscuous mode [ 244.939996][T11697] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 245.181941][T11708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1408'. [ 245.270501][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1410'. [ 245.568131][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 245.568158][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 245.568174][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 245.644591][T11735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 245.782670][T11737] block nbd0: NBD_DISCONNECT [ 245.806391][T11737] block nbd0: shutting down sockets [ 245.926855][T11755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 245.999629][T11758] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 245.999643][T11758] netlink: 'syz.1.1420': attribute type 3 has an invalid length. [ 245.999651][T11758] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1420'. [ 246.301239][T11770] syzkaller1: entered promiscuous mode [ 246.301263][T11770] syzkaller1: entered allmulticast mode [ 246.716701][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1428'. [ 246.754935][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1428'. [ 246.971592][T11831] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.148257][T11844] netlink: 'syz.4.1434': attribute type 1 has an invalid length. [ 248.328985][T11910] veth0_macvtap: mtu less than device minimum [ 248.339825][T11916] netlink: 'syz.2.1440': attribute type 21 has an invalid length. [ 248.339907][T11916] netlink: 'syz.2.1440': attribute type 4 has an invalid length. [ 248.339920][T11916] netlink: 'syz.2.1440': attribute type 5 has an invalid length. [ 248.344262][ T31] audit: type=1804 audit(1791200875.623:11): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1440" name="/newroot/297/cgroup.controllers" dev="tmpfs" ino=1536 res=1 errno=0 [ 248.344481][ T31] audit: type=1800 audit(1791200875.623:12): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1440" name="cgroup.controllers" dev="tmpfs" ino=1536 res=0 errno=0 [ 248.347579][ T31] audit: type=1800 audit(1791200875.633:13): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1440" name="cgroup.controllers" dev="tmpfs" ino=1536 res=0 errno=0 [ 248.359555][T11916] ip6gretap0: entered promiscuous mode [ 248.361031][T11916] syz_tun: entered promiscuous mode [ 248.361885][T11916] debugfs: 'hsr1' already exists in 'hsr' [ 248.361905][T11916] Cannot create hsr debugfs directory [ 248.574987][T11918] ip_tables: iptables: counters copy to user failed while replacing table [ 249.206403][T11946] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.798205][T11977] __nla_validate_parse: 8 callbacks suppressed [ 249.798224][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 250.041434][T11990] lo: left promiscuous mode [ 250.050580][T11990] tunl0: left promiscuous mode [ 250.053410][T11990] gre0: left promiscuous mode [ 250.069429][T11990] ip_vti0: left promiscuous mode [ 250.079222][T11990] ip6_vti0: left promiscuous mode [ 250.081010][T11990] sit0: left promiscuous mode [ 250.099947][T11990] ip6tnl0: left promiscuous mode [ 250.108488][T11990] ip6gre0: left promiscuous mode [ 250.120136][T11990] ip6gretap0: left promiscuous mode [ 250.127695][T11990] bridge0: left promiscuous mode [ 250.128860][T11990] vcan0: left promiscuous mode [ 250.129884][T11990] bond0: left promiscuous mode [ 250.136323][T11990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.137132][T11990] team0: left promiscuous mode [ 250.144921][T11990] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.146539][T11990] dummy0: left promiscuous mode [ 250.150487][T11990] nlmon0: left promiscuous mode [ 250.153505][T11990] batadv0: left promiscuous mode [ 250.166318][T11990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.167062][T11990] vxcan0: left promiscuous mode [ 250.179360][T11990] vxcan1: left promiscuous mode [ 250.185072][T11990] veth0: left promiscuous mode [ 250.189099][T11990] veth1: left promiscuous mode [ 250.223854][T11997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.325143][T11990] wg0: left promiscuous mode [ 250.367117][T11990] wg1: left promiscuous mode [ 250.369805][T11990] wg2: left promiscuous mode [ 250.371394][T11990] veth0_to_bridge: left promiscuous mode [ 250.374339][T11990] veth1_to_bridge: left promiscuous mode [ 250.398313][T11990] veth0_to_bond: left promiscuous mode [ 250.399598][T11990] bond_slave_0: left promiscuous mode [ 250.401403][T11990] veth1_to_bond: left promiscuous mode [ 250.402685][T11990] bond_slave_1: left promiscuous mode [ 250.403710][T11990] veth1_to_team: left promiscuous mode [ 250.434023][T11990] team_slave_1: left promiscuous mode [ 250.435125][T11990] veth0_to_batadv: left promiscuous mode [ 250.448175][T11990] batadv_slave_0: left promiscuous mode [ 250.463034][T11990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.464570][T11990] xfrm0: left promiscuous mode [ 250.482104][T11990] veth0_to_hsr: left promiscuous mode [ 250.486479][T11990] veth1_to_hsr: left promiscuous mode [ 250.488379][T11990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.488400][T11990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.488449][T11990] hsr0: left promiscuous mode [ 250.491433][T11990] veth1_virt_wifi: left promiscuous mode [ 250.492665][T11990] veth0_virt_wifi: left promiscuous mode [ 250.531853][T11990] virt_wifi0: left promiscuous mode [ 250.531877][T11990] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 250.571999][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.572100][T10089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.575256][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.575318][T10089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.631271][T11998] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 250.703310][T12003] ipvlan2: entered promiscuous mode [ 250.716609][T12003] bridge0: port 3(ipvlan2) entered blocking state [ 250.716723][T12003] bridge0: port 3(ipvlan2) entered disabled state [ 250.716859][T12003] ipvlan2: entered allmulticast mode [ 250.716875][T12003] bridge0: entered allmulticast mode [ 250.732136][T12003] ipvlan2: left allmulticast mode [ 250.732156][T12003] bridge0: left allmulticast mode [ 250.787486][T11999] syzkaller1: entered promiscuous mode [ 250.787510][T11999] syzkaller1: entered allmulticast mode [ 251.356799][T12037] [ 251.359179][T12037] ====================================================== [ 251.366207][T12037] WARNING: possible circular locking dependency detected [ 251.373255][T12037] syzkaller #0 Not tainted [ 251.377676][T12037] ------------------------------------------------------ [ 251.384704][T12037] syz.2.1466/12037 is trying to acquire lock: [ 251.390778][T12037] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 251.399973][T12037] [ 251.399973][T12037] but task is already holding lock: [ 251.407346][T12037] ffff888057110f80 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 251.417131][T12037] [ 251.417131][T12037] which lock already depends on the new lock. [ 251.417131][T12037] [ 251.427533][T12037] [ 251.427533][T12037] the existing dependency chain (in reverse order) is: [ 251.436543][T12037] [ 251.436543][T12037] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 251.444110][T12037] __might_fault+0xcb/0x130 [ 251.449137][T12037] _copy_from_user+0x28/0xb0 [ 251.454248][T12037] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 251.460744][T12037] ip_generic_getfrag+0x149/0x2d0 [ 251.466288][T12037] __ip6_append_data+0x3b26/0x40c0 [ 251.471921][T12037] ip6_append_data+0x108/0x270 [ 251.477202][T12037] rawv6_sendmsg+0x1298/0x18c0 [ 251.482486][T12037] sock_sendmsg_nosec+0x10f/0x190 [ 251.488020][T12037] ____sys_sendmsg+0x54e/0x850 [ 251.493309][T12037] ___sys_sendmsg+0x2a5/0x360 [ 251.498520][T12037] __x64_sys_sendmsg+0x1b1/0x290 [ 251.503988][T12037] do_syscall_64+0x166/0x520 [ 251.509103][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.515516][T12037] [ 251.515516][T12037] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 251.523247][T12037] lock_sock_nested+0x41/0x100 [ 251.528525][T12037] tls_sw_sendmsg+0x15f/0x2b50 [ 251.533839][T12037] sock_sendmsg_nosec+0x90/0x190 [ 251.539287][T12037] sock_write_iter+0x2de/0x3e0 [ 251.544569][T12037] do_iter_readv_writev+0x612/0x8c0 [ 251.550277][T12037] vfs_writev+0x343/0x990 [ 251.555127][T12037] do_writev+0x154/0x2e0 [ 251.559893][T12037] do_syscall_64+0x166/0x520 [ 251.565025][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.571443][T12037] [ 251.571443][T12037] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 251.578914][T12037] __mutex_lock+0x19d/0x1550 [ 251.584028][T12037] tls_sw_sendmsg+0x13a/0x2b50 [ 251.589300][T12037] sock_sendmsg_nosec+0x90/0x190 [ 251.594752][T12037] sock_sendmsg+0x1ca/0x2d0 [ 251.599764][T12037] __sock_xmit+0x245/0x4f0 [ 251.604691][T12037] nbd_disconnect+0x3ad/0x560 [ 251.609883][T12037] nbd_disconnect_and_put+0x32/0x280 [ 251.615687][T12037] nbd_genl_disconnect+0x4af/0x590 [ 251.621319][T12037] genl_family_rcv_msg_doit+0x233/0x340 [ 251.627399][T12037] genl_rcv_msg+0x614/0x7a0 [ 251.632429][T12037] netlink_rcv_skb+0x226/0x4a0 [ 251.637709][T12037] genl_rcv+0x28/0x40 [ 251.642210][T12037] netlink_unicast+0x7bd/0x940 [ 251.647499][T12037] netlink_sendmsg+0x813/0xb40 [ 251.652772][T12037] sock_sendmsg_nosec+0x14e/0x190 [ 251.658306][T12037] ____sys_sendmsg+0x54e/0x850 [ 251.663585][T12037] ___sys_sendmsg+0x2a5/0x360 [ 251.668778][T12037] __x64_sys_sendmsg+0x1b1/0x290 [ 251.674234][T12037] do_syscall_64+0x166/0x520 [ 251.679341][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.685755][T12037] [ 251.685755][T12037] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 251.693389][T12037] __mutex_lock+0x19d/0x1550 [ 251.698502][T12037] nbd_queue_rq+0x373/0xff0 [ 251.703516][T12037] blk_mq_dispatch_rq_list+0x499/0x1990 [ 251.709575][T12037] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 251.716419][T12037] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 251.722921][T12037] blk_mq_run_work_fn+0x16c/0x300 [ 251.728469][T12037] process_scheduled_works+0xc3d/0x1630 [ 251.734537][T12037] worker_thread+0xa47/0xfb0 [ 251.739650][T12037] kthread+0x38b/0x480 [ 251.744230][T12037] ret_from_fork+0x514/0xb70 [ 251.749337][T12037] ret_from_fork_asm+0x1a/0x30 [ 251.754621][T12037] [ 251.754621][T12037] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 251.761825][T12037] __mutex_lock+0x19d/0x1550 [ 251.766936][T12037] nbd_queue_rq+0xc1/0xff0 [ 251.771868][T12037] blk_mq_dispatch_rq_list+0x499/0x1990 [ 251.777927][T12037] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 251.784773][T12037] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 251.791266][T12037] blk_mq_run_work_fn+0x16c/0x300 [ 251.796814][T12037] process_scheduled_works+0xc3d/0x1630 [ 251.802874][T12037] worker_thread+0xa47/0xfb0 [ 251.807981][T12037] kthread+0x38b/0x480 [ 251.812558][T12037] ret_from_fork+0x514/0xb70 [ 251.817669][T12037] ret_from_fork_asm+0x1a/0x30 [ 251.822958][T12037] [ 251.822958][T12037] -> #3 (set->srcu){.+.+}-{0:0}: [ 251.830080][T12037] __synchronize_srcu+0xc9/0x2f0 [ 251.835540][T12037] elevator_switch+0x1e8/0x7b0 [ 251.840822][T12037] elevator_change+0x2fa/0x480 [ 251.846101][T12037] elevator_set_default+0x375/0x440 [ 251.851814][T12037] blk_register_queue+0x3f3/0x4e0 [ 251.857355][T12037] __add_disk+0x6b8/0xdb0 [ 251.862201][T12037] add_disk_fwnode+0x100/0x3a0 [ 251.867482][T12037] nbd_dev_add+0x733/0xb60 [ 251.872413][T12037] nbd_init+0x168/0x1f0 [ 251.877086][T12037] do_one_initcall+0x250/0x870 [ 251.882364][T12037] do_initcall_level+0x10a/0x1a0 [ 251.887819][T12037] do_initcalls+0x59/0xa0 [ 251.892664][T12037] kernel_init_freeable+0x29d/0x3e0 [ 251.898379][T12037] kernel_init+0x22/0x1d0 [ 251.903218][T12037] ret_from_fork+0x514/0xb70 [ 251.908324][T12037] ret_from_fork_asm+0x1a/0x30 [ 251.913604][T12037] [ 251.913604][T12037] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 251.921415][T12037] __mutex_lock+0x19d/0x1550 [ 251.926525][T12037] elevator_change+0x1af/0x480 [ 251.931800][T12037] elevator_set_none+0xb5/0x140 [ 251.937158][T12037] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 251.943477][T12037] nbd_start_device+0x189/0xb30 [ 251.948836][T12037] nbd_genl_connect+0x167d/0x1cd0 [ 251.954366][T12037] genl_family_rcv_msg_doit+0x233/0x340 [ 251.960426][T12037] genl_rcv_msg+0x614/0x7a0 [ 251.965453][T12037] netlink_rcv_skb+0x226/0x4a0 [ 251.970744][T12037] genl_rcv+0x28/0x40 [ 251.975243][T12037] netlink_unicast+0x7bd/0x940 [ 251.980526][T12037] netlink_sendmsg+0x813/0xb40 [ 251.985810][T12037] sock_sendmsg_nosec+0x14e/0x190 [ 251.991358][T12037] ____sys_sendmsg+0x54e/0x850 [ 251.996639][T12037] ___sys_sendmsg+0x2a5/0x360 [ 252.001830][T12037] __x64_sys_sendmsg+0x1b1/0x290 [ 252.007281][T12037] do_syscall_64+0x166/0x520 [ 252.012390][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.018794][T12037] [ 252.018794][T12037] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 252.027392][T12037] blk_alloc_queue+0x544/0x690 [ 252.032668][T12037] __blk_mq_alloc_disk+0x194/0x390 [ 252.038292][T12037] nbd_dev_add+0x494/0xb60 [ 252.043222][T12037] nbd_init+0x168/0x1f0 [ 252.047921][T12037] do_one_initcall+0x250/0x870 [ 252.053206][T12037] do_initcall_level+0x10a/0x1a0 [ 252.058664][T12037] do_initcalls+0x59/0xa0 [ 252.063512][T12037] kernel_init_freeable+0x29d/0x3e0 [ 252.069225][T12037] kernel_init+0x22/0x1d0 [ 252.074066][T12037] ret_from_fork+0x514/0xb70 [ 252.079176][T12037] ret_from_fork_asm+0x1a/0x30 [ 252.084467][T12037] [ 252.084467][T12037] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 252.091663][T12037] __lock_acquire+0x164c/0x2de0 [ 252.097023][T12037] lock_acquire+0x115/0x350 [ 252.102039][T12037] fs_reclaim_acquire+0x71/0x100 [ 252.107484][T12037] prepare_alloc_pages+0x149/0x600 [ 252.113103][T12037] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 252.119419][T12037] alloc_pages_mpol+0x21e/0x390 [ 252.124790][T12037] alloc_pages_noprof+0xb1/0x2b0 [ 252.130243][T12037] pte_alloc_one+0x22/0x370 [ 252.135257][T12037] do_pte_missing+0x13c8/0x34b0 [ 252.140615][T12037] handle_mm_fault+0x1a53/0x3750 [ 252.146064][T12037] do_user_addr_fault+0x746/0x1340 [ 252.151693][T12037] exc_page_fault+0x6a/0xc0 [ 252.156709][T12037] asm_exc_page_fault+0x26/0x30 [ 252.162070][T12037] strncpy_from_user+0x1c7/0x2c0 [ 252.167518][T12037] do_tcp_setsockopt+0x169/0x1f80 [ 252.173062][T12037] smc_setsockopt+0x232/0xb40 [ 252.178251][T12037] do_sock_setsockopt+0x17c/0x1b0 [ 252.183792][T12037] __x64_sys_setsockopt+0x13d/0x1b0 [ 252.189510][T12037] do_syscall_64+0x166/0x520 [ 252.194619][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.201023][T12037] [ 252.201023][T12037] other info that might help us debug this: [ 252.201023][T12037] [ 252.211237][T12037] Chain exists of: [ 252.211237][T12037] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 252.211237][T12037] [ 252.223869][T12037] Possible unsafe locking scenario: [ 252.223869][T12037] [ 252.231333][T12037] CPU0 CPU1 [ 252.236685][T12037] ---- ---- [ 252.242036][T12037] rlock(&mm->mmap_lock); [ 252.246446][T12037] lock(sk_lock-AF_INET6); [ 252.253457][T12037] lock(&mm->mmap_lock); [ 252.260294][T12037] lock(fs_reclaim); [ 252.264269][T12037] [ 252.264269][T12037] *** DEADLOCK *** [ 252.264269][T12037] [ 252.272425][T12037] locks held by syz.2.1466/12037: 2, last CPU#1: [ 252.278744][T12037] #0: ffff888077d83da8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x174/0xb40 [ 252.289296][T12037] #1: ffff888057110f80 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 252.299218][T12037] [ 252.299218][T12037] stack backtrace: [ 252.305096][T12037] CPU: 1 UID: 0 PID: 12037 Comm: syz.2.1466 Not tainted syzkaller #0 PREEMPT(full) [ 252.314497][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.324540][T12037] Call Trace: [ 252.327810][T12037] [ 252.330736][T12037] dump_stack_lvl+0xe8/0x150 [ 252.335324][T12037] print_circular_bug+0x2e2/0x300 [ 252.340348][T12037] check_noncircular+0x12f/0x150 [ 252.345283][T12037] __lock_acquire+0x164c/0x2de0 [ 252.350127][T12037] ? is_bpf_text_address+0x292/0x2b0 [ 252.355407][T12037] ? is_bpf_text_address+0x26/0x2b0 [ 252.360608][T12037] ? kernel_text_address+0xa5/0xe0 [ 252.365718][T12037] ? __kernel_text_address+0xd/0x30 [ 252.370915][T12037] lock_acquire+0x115/0x350 [ 252.375414][T12037] ? prepare_alloc_pages+0x149/0x600 [ 252.380701][T12037] ? __lock_acquire+0x747/0x2de0 [ 252.385631][T12037] fs_reclaim_acquire+0x71/0x100 [ 252.390558][T12037] ? prepare_alloc_pages+0x149/0x600 [ 252.395837][T12037] prepare_alloc_pages+0x149/0x600 [ 252.400942][T12037] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 252.406743][T12037] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 252.413063][T12037] ? __pfx_policy_nodemask+0x10/0x10 [ 252.418354][T12037] alloc_pages_mpol+0x21e/0x390 [ 252.423205][T12037] alloc_pages_noprof+0xb1/0x2b0 [ 252.428139][T12037] pte_alloc_one+0x22/0x370 [ 252.432636][T12037] do_pte_missing+0x13c8/0x34b0 [ 252.437483][T12037] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 252.443723][T12037] handle_mm_fault+0x1a53/0x3750 [ 252.448661][T12037] ? handle_mm_fault+0xf1/0x3750 [ 252.453603][T12037] ? __pfx_handle_mm_fault+0x10/0x10 [ 252.458888][T12037] ? __lock_acquire+0x747/0x2de0 [ 252.463821][T12037] ? lock_mm_and_find_vma+0xa7/0x340 [ 252.469105][T12037] do_user_addr_fault+0x746/0x1340 [ 252.474228][T12037] exc_page_fault+0x6a/0xc0 [ 252.478731][T12037] asm_exc_page_fault+0x26/0x30 [ 252.483577][T12037] RIP: 0010:strncpy_from_user+0x1c7/0x2c0 [ 252.489291][T12037] Code: b6 00 00 00 e8 6a bc ab fc 48 f7 dd 49 89 ef 31 ff 4c 89 ee e8 1a c2 ab fc 4d 85 ed 4c 8b 24 24 74 70 e8 4c bc ab fc 49 ff cd <42> 8a 2c 3b 4b 8d 3c 3c 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 [ 252.508888][T12037] RSP: 0018:ffffc9000e487bd8 EFLAGS: 00050246 [ 252.514950][T12037] RAX: ffffffff851c3143 RBX: 0000200000000280 RCX: 0000000000080000 [ 252.522917][T12037] RDX: ffffc90005a9a000 RSI: 0000000000000036 RDI: 0000000000000037 [ 252.530886][T12037] RBP: ffffc9000e487d70 R08: ffffc9000e487c90 R09: 1ffff92001c90f92 [ 252.538854][T12037] R10: dffffc0000000000 R11: fffff52001c90f93 R12: ffffc9000e487c90 [ 252.546814][T12037] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 252.554778][T12037] ? strncpy_from_user+0x143/0x2c0 [ 252.559892][T12037] ? strncpy_from_user+0x143/0x2c0 [ 252.565003][T12037] do_tcp_setsockopt+0x169/0x1f80 [ 252.570033][T12037] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 252.575496][T12037] ? aa_sk_perm+0x713/0x900 [ 252.579991][T12037] ? sock_common_setsockopt+0x36/0xc0 [ 252.585354][T12037] ? tcp_setsockopt+0x3d/0xe0 [ 252.590030][T12037] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 252.595918][T12037] smc_setsockopt+0x232/0xb40 [ 252.600597][T12037] ? __pfx_smc_setsockopt+0x10/0x10 [ 252.605799][T12037] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 252.611340][T12037] ? __pfx_smc_setsockopt+0x10/0x10 [ 252.616535][T12037] do_sock_setsockopt+0x17c/0x1b0 [ 252.621560][T12037] __x64_sys_setsockopt+0x13d/0x1b0 [ 252.626757][T12037] do_syscall_64+0x166/0x520 [ 252.631346][T12037] ? trace_irq_disable+0x3b/0x140 [ 252.636363][T12037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.642424][T12037] ? clear_bhb_loop+0x70/0xc0 [ 252.647091][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.652973][T12037] RIP: 0033:0x7f950819e159 [ 252.657384][T12037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.676988][T12037] RSP: 002b:00007f9509077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.685403][T12037] RAX: ffffffffffffffda RBX: 00007f9508425fa0 RCX: 00007f950819e159 [ 252.693366][T12037] RDX: 000000000000000d RSI: 0000000000000006 RDI: 000000000000000a [ 252.701331][T12037] RBP: 00007f950823506b R08: 0000000000000001 R09: 0000000000000000 [ 252.709294][T12037] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 252.717257][T12037] R13: 00007f9508426038 R14: 00007f9508425fa0 R15: 00007ffdb6c7f768 [ 252.725233][T12037]