last executing test programs: 14m5.80403361s ago: executing program 2 (id=994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x3) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000a00000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 14m5.496600171s ago: executing program 2 (id=1000): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000020601030000000000000000000000000900020073797a3100000000050004000000000005000500450000000c00078008001340001b0000050005000a0000000500010006000000964afbda3d1dcdcc94591ba2b54bb32fb231424d61c7f9ce63b5"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000004000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x44201, 0x0) ioctl$XFS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000240)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f0000000180)=0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000800000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000400)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7218cc81, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$SIOCSIFHWADDR(r10, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) getsockopt(r10, 0x1, 0x5, &(0x7f0000000340)=""/108, &(0x7f0000000480)=0x6c) 14m4.485271442s ago: executing program 2 (id=1016): socket$inet(0x2, 0x80000, 0x108) 14m4.326973194s ago: executing program 2 (id=1018): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) listen(0xffffffffffffffff, 0x0) unshare(0x20040600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x80, 0x10, 0xe8, 0xfc, 0x0, 0xff, 0x2, 0x990e509dbe3e5cd9}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4880) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) listen(0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@private=0xa010100, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x1, 0x20000000000}, {0x1, 0x2, 0x0, 0x1}, 0x400000, 0x0, 0x2, 0x0, 0x1}}, 0xb8}}, 0x4004880) 14m3.340049781s ago: executing program 2 (id=1034): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r1) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020a00090700000026bd7000fbdbdf250500", @ANYRESOCT], 0x38}}, 0x20000000) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c3000000000000009500"], &(0x7f0000000180)='GPL\x00', 0xc, 0xd2, &(0x7f00000001c0)=""/210, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x22) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000002c0)={0x0, 0x4}) 14m3.161964865s ago: executing program 2 (id=1036): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000a1fe43bc240dbf194250e9a69f1a9d54fd1bbd592989cefd7301b24731f4a9b6da17c20b6bafb"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r4 = socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1c, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7c, {0x2, 0x4e25, @empty}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x2, @empty, 0x8}}}, 0x32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, r7, 0xffffffffffffffff, 0x7, 0x7, 0x9, "9816299c4fc9db5eeaebcaf42de776f75e5e8f6924f7fdc392b40f2b2af2e8c58c336899463aa03a71e50b0e19b6465932f1ab970ffbac9dbc2d5232d2d09b", 0x3f}, 0x60) socket$inet6_tcp(0xa, 0x1, 0x0) 13m47.804479971s ago: executing program 32 (id=1036): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000a1fe43bc240dbf194250e9a69f1a9d54fd1bbd592989cefd7301b24731f4a9b6da17c20b6bafb"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r4 = socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1c, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7c, {0x2, 0x4e25, @empty}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x2, @empty, 0x8}}}, 0x32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, r7, 0xffffffffffffffff, 0x7, 0x7, 0x9, "9816299c4fc9db5eeaebcaf42de776f75e5e8f6924f7fdc392b40f2b2af2e8c58c336899463aa03a71e50b0e19b6465932f1ab970ffbac9dbc2d5232d2d09b", 0x3f}, 0x60) socket$inet6_tcp(0xa, 0x1, 0x0) 3.435274827s ago: executing program 1 (id=8328): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000053c0002802c00018014000300ff010000000000000000000000000001141b0400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000100000000108000740000000002c0006801400040000000000000000000000ffffac1414aa14000500ff020000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r4, &(0x7f0000004dc0)={&(0x7f0000000080), 0xc, &(0x7f0000003a80)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/24, 0x18}, {&(0x7f0000002800)=""/42, 0x2a}, {&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002880)=""/46, 0x2e}, {&(0x7f00000028c0)=""/34, 0x22}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/161, 0xa1}, {&(0x7f00000039c0)=""/142, 0x8e}], 0x9, &(0x7f0000003b40)=[{0x18, 0x0, 0x0, ""/3}, {0xe8, 0x0, 0x0, ""/212}, {0xe8, 0x0, 0x0, ""/213}, {0x50, 0x0, 0x0, ""/62}, {0x1010, 0x0, 0x0, ""/4096}], 0x1248, 0x40}, 0x38, 0x12000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_buf(r5, 0x29, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x8, 0x1, [0x81, 0x40, 0x1, 0x3ff, 0xf273], [0x5, 0xf, 0x2, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x5, 0x7f, 0x62c0, 0x2, 0x2c, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x5, 0xde08, 0x8, 0xa, 0x7, 0x1, 0x3, 0x2, 0x5, 0x9, 0x3c00000000, 0x7, 0x1, 0xd5ac, 0x8, 0x2, 0x8000000000000001, 0x3, 0xa5e, 0x3ff, 0x0, 0xb, 0x3d, 0x1, 0x95, 0x4, 0x2, 0x8, 0x92, 0x100, 0xffffffffffffffff, 0x8001, 0x80, 0x7fff, 0x3, 0x401, 0x8, 0x4, 0x7ff, 0x1, 0x1, 0x8, 0x80000000, 0x80000000000, 0x4, 0x80000000, 0x8, 0x9, 0x1, 0x5, 0x0, 0x9, 0xfb, 0x3, 0x2, 0xffffffffffffffff, 0x6, 0xdd6, 0x3, 0x1, 0x3, 0x8, 0xe, 0x3c9, 0x1, 0x7, 0x7, 0x7, 0x5, 0xfffffffffffffff8, 0x4, 0x200, 0x2, 0x20000005, 0x8, 0xb, 0xffffffff, 0xc4, 0x6, 0x8, 0x9, 0xbd81, 0x0, 0x8, 0x7, 0xe8, 0x5c1, 0x7, 0x1af4, 0x8, 0x9, 0x0, 0x6c6, 0x9, 0x1, 0x1000, 0x7, 0x5, 0x9bb7, 0x22, 0x8a6, 0x4, 0x5, 0x8, 0x6]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000007c0)={r6, "3744ea3cb396a62b58df00bba41c61d9"}) 3.17090892s ago: executing program 4 (id=8331): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x82000, &(0x7f00000000c0)={@align=0xfffffffffffffff9, {0x800, 0x9, 0x80a, 0x4a6}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0xfffffffffffffff9, 0x6, 0x4, 0x6, 0x2, 0x0, [{0xd, 0xb, 0x538, '\x00', 0x4}, {0x3, 0x6, 0xc, '\x00', 0x102}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0xffffffffffffff39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r4, 0xaf5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3, 0x7, 0x6, 0x10200, r0, 0x8000, '\x00', 0x0, r4, 0x5, 0x1, 0x5, 0xd}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x82000, &(0x7f00000000c0)={@align=0xfffffffffffffff9, {0x800, 0x9, 0x80a, 0x4a6}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4}) (async) pipe(&(0x7f0000000140)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0xfffffffffffffff9, 0x6, 0x4, 0x6, 0x2, 0x0, [{0xd, 0xb, 0x538, '\x00', 0x4}, {0x3, 0x6, 0xc, '\x00', 0x102}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0xffffffffffffff39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f00000000c0)) (async) tee(r1, r4, 0xaf5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3, 0x7, 0x6, 0x10200, r0, 0x8000, '\x00', 0x0, r4, 0x5, 0x1, 0x5, 0xd}, 0x50) (async) 3.095555457s ago: executing program 0 (id=8332): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x301, 0x7, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xb}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40855}, 0x8404) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) unshare(0x26020480) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@fallback=r3, r2, 0x4}, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fc01000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000000000000044000500fa33646d599c39b20000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400020000005001500ff0000000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101002, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002c00)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000800)="a9d255c94b5c81ba986f382e98bc12ee2c187f26cae477304987e86d07d4a21a20c420ca244a7517ca518b149ea3817c015c7c05294b586915c9c47026fe752420b2ff99a524c714f72a854ca03245243bfa6f81d7479191d0fdff36011c3e8f4221970df390b4a3fe2b5d339a3491ffcef4dbe602fd0c524b12e90612ff39aba92c4a2748f92d806c8fc8cc4eb428ff8c95c5d907572890c897c55e8275123a83486a58ed2628fc754a32d8f1cbc044fadcd4d7ed77550975c8fe92a3543193f741d978a9e120fe6ad12afdff928dd3de5db88c4809fd215ed6fe72c273bc811c1b4d03208e2c2935373b6b4a58ec8ba1d09e74768744576839d101e3f1a320a4b4bf1ef1c7abaca55bf11a959eb6a9a7b56ecaf7446b1b4cdde07784d53fd580a29daadf2dbe121addf16d7b3eb4e0b8435fa50dbca8fcb01c3ab72aed686aece135da20fb65d246c6e95b8aba154b7f3080218cd91e262039b032eb6fe2924ad808ed34086c3f87db62c3f71a7b7d5b8b5dc7620eda1458a5d68ae0ccb859a232c46222c6f540a9be2b", 0x18b}], 0x1, 0x0, 0x0, 0x8041}], 0x1, 0x4000004) 2.955004604s ago: executing program 4 (id=8333): syz_emit_ethernet(0x2a3, &(0x7f00000005c0)={@random="e33110495bfd", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x26d, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x5, 0x12, "121d055543d09b72d0ee8a8e1ae660ecf895260d2505e7bd6621382973c5f12579459826b06de57d26598f9dcef90bbf41ab93eaba37e2f41c6d06eac4e8c421008df0bc95d5fc1ae28356030a05c94368c5545a75b6d9bf7774876594c025481c753c57b55539f191598f4cdc3e1e3fc118b6a671779d37f3b8c5faf94c5da574569cef64b39ec5125df9538e2f"}, {0x18, 0x1d, "e3339985c226fa3170aeccc5fa9e3edbe7d3a323564c5586435346feb3a7ec6c02b329c6ae75b68304a09f83cdcd85af66c578cabfc9074c87a0cd398a929b491fa906a76231b4067c19ec1a9787d5584ea09699af6fda589890aaff6718a6aad1aab1accadec3508bab6456c5d574135edcb43aa7f4ebc4e78f98f6edd30367a658332d49ed617e2d12d67728f217a89bf07fc9017e24a1210f2799f86a458f483f57897dd6f0a2e6b5b82147ce3e814ada3ae0945c9156eb70ec05affcc915db59645f9cf9b2dfc703ef4f9ae311e10f39e9f348025ece1e9cf913b1d66e789c3d2dfb3a5baa4640846c"}, {0x2, 0x10, "70e23d4115224581693d91e7749bce052d93ca339fbd0ce8d4cde55e994567050fb07c10de28468d5df1270ce3f6f0fd4575f8bde69f79db773d4a4f2f2b76820d82e9b55391a40c239d72406f91e75f3b0a8e62d20fbb25793393765574eb5f2ccb692857defc629600e6fd8702b8d078c295e817fa7469f1d93c92cb6676a3"}, {0x19, 0x8, "8e9d123fd43b3003a96fcdf3e62cdde16da29358d39af6232c4e629d16947c739bf3823920a1ee723eeae640c5edf9575622d1f0a97d550f5347d83cfcb1976e660c4dfc"}]}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c3754b47c0b61fc44", 0x48}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000732f236ed82deacc93aa4095029e7bc010000f8ffffffb702000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300), 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 2.733252974s ago: executing program 4 (id=8334): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000001680)) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) setsockopt$sock_timeval(r1, 0x1, 0x2f, &(0x7f0000abaff9), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$ax25_int(r4, 0x101, 0x5, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bind$qrtr(r0, &(0x7f0000000080)={0x2a, 0x3, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x0, 0xff, 0x7, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r5, 0x3c, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x2d, @remote, 0x6}, @in={0x2, 0x4e20, @local}]}, &(0x7f00000003c0)=0x10) 2.426318988s ago: executing program 1 (id=8336): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x8040) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb62d}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.380926909s ago: executing program 4 (id=8338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x19, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x202, 0xfff, 0x10000, r2}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1, 0x9, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, r3, 0x4}, 0x38) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000d000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x11c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xc8, 0x7, 0x1, 0x0, "c2f126a97e83a0e73d8bf28541d83007b090c01bdf38002e71f8e8059d9176560489ad58ae108c0d8349cd1462442f5a0d143f37c7fd6809c8d50c0c1e4c8f65ecc18a82bb6867319ff2f30481663f834c65baf4b81a781a0c68b7a896bc932d846a95e32664d19e4ff4031b798a79621e3a6410e387b5d03196e8db69390919bd2c6db547387b16ffa8a90ba664ee591d1b62abadb1a03da4274a322ee9b933c4c1a48e15221dbb03de2654bf27b11861b714247cb9f8727e6c1e401f5ad5d3aff275be"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}, @NFT_MSG_NEWRULE={0x148, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xfc, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x31}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28c}, 0x1, 0x0, 0x0, 0x48004}, 0x20008810) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 2.292159498s ago: executing program 3 (id=8339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x194, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x30}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8a4}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0xbac4}, {0x8, 0xb, 0x4}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0x8046) 2.164364168s ago: executing program 1 (id=8340): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0xa3, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0xf}, 0x28) 2.05813422s ago: executing program 0 (id=8341): socket$pppl2tp(0x18, 0x1, 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000800000091103b000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getsockopt$ax25_int(r3, 0x101, 0x1, 0x0, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f0000000300)={r6, 0x10, 0x7}, 0x8) (async) r7 = socket$kcm(0x29, 0x5, 0x0) splice(r7, 0x0, r7, 0x0, 0xf3e, 0x8) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="58010000cf37d8d4a004afcf2854fb07afda4e877abd4613a5d928bb7e01b5dcaab348262d3737f43da19314af7eb4962dd1489368a55b50455d189f6aacce962adaca9882985919dba8e74627d25042570b6146c935c01c7485962d8722b16df54c9e47f7641193313d3708e1775bd6075a3148c1be229351099c5bd281894216c6c92b1da76afd59a56317a1357057ee50a82eda3988fd90a05938d620f81d6c1ef7feb151f569d84b5eb0eb107b6791727e271170ff4d2c2a7127feb93c2492a8b90b0b1bdb996fc354d121542e3362de0df82bccf6b0e1c26c3433782b3c1105a171699238499e0cedea25b98e7d4d4806351cbf7fc30feff705b02d9c77c1d92c590efe742e60e34ebf1e48354d0d2ddcae46cb64ce7e24c40425973c451a020e8e9fb96dc5f2b1ce6a3675ae8a88501e4ec62fc65ad353015752ea8a76bfc3356eeb21b6fdc410ff1700e572", @ANYRES16=0x0, @ANYBLOB="02002abd7000fbdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000"], 0x158}, 0x1, 0x0, 0x0, 0x51}, 0x40000) (async) connect$inet6(r2, 0x0, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) gettid() socket(0x8, 0x800, 0x0) 1.976044316s ago: executing program 3 (id=8342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="ef", 0x1}], 0x1}, 0x80) 1.915193252s ago: executing program 1 (id=8344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"a3d63ca74eaa0989a2adcb3241ff6d99", 0x0, 0x0, {0x6, 0x4fd}, {0xc3, 0x2}, 0x7fffffffffffffff, [0xfff, 0x40, 0x6, 0xfffffffffffffffd, 0x6, 0xc, 0xff, 0x40, 0x9, 0x9, 0x0, 0x8000, 0x4, 0x2, 0x5, 0x7fff]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000003c0)={{r0}, r1, 0x4, @unused=[0x1, 0x6, 0x1, 0x4], @name="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"}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 1.895307261s ago: executing program 4 (id=8345): r0 = socket(0x1d, 0x80802, 0x6) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086"], 0x48}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) recvmmsg(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/37, 0x25}, {&(0x7f00000019c0)=""/107, 0x6b}, {&(0x7f0000001a40)=""/201, 0xc9}, {&(0x7f0000001b40)=""/7, 0x7}, {&(0x7f0000001b80)=""/135, 0x87}, {&(0x7f0000001c40)=""/75, 0x4b}], 0x7, &(0x7f0000001d40)=""/246, 0xf6}, 0x6}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000001e40)=""/49, 0x31}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/8, 0x8}, {&(0x7f0000006880)=""/4098, 0x1002}, {&(0x7f0000003ec0)=""/34, 0x22}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/88, 0x58}], 0x7, &(0x7f0000005100)=""/9, 0x9}, 0x3}, {{&(0x7f0000005140)=@qipcrtr, 0x80, &(0x7f0000005380)=[{&(0x7f00000051c0)=""/121, 0x79}], 0x1}, 0xf31}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/105, 0x69}, {&(0x7f0000005440)=""/138, 0x8a}, {&(0x7f0000005500)=""/14, 0xe}], 0x3, &(0x7f0000005580)=""/168, 0xa8}, 0x9}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/4096, 0x1000}, 0x1}], 0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="00012abd7000fcdbdf2505000000080901007063690011000200303030303a30303a31302e300000000008000300010000ffff00000000000064657673696d0000000f0002006e655764b4dcb50ade67246e1d417464657673696d3000000800030002000000080001007063690011000200303030303a30303a31302e31"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 1.583202758s ago: executing program 0 (id=8346): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000300)=0x442018) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="375cd9f4f646df36af7321e0dd86b85d30ddea59341f87a298179fac705aefe5af7b8334128a86203cdffdf691f3e8e77ddf2f2b4eeeede84f7f4addd9a4f36df514894ff73b9186d2a27a7dfc9a09", 0x4f}], 0x1}], 0x1, 0x40800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="11020000000000000000010000002800018014000400ff0100000000000000000000000000010800060001000000060001000a000000"], 0x3c}}, 0x4010) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000032d543f16f1697000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 1.496042363s ago: executing program 5 (id=8348): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @remote}, 0x10, 0x0}}], 0x1, 0x2000c044) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x20, r8, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x4000010) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, 0x0, 0x0}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r7) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r11, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0xa2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x3}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8004}, 0x800) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r12, @ANYBLOB="1388000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r13, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, r14, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000000000001d7118ad000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.316321863s ago: executing program 5 (id=8349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x40, 0x1, 0xffffffff, 0xa, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x65, 0x0, 0xd, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ra={0x94, 0x4}]}}}}}) sendmmsg$inet(r0, &(0x7f0000004040)=[{{&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="37531e866bfa210cd53180174aad2aac8e109029d6509ebf457a428e9ebcb6109ae840f5a18daa11668d6a3b39f611d4bc349e24048f2cf57ba0739494470713d8f1e8fdefa972685e5102f1a38e6401c0868ec63abe4f2ecd81ecfc887fb7a82f96dae557d1e033c8a0861780c5033786ad460813fcc43235864241ca274e2d700e866f620654b3aef281809e707ef656", 0x91}, {&(0x7f00000002c0)="8b56e75df708267960dff215f0ff0b3ea6343b7d9e3a90071602116599d4f7736bffa16e56fc4d5a25a14ae5e0c65d97d6385a4647266026e94936922ff714d80a9a6ecf0c669a626d1208a35b7cbd113e1fe610808c868b9fe5079bdd545b7291993f9543b786f3499d87778ffddee44c5852b2ce762e7ca1cbcf97d5fcbac8b897a99c966482bb75ccfe87b4d0c504e0eae08c53866ccbf6a65d7f16ecd874260b23440389aa00b3b2e7720209e6e28abbea4206", 0xb5}, {&(0x7f0000000380)="2c9f947653929a2927ab276aa6eb45b347a8b9234d76b68e3be9b4ae82e06514de2bd76aab697a71b496b598dce3c795a89e0f8eb29d74b92823a7e7dbd12d4d2cbefd855161393fd2a71d179d5e0ae58f8773d58f8a81b9b6b29a42a00f52d8ff2d2ebf3f490ec3f76c7ccdf529faba13f6f3bff4", 0x75}], 0x3, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="b64414b688695f642ec09ba53721d8e59aa2018b6faef05d71b0f50619d294b2b67be5b94128f4ad5ec4d5502a2c2a0f37c59d0259a547220fa235ddd0b5e17180f230480097f9b1e2e37a7015c94a5c70becceb4bfd0430a791e736c943f2e594f26c3bef36cf4ccf7c42f86baf8a10773eec24c4ff82562cfc3532460fdfe1a58ff19297f842b735b3bd6ba20c7d6e8182189cdeaae89ea748ad0f", 0x9c}, {&(0x7f00000015c0)="6ce461a60a3bcb93d34f488b578c98e3a9a41ce02d45e5719c843cad45a522ce8e7f900fa1b5c3aa6de4e59e82542a00e70e216c5cb60185fd6eb101b18966df67a0d092500f59542c7a31b997ad2fcd868cedcfa297e50f1ccad68619080483cfc91e05c00f1ddeda31", 0x6a}, {&(0x7f0000001640)="5cef0cd14dcb9533598ba277abd99877d1a72332fd6136945f0d84b7ade0207de33a6b98d264f7c30215a6001991f8be2639492b773a4326f0042e0ff879e6be3cd82097a7b2d7083d123202d245a4c49c267ce79b786e6f2b43b968068cff86da12529aaa2926aedd6cef087acee7c2ed83d2e4ef0a8456e362b3c4ac72d539af8394eedc04164a8ac4644bbce9aff39c7aa30e9ab5f3ea49c5e279b643e449b997ba9390077129e4c86de36b4c260742f572403e42d91f1fdf02ec648474547fb068cfe5b1b081453ae9d92e2283f5abf6181b", 0xd4}, {&(0x7f00000019c0)="2cf43c2ae9e33fa2a11a32c1f720b7ed67ad5e68d47a1fdc7b4640a11a9cf8fa0936af447bbf415ad3041bc9eced68a6e4be6beb84fd311c69ea826334f45bb800d08f1d70ede60c92db962544cd4c7d469a4744b9a8e51229e578f2296a95fc6ea686df04957cf2336950e7a67471e6371b498825f633389dd26f75d7dcbb685f719c7660c26eebdbe5750c168a9c03de1e1ca02b19fb9218596ec5081690e368d6d21a4ecd", 0xa6}, {&(0x7f0000001800)="ef179209a98c0dddfb2a85c366e150a6ee", 0x11}, {&(0x7f0000002f80)="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", 0x1000}], 0x7, &(0x7f0000004000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffc00}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}}], 0x2, 0x4000000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x2000, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x6c}, @in=@multicast2, {0x0, 0x0, 0xfffffffffffffffe, 0xffffffe7ffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x80}, {0x0, 0x4, 0x0, 0x1}, {0x0, 0x5}, 0x70bd2a, 0x1, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-aes-neon\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0x5, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x6004010}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x3, 0x84) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001780), r8) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000001c80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="81565c98", @ANYRES16=r10, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x40000010}, 0x80) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r11, @ANYBLOB="9b2c4306"], 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001840)={0x0, @in6={{0xa, 0x4e20, 0x1d31aefd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x4, 0x3, 0x1, 0xa, 0x20, 0x7, 0x81}, &(0x7f0000001900)=0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000001940)={r12, 0x7}, &(0x7f0000001980)=0x8) 1.198386778s ago: executing program 0 (id=8350): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000009, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/244, 0xf4}, 0x5}], 0x1, 0x10020, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x20, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x31}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.084535982s ago: executing program 1 (id=8351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff364}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000001b40)={&(0x7f0000000b40)=""/4096, 0x202000, 0x800, 0x4, 0x3}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 831.490282ms ago: executing program 5 (id=8352): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'vcan0\x00', @ifru_names='batadv0\x00'}) 815.93298ms ago: executing program 3 (id=8353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d}, 0x94) (async) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x40050) 658.681938ms ago: executing program 5 (id=8354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000020000115053f88bafcdbdf2504"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 658.362947ms ago: executing program 3 (id=8355): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x6, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000002480)=ANY=[@ANYBLOB="000086dd0001110004000000a60c68e6f300000000000000000000000000000001cfce31530175a04e2100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0xfce) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010080ffffff000080000100000008000100020000001c000480050003008000000005000300000000f904000300060000090800020003"], 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000005080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x1, 0x2044) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB=' >`\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000895) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000500)={r1, &(0x7f0000000400)='^)\x00', 0x64141, &(0x7f0000000440)={@_ha_fsid={[0x6, 0x4]}, {0x1, 0x8, 0x9, 0x8847}}, 0x466, &(0x7f0000000480), &(0x7f00000004c0)=0x6}) write$nci(r8, &(0x7f0000000540)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x3, {0x56, 0x0, 0x1, 0x7, 0x3, 0x800}}, 0xc) 522.876279ms ago: executing program 1 (id=8356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000400)=0x40, 0x4) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r5 = accept4(r4, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000400)="11a52626", 0x4}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="08002a0007030300020014000700451000280000000054ec9078ac1e0001ffffffff81006558f6e61fe6c7ed802b101dc0fb8ecc6ed4d39cd0f6d22b66f2a40c0f93", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000"], 0x36) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x57, 0x1, 0x0, 0x0, {{0xb}, {0x3c}, {0x4, 0x6, "1fa3371410d152a2221c5dc564"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000010) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000060a0b0400000000000000000200000628000480240001800b000100657874686472000014000280080005400000000108000640000000010900010073797a30000000000900020073797a32"], 0x7c}}, 0x4) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fedbdf250500000008000200ea"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000f31932c4d66fddf97c371d19f9a91da2fa023224378f31d875ecdc7274ec51f1b5728d", @ANYRES16=r11, @ANYBLOB="000128bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000080) 500.759081ms ago: executing program 5 (id=8357): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@private0, 0x800, 0x0, 0x103, 0x3}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000140)=0x7901, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@ax25={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @null]}, 0x80, 0x0}, 0x20000001) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e40)=ANY=[@ANYBLOB, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x400, 0x368, 0x0, 0x148, 0x1b0, 0x148, 0x368, 0x240, 0x240, 0x368, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@ecn={{0x28}, {0x0, 0x1, 0x7, 0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}, {&(0x7f00000002c0)}, {0x0}], 0x3}}], 0x3, 0x2090) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r10) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) 251.323922ms ago: executing program 4 (id=8358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x0, 0x8000000000}, 0x9e4, 0x0, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0xe0, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x118, 0x3, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x5, 'mangle\x00', 0x8, 0xe3b}}]}, {0xc1, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5551fe5e22a68ccbe72dc6cef4f6eba13919d8b37efe0ce2e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}, 0xa}], 0x2, 0x10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0x142) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000000c000200ff7f0000000000001c0007800c0001800800003f", @ANYRES32=r2, @ANYBLOB="0c000e03000000075a930e2d5789ea8198cba2acd111e4e059fb3ad900"/39, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000e3ffffff000000007f000000850000005300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r7, @ANYBLOB="00000000000000000c001a80080004"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f00000003c0)=0x7f, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) getpid() sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto$inet(r10, &(0x7f0000000000)="818589ce608a0be30d23660db0686abf3bc97e81bf2d42f1e7cb03ddcac472d19f4075f49b27e44c48cd6a1c144ed6eea16382dc378df4c91b18465a2450bb07fcff140740e62dcec45633361f74f926fe1e90cbebd0dd10a7e0cea433b613eb04e10fabb5ecc60caeda980ed213efce1dc6cfb62d2fcfea9fcde1d4ab761c75562db957de1f61ac4b223bbfd33fd2e61b88357657eaa4a23740f271dbacde2e7e38c4698d927aa7b8193746a9ccc84de79c332024a4ef6f275e57477f55d10b2bfd72135ecfe1a44cf5641ca688206b989d108cc304c1", 0xd7, 0x4004, 0x0, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) 250.842893ms ago: executing program 3 (id=8359): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) sendto$inet(r0, &(0x7f00000000c0)="2d7553a643eae4b576a4476c4f30539622c5ee6673b5436228000000d44e7455b8cfeb6c18da612aa181fe5f7f557b7fb5738804aa7df6efab926d79dfb9ebbd8f3bbd9c9d185a70777af4307dedc1042d10ea61681cd17d255e9675a54f219d398b978362", 0x65, 0x240c88d0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a047963817ba0af112187b35b1bf32219", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) (async) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x20005}, 0x8) (async) sendmmsg$alg(r1, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}], 0x1, 0x60000804) 250.381114ms ago: executing program 0 (id=8360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) socket$packet(0x11, 0x3, 0x300) 123.417468ms ago: executing program 5 (id=8361): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000002480)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r5, 0x80809440, &(0x7f0000001e80)={&(0x7f0000001dc0)=[{&(0x7f00000005c0)="e89cff9c9bcb0fac2809db8e3a468b92c01bcf4d7371da5883dcd5871baae8a3eadda201deece72d32a5af4a926f6c9f649c0f7d5f900f2dc509866058612b51231ef2b7e1eac4f374e9ab1921a6fe16a04dbabe837f122f9f37ebc8770f92e9d321e650175f3a9a52020b541065e5c4983159ec2316edc35eca08aaa3ff4a7af5b685281fc5db0cd2", 0x89}, {&(0x7f0000000740)="d26b6ea9f453cc8d382d7248908031de215d52a48a4b7728fbb47559c8621045610e4fe36f1e618539f6356dff39b26e20f60b6b821fb7696466345710d40fc299e5b77f729c7f7de76bf509346657316bb5ef19f15d338a81e21a9094540bae6b68325b0343f3a1e39a685160a8684b510418c38f94ba829bffa9ba56e96128c04791d36d70df301133df5a864d9ac63aa241dae5aab0f6b607b365377241978f60182c1a1ebbc1063b93f4a6d37de602d19731bd86f714a93602f5248f7aac2287f170f408638317", 0xc9}, {&(0x7f0000000840)="069caea4198fbaa82fbb2f9dcd6c5013e87c88fa344c6d643df3c5", 0x1b}, {&(0x7f00000008c0)="c15985a549498142d64f0d63d83c70bdad088eda21b733a0575d6e696e3745e465fe", 0x22}, {&(0x7f0000000900)="4957977d1037068c608ecd7b579bcaf3942c51a7c3ed42ca6b3c51876e18de5eb13e437b5c191478417b359443301b40872434506041ec84c7b46fc6ff21446b2567bd75a41c9c1c09718d21d17e220a44f362102b988ce79accaa525a9d29f9cea1af6bd9bb2da4b700e4f0023edfc0d5d28ddebd4e98a318e3de1644142234a1078a8e658b623ec8e1f82857fe4947bd04dff5d85c8bcd1cdc171063cdf8c69181ee55478379699e21a485a016204d07d7dc83", 0xb4}, {&(0x7f00000009c0)="20f3d469f6e92ac0bee0957e10d90cf3a5ff4f2712b925e22be9eba5217bc4fe08a30ea8c5d3efbd04a3a41def5742e0f4a302154ff4ff34efdbb8ede13beb1ce038cd80eb7312143a7a195ff27b7b6120502209d8d9e870b6d5ef55ae1d5df2c40fe0a0fd1a8f86936aa3bf3b7be5d392e1ca77ebda7124336e172408138e73009c5869f9f30e39c5e3866eaf4516c615a38d", 0x93}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="fe163a1b56e2c1b822ca19ecd58949add4c5f4", 0x13}, {&(0x7f0000001cc0)="b69b6c5545892690ae60b5e1367e218d7ad5d665e508de9216f2e4b02250c1a39576790af520568be8857e4795bd17bbfc67420f34e4943cc5bc2189d3d79f1cace3f545d4fda6d3a5390dced1e3d2548b8015d6ba31febd4f38b0cbd56062d6aaabd3c854ed874087b9b0e6cc319d5ca84215e9badc189ded2cb81c21bfa484c10daa2c1d099e52e5042cf58c391a6b3c7ddf576c7bdb7bb445fbc1b4a751af889f6bfa1db834a0696b453e7330b2d6003876c206ecfbb300ace38e26a80a40890428b2df0c522d6f14086e508acc567f182c0fb3b7da9fbbd2", 0xda}], 0x9, 0x4, 0x0, 0x1, 0x10001, 0x40, 0x5, 0xafc6}) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/59, 0x3b}, {&(0x7f0000000b00)=""/192, 0xc0}], 0x2}, 0x40000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x10}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2f}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$kcm(0xa, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x80) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000002480)=r1, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$BTRFS_IOC_ENCODED_READ(r5, 0x80809440, &(0x7f0000001e80)={&(0x7f0000001dc0)=[{&(0x7f00000005c0)="e89cff9c9bcb0fac2809db8e3a468b92c01bcf4d7371da5883dcd5871baae8a3eadda201deece72d32a5af4a926f6c9f649c0f7d5f900f2dc509866058612b51231ef2b7e1eac4f374e9ab1921a6fe16a04dbabe837f122f9f37ebc8770f92e9d321e650175f3a9a52020b541065e5c4983159ec2316edc35eca08aaa3ff4a7af5b685281fc5db0cd2", 0x89}, {&(0x7f0000000740)="d26b6ea9f453cc8d382d7248908031de215d52a48a4b7728fbb47559c8621045610e4fe36f1e618539f6356dff39b26e20f60b6b821fb7696466345710d40fc299e5b77f729c7f7de76bf509346657316bb5ef19f15d338a81e21a9094540bae6b68325b0343f3a1e39a685160a8684b510418c38f94ba829bffa9ba56e96128c04791d36d70df301133df5a864d9ac63aa241dae5aab0f6b607b365377241978f60182c1a1ebbc1063b93f4a6d37de602d19731bd86f714a93602f5248f7aac2287f170f408638317", 0xc9}, {&(0x7f0000000840)="069caea4198fbaa82fbb2f9dcd6c5013e87c88fa344c6d643df3c5", 0x1b}, {&(0x7f00000008c0)="c15985a549498142d64f0d63d83c70bdad088eda21b733a0575d6e696e3745e465fe", 0x22}, {&(0x7f0000000900)="4957977d1037068c608ecd7b579bcaf3942c51a7c3ed42ca6b3c51876e18de5eb13e437b5c191478417b359443301b40872434506041ec84c7b46fc6ff21446b2567bd75a41c9c1c09718d21d17e220a44f362102b988ce79accaa525a9d29f9cea1af6bd9bb2da4b700e4f0023edfc0d5d28ddebd4e98a318e3de1644142234a1078a8e658b623ec8e1f82857fe4947bd04dff5d85c8bcd1cdc171063cdf8c69181ee55478379699e21a485a016204d07d7dc83", 0xb4}, {&(0x7f00000009c0)="20f3d469f6e92ac0bee0957e10d90cf3a5ff4f2712b925e22be9eba5217bc4fe08a30ea8c5d3efbd04a3a41def5742e0f4a302154ff4ff34efdbb8ede13beb1ce038cd80eb7312143a7a195ff27b7b6120502209d8d9e870b6d5ef55ae1d5df2c40fe0a0fd1a8f86936aa3bf3b7be5d392e1ca77ebda7124336e172408138e73009c5869f9f30e39c5e3866eaf4516c615a38d", 0x93}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="fe163a1b56e2c1b822ca19ecd58949add4c5f4", 0x13}, {&(0x7f0000001cc0)="b69b6c5545892690ae60b5e1367e218d7ad5d665e508de9216f2e4b02250c1a39576790af520568be8857e4795bd17bbfc67420f34e4943cc5bc2189d3d79f1cace3f545d4fda6d3a5390dced1e3d2548b8015d6ba31febd4f38b0cbd56062d6aaabd3c854ed874087b9b0e6cc319d5ca84215e9badc189ded2cb81c21bfa484c10daa2c1d099e52e5042cf58c391a6b3c7ddf576c7bdb7bb445fbc1b4a751af889f6bfa1db834a0696b453e7330b2d6003876c206ecfbb300ace38e26a80a40890428b2df0c522d6f14086e508acc567f182c0fb3b7da9fbbd2", 0xda}], 0x9, 0x4, 0x0, 0x1, 0x10001, 0x40, 0x5, 0xafc6}) (async) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r7, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/59, 0x3b}, {&(0x7f0000000b00)=""/192, 0xc0}], 0x2}, 0x40000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x10}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2f}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) 51.265975ms ago: executing program 0 (id=8362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 3 (id=8363): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) vmsplice(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000340)="92eafd52cb1523c430af57280603cb5aa57c4a8f266bfc5533580a3612ab43ffee422d668d32b01dfe12f4c8c67eebd990f76ce32d715c94e1193c0cd3f09c7151f228c5152f4debaa27694e523e9dc2e132b205ac2da6a39bbdfd4f533109569851e1393c5be42431646b5ca34f51b352fcd9eb22001319528a859c2195660c4db10ad19acf95b2283d43bcc709e4432399", 0x92}], 0x1, 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4) (async) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) kernel console output (not intermixed with test programs): 618][T31364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 868.407482][T31364] bond2: (slave veth5): Enslaving as an active interface with a down link [ 868.465235][T31364] batadv_slave_1: left allmulticast mode [ 868.481267][T31364] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 868.489984][T31364] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 870.249386][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 870.256314][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.601565][T31345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.869164][T31405] __nla_validate_parse: 9 callbacks suppressed [ 870.869187][T31405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6427'. [ 871.016793][T22802] IPVS: starting estimator thread 0... [ 871.153596][T31418] vlan2: entered promiscuous mode [ 871.160315][T31414] IPVS: using max 28 ests per chain, 67200 per kthread [ 871.169102][T31418] gretap0: entered promiscuous mode [ 871.236374][T31424] openvswitch: netlink: Message has 8 unknown bytes. [ 871.259835][T31421] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 871.271860][T31421] CPU: 0 UID: 0 PID: 31421 Comm: syz.1.6428 Not tainted syzkaller #0 PREEMPT(full) [ 871.271892][T31421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 871.271909][T31421] Call Trace: [ 871.271919][T31421] [ 871.271930][T31421] dump_stack_lvl+0xe8/0x150 [ 871.271983][T31421] sysfs_warn_dup+0x8e/0xa0 [ 871.272022][T31421] sysfs_do_create_link_sd+0xc0/0x110 [ 871.272062][T31421] device_add_class_symlinks+0x1cf/0x240 [ 871.272215][T31421] device_add+0x475/0xb70 [ 871.272225][T31418] netlink: 210000 bytes leftover after parsing attributes in process `syz.1.6428'. [ 871.272253][T31421] wiphy_register+0x1dc5/0x2dc0 [ 871.272499][T31421] ? __pfx_wiphy_register+0x10/0x10 [ 871.272584][T31421] ? __pfx_netdev_run_todo+0x10/0x10 [ 871.272671][T31421] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 871.272863][T31421] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 871.273001][T31421] ieee80211_register_hw+0x3d82/0x4a70 [ 871.273129][T31421] ? __lock_acquire+0x6b5/0x2cf0 [ 871.273254][T31421] ? ieee80211_register_hw+0x1911/0x4a70 [ 871.273409][T31421] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 871.273488][T31421] ? __hrtimer_setup+0x181/0x200 [ 871.273581][T31421] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 871.273719][T31421] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 871.273970][T31421] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 871.274067][T31421] ? kstrndup+0xbf/0x160 [ 871.274198][T31421] hwsim_new_radio_nl+0xf6a/0x1c00 [ 871.274361][T31421] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 871.274485][T31421] ? rcu_is_watching+0x15/0xb0 [ 871.274573][T31421] ? trace_kmalloc+0x2a/0x110 [ 871.274671][T31421] ? __nla_parse+0x40/0x60 [ 871.274768][T31421] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 871.274846][T31421] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 871.274938][T31421] genl_family_rcv_msg_doit+0x22a/0x330 [ 871.275044][T31421] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 871.275172][T31421] ? bpf_lsm_capable+0x9/0x20 [ 871.275296][T31421] ? security_capable+0x7e/0x2c0 [ 871.275454][T31421] genl_rcv_msg+0x61c/0x7a0 [ 871.275549][T31421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.275615][T31421] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 871.275757][T31421] netlink_rcv_skb+0x232/0x4b0 [ 871.275849][T31421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.275918][T31421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.276063][T31421] ? down_read+0x272/0x2e0 [ 871.276150][T31421] ? genl_rcv+0xd/0x40 [ 871.276226][T31421] genl_rcv+0x28/0x40 [ 871.276291][T31421] netlink_unicast+0x75c/0x8e0 [ 871.276402][T31421] netlink_sendmsg+0x813/0xb40 [ 871.276526][T31421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.276658][T31421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 871.276740][T31421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.276825][T31421] ____sys_sendmsg+0x972/0x9f0 [ 871.276915][T31421] ? futex_unqueue+0x211/0x240 [ 871.277029][T31421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.277148][T31421] ? import_iovec+0x73/0xa0 [ 871.277233][T31421] ___sys_sendmsg+0x2a5/0x360 [ 871.277337][T31421] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.277460][T31421] ? futex_wait+0x29a/0x380 [ 871.277631][T31421] ? __fget_files+0x2a/0x420 [ 871.277692][T31421] ? __fget_files+0x3a0/0x420 [ 871.277789][T31421] __x64_sys_sendmsg+0x1bd/0x2a0 [ 871.277899][T31421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 871.278068][T31421] ? rcu_is_watching+0x15/0xb0 [ 871.278200][T31421] do_syscall_64+0x14d/0xf80 [ 871.278271][T31421] ? trace_irq_disable+0x3b/0x150 [ 871.278336][T31421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.278404][T31421] ? clear_bhb_loop+0x40/0x90 [ 871.278485][T31421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.278530][T31421] RIP: 0033:0x7f4be3b9c819 [ 871.278599][T31421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.278654][T31421] RSP: 002b:00007f4be4a32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.278717][T31421] RAX: ffffffffffffffda RBX: 00007f4be3e16090 RCX: 00007f4be3b9c819 [ 871.278771][T31421] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 871.278816][T31421] RBP: 00007f4be3c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 871.278853][T31421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.278888][T31421] R13: 00007f4be3e16128 R14: 00007f4be3e16090 R15: 00007ffd43ebf178 [ 871.279005][T31421] [ 871.828755][T31432] netlink: 'syz.4.6431': attribute type 1 has an invalid length. [ 871.853085][T31432] netlink: 'syz.4.6431': attribute type 2 has an invalid length. [ 871.877271][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6433'. [ 871.889516][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6433'. [ 871.919509][T31432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6431'. [ 871.934997][T31432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6431'. [ 871.946450][T31432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6431'. [ 871.985202][T31432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6431'. [ 872.207272][T31458] netlink: zone id is out of range [ 872.212479][T31458] netlink: zone id is out of range [ 872.218522][T31458] netlink: zone id is out of range [ 872.239624][T31458] netlink: zone id is out of range [ 872.259655][T31458] netlink: zone id is out of range [ 872.278423][T31458] netlink: zone id is out of range [ 872.324708][T31458] netlink: zone id is out of range [ 872.339579][T31458] netlink: zone id is out of range [ 872.345293][T31458] netlink: zone id is out of range [ 872.444963][T31469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6443'. [ 872.470143][T31470] gretap1: entered promiscuous mode [ 872.495380][T31470] batman_adv: batadv0: Adding interface: gretap1 [ 872.522384][T31470] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.557019][T31470] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 873.055519][T31483] tap0: tun_chr_ioctl cmd 2147767520 [ 873.282044][T31502] netlink: 'syz.3.6451': attribute type 21 has an invalid length. [ 873.353021][T31502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6451'. [ 873.394530][T31505] netlink: 'syz.1.6452': attribute type 1 has an invalid length. [ 873.412888][T31505] netlink: 'syz.1.6452': attribute type 1 has an invalid length. [ 873.574537][T31514] netlink: 'syz.1.6455': attribute type 64 has an invalid length. [ 873.788796][T31514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 873.933264][T31522] sctp: [Deprecated]: syz.5.6457 (pid 31522) Use of int in maxseg socket option. [ 873.933264][T31522] Use struct sctp_assoc_value instead [ 873.986704][T31526] bond2: entered promiscuous mode [ 874.016057][T31526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 874.204506][T31531] bridge3: entered promiscuous mode [ 874.210699][T31531] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 874.274014][T31534] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 874.293991][T31534] bridge3: left promiscuous mode [ 874.306140][T31534] bond2 (unregistering): Released all slaves [ 874.996856][T31565] netlink: 'syz.4.6468': attribute type 13 has an invalid length. [ 875.027818][T31565] netlink: 'syz.4.6468': attribute type 17 has an invalid length. [ 875.164667][T31561] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.172691][T31561] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.369278][T31561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.426661][T31561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.012694][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 876.020810][ C0] lec:lec_tx_timeout: lec0 [ 876.234509][T31565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.262519][T31565] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.298476][T31565] net_ratelimit: 48 callbacks suppressed [ 876.298491][T31565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.352704][T12675] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.376547][T12675] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.415700][T12675] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.454484][T12675] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.535035][T31601] __nla_validate_parse: 5 callbacks suppressed [ 876.535060][T31601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6479'. [ 876.628691][T31601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6479'. [ 876.666758][T31607] IPv6: Can't replace route, no match found [ 876.956205][T31623] netlink: 'syz.5.6482': attribute type 3 has an invalid length. [ 876.980276][T31624] netlink: 'syz.5.6482': attribute type 3 has an invalid length. [ 877.112009][T31626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6483'. [ 877.123210][T31626] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6483'. [ 877.132335][T31626] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6483'. [ 877.141856][T31626] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6483'. [ 877.872805][T31657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6492'. [ 877.969509][T31660] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6493'. [ 877.994254][T31660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6493'. [ 878.016444][T31660] syzkaller0: entered promiscuous mode [ 878.021986][T31660] syzkaller0: entered allmulticast mode [ 878.074517][T31665] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6495'. [ 878.144711][T12675] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.153752][T12675] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.262367][T31673] netlink: 'syz.4.6496': attribute type 21 has an invalid length. [ 878.281130][T12675] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.310528][T12675] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.829155][T31762] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 879.867535][T31762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.229984][T31785] syzkaller1: entered promiscuous mode [ 880.235907][T31785] syzkaller1: entered allmulticast mode [ 880.511736][T31805] netlink: 'syz.0.6535': attribute type 1 has an invalid length. [ 881.005312][T31833] netlink: 'syz.4.6541': attribute type 10 has an invalid length. [ 881.016780][T31833] team0: Port device netdevsim0 added [ 881.201217][T31796] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 881.218290][T31796] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 881.287743][T31796] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 881.302490][T31796] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 881.325274][T31796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 881.331830][T31796] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 881.360150][T31796] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 881.370115][T31796] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 881.628960][T31864] __nla_validate_parse: 12 callbacks suppressed [ 881.628984][T31864] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6546'. [ 881.672996][T31864] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6546'. [ 881.688907][T31864] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6546'. [ 881.875821][T31880] netlink: 'syz.0.6550': attribute type 8 has an invalid length. [ 881.889463][T31880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6550'. [ 882.223603][T31891] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.118722][T31926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.335318][T31934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6554'. [ 883.966533][T31934] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 884.100101][T31932] netlink: 'syz.4.6558': attribute type 3 has an invalid length. [ 884.144382][T31932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6558'. [ 884.347497][T31950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6560'. [ 884.409412][T31954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6562'. [ 884.712023][T31968] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6565'. [ 884.818402][T31978] tipc: Enabling of bearer rejected, failed to enable media [ 884.871904][T31977] tipc: Started in network mode [ 884.892978][T31977] tipc: Node identity f28e9be830aa, cluster identity 4711 [ 884.922835][T31977] tipc: Enabled bearer , priority 0 [ 884.959952][T31980] syzkaller0: entered promiscuous mode [ 884.973024][T31986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6568'. [ 884.992569][T31980] syzkaller0: entered allmulticast mode [ 885.073302][T31980] tipc: Resetting bearer [ 885.120032][T31976] tipc: Resetting bearer [ 885.207925][T31976] tipc: Disabling bearer [ 885.270926][T32000] netlink: 'syz.4.6572': attribute type 1 has an invalid length. [ 885.402841][T31998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.883512][T32060] __nla_validate_parse: 5 callbacks suppressed [ 886.883537][T32060] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6584'. [ 886.912749][T32060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6584'. [ 886.942223][T32060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6584'. [ 887.770668][T32103] netlink: 'syz.5.6594': attribute type 1 has an invalid length. [ 888.102839][T32120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6595'. [ 888.784544][T32141] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 890.653950][T32098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 890.669003][T32120] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 891.212764][T32228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'. [ 891.264368][T32225] xt_l2tp: missing protocol rule (udp|l2tpip) [ 891.270998][T32225] netlink: 'syz.1.6606': attribute type 11 has an invalid length. [ 891.368074][T32230] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6607'. [ 891.384434][T32230] xt_hashlimit: invalid rate [ 891.643921][T32241] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6610'. [ 891.710245][T32245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.751599][T32245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.277521][T32242] delete_channel: no stack [ 892.425965][T32272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6615'. [ 892.629804][T32289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6618'. [ 892.896559][T32289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 892.934459][T32289] bond3: (slave bond4): Enslaving as an active interface with an up link [ 893.131689][T32315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6623'. [ 893.327299][T32327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6625'. [ 893.356584][T32332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6627'. [ 893.365582][T32333] sctp: [Deprecated]: syz.3.6626 (pid 32333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 893.365582][T32333] Use struct sctp_sack_info instead [ 893.818329][T32352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6630'. [ 893.846722][T32357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6631'. [ 893.859685][T32357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6631'. [ 893.875169][T32361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6630'. [ 894.298940][T32384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6635'. [ 894.738756][T32401] netlink: 'syz.5.6642': attribute type 1 has an invalid length. [ 894.768356][T32404] xt_hashlimit: invalid rate [ 894.984108][T32410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.993802][T32416] syzkaller0: entered promiscuous mode [ 895.053408][T32416] syzkaller0: entered allmulticast mode [ 895.356766][T32427] netlink: 'syz.5.6650': attribute type 12 has an invalid length. [ 896.384349][T32444] tap0: tun_chr_ioctl cmd 2147767520 [ 896.798819][T32468] netlink: 'syz.1.6659': attribute type 1 has an invalid length. [ 896.886337][T32474] netlink: 'syz.4.6662': attribute type 1 has an invalid length. [ 896.976411][T32474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 897.114737][T32476] bond2: entered allmulticast mode [ 897.234199][T32477] bond2: (slave ip6gretap1): making interface the new active one [ 897.277723][T32477] ip6gretap1: entered allmulticast mode [ 897.307461][T32477] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 897.669870][T32506] __nla_validate_parse: 5 callbacks suppressed [ 897.669895][T32506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6668'. [ 897.973545][T32521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6670'. [ 897.983942][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6670'. [ 898.087602][T32528] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6670'. [ 898.130172][T32515] netlink: 'syz.0.6671': attribute type 8 has an invalid length. [ 898.233513][T32525] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 898.264682][T32525] bond3 (unregistering): Released all slaves [ 898.282242][T32526] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6672'. [ 898.282242][T32527] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6672'. [ 898.282464][T32527] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6672'. [ 898.341210][T32526] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6672'. [ 898.613971][T32559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6681'. [ 898.672826][T32559] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6681'. [ 899.154931][T32581] mac80211_hwsim hwsim91 ªªªªª;: renamed from wlan0 [ 899.684206][T32607] IPv6: NLM_F_CREATE should be specified when creating new route [ 899.859775][T32607] gtp0: entered promiscuous mode [ 899.878761][T32607] gtp0: entered allmulticast mode [ 900.703225][T32661] netlink: 'syz.3.6709': attribute type 21 has an invalid length. [ 900.751372][T32661] IPv6: NLM_F_CREATE should be specified when creating new route [ 900.776826][T32661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 900.784482][T32661] IPv6: NLM_F_CREATE should be set when creating new route [ 900.791773][T32661] IPv6: NLM_F_CREATE should be set when creating new route [ 900.799097][T32661] IPv6: NLM_F_CREATE should be set when creating new route [ 901.193186][T32689] openvswitch: netlink: Key type 275 is out of range max 32 [ 901.210937][T32691] openvswitch: netlink: Key type 275 is out of range max 32 [ 901.646562][T32708] tipc: Enabling of bearer rejected, failed to enable media [ 901.773260][T32721] netlink: 'syz.3.6727': attribute type 10 has an invalid length. [ 901.925225][T32726] netlink: 'syz.0.6729': attribute type 58 has an invalid length. [ 902.065749][T32738] netlink: 'syz.1.6732': attribute type 10 has an invalid length. [ 902.383019][T32754] xt_hashlimit: max too large, truncated to 1048576 [ 902.390124][T32754] xt_bpf: check failed: parse error [ 902.813856][ T314] __nla_validate_parse: 16 callbacks suppressed [ 902.813883][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6746'. [ 903.297916][ T328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6749'. [ 903.901176][ T351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6756'. [ 904.460240][ T364] netlink: 'syz.3.6759': attribute type 1 has an invalid length. [ 904.507042][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6760'. [ 904.523999][ T372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6757'. [ 904.604666][ T364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 904.658624][ T375] bond5: up delay (583) is not a multiple of miimon (100), value rounded to 500 ms [ 904.762969][ T375] bond5: entered allmulticast mode [ 904.806445][ T378] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 904.928271][ T382] syzkaller0: entered promiscuous mode [ 904.934558][ T382] syzkaller0: entered allmulticast mode [ 904.959569][ T382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6762'. [ 905.042353][ T392] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 905.086621][ T392] netlink: 'syz.5.6765': attribute type 5 has an invalid length. [ 905.217467][ T402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'. [ 905.239512][ T402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6768'. [ 907.020394][ T398] tipc: Enabled bearer , priority 14 [ 907.299153][ T431] syzkaller1: entered promiscuous mode [ 907.332841][ T431] syzkaller1: entered allmulticast mode [ 907.383227][ T434] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6775'. [ 907.496108][ T446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6779'. [ 907.518632][ T446] Cannot find del_set index 0 as target [ 907.572321][ T441] netlink: 'syz.3.6777': attribute type 2 has an invalid length. [ 907.576367][ T450] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 907.715814][ T454] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 907.731798][ T462] netlink: 'syz.1.6783': attribute type 11 has an invalid length. [ 907.736242][ T454] bond1 (unregistering): Released all slaves [ 907.848022][ T464] __nla_validate_parse: 3 callbacks suppressed [ 907.848047][ T464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6784'. [ 907.916013][ T472] netlink: 208 bytes leftover after parsing attributes in process `syz.5.6785'. [ 907.958674][ T469] syzkaller0: entered promiscuous mode [ 907.966915][ T469] syzkaller0: entered allmulticast mode [ 908.220000][ T6658] tipc: Node number set to 3257179112 [ 908.327241][ T500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6794'. [ 908.348523][ T510] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6796'. [ 908.363942][ T508] netlink: 'syz.4.6795': attribute type 3 has an invalid length. [ 908.379639][ T508] netlink: 'syz.4.6795': attribute type 3 has an invalid length. [ 908.411044][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6794'. [ 908.423563][ T508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6795'. [ 908.452800][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.495595][ T510] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6796'. [ 908.512996][ T500] 8021q: adding VLAN 0 to HW filter on device bond7 [ 908.602919][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.617486][ T512] bond7 (unregistering): Released all slaves [ 908.721059][ T510] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6796'. [ 908.736064][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.742347][ T510] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6796'. [ 908.752809][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.774949][ T510] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6796'. [ 908.798126][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.804523][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.812795][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.819363][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.826448][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.832953][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.839333][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.846519][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.853236][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.859361][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.866269][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.910382][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.916830][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.944943][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.951081][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 908.993522][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.034295][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.040610][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.054881][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.061006][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.067765][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.087334][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.104143][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.111036][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.118494][ T538] netlink: 'syz.1.6804': attribute type 21 has an invalid length. [ 909.149370][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.156857][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.163791][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.170700][ T510] ksmbd: Unknown IPC event: 1, ignore. [ 909.279744][ T555] netlink: 'syz.0.6809': attribute type 1 has an invalid length. [ 909.299966][ T555] nbd: error processing sock list [ 909.486873][ T566] tipc: Invalid UDP bearer configuration [ 909.486913][ T566] tipc: Enabling of bearer rejected, failed to enable media [ 909.549276][ T566] bond3: Removing last arp target with arp_interval on [ 910.115033][ T597] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 910.187904][ T599] netlink: 'syz.5.6821': attribute type 13 has an invalid length. [ 910.201594][ T599] netlink: 'syz.5.6821': attribute type 17 has an invalid length. [ 910.281501][ T599] bridge0: left promiscuous mode [ 910.292249][ T599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.301327][ T599] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.315866][ T599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 910.419420][ T612] netlink: ct family unspecified [ 910.480078][ T606] syzkaller1: entered promiscuous mode [ 910.487451][ T606] syzkaller1: entered allmulticast mode [ 910.551625][ T616] netlink: 'syz.0.6826': attribute type 7 has an invalid length. [ 910.560101][ T616] netlink: 'syz.0.6826': attribute type 8 has an invalid length. [ 910.625290][ T7768] lec:lec_start_xmit: lec0:No lecd attached [ 910.676162][ T619] geneve2: entered promiscuous mode [ 910.714810][ T105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.744327][ T625] syzkaller0: entered promiscuous mode [ 910.750131][ T625] syzkaller0: entered allmulticast mode [ 910.757948][ T105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.812412][ T105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.821632][ T105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.830894][ T625] batadv0: left allmulticast mode [ 910.939096][ T628] netlink: 'syz.4.6830': attribute type 2 has an invalid length. [ 911.117584][ T643] x_tables: duplicate underflow at hook 2 [ 911.129370][ T643] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 911.414127][ T657] syzkaller0: entered promiscuous mode [ 911.429619][ T657] syzkaller0: entered allmulticast mode [ 911.467694][ T661] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 911.477601][ T661] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 911.635977][ T669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.937229][ T686] ipvlan2: entered allmulticast mode [ 911.958288][ T686] syz_tun: entered allmulticast mode [ 912.237256][ T707] dummy0: entered promiscuous mode [ 912.675946][ T716] dummy0: left promiscuous mode [ 913.171837][ T764] tipc: Enabled bearer , priority 0 [ 913.226997][ T764] syzkaller0: entered promiscuous mode [ 913.232866][ T764] syzkaller0: entered allmulticast mode [ 913.251118][ T770] __nla_validate_parse: 39 callbacks suppressed [ 913.251146][ T770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6862'. [ 913.375306][ T770] netlink: zone id is out of range [ 913.380534][ T770] netlink: zone id is out of range [ 913.415358][ T770] netlink: zone id is out of range [ 913.420551][ T770] netlink: zone id is out of range [ 913.455035][ T773] tipc: Resetting bearer [ 913.474191][ T770] netlink: zone id is out of range [ 913.479403][ T770] netlink: zone id is out of range [ 913.484991][ T770] netlink: zone id is out of range [ 913.491402][ T762] tipc: Resetting bearer [ 913.521344][ T762] tipc: Disabling bearer [ 913.531052][ T777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6863'. [ 913.546018][ T772] bond4: (slave vcan1): refused to change device type [ 913.558575][ T753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6859'. [ 913.568229][ T753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6859'. [ 913.579176][ T753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6859'. [ 913.617443][ T777] erspan0: entered promiscuous mode [ 913.629028][ T777] macvtap0: entered promiscuous mode [ 913.635062][ T777] macvtap0: entered allmulticast mode [ 913.640594][ T777] erspan0: entered allmulticast mode [ 913.670081][ T777] syzkaller0: entered promiscuous mode [ 913.676006][ T777] syzkaller0: entered allmulticast mode [ 913.685326][ T777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6863'. [ 914.107728][ T792] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 914.313117][ T798] xt_hashlimit: size too large, truncated to 1048576 [ 914.396308][ T801] xt_hashlimit: size too large, truncated to 1048576 [ 914.435456][ T805] syzkaller1: entered promiscuous mode [ 914.448955][ T805] syzkaller1: entered allmulticast mode [ 914.513050][ T810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6869'. [ 914.556546][ T813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6871'. [ 914.575478][ T809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6870'. [ 914.592005][ T813] validate_nla: 1 callbacks suppressed [ 914.592031][ T813] netlink: 'syz.3.6871': attribute type 1 has an invalid length. [ 914.612352][ T817] vlan0: left promiscuous mode [ 914.619297][ T817] bond1: left promiscuous mode [ 914.627437][ T817] wireguard0: left promiscuous mode [ 914.639729][ T817] ip6gre1: left promiscuous mode [ 914.649845][ T817] gtp0: left promiscuous mode [ 914.656835][ T814] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 914.979472][ T830] tipc: Enabling of bearer rejected, already enabled [ 915.033421][ T832] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6875'. [ 915.378444][ T859] sctp: [Deprecated]: syz.0.6882 (pid 859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 915.378444][ T859] Use struct sctp_sack_info instead [ 915.775059][ T885] netlink: 'syz.5.6888': attribute type 4 has an invalid length. [ 915.841272][ T885] netlink: 'syz.5.6888': attribute type 4 has an invalid length. [ 916.003138][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5380 ms [ 916.011315][ C0] lec:lec_tx_timeout: lec0 [ 916.290305][ T915] syzkaller1: entered promiscuous mode [ 916.300643][ T915] syzkaller1: entered allmulticast mode [ 916.309714][ T918] netlink: 'syz.3.6895': attribute type 4 has an invalid length. [ 916.489989][ T933] netlink: 'syz.3.6895': attribute type 4 has an invalid length. [ 916.936357][ T968] 8021q: VLANs not supported on vcan0 [ 918.075955][ T1056] netlink: 'syz.3.6926': attribute type 1 has an invalid length. [ 918.339787][ T1085] __nla_validate_parse: 13 callbacks suppressed [ 918.339814][ T1085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6931'. [ 918.374575][ T1085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6931'. [ 918.414372][ T1085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6931'. [ 918.444575][ T1094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6931'. [ 918.465320][ T1085] netlink: 'syz.1.6931': attribute type 3 has an invalid length. [ 918.485571][ T1094] net_ratelimit: 338 callbacks suppressed [ 918.485598][ T1094] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 918.514081][ T1085] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6931'. [ 918.548636][ T1085] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6931'. [ 918.608545][ T1097] batman_adv: batadv0: Adding interface: dummy0 [ 918.621465][ T1097] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.660603][ T1097] batman_adv: batadv0: Interface activated: dummy0 [ 918.824937][ T1104] tipc: Enabled bearer , priority 0 [ 918.842508][ T1108] syzkaller0: entered promiscuous mode [ 918.855740][ T1108] syzkaller0: entered allmulticast mode [ 918.868182][ T1107] xt_HMARK: spi-set and port-set can't be combined [ 919.036273][ T1104] tipc: Resetting bearer [ 919.114285][ T1104] tipc: Disabling bearer [ 919.406840][ T1146] macvlan0: entered promiscuous mode [ 919.591641][ T1156] tipc: Enabled bearer , priority 0 [ 919.610950][ T1154] netlink: 'syz.3.6949': attribute type 5 has an invalid length. [ 919.649851][ T1156] syzkaller0: entered promiscuous mode [ 919.673112][ T1156] syzkaller0: entered allmulticast mode [ 919.701506][ T1156] tipc: Resetting bearer [ 919.737845][ T1155] tipc: Resetting bearer [ 919.770325][ T1155] tipc: Disabling bearer [ 920.115527][ T1190] block nbd0: NBD_DISCONNECT [ 920.135311][ T1190] block nbd0: Send disconnect failed -32 [ 920.141228][ T1190] block nbd0: shutting down sockets [ 920.340690][ T1190] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 920.369894][ T1196] netlink: 632 bytes leftover after parsing attributes in process `syz.0.6959'. [ 920.848261][ T1235] netlink: 'syz.0.6967': attribute type 58 has an invalid length. [ 920.857553][ T1235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6967'. [ 921.194398][ T1226] syzkaller0: entered promiscuous mode [ 921.199980][ T1226] syzkaller0: entered allmulticast mode [ 921.709054][ T1263] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 922.556209][ T1281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6975'. [ 924.561043][ T1287] bond1: entered allmulticast mode [ 924.571834][ T1287] wireguard0: entered allmulticast mode [ 924.590954][ T1287] bond1: left allmulticast mode [ 924.597850][ T1287] wireguard0: left allmulticast mode [ 924.861922][ T1308] ip6erspan0: left allmulticast mode [ 924.935513][ T1308] bond2: left promiscuous mode [ 924.943412][ T1308] bond2: left allmulticast mode [ 924.950758][ T1308] bond3: left promiscuous mode [ 924.956911][ T1308] bond4: left promiscuous mode [ 925.089646][ T1302] delete_channel: no stack [ 925.110233][ T1302] delete_channel: no stack [ 925.121765][ T1326] tipc: Enabled bearer , priority 0 [ 925.153670][ T1326] syzkaller0: entered promiscuous mode [ 925.161274][ T1326] syzkaller0: entered allmulticast mode [ 925.179911][ T1326] netlink: 'syz.3.6984': attribute type 1 has an invalid length. [ 925.263456][ T1326] tipc: Resetting bearer [ 925.301778][ T1325] tipc: Resetting bearer [ 925.339174][ T1325] tipc: Disabling bearer [ 925.405845][ T1332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.419091][ T1332] team0: Port device bond1 added [ 925.433326][ T1338] macsec1: entered promiscuous mode [ 925.438979][ T1338] geneve1: entered promiscuous mode [ 925.444890][ T1338] macsec1: entered allmulticast mode [ 925.450429][ T1338] geneve1: entered allmulticast mode [ 925.528967][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6989'. [ 925.832342][ T1337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 926.113229][ T1363] netlink: 'syz.0.6995': attribute type 32 has an invalid length. [ 926.166671][ T1365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6996'. [ 926.189506][ T1365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6996'. [ 926.234965][ T1367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6995'. [ 926.253278][ T1368] geneve1: left allmulticast mode [ 926.272470][ T1368] geneve1: left promiscuous mode [ 926.362834][ T1368] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 926.428269][ T1368] netlink: 'syz.1.6997': attribute type 13 has an invalid length. [ 926.460143][ T1368] netlink: 'syz.1.6997': attribute type 17 has an invalid length. [ 926.687781][ T1368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.697705][ T1368] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.723357][ T1368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 927.377737][ T1410] netlink: 'syz.1.7007': attribute type 10 has an invalid length. [ 927.435202][ T1410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7007'. [ 927.760759][ T1424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7011'. [ 927.808851][ T1428] netlink: 'syz.5.7012': attribute type 2 has an invalid length. [ 928.076561][ T1438] netlink: 'syz.1.7016': attribute type 30 has an invalid length. [ 928.374374][ T1447] delete_channel: no stack [ 928.595488][ T1472] netlink: 'syz.4.7022': attribute type 1 has an invalid length. [ 928.688879][ T1478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7022'. [ 928.762445][ T1472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 928.986632][ T1489] dvmrp0: entered allmulticast mode [ 929.058532][ T1497] xt_NFQUEUE: number of total queues is 0 [ 929.131301][ T1498] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7032'. [ 929.215358][ T1509] syzkaller1: entered promiscuous mode [ 929.220919][ T1509] syzkaller1: entered allmulticast mode [ 929.307052][ T1498] xt_connbytes: Forcing CT accounting to be enabled [ 929.532068][ T1526] netlink: 'syz.4.7038': attribute type 1 has an invalid length. [ 929.630259][ T1531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7039'. [ 929.666092][ T1524] bond6: (slave geneve2): making interface the new active one [ 929.675040][ T1524] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 929.695795][ T1526] batman_adv: batadv0: Adding interface: gretap3 [ 929.702201][ T1526] batman_adv: batadv0: The MTU of interface gretap3 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.729663][ T1526] batman_adv: batadv0: Interface activated: gretap3 [ 929.832774][T12675] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 929.892718][T12675] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 929.916430][T12675] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 929.967510][T12675] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 929.990126][ T1543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 930.062869][ T1543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.116671][ T1543] hsr0: entered promiscuous mode [ 930.205821][ T1564] bond7: option lacp_active: invalid value (8) [ 930.227553][ T1564] bond7 (unregistering): Released all slaves [ 930.289075][ T1576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7048'. [ 930.566471][ T1559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.591010][ T1559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.739684][ T1589] xt_ecn: cannot match TCP bits for non-tcp packets [ 930.810739][ T1559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.842748][ T1559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.975684][ T1559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.997647][ T1559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.058832][ T1603] netlink: 'syz.1.7056': attribute type 1 has an invalid length. [ 931.100517][ T1603] 8021q: adding VLAN 0 to HW filter on device bond8 [ 931.130080][ T1559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.142054][ T1559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.188048][ T1602] bond8: (slave geneve2): making interface the new active one [ 931.230281][ T1602] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 931.277610][T12677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 931.305538][T12677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 931.342766][T12677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 931.369790][T12677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 931.562902][T12653] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.574177][T12653] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.653942][T12653] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.678541][T12653] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.703673][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 931.710777][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.739803][T12653] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.754763][T12653] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.783491][T12653] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.792483][T12653] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.080880][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7064'. [ 932.103603][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7064'. [ 932.143112][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7064'. [ 932.164563][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7064'. [ 932.183309][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7064'. [ 932.341572][ T1655] geneve3: entered allmulticast mode [ 932.380689][ T1657] netlink: 'syz.0.7068': attribute type 21 has an invalid length. [ 932.410567][ T1657] sctp: [Deprecated]: syz.0.7068 (pid 1657) Use of int in max_burst socket option deprecated. [ 932.410567][ T1657] Use struct sctp_assoc_value instead [ 932.504772][ T1660] netlink: 'syz.3.7069': attribute type 2 has an invalid length. [ 932.646704][ T1671] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7073'. [ 932.749507][ T1675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.837878][ T1682] netlink: 'syz.3.7078': attribute type 3 has an invalid length. [ 932.855475][ T1687] netlink: 38 bytes leftover after parsing attributes in process `syz.4.7075'. [ 932.890316][ T1678] syzkaller0: entered promiscuous mode [ 932.915354][ T1678] syzkaller0: entered allmulticast mode [ 932.939204][ T1676] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7074'. [ 932.948721][T22800] IPVS: starting estimator thread 0... [ 932.961684][ T1676] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7074'. [ 933.054060][ T1693] IPVS: using max 29 ests per chain, 69600 per kthread [ 933.216497][ T1705] netlink: 'syz.3.7084': attribute type 4 has an invalid length. [ 933.374571][ T1716] netlink: 'syz.1.7089': attribute type 1 has an invalid length. [ 933.497859][ T1725] netlink: 'syz.1.7091': attribute type 3 has an invalid length. [ 933.728115][ T1741] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 933.745516][ T1741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 933.778307][ T1741] netlink: 'syz.4.7094': attribute type 1 has an invalid length. [ 933.781335][ T1730] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7092'. [ 934.271114][ T1771] veth1_to_bond: entered allmulticast mode [ 934.296877][ T1771] veth1_to_bond (unregistering): left allmulticast mode [ 934.336099][ T1771] bond0: (slave bond_slave_1): Releasing backup interface [ 934.405197][ T1779] netlink: 'syz.3.7103': attribute type 4 has an invalid length. [ 934.425857][ T1780] netlink: 'syz.3.7103': attribute type 4 has an invalid length. [ 934.980958][ T1819] !: entered promiscuous mode [ 935.284760][ T1840] veth1: entered promiscuous mode [ 935.289890][ T1840] veth1: entered allmulticast mode [ 936.553793][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d592800: rx timeout, send abort [ 937.052672][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 937.054139][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059907c00: rx timeout, send abort [ 937.060869][ C0] lec:lec_tx_timeout: lec0 [ 937.071147][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d592800: abort rx timeout. Force session deactivation [ 937.436006][ T1949] syzkaller0: entered promiscuous mode [ 937.448492][ T1949] syzkaller0: entered allmulticast mode [ 937.458506][ T1969] __nla_validate_parse: 16 callbacks suppressed [ 937.458542][ T1969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7149'. [ 937.512474][ T1971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7149'. [ 937.569159][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059907c00: abort rx timeout. Force session deactivation [ 937.923144][ T1979] ip6t_rpfilter: unknown options [ 939.819336][ T1994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7156'. [ 940.049576][ T2001] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 941.558423][ T2090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 941.760836][ T2102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 942.270700][ T2136] syzkaller0: entered promiscuous mode [ 942.287474][ T2136] syzkaller0: entered allmulticast mode [ 942.349123][ T2138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 942.658651][ T2158] macvlan1: entered promiscuous mode [ 942.986856][ T2179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 943.197812][ T2194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7235'. [ 943.349708][ T2203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7240'. [ 943.657665][ T2224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7248'. [ 947.059066][ T2252] syzkaller0: entered promiscuous mode [ 947.065883][ T2252] syzkaller0: entered allmulticast mode [ 947.092714][ T2275] dummy0: entered allmulticast mode [ 947.099119][ T2278] dummy0: left allmulticast mode [ 947.705514][ T2364] netlink: 428 bytes leftover after parsing attributes in process `syz.4.7303'. [ 947.761811][ T2354] validate_nla: 6 callbacks suppressed [ 947.761862][ T2354] netlink: 'syz.1.7301': attribute type 2 has an invalid length. [ 947.790697][ T2371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7305'. [ 948.042046][ T2381] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7306'. [ 948.069257][ T2381] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7306'. [ 948.618410][ T2416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.671631][ T2418] IPVS: Error connecting to the multicast addr [ 948.829945][ T2433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7316'. [ 949.179523][ T2448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7318'. [ 949.188633][ T2448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7318'. [ 949.301597][ T2451] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7319'. [ 949.348902][ T2455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7320'. [ 949.379604][ T2455] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7320'. [ 949.659610][ T2472] 8021q: VLANs not supported on caif0 [ 950.179982][ T2499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7328'. [ 950.263055][ T2499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7328'. [ 950.472338][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 950.487175][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 950.503878][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 950.519459][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 950.541650][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 950.569487][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 950.577129][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 950.586127][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 950.604789][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 950.615812][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 951.340223][ T2537] tipc: Resetting bearer [ 951.346543][ T2542] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7335'. [ 951.487919][ T2552] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7338'. [ 951.526604][ T2537] batman_adv: batadv0: Interface deactivated: dummy0 [ 951.552532][ T2537] veth0: left allmulticast mode [ 951.559037][ T2537] veth1: left allmulticast mode [ 951.565682][ T2537] wg1: left allmulticast mode [ 951.572817][ T2537] wg2: left allmulticast mode [ 951.579165][ T2537] veth0_to_bridge: left allmulticast mode [ 951.585695][ T2537] veth1_to_bridge: left allmulticast mode [ 951.591960][ T2537] veth0_to_bond: left allmulticast mode [ 951.598763][ T2537] bond_slave_0: left allmulticast mode [ 951.605128][ T2537] veth1_to_bond: left allmulticast mode [ 951.611281][ T2537] bond_slave_1: left allmulticast mode [ 951.621389][ T2537] veth0_to_team: left allmulticast mode [ 951.629516][ T2537] team_slave_0: left allmulticast mode [ 951.635362][ T2537] veth1_to_team: left allmulticast mode [ 951.641242][ T2537] team_slave_1: left allmulticast mode [ 951.647496][ T2537] veth0_to_batadv: left allmulticast mode [ 951.654327][ T2537] batadv_slave_0: left allmulticast mode [ 951.660266][ T2537] veth1_to_batadv: left allmulticast mode [ 951.666748][ T2537] veth0_to_hsr: left allmulticast mode [ 951.672782][ T2537] veth1_to_hsr: left allmulticast mode [ 951.678823][ T2537] hsr0: left promiscuous mode [ 951.684327][ T2537] hsr0: left allmulticast mode [ 951.689415][ T2537] hsr_slave_0: left allmulticast mode [ 951.695272][ T2537] hsr_slave_1: left allmulticast mode [ 951.702110][ T2537] veth1_virt_wifi: left allmulticast mode [ 951.708409][ T2537] veth0_virt_wifi: left allmulticast mode [ 951.715569][ T2537] vlan1: left allmulticast mode [ 951.720851][ T2537] macvlan0: left allmulticast mode [ 951.727415][ T2537] veth1_vlan: left allmulticast mode [ 951.734104][ T2537] macvlan1: left promiscuous mode [ 951.739301][ T2537] macvlan1: left allmulticast mode [ 951.746076][ T2537] ipvlan0: left allmulticast mode [ 951.751342][ T2537] ipvlan1: left allmulticast mode [ 951.756765][ T2537] veth0_vlan: left allmulticast mode [ 951.762347][ T2537] veth1_macvtap: left allmulticast mode [ 951.769525][ T2537] veth0_macvtap: left allmulticast mode [ 951.776492][ T2537] macvtap0: left allmulticast mode [ 951.781928][ T2537] macsec0: left allmulticast mode [ 951.787453][ T2537] geneve1: left allmulticast mode [ 951.792953][ T2537] mac80211_hwsim hwsim85 wlan0: left allmulticast mode [ 951.800018][ T2537] mac80211_hwsim hwsim86 wlan1: left allmulticast mode [ 951.815911][ T2537] ip6gre1: left allmulticast mode [ 951.824833][ T2537] batman_adv: batadv0: Interface deactivated: gretap2 [ 951.839140][ T2537] gtp0: left allmulticast mode [ 951.848471][ T2537] bond5: left allmulticast mode [ 952.201902][ T2506] chnl_net:caif_netlink_parms(): no params data found [ 952.372217][ T2596] netlink: 'syz.0.7346': attribute type 4 has an invalid length. [ 952.579296][ T2506] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.587974][ T2506] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.596623][ T2506] bridge_slave_0: entered allmulticast mode [ 952.605793][ T2506] bridge_slave_0: entered promiscuous mode [ 952.614891][ T2506] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.622182][ T2506] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.629935][ T2506] bridge_slave_1: entered allmulticast mode [ 952.638601][ T2506] bridge_slave_1: entered promiscuous mode [ 952.679706][ T2506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.697990][ T2506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.725649][ T51] Bluetooth: hci4: command tx timeout [ 952.741133][ T2506] team0: Port device team_slave_0 added [ 952.751523][ T2506] team0: Port device team_slave_1 added [ 952.820298][ T2626] macvtap1: entered promiscuous mode [ 952.829051][ T2626] veth1_to_hsr: entered promiscuous mode [ 952.836496][ T2626] macvtap1: entered allmulticast mode [ 952.843410][ T2626] veth1_to_hsr: entered allmulticast mode [ 952.853054][ T2628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.870910][ T2623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.928548][ T2506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.936908][ T2506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.964399][ T2506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.080898][ T2506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.113571][ T2506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.148667][ T2506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.310040][ T2506] hsr_slave_0: entered promiscuous mode [ 953.325848][ T2506] hsr_slave_1: entered promiscuous mode [ 953.343056][ T2506] debugfs: 'hsr0' already exists in 'hsr' [ 953.359111][ T2506] Cannot create hsr debugfs directory [ 953.376129][T12660] bond3: left allmulticast mode [ 953.386628][T12660] bridge0: port 3(bond3) entered disabled state [ 953.407912][T12660] bridge_slave_1: left allmulticast mode [ 953.416725][ T2656] xt_hashlimit: size too large, truncated to 1048576 [ 953.426911][T12660] bridge_slave_1: left promiscuous mode [ 953.449232][T12660] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.464976][T12660] bridge_slave_0: left allmulticast mode [ 953.480992][T12660] bridge_slave_0: left promiscuous mode [ 953.491338][T12660] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.552455][T12660] dvmrp0: left allmulticast mode [ 953.573703][T12660] tipc: Resetting bearer [ 953.830521][T12660] tipc: Disabling bearer [ 953.924781][T12660] bond7 (unregistering): (slave gre3): Releasing backup interface [ 953.933326][T12660] gre3 (unregistering): left promiscuous mode [ 954.219065][T12660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.230256][T12660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.240393][T12660] bond0 (unregistering): Released all slaves [ 954.251588][T12660] bond1 (unregistering): Released all slaves [ 954.269199][T12660] bond2 (unregistering): Released all slaves [ 954.284378][T12660] bond3 (unregistering): Released all slaves [ 954.299439][T12660] bond4 (unregistering): Released all slaves [ 954.319046][T12660] bond5 (unregistering): (slave veth3): Releasing backup interface [ 954.339548][T12660] veth3: left promiscuous mode [ 954.348258][T12660] bond5 (unregistering): Released all slaves [ 954.363259][T12660] bond6 (unregistering): Released all slaves [ 954.379384][T12660] bond7 (unregistering): Released all slaves [ 954.415807][ T2659] __nla_validate_parse: 4 callbacks suppressed [ 954.415830][ T2659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7361'. [ 954.432479][ T2659] netlink: 264 bytes leftover after parsing attributes in process `syz.4.7361'. [ 954.579536][T12660] tipc: Left network mode [ 954.658152][T12660] IPVS: stopping master sync thread 27114 ... [ 954.802827][ T51] Bluetooth: hci4: command tx timeout [ 955.358907][ T2713] FAULT_INJECTION: forcing a failure. [ 955.358907][ T2713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.400676][ T2713] CPU: 1 UID: 0 PID: 2713 Comm: syz.4.7370 Not tainted syzkaller #0 PREEMPT(full) [ 955.400707][ T2713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 955.400723][ T2713] Call Trace: [ 955.400745][ T2713] [ 955.400756][ T2713] dump_stack_lvl+0xe8/0x150 [ 955.400797][ T2713] should_fail_ex+0x412/0x560 [ 955.400839][ T2713] _copy_from_user+0x2d/0xb0 [ 955.400871][ T2713] __sys_bind+0x1c6/0x410 [ 955.400905][ T2713] ? __pfx___sys_bind+0x10/0x10 [ 955.400950][ T2713] ? __pfx_ksys_write+0x10/0x10 [ 955.400987][ T2713] __x64_sys_bind+0x7a/0x90 [ 955.401019][ T2713] do_syscall_64+0x14d/0xf80 [ 955.401047][ T2713] ? trace_irq_disable+0x3b/0x150 [ 955.401069][ T2713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.401091][ T2713] ? clear_bhb_loop+0x40/0x90 [ 955.401119][ T2713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.401141][ T2713] RIP: 0033:0x7f970e59c819 [ 955.401172][ T2713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.401196][ T2713] RSP: 002b:00007f970f3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 955.401220][ T2713] RAX: ffffffffffffffda RBX: 00007f970e815fa0 RCX: 00007f970e59c819 [ 955.401236][ T2713] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 955.401251][ T2713] RBP: 00007f970f3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 955.401266][ T2713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.401279][ T2713] R13: 00007f970e816038 R14: 00007f970e815fa0 R15: 00007ffdb11ceec8 [ 955.401311][ T2713] [ 955.688849][ T2725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7371'. [ 955.968668][T12660] team0 (unregistering): Port device team_slave_1 removed [ 956.005308][T12660] team0 (unregistering): Port device team_slave_0 removed [ 956.161335][ T2756] netlink: 'syz.4.7377': attribute type 13 has an invalid length. [ 956.169500][ T2756] netlink: 'syz.4.7377': attribute type 17 has an invalid length. [ 956.214860][ T2757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7377'. [ 956.341850][ T2745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 956.387858][ T2756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 956.537100][ T2770] netlink: 'syz.0.7381': attribute type 10 has an invalid length. [ 956.595080][ T2770] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7381'. [ 956.836885][ T2782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7385'. [ 956.862719][ T2781] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7384'. [ 956.871826][ T2781] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7384'. [ 956.893427][ T51] Bluetooth: hci4: command tx timeout [ 956.981444][ T2506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 957.012516][ T2506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 957.060691][ T2506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 957.119866][ T2506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 957.384121][ T2819] netlink: 'syz.4.7386': attribute type 10 has an invalid length. [ 957.420698][ T2819] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7386'. [ 957.933401][ T2819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 957.981423][ T2819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.023119][ T2819] hsr0: entered promiscuous mode [ 958.030208][ T2819] bridge0: port 3(hsr0) entered blocking state [ 958.037468][ T2819] bridge0: port 3(hsr0) entered disabled state [ 958.044320][ T2819] hsr0: entered allmulticast mode [ 958.049541][ T2819] hsr_slave_0: entered allmulticast mode [ 958.065690][ T2819] hsr_slave_1: entered allmulticast mode [ 958.149358][T12660] IPVS: stop unused estimator thread 0... [ 958.567348][ T2506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.630835][ T2506] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.671664][T12675] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.678988][T12675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.727699][T12675] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.735009][T12675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.802346][ T2863] xt_hashlimit: size too large, truncated to 1048576 [ 958.831191][ T2506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.859962][ T2864] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 958.960647][ T2874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7396'. [ 958.973878][ T51] Bluetooth: hci4: command tx timeout [ 959.003595][ T2872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.028070][ T2872] bond0 (unregistering): Released all slaves [ 959.324002][ T2506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.647942][ T2895] __nla_validate_parse: 1 callbacks suppressed [ 959.647968][ T2895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7401'. [ 959.676020][ T2895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7401'. [ 959.701997][ T2899] IPVS: set_ctl: invalid protocol: 103 172.30.0.4:20002 [ 960.098410][ T2920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7406'. [ 960.134486][ T2920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7406'. [ 960.168787][ T2506] veth0_vlan: entered promiscuous mode [ 960.194560][ T2506] veth1_vlan: entered promiscuous mode [ 960.394804][ T2506] veth0_macvtap: entered promiscuous mode [ 960.434008][ T2506] veth1_macvtap: entered promiscuous mode [ 960.529168][ T2506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.573326][ T2506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.687403][T12659] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.725724][T12659] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.865831][T12664] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.884567][T12664] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.024470][ T2941] smc: net device wlan0 erased user defined pnetid SYZ0 [ 961.033338][ T2931] syzkaller0: entered promiscuous mode [ 961.038971][ T2931] syzkaller0: entered allmulticast mode [ 961.175508][ T2950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7414'. [ 961.243944][ T2951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7414'. [ 963.277755][ T2950] tipc: Enabled bearer , priority 0 [ 963.316400][ T2951] syzkaller0: entered promiscuous mode [ 963.322039][ T2951] syzkaller0: entered allmulticast mode [ 963.339198][ T2952] tipc: Resetting bearer [ 963.384448][ T2952] tipc: Disabling bearer [ 963.413149][ T2956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7416'. [ 963.606788][T12675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.632734][T12675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.688014][T12659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.736573][T12659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.929481][ T2982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 964.290934][ T3003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7430'. [ 964.316699][ T2998] bond7: option lacp_rate: invalid value (128) [ 964.349097][ T2998] bond7 (unregistering): Released all slaves [ 964.533502][ T3008] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7432'. [ 964.579876][ T3008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.659715][ T3008] netlink: 'syz.5.7432': attribute type 10 has an invalid length. [ 964.721388][ T3013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7432'. [ 964.925794][ T3008] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 965.080716][ T3027] netlink: 'syz.0.7437': attribute type 1 has an invalid length. [ 965.089849][ T3027] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7437'. [ 965.101775][ T3027] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7437'. [ 965.111425][ T3027] netlink: 658 bytes leftover after parsing attributes in process `syz.0.7437'. [ 965.196682][ T3032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7438'. [ 965.272160][ T3032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.608146][ T3042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 966.031438][ T3042] syzkaller0: entered promiscuous mode [ 966.039259][ T3042] syzkaller0: entered allmulticast mode [ 966.099226][ T3067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7446'. [ 968.471788][ T3093] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 968.579067][ T3103] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7454'. [ 968.630380][ T3110] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7458'. [ 968.692856][ T3114] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7458'. [ 968.744323][ T3110] gretap0: entered promiscuous mode [ 968.766978][ T3116] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7459'. [ 968.787279][ T3114] 0ªî{X¹¦: renamed from gretap0 [ 968.828350][ T3114] 0ªî{X¹¦: left promiscuous mode [ 968.846401][ T3114] 0ªî{X¹¦: entered allmulticast mode [ 968.857254][ T3114] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 969.337375][ T3138] team0 (unregistering): Port device team_slave_0 removed [ 969.348734][ T3138] team0 (unregistering): Port device team_slave_1 removed [ 969.391943][ T3138] team0 (unregistering): Port device bond1 removed [ 969.625461][ T3148] xt_hashlimit: size too large, truncated to 1048576 [ 969.761085][ T3158] __nla_validate_parse: 3 callbacks suppressed [ 969.761109][ T3158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7473'. [ 970.797757][ T3213] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 972.749707][ T3158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 973.032456][ T3234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7490'. [ 973.052141][ T3234] veth1: entered promiscuous mode [ 973.061867][ T3234] veth1: entered allmulticast mode [ 973.217054][ T3244] x_tables: duplicate underflow at hook 3 [ 973.696293][ T7768] lec:lec_start_xmit: lec0:No lecd attached [ 973.989351][ T3272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7505'. [ 974.183475][ T3286] netlink: 656 bytes leftover after parsing attributes in process `syz.0.7511'. [ 974.197291][ T3289] netlink: 656 bytes leftover after parsing attributes in process `syz.0.7511'. [ 974.335989][ T3297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7514'. [ 974.363603][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7514'. [ 974.399951][ T3299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7515'. [ 974.440880][ T3297] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 974.873559][ T3321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7520'. [ 975.489396][ T3343] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7531'. [ 975.766673][ T3354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7533'. [ 975.819782][ T3362] sctp: [Deprecated]: syz.0.7535 (pid 3362) Use of int in max_burst socket option. [ 975.819782][ T3362] Use struct sctp_assoc_value instead [ 975.893137][ T3366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7537'. [ 976.364241][ T3402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7544'. [ 976.516339][ T3419] netlink: 'syz.5.7546': attribute type 49 has an invalid length. [ 976.840907][ T3413] netlink: 'syz.5.7546': attribute type 1 has an invalid length. [ 976.901161][ T3438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7546'. [ 976.940305][ T3441] sctp: [Deprecated]: syz.0.7550 (pid 3441) Use of int in max_burst socket option. [ 976.940305][ T3441] Use struct sctp_assoc_value instead [ 977.001240][ T3413] bond1: entered promiscuous mode [ 977.006835][ T3413] bond1: entered allmulticast mode [ 977.020418][ T3413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 977.060408][ T3438] macvlan2: entered promiscuous mode [ 977.066033][ T3438] macvlan2: entered allmulticast mode [ 977.140423][ T3440] netlink: 15976 bytes leftover after parsing attributes in process `syz.4.7552'. [ 977.997718][ T3461] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7558'. [ 978.183984][ T3471] pimreg: entered allmulticast mode [ 978.377568][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7563'. [ 978.726279][ T3501] tipc: Started in network mode [ 978.731421][ T3501] tipc: Node identity ac14140f, cluster identity 4711 [ 978.740544][ T3501] tipc: New replicast peer: 255.255.255.255 [ 978.747933][ T3501] tipc: Enabled bearer , priority 10 [ 978.756764][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7568'. [ 978.878006][ T3505] netlink: 'syz.4.7570': attribute type 39 has an invalid length. [ 979.052646][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 979.060966][ C0] lec:lec_tx_timeout: lec0 [ 979.314237][ T3523] netlink: 'syz.3.7576': attribute type 1 has an invalid length. [ 979.367415][ T3523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 979.724609][ T3523] infiniband syz1: set down [ 979.729287][ T3523] infiniband syz1: added bond0 [ 979.771505][ T3523] RDS/IB: syz1: added [ 979.775886][ T3523] smc: adding ib device syz1 with port count 1 [ 979.782172][ T3523] smc: ib device syz1 port 1 has no pnetid [ 979.843722][T31573] tipc: Node number set to 2886997007 [ 980.170026][ T3548] netlink: 'syz.4.7583': attribute type 2 has an invalid length. [ 980.356577][ T3550] __nla_validate_parse: 6 callbacks suppressed [ 980.356603][ T3550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7585'. [ 980.411179][ T3554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7585'. [ 980.423102][ T3552] tipc: Started in network mode [ 980.428090][ T3552] tipc: Node identity , cluster identity 4711 [ 980.442890][ T3552] tipc: Failed to set node id, please configure manually [ 980.450940][ T3552] tipc: Enabling of bearer rejected, failed to enable media [ 980.482689][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 980.714655][ T3564] tc_dump_action: action bad kind [ 980.720473][ T3564] tc_dump_action: action bad kind [ 980.863914][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7591'. [ 980.875741][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7591'. [ 980.885714][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7591'. [ 980.920721][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7591'. [ 980.923219][T12675] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.941303][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7591'. [ 980.967802][T12675] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.978550][T12675] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.985968][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7591'. [ 980.988011][T12675] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.793398][ T3593] netlink: 'syz.1.7597': attribute type 1 has an invalid length. [ 981.911247][ T3593] 8021q: adding VLAN 0 to HW filter on device bond9 [ 981.993703][ T3595] bond9: (slave geneve4): making interface the new active one [ 982.034735][ T3595] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 982.063379][T12653] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 982.094259][T12653] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 982.117764][T12653] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 982.153032][ T3605] netlink: 'syz.4.7601': attribute type 6 has an invalid length. [ 982.183326][T12653] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 982.344301][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7604'. [ 982.373541][ T3614] netlink: 'syz.4.7604': attribute type 2 has an invalid length. [ 982.392840][ T3614] netlink: 'syz.4.7604': attribute type 3 has an invalid length. [ 982.463980][ T3616] IPv6: sit1: Disabled Multicast RS [ 982.748112][ T3624] dummy0: entered promiscuous mode [ 982.796510][ T3624] dummy0: left promiscuous mode [ 982.819078][ T3630] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 983.024392][ T3631] netlink: 'syz.0.7610': attribute type 1 has an invalid length. [ 983.050694][ T3631] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7610'. [ 983.390594][ T3649] delete_channel: no stack [ 983.410146][ T3653] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 983.472971][ T3654] ip6erspan0: entered allmulticast mode [ 983.725149][ T3663] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 983.727028][ T3662] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 984.689186][ T3690] netlink: 'syz.5.7629': attribute type 39 has an invalid length. [ 986.171224][ T3734] netlink: 'syz.3.7638': attribute type 2 has an invalid length. [ 986.186347][ T3734] __nla_validate_parse: 9 callbacks suppressed [ 986.186368][ T3734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7638'. [ 987.354565][ T3787] netlink: 'syz.5.7651': attribute type 10 has an invalid length. [ 987.386456][ T3787] team0: Device veth1_macvtap failed to register rx_handler [ 988.479751][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7655'. [ 988.655355][ T3817] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7661'. [ 988.730483][ T3822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7662'. [ 988.740313][ T3816] nbd5: detected capacity change from 0 to 63 [ 988.774237][ T3823] block nbd5: NBD_DISCONNECT [ 988.794014][ T3823] block nbd5: Disconnected due to user request. [ 988.800378][ T3823] block nbd5: shutting down sockets [ 988.851911][ T3822] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 988.864350][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 988.874272][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 988.882160][ C0] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 988.889880][ T3822] syzkaller1: linktype set to 0 [ 988.891805][ C0] Buffer I/O error on dev nbd5, logical block 1, async page read [ 988.904517][ C0] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 988.914062][ C0] Buffer I/O error on dev nbd5, logical block 2, async page read [ 988.921896][ C0] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 988.931550][ C0] Buffer I/O error on dev nbd5, logical block 3, async page read [ 988.985397][ T3541] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 989.013125][ T3541] Buffer I/O error on dev nbd5, logical block 0, async page read [ 989.021064][ T3541] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 989.058630][ T3541] Buffer I/O error on dev nbd5, logical block 1, async page read [ 989.088679][ T3541] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 989.105992][ T3541] Buffer I/O error on dev nbd5, logical block 2, async page read [ 989.146431][ T3541] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 989.166206][ T3541] Buffer I/O error on dev nbd5, logical block 3, async page read [ 989.213845][ T3541] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 989.242969][ T3541] Buffer I/O error on dev nbd5, logical block 0, async page read [ 989.281875][ T3541] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 989.311801][ T3541] Buffer I/O error on dev nbd5, logical block 1, async page read [ 989.331301][ T3541] ldm_validate_partition_table(): Disk read failed. [ 989.339780][ T3541] Dev nbd5: unable to read RDB block 0 [ 989.346445][ T3541] nbd5: unable to read partition table [ 989.375914][ T3541] ldm_validate_partition_table(): Disk read failed. [ 989.383517][ T3541] Dev nbd5: unable to read RDB block 0 [ 989.389775][ T3541] nbd5: unable to read partition table [ 990.214339][ T3858] netlink: 'syz.1.7668': attribute type 7 has an invalid length. [ 990.236319][ T3858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7668'. [ 990.493374][ T3873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7673'. [ 990.504708][ T3873] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7673'. [ 990.514173][ T3873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7673'. [ 990.569129][ T3878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7674'. [ 990.579468][ T3878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7674'. [ 991.180872][ T3893] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1436693039/1436693041 [ 991.190432][ T3893] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1436693039/1436693040 [ 991.201029][ T3893] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1436693039/1436693041 [ 991.214939][ T3893] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1436693039/1436693040 [ 991.226121][ T3893] __nla_validate_parse: 7 callbacks suppressed [ 991.226146][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7679'. [ 991.241518][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7679'. [ 991.406953][ T3903] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7682'. [ 991.421841][ T3905] netlink: del zone limit has 8 unknown bytes [ 991.434324][ T3903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7682'. [ 991.451205][ T3903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7682'. [ 991.526683][ T3907] vxcan2: entered allmulticast mode [ 991.916683][ T3925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 991.959058][ T3924] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7688'. [ 991.962967][ T3930] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 992.049239][ T3933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7690'. [ 992.106269][ T3933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7690'. [ 992.195741][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7692'. [ 992.286281][ T3945] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 992.337136][ T3948] netlink: 'syz.5.7694': attribute type 10 has an invalid length. [ 992.367561][ T3948] team0: Device veth1_macvtap failed to register rx_handler [ 992.701225][ T3956] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 993.133073][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 993.140981][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 993.920217][ T4004] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.092425][ T4004] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.169250][ T4032] bond4: entered allmulticast mode [ 994.291277][ T4032] macvlan0: entered promiscuous mode [ 994.313840][ T4044] sctp: [Deprecated]: syz.3.7720 (pid 4044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 994.313840][ T4044] Use struct sctp_sack_info instead [ 994.332306][ T4032] macvlan0: entered allmulticast mode [ 994.339549][ T4032] bond4: entered promiscuous mode [ 994.346073][ T4032] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 994.357741][ T4032] bond4: left promiscuous mode [ 994.470235][ T4004] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.609669][ T4004] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.688665][ T4055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7724'. [ 994.737061][T12677] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.773287][T12677] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.795494][T12664] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.828090][T12677] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.014275][ T4075] netlink: 'syz.5.7728': attribute type 11 has an invalid length. [ 995.613357][ T4106] netlink: 'syz.4.7738': attribute type 10 has an invalid length. [ 995.767743][ T4111] syzkaller1: entered promiscuous mode [ 995.774004][ T4111] syzkaller1: entered allmulticast mode [ 996.118912][ T4137] openvswitch: netlink: IP tunnel TTL not specified. [ 996.137027][ T4134] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 996.254264][ T4144] __nla_validate_parse: 1 callbacks suppressed [ 996.254287][ T4144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7747'. [ 996.298902][ T4144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7747'. [ 996.427460][ T4148] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7748'. [ 996.496947][ T4151] netlink: 'syz.3.7751': attribute type 1 has an invalid length. [ 996.512905][ T4151] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7751'. [ 996.681285][ T4156] netlink: 'syz.5.7753': attribute type 4 has an invalid length. [ 996.780236][ T4160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.985434][ T4178] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7759'. [ 996.996486][ T4178] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7759'. [ 997.007411][ T4178] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7759'. [ 997.019164][ T4179] netlink: 'syz.0.7758': attribute type 1 has an invalid length. [ 997.053139][ T4179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 997.076533][ T4179] bond5: (slave geneve3): making interface the new active one [ 997.086167][ T4179] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 997.120769][T12653] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 997.147196][T12653] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 997.163843][ T4181] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7759'. [ 997.184497][T12653] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 997.202281][T12653] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 997.495963][ T4195] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7763'. [ 998.142953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.151190][ C0] lec:lec_tx_timeout: lec0 [ 998.418549][ T4257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7776'. [ 998.621800][ T4268] TC_ACT_REPEAT abuse ? [ 999.396619][ T4300] netlink: 'syz.0.7789': attribute type 3 has an invalid length. [ 999.869164][ T4319] netlink: 'syz.1.7796': attribute type 20 has an invalid length. [ 999.891604][ T4319] netlink: 'syz.1.7796': attribute type 21 has an invalid length. [ 1000.215806][ T4334] syzkaller0: entered promiscuous mode [ 1000.221360][ T4334] syzkaller0: entered allmulticast mode [ 1000.241767][ T4334] xt_hashlimit: size too large, truncated to 1048576 [ 1000.301964][ T4342] xt_hashlimit: size too large, truncated to 1048576 [ 1000.309379][ T4342] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1000.324275][ T4342] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 1001.146230][ T4377] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 1001.454567][ T4392] vlan2: entered allmulticast mode [ 1001.463358][ T4392] macvtap0: entered allmulticast mode [ 1001.492161][ T4400] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1001.498159][ T4400] dvmrp1: linktype set to 804 [ 1001.509436][ T4400] dvmrp1: tun_chr_ioctl cmd 3223345253 [ 1001.748449][ T4412] __nla_validate_parse: 25 callbacks suppressed [ 1001.748474][ T4412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7826'. [ 1002.269022][ T4452] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1002.283845][ T4452] bond2 (unregistering): Released all slaves [ 1002.332520][ T4455] netlink: 'syz.0.7836': attribute type 93 has an invalid length. [ 1002.350487][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7835'. [ 1002.365901][ T4457] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7835'. [ 1002.384429][ T4456] : entered promiscuous mode [ 1002.417383][ T4459] tap0: tun_chr_ioctl cmd 1074025676 [ 1002.440962][ T4459] tap0: owner set to 0 [ 1002.453406][ T4459] netlink: 'syz.4.7837': attribute type 1 has an invalid length. [ 1002.503897][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7838'. [ 1002.748253][ T4469] netlink: 'syz.3.7841': attribute type 1 has an invalid length. [ 1002.807826][ T4469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1002.895984][ T4469] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1002.905781][ T4478] batadv_slave_1: entered promiscuous mode [ 1002.962386][ T4469] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1002.979396][ T4469] bond7: (slave batadv2): making interface the new active one [ 1002.989049][ T4469] batadv2: entered promiscuous mode [ 1002.996540][ T4469] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 1003.146487][ T4485] xt_hashlimit: size too large, truncated to 1048576 [ 1003.147382][ T4486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7846'. [ 1003.202055][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7846'. [ 1003.212344][ T4486] bond8: entered promiscuous mode [ 1003.220111][ T4486] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1003.227892][ T4477] batadv_slave_1: left promiscuous mode [ 1003.285943][ T4493] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1003.297976][ T4493] bond9: entered promiscuous mode [ 1003.304575][ T4493] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1003.444340][ T4504] xt_cgroup: invalid path, errno=-2 [ 1003.545066][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7850'. [ 1003.609044][ T4513] FAULT_INJECTION: forcing a failure. [ 1003.609044][ T4513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.625302][ T4513] CPU: 1 UID: 0 PID: 4513 Comm: syz.0.7853 Not tainted syzkaller #0 PREEMPT(full) [ 1003.625340][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1003.625357][ T4513] Call Trace: [ 1003.625368][ T4513] [ 1003.625379][ T4513] dump_stack_lvl+0xe8/0x150 [ 1003.625426][ T4513] should_fail_ex+0x412/0x560 [ 1003.625476][ T4513] _copy_from_user+0x2d/0xb0 [ 1003.625510][ T4513] ___sys_recvmsg+0x175/0x590 [ 1003.625561][ T4513] ? __pfx____sys_recvmsg+0x10/0x10 [ 1003.625630][ T4513] ? __fget_files+0x3a0/0x420 [ 1003.625671][ T4513] do_recvmmsg+0x334/0x800 [ 1003.625707][ T4513] ? __pfx_do_recvmmsg+0x10/0x10 [ 1003.625748][ T4513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1003.625805][ T4513] __x64_sys_recvmmsg+0x198/0x250 [ 1003.625834][ T4513] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1003.625874][ T4513] do_syscall_64+0x14d/0xf80 [ 1003.625903][ T4513] ? trace_irq_disable+0x3b/0x150 [ 1003.625927][ T4513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.625955][ T4513] ? clear_bhb_loop+0x40/0x90 [ 1003.625987][ T4513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.626014][ T4513] RIP: 0033:0x7fcdbb19c819 [ 1003.626039][ T4513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.626062][ T4513] RSP: 002b:00007fcdbc05f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1003.626090][ T4513] RAX: ffffffffffffffda RBX: 00007fcdbb415fa0 RCX: 00007fcdbb19c819 [ 1003.626120][ T4513] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1003.626138][ T4513] RBP: 00007fcdbc05f090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.626163][ T4513] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 1003.626180][ T4513] R13: 00007fcdbb416038 R14: 00007fcdbb415fa0 R15: 00007ffd99a266e8 [ 1003.626222][ T4513] [ 1004.206397][ T4498] batman_adv: batadv0: Interface deactivated: gretap3 [ 1004.283361][T12660] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1004.292439][T12660] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1004.339341][T12660] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1004.389415][T12660] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1004.517303][ T4529] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7857'. [ 1004.543289][ T4529] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7857'. [ 1004.742871][ T4535] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7859'. [ 1005.402862][ T4555] xt_cgroup: xt_cgroup: no path or classid specified [ 1005.683604][ T4561] syzkaller0: entered promiscuous mode [ 1005.689428][ T4561] syzkaller0: entered allmulticast mode [ 1006.228976][ T4587] netlink: 'syz.5.7877': attribute type 1 has an invalid length. [ 1006.257412][ T4586] netlink: 'syz.0.7874': attribute type 30 has an invalid length. [ 1006.469968][ T4582] tipc: Resetting bearer [ 1006.633078][ T4604] syzkaller0: entered promiscuous mode [ 1006.646270][ T4604] syzkaller0: entered allmulticast mode [ 1006.690034][ T4606] 0ªî{X¹¦: left allmulticast mode [ 1006.770997][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.778856][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.833486][ T4620] __nla_validate_parse: 4 callbacks suppressed [ 1006.833519][ T4620] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1006.989640][ T4626] netlink: 'syz.1.7884': attribute type 13 has an invalid length. [ 1007.024929][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.032796][ T4626] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1007.048170][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.119760][ T4606] bond1: left promiscuous mode [ 1007.128683][ T4606] bond1: left allmulticast mode [ 1007.138831][ T4606] macvlan2: left promiscuous mode [ 1007.144753][ T4606] macvlan2: left allmulticast mode [ 1007.192404][ T4625] netlink: 'syz.3.7885': attribute type 2 has an invalid length. [ 1007.214649][T12660] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.328313][T12660] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.337872][T12660] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.348336][T12660] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.445677][ T4632] syzkaller1: entered promiscuous mode [ 1007.451464][ T4632] syzkaller1: entered allmulticast mode [ 1007.605106][ T4636] bond6 (unregistering): Released all slaves [ 1007.879682][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1008.051147][ T4667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7895'. [ 1008.075874][ T4668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7895'. [ 1008.105438][ T4667] openvswitch: netlink: Flow key attr not present in new flow. [ 1008.113445][ T4668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7895'. [ 1008.211926][ T4672] sit0: entered promiscuous mode [ 1008.223299][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'. [ 1008.256403][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'. [ 1008.312848][ T4682] netlink: 'syz.0.7897': attribute type 1 has an invalid length. [ 1008.547140][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1008.627676][ T4690] netlink: 772 bytes leftover after parsing attributes in process `syz.4.7903'. [ 1009.596766][ T4734] syzkaller0: entered promiscuous mode [ 1009.602514][ T4734] syzkaller0: entered allmulticast mode [ 1009.611939][ T4734] tc action pedit offset 14680064 out of bounds [ 1009.867272][ T4746] netlink: 'syz.5.7917': attribute type 3 has an invalid length. [ 1009.877101][ T4746] netlink: 'syz.5.7917': attribute type 3 has an invalid length. [ 1010.249425][ T4770] xt_socket: unknown flags 0x50 [ 1010.277767][ T4770] rdma_op ffff88807ecf59f0 conn xmit_rdma 0000000000000000 [ 1010.508517][ T4787] netlink: 'syz.5.7928': attribute type 1 has an invalid length. [ 1010.579280][ T4787] bond3: entered promiscuous mode [ 1010.604878][ T4787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1010.617399][ T4786] netlink: 'syz.4.7926': attribute type 1 has an invalid length. [ 1010.756383][ T4786] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1011.721206][ T4816] netlink: 'syz.1.7934': attribute type 29 has an invalid length. [ 1011.741477][ T4819] netlink: 'syz.4.7935': attribute type 1 has an invalid length. [ 1011.775245][ T4816] netlink: 'syz.1.7934': attribute type 29 has an invalid length. [ 1011.846084][ T4816] netlink: 'syz.1.7934': attribute type 32 has an invalid length. [ 1011.854456][ T4816] __nla_validate_parse: 4 callbacks suppressed [ 1011.854477][ T4816] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7934'. [ 1011.998845][ T4819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1012.024558][ T4818] bond8: entered allmulticast mode [ 1012.201581][ T4838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7939'. [ 1012.230870][ T4839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7939'. [ 1012.333562][ T4841] nbd0: detected capacity change from 0 to 63 [ 1012.395706][ T51] block nbd0: Receive control failed (result -104) [ 1012.575724][ T4853] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7942'. [ 1012.863982][ T4863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7944'. [ 1012.881153][ T4863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7944'. [ 1013.094755][ T4869] netlink: 'syz.0.7947': attribute type 8 has an invalid length. [ 1013.103496][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7947'. [ 1013.262370][ T4869] bond0: entered promiscuous mode [ 1013.296080][ T4869] gretap0: entered promiscuous mode [ 1013.315782][ T4869] hsr1: entered promiscuous mode [ 1013.768503][ T4899] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7957'. [ 1013.794188][ T4899] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7957'. [ 1013.810259][ T4899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7957'. [ 1013.899420][ T4904] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1014.119954][ T4912] team1: entered promiscuous mode [ 1014.125453][ T4912] team1: entered allmulticast mode [ 1014.132978][ T4912] 8021q: adding VLAN 0 to HW filter on device team1 [ 1014.374262][T12659] batadv2: left promiscuous mode [ 1014.906176][ T4951] ifb1: entered promiscuous mode [ 1014.932709][ T4951] ifb1: left promiscuous mode [ 1016.066801][ T5020] ip6tnl1: entered allmulticast mode [ 1016.478645][ T4999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1016.659314][ T5035] batman_adv: batadv0: Adding interface: vlan2 [ 1016.692163][ T5035] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.731603][ T5035] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1016.863685][ T5042] bond11: entered promiscuous mode [ 1016.869457][ T5042] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1017.423973][ T5075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1017.455384][ T5074] xfrm0: entered allmulticast mode [ 1017.460956][ T5074] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1017.599674][ T5082] __nla_validate_parse: 12 callbacks suppressed [ 1017.599701][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8003'. [ 1017.803161][ T5085] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8004'. [ 1018.364223][ T5105] netlink: 'syz.3.8010': attribute type 4 has an invalid length. [ 1018.377079][ T5102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1018.412843][ T5104] netlink: 'syz.3.8010': attribute type 4 has an invalid length. [ 1018.602121][ T5116] netlink: 'syz.0.8015': attribute type 39 has an invalid length. [ 1018.731376][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1018.762884][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1018.797644][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1018.833659][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1018.846850][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1018.865279][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1018.875121][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1018.889527][ T5124] veth1_to_hsr: left allmulticast mode [ 1018.897141][ T5124] veth1_to_hsr: left promiscuous mode [ 1019.106699][ T5144] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1019.123871][ T5144] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1019.476836][ T5167] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1019.598271][ T5177] netlink: 'syz.4.8027': attribute type 10 has an invalid length. [ 1019.645181][ T5177] veth0_vlan: left promiscuous mode [ 1019.657994][ T5184] netlink: 'syz.5.8029': attribute type 1 has an invalid length. [ 1019.667815][ T5177] veth0_vlan: entered promiscuous mode [ 1019.676755][ T5177] team0: Device veth0_vlan failed to register rx_handler [ 1019.802794][ T5184] bond4: entered promiscuous mode [ 1019.823272][ T5184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1019.900143][ T5198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1019.944027][ T5198] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1020.004965][ T5198] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1020.040299][ T5198] bond4: (slave ip6gre1): making interface the new active one [ 1020.051042][ T5198] ip6gre1: entered promiscuous mode [ 1020.066071][ T5198] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 1020.256395][ T5215] netlink: 'syz.5.8036': attribute type 1 has an invalid length. [ 1020.428320][ T5215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1020.497238][ T5221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1020.514115][ T5221] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 1020.538942][ T5221] bond5: (slave vcan1): Error -95 calling set_mac_address [ 1020.763823][ T5234] macvtap1: entered promiscuous mode [ 1020.774724][ T5234] syz_tun: entered promiscuous mode [ 1020.780346][ T5234] macvtap1: entered allmulticast mode [ 1020.787957][ T5234] syz_tun: entered allmulticast mode [ 1020.803822][ T5234] syz_tun: left allmulticast mode [ 1020.816797][ T5234] syz_tun: left promiscuous mode [ 1021.250914][ T5258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.538255][ T5257] bond12 (unregistering): Released all slaves [ 1021.916667][ T5289] netlink: 'syz.4.8055': attribute type 2 has an invalid length. [ 1021.981375][ T5289] !: entered promiscuous mode [ 1022.216850][ T5311] sctp: [Deprecated]: syz.1.8059 (pid 5311) Use of int in maxseg socket option. [ 1022.216850][ T5311] Use struct sctp_assoc_value instead [ 1022.953562][ T5325] __nla_validate_parse: 233 callbacks suppressed [ 1022.953589][ T5325] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8063'. [ 1023.025526][ T5329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8064'. [ 1023.739525][ T5351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8069'. [ 1025.178875][ T5388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8080'. [ 1025.847511][ T5411] netlink: 'syz.1.8086': attribute type 1 has an invalid length. [ 1025.938193][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8086'. [ 1026.034318][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8086'. [ 1026.236155][ T5419] syzkaller1: entered promiscuous mode [ 1026.241732][ T5419] syzkaller1: entered allmulticast mode [ 1026.340350][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8089'. [ 1026.364480][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8089'. [ 1026.802087][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8093'. [ 1026.975129][ T5447] bond6 (unregistering): Released all slaves [ 1027.037674][ T5451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8097'. [ 1027.465573][ T5477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.019422][ T5493] tipc: Enabling of bearer rejected, failed to enable media [ 1028.406563][ T5514] macsec3: entered promiscuous mode [ 1028.411864][ T5514] batadv_slave_1: entered promiscuous mode [ 1028.525687][ T5521] hsr0: entered promiscuous mode [ 1028.605861][ T5520] hsr0: left promiscuous mode [ 1028.621569][ T5525] netlink: 'syz.5.8111': attribute type 1 has an invalid length. [ 1028.778441][ T5532] __nla_validate_parse: 4 callbacks suppressed [ 1028.778467][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8114'. [ 1028.799459][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8114'. [ 1028.810247][ T5532] netlink: 'syz.4.8114': attribute type 12 has an invalid length. [ 1028.842252][ T5532] netlink: 'syz.4.8114': attribute type 11 has an invalid length. [ 1028.971477][ T5545] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8118'. [ 1029.018996][ T5550] netlink: 'syz.0.8119': attribute type 21 has an invalid length. [ 1029.027279][ T5550] IPv6: NLM_F_CREATE should be specified when creating new route [ 1029.450140][ T5574] mac80211_hwsim hwsim104 syzkaller0: entered promiscuous mode [ 1029.458379][ T5574] mac80211_hwsim hwsim104 syzkaller0: entered allmulticast mode [ 1029.835464][ T5589] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1029.867917][ T5589] sock: sock_timestamping_bind_phc: sock not bind to device [ 1029.884526][ T5589] netlink: 'syz.1.8129': attribute type 1 has an invalid length. [ 1030.173782][ T5616] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8136'. [ 1030.193547][ T5617] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8136'. [ 1030.559373][ T5645] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8141'. [ 1030.595726][ T5645] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8141'. [ 1030.843575][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8144'. [ 1031.023328][ T5656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8143'. [ 1031.064590][ T5666] netlink: 'syz.5.8145': attribute type 89 has an invalid length. [ 1031.330785][ T5688] netlink: 'syz.0.8149': attribute type 3 has an invalid length. [ 1031.381473][ T5690] netlink: 'syz.3.8151': attribute type 4 has an invalid length. [ 1031.580494][ T5699] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1031.814569][ T5713] vti0: entered promiscuous mode [ 1031.842854][ T5713] vti0: entered allmulticast mode [ 1032.034801][ T30] audit: type=1107 audit(1776207922.207:23): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1032.332488][ T5730] tipc: New replicast peer: 255.255.255.255 [ 1032.339377][ T5730] tipc: Enabled bearer , priority 10 [ 1032.913827][ T5757] vlan3: entered promiscuous mode [ 1032.932393][ T5757] bridge0: entered promiscuous mode [ 1033.105288][ T5767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1033.182103][ T5769] openvswitch: netlink: Flow actions attr not present in new flow. [ 1034.184212][ T5831] sctp: [Deprecated]: syz.3.8190 (pid 5831) Use of int in max_burst socket option. [ 1034.184212][ T5831] Use struct sctp_assoc_value instead [ 1034.204122][ T5827] vxcan0: entered allmulticast mode [ 1034.210201][ T5830] sctp: [Deprecated]: syz.3.8190 (pid 5830) Use of int in max_burst socket option. [ 1034.210201][ T5830] Use struct sctp_assoc_value instead [ 1034.233388][ T5831] __nla_validate_parse: 9 callbacks suppressed [ 1034.233410][ T5831] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8190'. [ 1034.336444][ T5834] netlink: 844 bytes leftover after parsing attributes in process `syz.3.8191'. [ 1034.645417][ T5844] xt_bpf: check failed: parse error [ 1034.763895][ T5847] netlink: 'syz.4.8195': attribute type 13 has an invalid length. [ 1034.771802][ T5847] netlink: 'syz.4.8195': attribute type 17 has an invalid length. [ 1034.995044][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.041454][ T5847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1035.744268][ T5897] netlink: 'syz.4.8204': attribute type 10 has an invalid length. [ 1035.779713][ T5897] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8204'. [ 1035.882799][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8204'. [ 1036.029665][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8204'. [ 1036.220084][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8202'. [ 1036.250941][ T5883] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 1036.355555][ T5929] netlink: 'syz.4.8209': attribute type 3 has an invalid length. [ 1036.374076][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8209'. [ 1036.429593][ T5929] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8209'. [ 1036.980621][ T5948] netlink: 'syz.5.8216': attribute type 11 has an invalid length. [ 1037.009270][ T5948] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8216'. [ 1037.119469][ T5955] netlink: 'syz.4.8217': attribute type 10 has an invalid length. [ 1037.137172][ T5959] netlink: 'syz.1.8218': attribute type 10 has an invalid length. [ 1037.189125][ T5955] hsr0: left allmulticast mode [ 1037.208516][ T5955] hsr_slave_0: left allmulticast mode [ 1037.237143][ T5955] hsr_slave_1: left allmulticast mode [ 1037.272150][ T5955] hsr0: left promiscuous mode [ 1037.277980][ T5955] bridge0: port 3(hsr0) entered disabled state [ 1037.319070][ T5955] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1037.953075][ T5973] FAULT_INJECTION: forcing a failure. [ 1037.953075][ T5973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.966858][ T5972] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8223'. [ 1038.006825][ T5973] CPU: 0 UID: 0 PID: 5973 Comm: syz.5.8222 Not tainted syzkaller #0 PREEMPT(full) [ 1038.006860][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1038.006876][ T5973] Call Trace: [ 1038.006885][ T5973] [ 1038.006897][ T5973] dump_stack_lvl+0xe8/0x150 [ 1038.006936][ T5973] should_fail_ex+0x412/0x560 [ 1038.006979][ T5973] _copy_from_user+0x2d/0xb0 [ 1038.007009][ T5973] ___sys_sendmsg+0x1c6/0x360 [ 1038.007052][ T5973] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.007126][ T5973] ? __fget_files+0x2a/0x420 [ 1038.007147][ T5973] ? __fget_files+0x3a0/0x420 [ 1038.007181][ T5973] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1038.007219][ T5973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1038.007265][ T5973] ? __pfx_ksys_write+0x10/0x10 [ 1038.007306][ T5973] do_syscall_64+0x14d/0xf80 [ 1038.007333][ T5973] ? trace_irq_disable+0x3b/0x150 [ 1038.007355][ T5973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.007379][ T5973] ? clear_bhb_loop+0x40/0x90 [ 1038.007408][ T5973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.007432][ T5973] RIP: 0033:0x7f3c04d9c819 [ 1038.007455][ T5973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.007475][ T5973] RSP: 002b:00007f3c05d02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.007501][ T5973] RAX: ffffffffffffffda RBX: 00007f3c05015fa0 RCX: 00007f3c04d9c819 [ 1038.007519][ T5973] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1038.007534][ T5973] RBP: 00007f3c05d02090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.007550][ T5973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.007574][ T5973] R13: 00007f3c05016038 R14: 00007f3c05015fa0 R15: 00007fffa348a698 [ 1038.007610][ T5973] [ 1038.278942][ T7768] lec:lec_start_xmit: lec0:No lecd attached [ 1038.386351][ T5982] netlink: 'syz.0.8226': attribute type 7 has an invalid length. [ 1038.486982][ T5983] nbd: nbd64 already in use [ 1038.540395][ T5989] netlink: 'syz.1.8227': attribute type 1 has an invalid length. [ 1038.719100][ T5989] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1038.738665][ T6003] IPv6: NLM_F_CREATE should be specified when creating new route [ 1038.797949][ T4040] udevd[4040]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1038.853642][ T5998] syzkaller0: entered promiscuous mode [ 1038.926201][ T5998] syzkaller0: entered allmulticast mode [ 1039.271292][ T6022] __nla_validate_parse: 3 callbacks suppressed [ 1039.271321][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8233'. [ 1039.315482][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8233'. [ 1039.417231][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8237'. [ 1039.459446][ T6026] netlink: 'syz.3.8236': attribute type 16 has an invalid length. [ 1039.520456][ T6026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1039.963170][ T6033] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8238'. [ 1039.983005][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8241'. [ 1040.057231][ T6055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8242'. [ 1040.071492][ T6055] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8242'. [ 1040.455772][ T6064] syzkaller0: entered promiscuous mode [ 1040.463328][ T6064] syzkaller0: entered allmulticast mode [ 1040.482372][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8247'. [ 1040.534696][ T6064] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8244'. [ 1041.373998][ T6103] netlink: 'syz.5.8257': attribute type 13 has an invalid length. [ 1041.382007][ T6103] netlink: 'syz.5.8257': attribute type 17 has an invalid length. [ 1041.441959][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.446308][ T5989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1041.459219][ T6103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.538037][ T6103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1041.692468][ T6109] netlink: 'syz.1.8258': attribute type 15 has an invalid length. [ 1041.855170][ T6119] netlink: 'syz.0.8263': attribute type 21 has an invalid length. [ 1041.864811][ T6120] netlink: 'syz.0.8263': attribute type 21 has an invalid length. [ 1041.890310][ T6119] netlink: 'syz.0.8263': attribute type 4 has an invalid length. [ 1041.907249][ T6119] netlink: 'syz.0.8263': attribute type 5 has an invalid length. [ 1041.919005][ T6120] netlink: 'syz.0.8263': attribute type 4 has an invalid length. [ 1041.943562][ T6120] netlink: 'syz.0.8263': attribute type 5 has an invalid length. [ 1042.009640][ T6127] SET target dimension over the limit! [ 1042.064736][ T6131] netlink: 'syz.4.8268': attribute type 2 has an invalid length. [ 1042.411286][ T1736] block nbd0: Possible stuck request ffff88806bbe0000: control (read@0,1024B). Runtime 30 seconds [ 1042.428051][ T1736] block nbd0: Possible stuck request ffff88806bbe0200: control (read@1024,1024B). Runtime 30 seconds [ 1042.439700][ T1736] block nbd0: Possible stuck request ffff88806bbe0400: control (read@2048,1024B). Runtime 30 seconds [ 1042.451243][ T1736] block nbd0: Possible stuck request ffff88806bbe0600: control (read@3072,1024B). Runtime 30 seconds [ 1044.012573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 1044.020716][ C0] lec:lec_tx_timeout: lec0 [ 1045.882067][ T6175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1045.894104][ T6215] __nla_validate_parse: 23 callbacks suppressed [ 1045.894125][ T6215] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8289'. [ 1046.064753][ T6242] tipc: Enabling of bearer rejected, already enabled [ 1046.152300][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8297'. [ 1046.188089][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8296'. [ 1046.258492][ T6253] tipc: Enabled bearer , priority 0 [ 1046.270239][ T6253] syzkaller0: entered promiscuous mode [ 1046.283042][ T6253] syzkaller0: entered allmulticast mode [ 1046.337114][ T6253] tipc: Resetting bearer [ 1046.386365][ T6252] tipc: Resetting bearer [ 1046.454398][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8296'. [ 1046.464519][ T6252] tipc: Disabling bearer [ 1046.603390][ T6270] Cannot find set identified by id 65534 to match [ 1046.744785][ T6281] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1046.786590][ T6288] netlink: zone id is out of range [ 1046.812314][ T6288] netlink: zone id is out of range [ 1046.820264][ T6288] netlink: zone id is out of range [ 1046.826004][ T6288] netlink: zone id is out of range [ 1046.831282][ T6288] netlink: zone id is out of range [ 1046.837069][ T6288] netlink: zone id is out of range [ 1046.842344][ T6288] netlink: zone id is out of range [ 1046.848447][ T6288] netlink: zone id is out of range [ 1046.854007][ T6288] netlink: zone id is out of range [ 1046.859372][ T6288] netlink: zone id is out of range [ 1046.891695][ T6248] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1046.922756][ T6248] bond14 (unregistering): Released all slaves [ 1047.001134][ T6292] validate_nla: 14 callbacks suppressed [ 1047.001159][ T6292] netlink: 'syz.4.8308': attribute type 1 has an invalid length. [ 1047.073925][ T6293] netlink: 'syz.4.8308': attribute type 1 has an invalid length. [ 1047.120526][ T6292] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1047.134309][ T6290] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8307'. [ 1047.374992][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1047.392125][ T6310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8313'. [ 1047.423852][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8313'. [ 1048.191121][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8320'. [ 1048.324826][ T6337] Bluetooth: MGMT ver 1.23 [ 1048.508094][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8319'. [ 1049.524997][ T6375] netlink: 'syz.1.8328': attribute type 11 has an invalid length. [ 1050.442946][ T6407] netlink: 'syz.1.8336': attribute type 10 has an invalid length. [ 1050.475805][ T6407] netlink: 'syz.1.8336': attribute type 10 has an invalid length. [ 1050.880749][ T6436] FAULT_INJECTION: forcing a failure. [ 1050.880749][ T6436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.922977][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.5.8343 Not tainted syzkaller #0 PREEMPT(full) [ 1050.923010][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1050.923024][ T6436] Call Trace: [ 1050.923035][ T6436] [ 1050.923045][ T6436] dump_stack_lvl+0xe8/0x150 [ 1050.923085][ T6436] should_fail_ex+0x412/0x560 [ 1050.923127][ T6436] _copy_from_user+0x2d/0xb0 [ 1050.923158][ T6436] __copy_msghdr+0x3c5/0x5b0 [ 1050.923207][ T6436] ___sys_sendmsg+0x213/0x360 [ 1050.923247][ T6436] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.923316][ T6436] ? __fget_files+0x2a/0x420 [ 1050.923338][ T6436] ? __fget_files+0x3a0/0x420 [ 1050.923371][ T6436] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1050.923409][ T6436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1050.923454][ T6436] ? __pfx_ksys_write+0x10/0x10 [ 1050.923493][ T6436] do_syscall_64+0x14d/0xf80 [ 1050.923520][ T6436] ? trace_irq_disable+0x3b/0x150 [ 1050.923540][ T6436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.923565][ T6436] ? clear_bhb_loop+0x40/0x90 [ 1050.923593][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.923617][ T6436] RIP: 0033:0x7f3c04d9c819 [ 1050.923640][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.923659][ T6436] RSP: 002b:00007f3c05d02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.923683][ T6436] RAX: ffffffffffffffda RBX: 00007f3c05015fa0 RCX: 00007f3c04d9c819 [ 1050.923701][ T6436] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 1050.923715][ T6436] RBP: 00007f3c05d02090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.923731][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.923745][ T6436] R13: 00007f3c05016038 R14: 00007f3c05015fa0 R15: 00007fffa348a698 [ 1050.923781][ T6436] [ 1050.927551][ T6438] syzkaller1: entered promiscuous mode [ 1051.133986][ T6438] syzkaller1: entered allmulticast mode [ 1051.319253][ T6450] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1051.365049][ T105] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1051.388478][ T105] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1051.415882][ T105] bond0: (slave wlan1): link status definitely down, disabling slave [ 1051.453033][ T105] bond0: now running without any active interface! [ 1051.542129][ T6453] __nla_validate_parse: 3 callbacks suppressed [ 1051.550450][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8349'. [ 1051.668618][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8349'. [ 1052.170321][ T6468] netlink: 'syz.5.8354': attribute type 4 has an invalid length. [ 1052.183941][ T6468] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8354'. [ 1052.279648][ T6470] netlink: 'syz.3.8355': attribute type 3 has an invalid length. [ 1052.473324][ T6478] vxcan1: entered promiscuous mode [ 1052.520671][ T6478] syzkaller1: entered allmulticast mode [ 1052.566066][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8356'. [ 1052.580249][ T6478] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8356'. [ 1052.591714][ T6478] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8356'. [ 1052.613673][ T6478] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8356'. [ 1052.652756][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8356'. [ 1052.772938][ T6494] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 1052.785102][ T6494] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1052.793646][ T6494] CPU: 1 UID: 0 PID: 6494 Comm: syz.4.8358 Not tainted syzkaller #0 PREEMPT(full) [ 1052.802979][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1052.813085][ T6494] RIP: 0010:memcpy_sglist+0x420/0x730 [ 1052.818694][ T6494] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 1052.838346][ T6494] RSP: 0018:ffffc900035f7698 EFLAGS: 00010202 [ 1052.844461][ T6494] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 1052.852464][ T6494] RDX: ffffc9000fe5a000 RSI: 000000000000023b RDI: 000000000000023c [ 1052.860479][ T6494] RBP: dffffc0000000000 R08: 8b9d9113ba6e4fef R09: 00002ecee0ef378b [ 1052.868563][ T6494] R10: dffffc0000000000 R11: ffffed100d50ec9a R12: 0000000000000009 [ 1052.876742][ T6494] R13: ffff88807a207400 R14: ffff888035a720a0 R15: 0000000000000008 [ 1052.884770][ T6494] FS: 00007f970f3ee6c0(0000) GS:ffff888125547000(0000) knlGS:0000000000000000 [ 1052.893730][ T6494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1052.900342][ T6494] CR2: 000000110c2b8212 CR3: 0000000079ece000 CR4: 00000000003526f0 [ 1052.908354][ T6494] Call Trace: [ 1052.911654][ T6494] [ 1052.914624][ T6494] aead_recvmsg+0x719/0x1030 [ 1052.919345][ T6494] ? __pfx_aead_recvmsg+0x10/0x10 [ 1052.924404][ T6494] ? __pfx_aead_recvmsg+0x10/0x10 [ 1052.929548][ T6494] sock_recvmsg_nosec+0x10c/0x140 [ 1052.934693][ T6494] ____sys_recvmsg+0x3e3/0x4a0 [ 1052.939504][ T6494] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1052.944831][ T6494] ? import_iovec+0x73/0xa0 [ 1052.949412][ T6494] ___sys_recvmsg+0x215/0x590 [ 1052.954142][ T6494] ? __lock_acquire+0x6b5/0x2cf0 [ 1052.959179][ T6494] ? __pfx____sys_recvmsg+0x10/0x10 [ 1052.964410][ T6494] ? get_futex_key+0x8cd/0x1690 [ 1052.969313][ T6494] do_recvmmsg+0x334/0x800 [ 1052.973760][ T6494] ? __pfx_do_recvmmsg+0x10/0x10 [ 1052.978774][ T6494] ? __pfx_do_futex+0x10/0x10 [ 1052.983501][ T6494] __x64_sys_recvmmsg+0x198/0x250 [ 1052.988572][ T6494] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1052.994260][ T6494] do_syscall_64+0x14d/0xf80 [ 1052.998878][ T6494] ? trace_irq_disable+0x3b/0x150 [ 1053.003927][ T6494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.010023][ T6494] ? clear_bhb_loop+0x40/0x90 [ 1053.014732][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.020740][ T6494] RIP: 0033:0x7f970e59c819 [ 1053.025188][ T6494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.044913][ T6494] RSP: 002b:00007f970f3ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1053.053362][ T6494] RAX: ffffffffffffffda RBX: 00007f970e815fa0 RCX: 00007f970e59c819 [ 1053.061362][ T6494] RDX: 0000000000000002 RSI: 0000200000000740 RDI: 0000000000000008 [ 1053.069361][ T6494] RBP: 00007f970e632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1053.077361][ T6494] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 1053.085452][ T6494] R13: 00007f970e816038 R14: 00007f970e815fa0 R15: 00007ffdb11ceec8 [ 1053.093465][ T6494] [ 1053.096522][ T6494] Modules linked in: [ 1053.101900][ T6494] ---[ end trace 0000000000000000 ]--- [ 1053.122915][ T6494] RIP: 0010:memcpy_sglist+0x420/0x730 [ 1053.128415][ T6494] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 1053.156276][ T6494] RSP: 0018:ffffc900035f7698 EFLAGS: 00010202 [ 1053.167910][ T6504] nbd: socks must be embedded in a SOCK_ITEM attr [ 1053.181599][ T6494] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 1053.210906][ T6494] RDX: ffffc9000fe5a000 RSI: 000000000000023b RDI: 000000000000023c [ 1053.249469][ T6494] RBP: dffffc0000000000 R08: 8b9d9113ba6e4fef R09: 00002ecee0ef378b [ 1053.258490][ T6494] R10: dffffc0000000000 R11: ffffed100d50ec9a R12: 0000000000000009 [ 1053.267562][ T6494] R13: ffff88807a207400 R14: ffff888035a720a0 R15: 0000000000000008 [ 1053.276092][ T6494] FS: 00007f970f3ee6c0(0000) GS:ffff888125447000(0000) knlGS:0000000000000000 [ 1053.286920][ T6494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1053.294023][ T6494] CR2: 00007f970e5e9f00 CR3: 0000000079ece000 CR4: 00000000003526f0 [ 1053.302134][ T6494] Kernel panic - not syncing: Fatal exception [ 1053.308979][ T6494] Kernel Offset: disabled [ 1053.313660][ T6494] Rebooting in 86400 seconds..