last executing test programs: 6.99976513s ago: executing program 1 (id=1510): syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1f, 0x0, [{0x7, 0x6, "954d2dd4"}, {0x2, 0x11, "ad4cfc6d0c114a69c613f8d51edcd6"}, {0x2, 0x2}]}]}}}}}}}, 0x0) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 6.758119953s ago: executing program 1 (id=1514): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x14044004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) 4.523769275s ago: executing program 2 (id=1527): unshare(0x22020600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x1, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/56, 0x38}, {0x0}], 0x2}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYBLOB="bd49f0df65c60f12a7bebfb8fb1623ad89d607e1a8e2cc"], 0x48}}, 0x20000000) read(r2, &(0x7f0000000240)=""/193, 0xc1) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000088000000", @ANYRES32, @ANYBLOB="0100000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000340)={@local, @remote, 0x0}, &(0x7f0000000380)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0x5, 0x1000, 0xae}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000c000000080000000700000040080100", @ANYRES32=r10, @ANYBLOB="0500000000000000000000000000c00000000000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="0400000000000000010000000f00"/24, @ANYRES32=r10, @ANYBLOB], 0x50) unshare(0x28000600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r11, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r12, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r13, 0x0) 4.479658621s ago: executing program 1 (id=1528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x49ba}, [@exit]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0xce, &(0x7f0000003e40)=""/206, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) close(0x3) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000880)={0x7, &(0x7f0000000440)=[{}, {}, {}, {}, {@fixed}, {}, {@fixed}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002140)={@map, 0xffffffffffffffff, 0x1, 0x2014}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000040)=0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000200), 0x4) (async) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x1, 0xe}, 0x8) (async, rerun: 32) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) unshare(0x2c020400) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f00000002c0)=0x0) (async, rerun: 64) r11 = getgid() sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="07808364b498be904899761378bf71c953e67e543013611045809c5669e33d2ef658be045415da606a8c83d3cae73b5734a0241b315d8ace7e7a91818371a1b14123c31635d27ad8d04b71a59a8a4f238c60b94e6d36aad18afd7fb4839b2d81ae3596d96357468e97a24353e72da5016c7aef5f9b8f3dc5a306a6686c0e7a46ced8d86a74bfc4d1f588dea15e9fc58b06ddef8d6f69a49f0e0fb337021062527aa950eea3d040dedfdb0975c524501ceeb7bf9b8deff2c0d45391", 0xbb}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}], 0x60, 0x40040}, 0x408a0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xe}, {0xfffc, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffffd}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x4004840) 4.37945495s ago: executing program 4 (id=1529): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x70bd29, 0x25dfdbde, {0x0, 0x0, 0x74, 0x0, 0xdc05, 0x75007}}, 0x20}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1], 0x0, 0x6f, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) listen(r5, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900"], 0x60}}, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e228801c98ea66df80f0dfd6e8fffe924c3cda05db102f693e079b8a57c2d2d9b64e97ebb3a541abac0eeb3b7d76d1d637acf81139593dc64272011cf4ee2dd1891c385377cc6fb20ee5b6560c8a4d21255442d23c2761731b708b35468359e9eca8ccc129c99ab1b87d1eeb79858679a0c116da8abb396407e842cf912f79f2900ec2d0b02468cc7daa846e4cf04bf07eb3502e0ee28578d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) socket$unix(0x1, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x8, 0xf) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014000400"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="00032cbd7000fedbdf25200000000c009900ab0b000032000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 4.308358021s ago: executing program 1 (id=1531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0xaeaf9ec181b6dfc9, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x18, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x24048045}, 0x4004) 4.270715469s ago: executing program 4 (id=1533): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) (async) unshare(0x28000600) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x1, 0x0, 0x5d) (async) r4 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) r5 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$inet6(0xa, 0x1, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffd, 0x400}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0xfffffffffffffffc, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x800, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) (async) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25010000000c0008000002000000000000580007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="3f8d5da709f3d6541454555e653edb872baee251c2c6158a1398211e1389fab78c3edf7379cf10e46f63c9761cfc3d8aaf4d1378b48a8d47dd3ee39073779f8e4a53d1abff733c5483dcf7a8795e6f1627be4e4fbb320efdb07b4910fb8920f48215ed87af0ae4532a9275c4fef5a21bd8d5364cc26304f85a5f35c5dba8ccbfbfe86cb97224a9618c", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0001800800023279e9b526aa2dec1ae5c88265ecd0604697dd7ec349adf016c0373cb43206742b8dee17d1c8da37fb21e88168f7192a36f465fb1a8601fa3df30577eec60d046a127aeab2b6f6a151886885a7c1017e1191", @ANYRES32, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x20044001}, 0x11) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) 4.128587872s ago: executing program 1 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x11, 0x3, 'fo\x00', 0x8, 0x4, 0x71}, 0x2c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "0813f3", 0x9, 0xff, 0x0, @mcast1, @mcast2, [@fragment={0x84, 0x0, 0xc, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0xc796, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001380)=@newqdisc={0x298, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x268, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x81}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0xfffffff7}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}]}}]}, 0x298}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000006200)=""/141, &(0x7f0000000100)=0x8d) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x6, @loopback, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0x81, 0x32}, {@rand_addr=0x64010101, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5d}}, 0x44) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa030102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket(0x10, 0x803, 0x0) 4.126937817s ago: executing program 4 (id=1536): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2={0x1f, 0x24d6, @any, 0xa, 0x2}, @qipcrtr={0x2a, 0x1, 0x4001}, @ethernet={0x6, @multicast}, 0x2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='syzkaller0\x00', 0xffffffffffffffff, 0x1, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a0001063bbd7000fbdbdf250a0000000000000408000a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="24afedab4e1946ff7eec105fc72f24919d1efd21976b35714eb47f8006c5529f9467ca24a94343c6fc3d8171df987b6e24cc3b16a82dfeee229b3f5c0409dee907e4cc2d08e97a010000007a5f6a757fe29065fe23"], 0x28}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x34, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xa}, {}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x40c4040) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) 3.904717141s ago: executing program 4 (id=1539): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xff80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet(0xa, 0x801, 0x84) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r1, 0x8) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xa4, 0x8, &(0x7f0000000740)="c7f65c98fc86a3ee51708907cfcbbd3485a84308730f4cdbc859cedf2b53cf6bb7e2f370eb80df1e6402615472d78c6f6806c3f0f393e3212df17b5ee515c569002e18bfebe82f192d10ac258a617ef2c231870135c7d95fcb1554c47375d133117323480e454f454ffd1c4ffa647e3cd0ba77b93564b60b633fcbb407db62920d1674e61c74f0111bff8864f977cf9aa25885473c12911a25979da264b649908c4cf2f5", &(0x7f0000000240)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = accept4(r1, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="ea", 0x1) (async) sendmmsg$alg(r6, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x400000, 0x0) (rerun: 64) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f0000000180)=0x3) (async) close(r6) (async) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000380), 0x4) (async) r8 = socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x3ff, 0x2c, 0x60}) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x4c, 0x0, 0xcdba51bfeb375f7a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) (async) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000002c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}, 0x42090) 3.834415623s ago: executing program 1 (id=1540): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 3.727156422s ago: executing program 4 (id=1541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc0100000000000000000000000000010000000032"], 0x23c}}, 0x0) 3.492146697s ago: executing program 2 (id=1542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x14, 0x0, 0x70bd2a, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x26e6bbb, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x40, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x3}}, @sadb_address={0x5, 0x6, 0xff, 0xa1ca2524ed8fb647, 0x0, @in6={0xa, 0x4e24, 0x0, @empty}}]}, 0xa0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa1eaaaaaaaaaaaa89142627c490ef4c8304bb0930b2fa766fa56a8136a9a3e3105341e889ae4fab2567382ed17f0d107f36ebba27a0bf"], &(0x7f0000000200)={0x1, 0x2, [0x77a, 0x53, 0x9c1, 0x204]}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x5, 0xb}, {0x4, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x46, 0xfffffff8, 0x6, 0x78d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.485602799s ago: executing program 4 (id=1543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000, 0x4}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500"], 0x48}], 0x1, 0x40) r3 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r3, 0x61d9, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 64) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c13aa48a000063180300309cb4105a0001006970366772657461700000002700028008000100", @ANYRES32=0x0, @ANYBLOB="08000c000600000005000b0005000000"], 0x50}, 0x1, 0x0, 0x0, 0x34008805}, 0x20008090) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200ed6366f45fa5fffa3f3559744b25b714555b37146dcf68bc9fd23a9457af3924c877a115e99f1c0b3e9156f04be83425477664052a20aded3d4b267c839fb07371cb44438f4102f3395c5f75f6c1cfccf0dbc1ad6ec3bd01dd1598ffddda660345f514a977d9edca6ad8fd31e861dbb8ee88b9f65a5bf2f1d3c89d31264ac41951cfdae639b05198a49ec8ab5a39438c476074d9c54b3dccbf3dbfafd58ec5e15be58aaa930e3f02eae29bde96bb3f3e3be75f4ade97246e6f32fd8b6a57142", @ANYRES32=r1], 0x25c}}, 0x40010) 3.459395611s ago: executing program 0 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x40000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffbff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) 3.28582728s ago: executing program 0 (id=1546): r0 = socket$inet(0x2, 0x80001, 0x81) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='ext4_prefetch_bitmaps\x00', r2, 0x0, 0x80000001}, 0x18) bind$ax25(r3, &(0x7f0000000380)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0xef54, 0xf2, [0x687, 0x4, 0x0, 0x5, 0x0, 0x380000], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000001c0)=""/242}, &(0x7f0000000140)=0x78) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @remote}, 0x10) 3.282766946s ago: executing program 2 (id=1547): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002c00)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0xfffffffd, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)=ANY=[@ANYBLOB="01c1ac49d10baaaaaaaaaabb86dd6012000800783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406"], 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000004c0)={0x2, 0x0, 0x1d}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4d, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.012062386s ago: executing program 2 (id=1549): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028040480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a0000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080001400000000408006182000000000140000000050b00070066696c7465720000140000001100010000000000000000000500000a"], 0xe8}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2], 0x98}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYBLOB="8001000004420785fc001b00ff0300000d002200fbaf01699113f76cdd000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0xc000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) write$tcp_congestion(r7, &(0x7f0000000680)='dctcp\x00', 0x6) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f00000009c0)={0x8, {{0x2, 0x4ea2, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f00000003c0)={0xb, {{0x2, 0x4e60, @multicast2}}, {{0x2, 0x4f24, @local}}}, 0x108) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="4569e2f51aeeaa0f40f47f76", @ANYRES64=r7], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000180)='reno\x00', 0x5) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x7, 0x7, 0x4, 0x2, 0x8, 0x9, 0x6, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x4fe2, 0x0, 0x40, 0x400, 0x8}}, &(0x7f0000000440)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000640)={0x0, 0xd472}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000000000020000008500000055000000850000003b0000809500"], &(0x7f0000000200)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x6, '\x00', r5}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r11, @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r10, 0x25, 0x0, @void}, 0x10) 2.995534001s ago: executing program 0 (id=1550): r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 2.831037028s ago: executing program 0 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 2.639948988s ago: executing program 0 (id=1552): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000002000000000000080012000007a18208"], 0x50}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000aa3e76c015000000000040000008000000c31030000100000095000000000000005bcf09e5117806a4976a84102e9565c5127944f240c9cfe59f66aad648ba5bd49c4f8f298fddf0ef8da8de249eb3696e05cc71db890a305e823053d1006563"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) syz_emit_ethernet(0xca, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfa3, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfb1) write$cgroup_pid(r2, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 1.985119715s ago: executing program 3 (id=1553): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000002000000000000080012000007a18208"], 0x50}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000aa3e76c015000000000040000008000000c31030000100000095000000000000005bcf09e5117806a4976a84102e9565c5127944f240c9cfe59f66aad648ba5bd49c4f8f298fddf0ef8da8de249eb3696e05cc71db890a305e823053d1006563"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) syz_emit_ethernet(0xca, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfa3, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb21082692"}}}}, 0xfb1) write$cgroup_pid(r2, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 1.796695553s ago: executing program 0 (id=1554): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="6114"], 0xa8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706018557683e00000000e6ff000004050001000600000078d141976ee3774435c1b49e82cba225eaa7b69d7b790a794cdaece8cf67f6e80814ef11e430723980fa305779"], 0x1c}}, 0x0) read(r3, &(0x7f00000000c0)=""/81, 0x51) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x1410, 0x4, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$inet_tcp_int(r0, 0x29, 0x8, 0x0, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000100), 0x4) close(0x4) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) unshare(0x6a040000) getsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x61d9, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) 1.010596417s ago: executing program 3 (id=1555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.controllers\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x0, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3, 0x0, 0xffffffff}]}]}, 0xfc}}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$batadv(0x0, r9) (async) r13 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYRES8, @ANYRES32=r12, @ANYRES32, @ANYRESDEC=r11, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f0700ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced01003a7467ebbd65d8ed850aa50c621b2b5c4cd4a6a4a131026e78f96f02072b14230ab9c2c7faed", @ANYRES32=r13, @ANYBLOB="118df6865b9bdab353b75cf91abf8168f20ded04e4ee7f9b83fee105c8859c7d3234ce5cb6b2cb56de5c2c127b80c13b0cb924871302559b06efffa9b607c5ad8c1b405e4ca370e29fa626979402a5fc7dcc164c1e44fdf1a72fd0a72b070763cb2fb27dad46aac7bf619be45490d0ea5bd463e07e3c6902888fe1fdb643b87c420661f2aad2d09d31132642a7677e4184475dd9022fd01cf57e1925892e6eb759de525016f921f66c0b510c622fb062ead49801afb70ba2fe695f5503e832f0c323"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@getpolicy={0x70, 0x15, 0x100, 0x70bd25, 0x25dfdbfd, {{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x0, 0x4e24, 0x2, 0xa, 0x20, 0x80, 0x29, r7, r13}, 0x6e6bba, 0x3}, [@replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2d, 0x4}}, @proto={0x5, 0x19, 0x3c}, @XFRMA_SET_MARK={0x8, 0x1d, 0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 688.460381ms ago: executing program 3 (id=1556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01010a00ff02000000000000000000000000000186dd"], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x44050) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x4040) socket(0x1, 0x4, 0x43) recvmmsg(r1, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000280)=""/22, 0x16}], 0x7, &(0x7f0000001780)=""/236, 0xec}, 0x81}, {{&(0x7f0000001880)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/170, 0xaa}, {&(0x7f00000029c0)=""/202, 0xca}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000000680)=""/25, 0x19}, {&(0x7f0000002ac0)=""/32, 0x20}, {&(0x7f0000002b00)}], 0x7, &(0x7f0000002bc0)=""/115, 0x73}, 0x5}, {{&(0x7f0000002c40)=@qipcrtr, 0x80, &(0x7f0000004180)=[{&(0x7f0000002cc0)=""/111, 0x6f}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/187, 0xbb}, {&(0x7f0000003e00)=""/240, 0xf0}, {&(0x7f0000003f00)}, {&(0x7f0000003f40)=""/136, 0x88}, {&(0x7f0000004000)=""/213, 0xd5}, {&(0x7f0000004100)=""/66, 0x42}], 0x8}, 0xe62}, {{&(0x7f0000004200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004280)=""/111, 0x6f}, {&(0x7f0000004300)=""/128, 0x80}, {&(0x7f0000004380)=""/218, 0xda}], 0x3, &(0x7f00000044c0)=""/232, 0xe8}, 0x1000}, {{&(0x7f00000066c0)=@nfc_llcp, 0x80, &(0x7f0000004740)=[{&(0x7f0000004640)=""/17, 0x19}, {&(0x7f0000004680)=""/140, 0x8c}], 0x2, &(0x7f0000004780)=""/11, 0xb}, 0x4067}, {{&(0x7f00000047c0)=@nfc, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004840)=""/182, 0xb6}, {&(0x7f0000004900)=""/94, 0x5e}, {&(0x7f0000004980)=""/209, 0xd1}], 0x3, &(0x7f0000004ac0)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000005ac0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005b40)=""/222, 0xde}, {&(0x7f0000005c40)=""/103, 0x67}, {&(0x7f0000005cc0)=""/147, 0x93}, {&(0x7f0000005d80)=""/123, 0x7b}, {&(0x7f0000005e00)=""/183, 0xffffffffffffffaa}, {&(0x7f0000005ec0)=""/76, 0x4c}, {&(0x7f0000005f40)=""/40, 0x28}], 0x7, &(0x7f0000006000)=""/248, 0xf8}, 0x101}, {{&(0x7f0000006100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000006200)=[{&(0x7f0000006180)=""/100, 0x64}], 0x1, &(0x7f0000006240)=""/2, 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000006280)=""/179, 0xb3}], 0x1, &(0x7f0000006380)=""/164, 0xa4}, 0x1000}], 0x9, 0x10002, &(0x7f0000006680)={0x77359400}) 369.560718ms ago: executing program 2 (id=1557): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x866, 0x10, 0x3, 0x5}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000140)={0x2, 0x1, @multicast2}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0x7}, &(0x7f00000001c0)=0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x35c2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010084}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r3, 0x1, 0x1}, &(0x7f00000003c0)=0xc) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000540)={@in6={0xa, 0x4e24, 0x4, @mcast2, 0x19c2}, {&(0x7f0000000400)=""/224, 0xe0}, &(0x7f0000000500), 0x8}, 0xa0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000700)={r5, 0x8}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000780)={r7, 0x4, 0xaaac, 0x2, 0x10000, 0x5}, 0x14) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000007c0)={'ip6gre0\x00', {0x2, 0x0, @private}}) shutdown(0xffffffffffffffff, 0x1) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfa, 0x20000080, &(0x7f0000000900)={0xa, 0x4e20, 0x2, @local}, 0x1c) r8 = socket(0x3, 0x80000, 0x9) sendmsg$nl_crypto(r8, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)=@get={0x100, 0x13, 0xc80, 0x70bd2d, 0x25dfdbfc, {{'tgr160\x00'}, '\x00', '\x00', 0x2400}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x11}, 0x4040000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x44) setsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000cc0)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000d00)={r0, 0x9, 0xfffffffffffffffe, 0x6}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000d80)={0x4, &(0x7f0000000d40)=[{0x6, 0xa, 0x1, 0x5}, {0x3, 0x2, 0x7, 0x2}, {0x10, 0xe, 0x0, 0x6}, {0x3, 0x4, 0xf, 0x5}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000dc0)={0x1, [0x0]}, &(0x7f0000000e00)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, r12, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_MAC={0xa, 0x6, @random="af0399757977"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000) 344.542993ms ago: executing program 3 (id=1558): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) (async) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) (async) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70, 0x49}, {&(0x7f00000006c0)=""/179, 0xfffffffffffffe84}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet(r0, &(0x7f0000000040)="cfa8c3dd07a027466d42efff8c34d0c2417a6b33628ff4efc2b927e23075b8df108b2d1fb89a9a3a91ffd1c14a3792260b33", 0x32, 0x2000c091, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) (async) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010300000000000000000000000005000300060000ff14000480070005"], 0x30}}, 0x0) 120.825756ms ago: executing program 2 (id=1559): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x72}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x6a040000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x72}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 120.328346ms ago: executing program 3 (id=1560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r2, @ANYBLOB="1000a204080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884809"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 0s ago: executing program 3 (id=1561): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe00, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x2, 0x83, 0xd2, 0x80000001, 0x1}) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x2, 0x83, 0xd2, 0x80000001, 0x1}) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) (async) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x14) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x100, 0x11, 0x0, 0x1, [@nested={0xfb, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a8"]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x100, 0x11, 0x0, 0x1, [@nested={0xfb, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a8"]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x84}, 0x300) kernel console output (not intermixed with test programs): tdevsim2 netdevsim3: renamed from eth3 [ 93.859568][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.874677][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.888494][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.912701][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.995757][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.007286][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.037455][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.051734][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.148687][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.161141][ T5839] Bluetooth: hci1: command tx timeout [ 94.161160][ T52] Bluetooth: hci0: command tx timeout [ 94.161198][ T52] Bluetooth: hci3: command tx timeout [ 94.166584][ T5839] Bluetooth: hci4: command tx timeout [ 94.203017][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.215654][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.226376][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.233541][ T5839] Bluetooth: hci2: command tx timeout [ 94.297650][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.369170][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.411259][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.418241][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.430827][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.441553][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.482383][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.504709][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.512119][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.543969][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.551178][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.572390][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.611501][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.621517][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.628771][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.684442][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.691676][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.758343][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.772226][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.813306][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.820515][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.836808][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.844006][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.914771][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.976963][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.984182][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.029422][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.036707][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.164547][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.242101][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.297138][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.304383][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.337089][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.344349][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.396902][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.417621][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.646897][ T5836] veth0_vlan: entered promiscuous mode [ 95.687226][ T5836] veth1_vlan: entered promiscuous mode [ 95.702037][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.711239][ T5838] veth0_vlan: entered promiscuous mode [ 95.777471][ T5838] veth1_vlan: entered promiscuous mode [ 95.846598][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.888185][ T5836] veth0_macvtap: entered promiscuous mode [ 95.902449][ T5836] veth1_macvtap: entered promiscuous mode [ 95.945090][ T5838] veth0_macvtap: entered promiscuous mode [ 95.958248][ T5838] veth1_macvtap: entered promiscuous mode [ 95.977060][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.014492][ T5829] veth0_vlan: entered promiscuous mode [ 96.047398][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.063729][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.073461][ T5829] veth1_vlan: entered promiscuous mode [ 96.099533][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.115717][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.138968][ T5828] veth0_vlan: entered promiscuous mode [ 96.184454][ T1340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.195600][ T1340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.220078][ T1340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.232749][ T5839] Bluetooth: hci4: command tx timeout [ 96.234419][ T52] Bluetooth: hci3: command tx timeout [ 96.238268][ T5839] Bluetooth: hci1: command tx timeout [ 96.243777][ T5148] Bluetooth: hci0: command tx timeout [ 96.259329][ T1340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.269410][ T1340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.287050][ T5829] veth0_macvtap: entered promiscuous mode [ 96.297279][ T5828] veth1_vlan: entered promiscuous mode [ 96.312675][ T52] Bluetooth: hci2: command tx timeout [ 96.324776][ T1340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.334159][ T1340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.346438][ T5829] veth1_macvtap: entered promiscuous mode [ 96.379089][ T1340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.451292][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.518669][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.527449][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.542480][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.578855][ T1340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.592705][ T5828] veth0_macvtap: entered promiscuous mode [ 96.612939][ T5828] veth1_macvtap: entered promiscuous mode [ 96.639062][ T1340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.659955][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.673501][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.681288][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.681577][ T1340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.689125][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.709406][ T1340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.793552][ T5827] veth0_vlan: entered promiscuous mode [ 96.802394][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.817383][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.820915][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.845849][ T5827] veth1_vlan: entered promiscuous mode [ 96.851428][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.878043][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.946633][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.958493][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.975329][ T2988] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.027840][ T2988] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.047327][ T2988] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.117779][ T2988] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.139352][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.149396][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.230982][ T5959] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 97.273766][ T984] cfg80211: failed to load regulatory.db [ 97.418152][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.654232][ T5827] veth0_macvtap: entered promiscuous mode [ 97.697973][ T5960] netlink: 'syz.2.3': attribute type 12 has an invalid length. [ 97.728300][ T5827] veth1_macvtap: entered promiscuous mode [ 97.902617][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.916297][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.925598][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.973304][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.119276][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.134124][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.146989][ T5966] xfrm0: entered promiscuous mode [ 98.154906][ T5966] xfrm0: entered allmulticast mode [ 98.184842][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 98.237750][ T5964] bond1: option lacp_rate: invalid value (255) [ 98.255042][ T5964] bond1 (unregistering): Released all slaves [ 98.285214][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.295689][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.310658][ T52] Bluetooth: hci1: command tx timeout [ 98.316123][ T52] Bluetooth: hci4: command tx timeout [ 98.321858][ T5148] Bluetooth: hci3: command tx timeout [ 98.327308][ T5148] Bluetooth: hci0: command tx timeout [ 98.340999][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.364019][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.390567][ T5148] Bluetooth: hci2: command tx timeout [ 98.738065][ T5978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.773592][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.797233][ T5980] warning: `syz.3.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.807162][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.900932][ T5984] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 98.908527][ T5984] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 98.920205][ T5984] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.007961][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.025891][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.063689][ T5986] block nbd0: server does not support multiple connections per device. [ 99.113247][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.145126][ T5986] block nbd0: shutting down sockets [ 99.210889][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.586996][ T5995] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5'. [ 100.666791][ T6042] Zero length message leads to an empty skb [ 100.676227][ T6030] ipvlan1: entered promiscuous mode [ 100.878351][ T6028] ipvlan1: left promiscuous mode [ 103.005120][ T6108] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 103.106673][ T6113] erspan0: entered allmulticast mode [ 103.171411][ T6108] 8021q: VLANs not supported on vxcan0 [ 103.354284][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 103.781646][ T6145] bond1: option all_slaves_active: invalid value (128) [ 103.792250][ T6145] bond1 (unregistering): Released all slaves [ 103.923002][ T6155] netlink: 'syz.3.44': attribute type 9 has an invalid length. [ 104.086479][ T6158] netlink: 'syz.0.47': attribute type 15 has an invalid length. [ 104.228784][ T6162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.277727][ T6162] netlink: 'syz.4.48': attribute type 8 has an invalid length. [ 104.291609][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 108.256389][ T6189] unsupported nla_type 52263 [ 108.491552][ T6196] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.781942][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 108.811988][ T6212] netlink: 'syz.4.58': attribute type 2 has an invalid length. [ 108.847044][ T6212] netlink: 244 bytes leftover after parsing attributes in process `syz.4.58'. [ 109.034452][ T5834] IPVS: starting estimator thread 0... [ 109.150267][ T6224] IPVS: using max 26 ests per chain, 62400 per kthread [ 109.829537][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 110.262550][ T6276] netlink: 260 bytes leftover after parsing attributes in process `syz.3.75'. [ 110.551541][ T6286] IPv6: addrconf: prefix option has invalid lifetime [ 110.756741][ T6293] bond1: option lacp_rate: invalid value (255) [ 110.795866][ T6293] bond1 (unregistering): Released all slaves [ 111.921834][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 112.212752][ T6359] netlink: 72 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.343663][ T6368] netlink: 72 bytes leftover after parsing attributes in process `syz.3.100'. [ 112.552257][ T6376] tipc: Started in network mode [ 112.557208][ T6376] tipc: Node identity caa55fb39cda, cluster identity 4711 [ 112.566899][ T6381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.107'. [ 112.579617][ T6381] netlink: 260 bytes leftover after parsing attributes in process `syz.0.107'. [ 112.594530][ T6376] tipc: Enabled bearer , priority 0 [ 112.628008][ T6377] bond_slave_1: entered promiscuous mode [ 112.691361][ T6377] bond_slave_1: entered allmulticast mode [ 112.781310][ T6382] tipc: Disabling bearer [ 113.005324][ T6398] syzkaller0: entered promiscuous mode [ 113.051651][ T6398] syzkaller0: entered allmulticast mode [ 113.373845][ T6419] veth0: entered promiscuous mode [ 113.382966][ T6419] veth0: entered allmulticast mode [ 113.462521][ T6421] netlink: 'syz.1.115': attribute type 8 has an invalid length. [ 113.480122][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 113.554966][ T6421] bond0: entered promiscuous mode [ 113.572158][ T6421] bond_slave_0: entered promiscuous mode [ 113.606747][ T6421] geneve0: entered promiscuous mode [ 113.627951][ T6421] team_slave_0: entered promiscuous mode [ 113.634716][ T6421] team_slave_0: left promiscuous mode [ 113.648211][ T6421] bond0: left promiscuous mode [ 113.653841][ T6421] bond_slave_0: left promiscuous mode [ 113.688656][ T6421] geneve0: left promiscuous mode [ 113.756269][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 114.185017][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 114.232015][ T6455] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.339791][ T6461] netlink: 92 bytes leftover after parsing attributes in process `syz.3.124'. [ 114.351962][ T6448] bond1: entered promiscuous mode [ 114.357186][ T6448] bond1: entered allmulticast mode [ 114.572560][ T6470] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.619555][ T6471] netlink: 'syz.2.127': attribute type 13 has an invalid length. [ 114.796023][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.804488][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.218264][ T6471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.237140][ T6471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.457819][ T6505] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 115.475851][ T6505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.133'. [ 115.491425][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 115.547612][ T1166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.561162][ T2954] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.660065][ T6505] team0: Port device geneve0 added [ 115.737465][ T6510] xt_TCPMSS: Only works on TCP SYN packets [ 115.746441][ T2954] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.805112][ T6511] wg1 speed is unknown, defaulting to 1000 [ 115.817471][ T6514] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 115.885515][ T6516] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20002 [ 115.927289][ T2954] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.941632][ T6511] wg1 speed is unknown, defaulting to 1000 [ 115.951097][ T6516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.971593][ T6516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.986095][ T6511] wg1 speed is unknown, defaulting to 1000 [ 116.015239][ T6511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.079308][ T6511] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 116.207130][ T6511] wg1 speed is unknown, defaulting to 1000 [ 116.229730][ T6511] wg1 speed is unknown, defaulting to 1000 [ 116.243253][ T6511] wg1 speed is unknown, defaulting to 1000 [ 116.283350][ T6511] wg1 speed is unknown, defaulting to 1000 [ 116.316258][ T6511] wg1 speed is unknown, defaulting to 1000 [ 116.350087][ T6530] netlink: 116 bytes leftover after parsing attributes in process `syz.2.144'. [ 116.742971][ T6549] veth0: entered promiscuous mode [ 117.016241][ T6549] veth0: left promiscuous mode [ 117.056627][ T6559] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.063168][ T6558] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.317275][ T6572] netlink: 'syz.2.156': attribute type 8 has an invalid length. [ 117.450103][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 117.487297][ T6572] wg1 speed is unknown, defaulting to 1000 [ 117.509135][ T6574] tipc: Started in network mode [ 117.545594][ T6574] tipc: Node identity 4, cluster identity 4711 [ 117.566641][ T6574] tipc: Node number set to 4 [ 117.611317][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 117.775622][ T6570] wg1 speed is unknown, defaulting to 1000 [ 117.860175][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 117.939674][ T6588] veth1_macvtap: left promiscuous mode [ 118.801968][ T6623] netlink: 'syz.4.170': attribute type 15 has an invalid length. [ 118.851121][ T6622] netlink: 'syz.4.170': attribute type 15 has an invalid length. [ 119.076385][ T6637] wg1 speed is unknown, defaulting to 1000 [ 119.841665][ T6650] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 119.915893][ T6650] netlink: 224 bytes leftover after parsing attributes in process `syz.2.177'. [ 119.942589][ T6667] netlink: 392 bytes leftover after parsing attributes in process `syz.1.180'. [ 120.007405][ T6657] wg1 speed is unknown, defaulting to 1000 [ 120.312554][ T6632] tipc: Started in network mode [ 120.318513][ T6632] tipc: Node identity 424b35a4c03d, cluster identity 4711 [ 120.328164][ T6632] tipc: Enabled bearer , priority 0 [ 120.335768][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 120.667975][ T6630] tipc: Disabling bearer [ 120.782307][ T6684] bond1: option arp_validate: invalid value (18446744073491447809) [ 120.806455][ T6684] bond1 (unregistering): Released all slaves [ 120.982358][ T6698] wg1 speed is unknown, defaulting to 1000 [ 121.036907][ T6702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.186'. [ 121.237625][ T6711] netlink: 212 bytes leftover after parsing attributes in process `syz.3.187'. [ 121.548413][ T6702] wg1 speed is unknown, defaulting to 1000 [ 122.358298][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 122.358824][ T6745] wg1 speed is unknown, defaulting to 1000 [ 122.494790][ T6747] bond1: option lacp_rate: invalid value (255) [ 122.537089][ T6747] bond1 (unregistering): Released all slaves [ 123.167730][ T6781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.200'. [ 123.226458][ T6781] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 123.572774][ T6781] team0: Device veth1_macvtap failed to register rx_handler [ 123.700400][ T6799] netlink: 'syz.2.204': attribute type 2 has an invalid length. [ 123.874059][ T6799] : entered promiscuous mode [ 123.891224][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 124.086177][ T6785] wg1 speed is unknown, defaulting to 1000 [ 124.127089][ T6788] wg1 speed is unknown, defaulting to 1000 [ 124.180402][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.207'. [ 124.464383][ T6825] wg1 speed is unknown, defaulting to 1000 [ 125.680002][ T6836] wg1 speed is unknown, defaulting to 1000 [ 126.132136][ T6860] netlink: 3 bytes leftover after parsing attributes in process `syz.3.218'. [ 126.393175][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 126.603679][ T6871] openvswitch: netlink: IP tunnel dst address not specified [ 126.705662][ T6875] batadv1: entered promiscuous mode [ 127.586210][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 127.891668][ T6918] netlink: 'syz.3.230': attribute type 2 has an invalid length. [ 128.485636][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 128.494729][ T6940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.233'. [ 128.525276][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 128.551152][ T6940] netlink: 2 bytes leftover after parsing attributes in process `syz.2.233'. [ 128.582479][ T6940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.233'. [ 128.604564][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 128.620017][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.233'. [ 129.189134][ T6960] wg1 speed is unknown, defaulting to 1000 [ 130.294459][ T7006] netlink: 'syz.2.240': attribute type 2 has an invalid length. [ 130.298125][ T7004] netlink: 'syz.4.241': attribute type 13 has an invalid length. [ 130.402774][ T7004] netlink: 'syz.4.241': attribute type 13 has an invalid length. [ 130.420862][ T7003] wg1 speed is unknown, defaulting to 1000 [ 130.426801][ T73] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.446622][ T73] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.474115][ T73] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.504359][ T73] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.994260][ T7026] syzkaller1: entered promiscuous mode [ 131.001712][ T7026] syzkaller1: entered allmulticast mode [ 131.009607][ T7042] netlink: 'syz.3.250': attribute type 12 has an invalid length. [ 131.133853][ T7041] tipc: Enabled bearer , priority 0 [ 131.148201][ T7041] syzkaller0: entered promiscuous mode [ 131.157664][ T7041] syzkaller0: entered allmulticast mode [ 131.226882][ T7049] netlink: 'syz.4.244': attribute type 10 has an invalid length. [ 131.291821][ T7049] tipc: Resetting bearer [ 131.362915][ T7056] __nla_validate_parse: 7 callbacks suppressed [ 131.362935][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 131.407868][ T7038] tipc: Resetting bearer [ 131.466962][ T7038] tipc: Disabling bearer [ 131.595396][ T7062] wg1 speed is unknown, defaulting to 1000 [ 131.625400][ T7063] netlink: 48 bytes leftover after parsing attributes in process `syz.1.253'. [ 131.657189][ T7066] netlink: 'syz.4.255': attribute type 3 has an invalid length. [ 131.955050][ T7079] netlink: 52 bytes leftover after parsing attributes in process `syz.2.261'. [ 132.033899][ T7077] bond1: option lacp_rate: invalid value (255) [ 132.044508][ T7077] bond1 (unregistering): Released all slaves [ 132.314861][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 132.516480][ T7109] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.265'. [ 132.807378][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 132.828391][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 132.933510][ T7125] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 133.002895][ T7122] netlink: 68 bytes leftover after parsing attributes in process `syz.4.272'. [ 133.039625][ T7133] bond1: entered promiscuous mode [ 133.047278][ T7133] bond1: entered allmulticast mode [ 133.053859][ T7133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.682319][ T7151] syz.0.282 (7151) used obsolete PPPIOCDETACH ioctl [ 133.761477][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 134.126430][ T7178] netlink: 76 bytes leftover after parsing attributes in process `syz.1.289'. [ 134.296431][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.331300][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.383868][ T7180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.591932][ T7182] batadv1: entered promiscuous mode [ 134.666392][ T7199] ipt_REJECT: TCP_RESET invalid for non-tcp [ 134.678831][ T7198] netlink: 'syz.1.295': attribute type 25 has an invalid length. [ 134.765107][ T7199] macsec1: entered allmulticast mode [ 134.771289][ T7199] macsec0: entered allmulticast mode [ 134.777349][ T7199] veth1_macvtap: entered allmulticast mode [ 134.827075][ T7190] wg1 speed is unknown, defaulting to 1000 [ 135.180880][ T7207] bond2: entered promiscuous mode [ 135.196668][ T7207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.381801][ T7223] wg1 speed is unknown, defaulting to 1000 [ 136.283926][ T7251] tipc: Started in network mode [ 136.288854][ T7251] tipc: Node identity 4, cluster identity 4711 [ 136.305435][ T7251] tipc: Node number set to 4 [ 136.374181][ T7267] __nla_validate_parse: 27 callbacks suppressed [ 136.374199][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 136.387406][ T7269] netlink: 'syz.2.315': attribute type 23 has an invalid length. [ 136.862404][ T7303] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 137.141137][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 137.321313][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 137.574953][ T7343] netlink: 63 bytes leftover after parsing attributes in process `syz.0.333'. [ 137.655897][ T7329] syzkaller0: entered promiscuous mode [ 137.700126][ T7329] syzkaller0: entered allmulticast mode [ 137.819284][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.819284][ T7366] Use struct sctp_assoc_value instead [ 137.876306][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.876306][ T7366] Use struct sctp_assoc_value instead [ 137.897150][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.897150][ T7366] Use struct sctp_assoc_value instead [ 137.912345][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.912345][ T7366] Use struct sctp_assoc_value instead [ 137.927236][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.927236][ T7366] Use struct sctp_assoc_value instead [ 137.942314][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.942314][ T7366] Use struct sctp_assoc_value instead [ 137.957447][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.957447][ T7366] Use struct sctp_assoc_value instead [ 137.977737][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.977737][ T7366] Use struct sctp_assoc_value instead [ 137.993563][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 137.993563][ T7366] Use struct sctp_assoc_value instead [ 138.008709][ T7366] sctp: [Deprecated]: syz.2.337 (pid 7366) Use of int in max_burst socket option. [ 138.008709][ T7366] Use struct sctp_assoc_value instead [ 138.235338][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.243203][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.432104][ T7368] bond3: Removing last ns target with arp_interval on [ 138.480942][ T7377] bond2: option lacp_rate: invalid value (255) [ 138.492816][ T7377] bond2 (unregistering): Released all slaves [ 139.053479][ T7418] netlink: 104 bytes leftover after parsing attributes in process `syz.0.351'. [ 139.268950][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.317816][ T7417] bond0: (slave rose0): Enslaving as an active interface with an up link [ 139.343684][ T7425] tipc: New replicast peer: 255.255.255.255 [ 139.365766][ T7426] netlink: 64 bytes leftover after parsing attributes in process `syz.1.353'. [ 139.375853][ T7425] tipc: Enabled bearer , priority 10 [ 139.407319][ T7425] netlink: 'syz.2.352': attribute type 11 has an invalid length. [ 139.438891][ T7425] netlink: 'syz.2.352': attribute type 11 has an invalid length. [ 139.469526][ T7425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.352'. [ 139.717161][ T7434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.354'. [ 139.900662][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 139.920374][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 139.975686][ T7432] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 140.008484][ C1] Illegal XDP return value 16128 on prog (id 155) dev bond0, expect packet loss! [ 140.534640][ T7451] bridge_slave_1: left allmulticast mode [ 140.549114][ T7451] bridge_slave_1: left promiscuous mode [ 140.577014][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.618347][ T7451] bridge_slave_0: left allmulticast mode [ 140.624513][ T7451] bridge_slave_0: left promiscuous mode [ 140.634950][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.435232][ T7493] netlink: 'syz.4.367': attribute type 10 has an invalid length. [ 141.447315][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.456597][ T7493] bridge_slave_1: left allmulticast mode [ 141.466448][ T7493] bridge_slave_1: left promiscuous mode [ 141.473069][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.499167][ T7493] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 141.729725][ T5945] wg1 speed is unknown, defaulting to 1000 [ 141.736853][ T7502] tipc: Enabled bearer , priority 0 [ 141.737072][ T5902] wg1 speed is unknown, defaulting to 1000 [ 141.913121][ T7503] syzkaller0: entered promiscuous mode [ 141.918840][ T7503] syzkaller0: entered allmulticast mode [ 141.972992][ T7499] tipc: Resetting bearer [ 142.085849][ T7499] tipc: Disabling bearer [ 142.144452][ T7519] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 142.170745][ T7512] __nla_validate_parse: 6 callbacks suppressed [ 142.170763][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'. [ 142.201091][ T7510] wg1 speed is unknown, defaulting to 1000 [ 142.554696][ T7530] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 142.580739][ T7530] netlink: 228 bytes leftover after parsing attributes in process `syz.0.377'. [ 142.696582][ T7538] netlink: 44 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.767813][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.817985][ T7535] syzkaller0: entered promiscuous mode [ 142.824091][ T7535] syzkaller0: entered allmulticast mode [ 142.832271][ T7537] netlink: 'syz.2.379': attribute type 4 has an invalid length. [ 143.065553][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 143.113214][ T7547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.381'. [ 143.349109][ T7556] syzkaller0: entered promiscuous mode [ 143.381022][ T7556] syzkaller0: entered allmulticast mode [ 143.400264][ T7570] netlink: zone id is out of range [ 143.438876][ T7573] trusted_key: syz.3.389 sent an empty control message without MSG_MORE. [ 143.657083][ T7584] netlink: 'syz.1.392': attribute type 33 has an invalid length. [ 143.686146][ T7584] netlink: 152 bytes leftover after parsing attributes in process `syz.1.392'. [ 143.699427][ T7584] `: renamed from team0 (while UP) [ 143.905241][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 143.931446][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.396'. [ 144.008107][ T7588] bond4 (unregistering): Released all slaves [ 145.145119][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 145.358067][ T7617] netlink: 'syz.1.401': attribute type 5 has an invalid length. [ 145.617139][ T7620] pimreg: entered allmulticast mode [ 145.646328][ T7620] pimreg: left allmulticast mode [ 146.050963][ T7645] syzkaller0: entered promiscuous mode [ 146.056500][ T7645] syzkaller0: entered allmulticast mode [ 146.092256][ T7663] tipc: Enabling of bearer rejected, already enabled [ 146.306633][ T7679] netlink: 'syz.0.416': attribute type 3 has an invalid length. [ 146.324696][ T7679] delete_channel: no stack [ 146.467930][ T7685] tipc: Enabled bearer , priority 0 [ 146.485525][ T7685] tipc: Resetting bearer [ 146.506691][ T7681] tipc: Disabling bearer [ 147.348885][ T7731] __nla_validate_parse: 2 callbacks suppressed [ 147.348906][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'. [ 148.031142][ T7749] tipc: Enabled bearer , priority 0 [ 148.093137][ T7749] syzkaller0: entered promiscuous mode [ 148.124452][ T7749] syzkaller0: entered allmulticast mode [ 148.181508][ T7749] tipc: Resetting bearer [ 148.257359][ T7747] tipc: Resetting bearer [ 148.303097][ T7747] tipc: Disabling bearer [ 148.315720][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 148.328613][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 148.354577][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 148.406465][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.415624][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 148.427734][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.438984][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 148.451919][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.461263][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 148.480251][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.537134][ T7765] bond2: option primary_reselect: invalid value (6) [ 148.557149][ T7765] bond2 (unregistering): Released all slaves [ 148.853075][ T7778] bond2: option lacp_rate: invalid value (255) [ 148.867081][ T7778] bond2 (unregistering): Released all slaves [ 149.451529][ T7807] wg1 speed is unknown, defaulting to 1000 [ 149.737461][ T7818] netlink: 364 bytes leftover after parsing attributes in process `syz.2.455'. [ 149.898028][ T7815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.455'. [ 150.112980][ T7830] netlink: 277 bytes leftover after parsing attributes in process `syz.1.458'. [ 150.270251][ T7835] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 150.299988][ T7835] NCSI netlink: No device for ifindex 0 [ 150.342846][ T7842] .70·: renamed from hsr0 [ 150.372425][ T7842] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.398733][ T7842] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.426028][ T7842] .70·: entered allmulticast mode [ 150.435053][ T7842] hsr_slave_0: entered allmulticast mode [ 150.441250][ T7842] hsr_slave_1: entered allmulticast mode [ 150.449592][ T7842] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 150.481223][ T7849] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 150.541664][ T7849] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 150.987249][ T7867] vlan3: entered allmulticast mode [ 150.997086][ T7867] dummy0: entered allmulticast mode [ 151.134932][ T7873] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 151.231848][ T7875] pimreg: entered allmulticast mode [ 151.246764][ T7875] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.296402][ T7873] wg1 speed is unknown, defaulting to 1000 [ 151.329830][ T7875] wg1 speed is unknown, defaulting to 1000 [ 151.669671][ T7888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.425270][ T7905] netlink: 'syz.4.479': attribute type 1 has an invalid length. [ 152.450819][ T7905] __nla_validate_parse: 15 callbacks suppressed [ 152.450839][ T7905] netlink: 224 bytes leftover after parsing attributes in process `syz.4.479'. [ 153.646940][ T7900] syzkaller1: entered promiscuous mode [ 153.660612][ T7900] syzkaller1: entered allmulticast mode [ 153.823394][ T7915] netlink: 'syz.0.481': attribute type 3 has an invalid length. [ 153.907051][ T7917] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 153.959962][ T7920] x_tables: duplicate underflow at hook 1 [ 153.969682][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 154.035200][ T7919] erspan0: left allmulticast mode [ 154.076513][ T7919] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 154.293100][ T7936] --map-set only usable from mangle table [ 154.502282][ T5916] IPVS: starting estimator thread 0... [ 154.530829][ T7942] ip6gre1: entered allmulticast mode [ 154.590332][ T7950] IPVS: using max 26 ests per chain, 62400 per kthread [ 154.744321][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.497'. [ 154.789734][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 155.137176][ T7990] @ÿ: renamed from veth0_vlan (while UP) [ 155.245594][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 155.331210][ T7997] netlink: 'syz.2.506': attribute type 3 has an invalid length. [ 155.339084][ T7997] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 155.347151][ T7997] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.506'. [ 155.427935][ T7976] syz.1.496 (7976) used greatest stack depth: 17832 bytes left [ 155.448656][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 155.469682][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 155.734049][ T8003] macsec0: entered allmulticast mode [ 155.791056][ T8001] bond2 (unregistering): Released all slaves [ 155.821277][ T8002] veth1_macvtap: entered allmulticast mode [ 155.827987][ T8002] macsec0: left allmulticast mode [ 155.833682][ T8002] veth1_macvtap: left allmulticast mode [ 155.939814][ T8012] netlink: 'syz.1.510': attribute type 11 has an invalid length. [ 155.950893][ T8012] netlink: 224 bytes leftover after parsing attributes in process `syz.1.510'. [ 156.045968][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 156.078488][ T8021] syzkaller1: entered promiscuous mode [ 156.085040][ T8021] syzkaller1: entered allmulticast mode [ 156.127989][ T8016] netlink: 'syz.0.512': attribute type 4 has an invalid length. [ 156.957470][ T8062] tipc: Enabling of bearer rejected, failed to enable media [ 157.210591][ T5834] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.452472][ T8092] syzkaller0: entered promiscuous mode [ 157.459966][ T8092] syzkaller0: entered allmulticast mode [ 157.495320][ T8104] netlink: 'syz.0.534': attribute type 2 has an invalid length. [ 157.726816][ T8113] __nla_validate_parse: 4 callbacks suppressed [ 157.726838][ T8113] netlink: 48 bytes leftover after parsing attributes in process `syz.3.535'. [ 158.004078][ T5916] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 158.824294][ T8104] !: entered promiscuous mode [ 158.857400][ T8111] wg1: entered promiscuous mode [ 158.865252][ T8111] wg1: entered allmulticast mode [ 158.881600][ T30] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.167517][ T8144] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.543'. [ 159.278159][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 159.577466][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 159.634354][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 159.646091][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 159.675416][ T8173] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.554'. [ 159.703185][ T8173] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 159.733578][ T8179] Bluetooth: MGMT ver 1.23 [ 159.747776][ T8180] tipc: Enabling of bearer rejected, failed to enable media [ 159.837688][ T8177] bond4: option lacp_rate: invalid value (255) [ 159.882652][ T8177] bond4 (unregistering): Released all slaves [ 159.941955][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.951174][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.080846][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.416106][ T8204] wg1 speed is unknown, defaulting to 1000 [ 160.520927][ T8215] xfrm0: entered promiscuous mode [ 160.527648][ T8215] xfrm0: entered allmulticast mode [ 160.642656][ T8218] dvmrp0: entered allmulticast mode [ 160.649415][ T5834] IPVS: starting estimator thread 0... [ 160.686798][ T8218] netlink: 'syz.1.565': attribute type 10 has an invalid length. [ 160.721183][ T8224] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 160.750668][ T8225] IPVS: using max 26 ests per chain, 62400 per kthread [ 160.764373][ T8218] bond0: (slave wlan1): Opening slave failed [ 161.027744][ T8240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.343748][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 161.830618][ T5148] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 161.838469][ T5148] Bluetooth: hci2: command 0x0401 tx timeout [ 162.268850][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.578'. [ 162.580279][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 162.751069][ T8301] __nla_validate_parse: 2 callbacks suppressed [ 162.751089][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 162.770840][ T8299] bridge_slave_1: left allmulticast mode [ 162.776627][ T8299] bridge_slave_1: left promiscuous mode [ 162.791958][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.843042][ T8299] bridge_slave_0: left allmulticast mode [ 162.848753][ T8299] bridge_slave_0: left promiscuous mode [ 162.884028][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.167677][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.179165][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.206660][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.245749][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.256215][ T8318] wg1 speed is unknown, defaulting to 1000 [ 163.283998][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.336351][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.380896][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.611297][ T8336] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 163.626819][ T8336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.592'. [ 163.637022][ T8336] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 163.702231][ T8334] nbd3: detected capacity change from 0 to 63 [ 163.729311][ T8338] block nbd3: NBD_DISCONNECT [ 163.754562][ T8338] block nbd3: Disconnected due to user request. [ 163.840054][ T8338] block nbd3: shutting down sockets [ 164.070486][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 165.015724][ T8356] infiniband !yz!: set down [ 165.047635][ T8356] infiniband !yz!: added team_slave_0 [ 165.055787][ T8356] !yz!: rxe_create_cq: returned err = -12 [ 165.072839][ T8356] infiniband !yz!: Couldn't create ib_mad CQ [ 165.079094][ T8356] infiniband !yz!: Couldn't open port 1 [ 165.166991][ T8356] RDS/IB: !yz!: added [ 165.187478][ T8356] smc: adding ib device !yz! with port count 1 [ 165.220883][ T8356] smc: ib device !yz! port 1 has no pnetid [ 165.552960][ T8400] wg1 speed is unknown, defaulting to 1000 [ 165.730692][ T8405] netlink: 52 bytes leftover after parsing attributes in process `syz.0.614'. [ 166.116150][ T8412] netlink: 'syz.3.616': attribute type 21 has an invalid length. [ 167.006863][ T8433] syzkaller0: entered promiscuous mode [ 167.020045][ T8433] syzkaller0: entered allmulticast mode [ 168.746632][ T8470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.759675][ T8471] __nla_validate_parse: 2 callbacks suppressed [ 168.759694][ T8471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 168.778499][ T8470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.835041][ T8450] wg1 speed is unknown, defaulting to 1000 [ 168.954316][ T8470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.966122][ T8470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.101827][ T8470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.112926][ T8470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.243725][ T8470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.254253][ T8470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.467179][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.571124][ T7357] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.579371][ T7357] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.693288][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.702580][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.742436][ T7357] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.751583][ T7357] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.788828][ T7357] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.802888][ T7357] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.116230][ T8510] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 170.226590][ T8510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.287686][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 170.322097][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'. [ 170.332130][ T8522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.356122][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 170.358991][ T8522] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 170.397107][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 170.427095][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 170.481226][ T8522] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 170.765528][ T8555] geneve2: entered promiscuous mode [ 170.859778][ T8555] bond1: option arp_interval: invalid value (18446744073709551615) [ 170.869290][ T8555] bond1: option arp_interval: allowed values 0 - 2147483647 [ 170.887312][ T8555] bond1 (unregistering): Released all slaves [ 171.377281][ T8562] bond_slave_1: left promiscuous mode [ 171.402845][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.417749][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.647155][ T2954] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.681727][ T2954] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.738861][ T8585] syzkaller0: entered promiscuous mode [ 171.757511][ T8585] syzkaller0: entered allmulticast mode [ 171.800630][ T2954] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.822784][ T2954] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.859626][ T2954] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.875012][ T2954] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.876616][ T8600] netlink: 48 bytes leftover after parsing attributes in process `syz.2.667'. [ 171.889311][ T2954] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.928225][ T2954] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.937825][ T5148] Bluetooth: hci4: link tx timeout [ 171.944377][ T5148] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.955165][ T52] Bluetooth: hci4: link tx timeout [ 171.963749][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.985911][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.667'. [ 172.150481][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.426841][ T8619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.670'. [ 172.453947][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.470981][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.670'. [ 172.571654][ T8604] lec:lec_atm_send: lec0: Unknown message type 1668572004 [ 172.593409][ T8625] lec:lec_atm_close: lec0: Shut down! [ 173.294414][ T8654] wg1 speed is unknown, defaulting to 1000 [ 173.316708][ T8658] tipc: Started in network mode [ 173.325306][ T8658] tipc: Node identity 8ecf4ede960c, cluster identity 4711 [ 173.333413][ T8658] tipc: Enabled bearer , priority 0 [ 173.426825][ T8658] syzkaller0: entered promiscuous mode [ 173.447405][ T8658] syzkaller0: entered allmulticast mode [ 173.791515][ T8671] geneve0: entered promiscuous mode [ 173.811640][ T8671] geneve0: entered allmulticast mode [ 173.855143][ T8656] tipc: Resetting bearer [ 173.904443][ T8656] tipc: Disabling bearer [ 173.936718][ T8674] wg1 speed is unknown, defaulting to 1000 [ 173.990867][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 174.101936][ T8680] __nla_validate_parse: 2 callbacks suppressed [ 174.101956][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 174.387483][ T8701] bridge3: entered allmulticast mode [ 174.729045][ T8718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.276455][ T8727] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 175.294812][ T8727] netlink: 'syz.0.702': attribute type 11 has an invalid length. [ 175.308405][ T8727] netlink: 224 bytes leftover after parsing attributes in process `syz.0.702'. [ 175.323176][ T8729] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.703'. [ 175.472200][ T8735] bond_slave_1: left allmulticast mode [ 175.505826][ T8740] geneve2: entered promiscuous mode [ 175.795393][ T8758] netlink: 80 bytes leftover after parsing attributes in process `syz.0.709'. [ 175.881893][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 175.908285][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.711'. [ 175.975028][ T8758] gretap1: entered promiscuous mode [ 176.136504][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 176.168308][ T8765] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 176.187713][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 176.412566][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.718'. [ 176.905567][ T8796] netlink: 64 bytes leftover after parsing attributes in process `syz.1.722'. [ 177.511763][ T8826] netlink: 'syz.1.730': attribute type 16 has an invalid length. [ 177.738542][ T8836] FAULT_INJECTION: forcing a failure. [ 177.738542][ T8836] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.747861][ T8819] !yz!: rxe_newlink: already configured on team_slave_0 [ 177.754409][ T8836] CPU: 1 UID: 0 PID: 8836 Comm: syz.3.735 Not tainted syzkaller #0 PREEMPT(full) [ 177.754442][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.754467][ T8836] Call Trace: [ 177.754477][ T8836] [ 177.754487][ T8836] dump_stack_lvl+0x189/0x250 [ 177.754528][ T8836] ? __pfx____ratelimit+0x10/0x10 [ 177.754558][ T8836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.754589][ T8836] ? __pfx__printk+0x10/0x10 [ 177.754632][ T8836] should_fail_ex+0x414/0x560 [ 177.754677][ T8836] _copy_from_user+0x2d/0xb0 [ 177.754709][ T8836] __copy_msghdr+0x3c5/0x5b0 [ 177.754745][ T8836] ___sys_sendmsg+0x1a5/0x2a0 [ 177.754778][ T8836] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.754855][ T8836] ? __fget_files+0x2a/0x420 [ 177.754878][ T8836] ? __fget_files+0x3a0/0x420 [ 177.754914][ T8836] __x64_sys_sendmsg+0x19b/0x260 [ 177.754949][ T8836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.754993][ T8836] ? __pfx_ksys_write+0x10/0x10 [ 177.755040][ T8836] ? do_syscall_64+0xbe/0xfa0 [ 177.755074][ T8836] do_syscall_64+0xfa/0xfa0 [ 177.755102][ T8836] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.755131][ T8836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.755154][ T8836] ? clear_bhb_loop+0x60/0xb0 [ 177.755184][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.755207][ T8836] RIP: 0033:0x7fe899d8f749 [ 177.755236][ T8836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.755256][ T8836] RSP: 002b:00007fe89ac6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.755288][ T8836] RAX: ffffffffffffffda RBX: 00007fe899fe5fa0 RCX: 00007fe899d8f749 [ 177.755307][ T8836] RDX: 0000000000000800 RSI: 0000200000000480 RDI: 0000000000000004 [ 177.755323][ T8836] RBP: 00007fe89ac6b090 R08: 0000000000000000 R09: 0000000000000000 [ 177.755338][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.755352][ T8836] R13: 00007fe899fe6038 R14: 00007fe899fe5fa0 R15: 00007ffc02d45f08 [ 177.755394][ T8836] [ 177.971494][ T8824] wg1 speed is unknown, defaulting to 1000 [ 178.472439][ T8862] syzkaller0: entered promiscuous mode [ 178.478069][ T8862] syzkaller0: entered allmulticast mode [ 178.641555][ T8872] FAULT_INJECTION: forcing a failure. [ 178.641555][ T8872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.656061][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.4.747 Not tainted syzkaller #0 PREEMPT(full) [ 178.656090][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.656107][ T8872] Call Trace: [ 178.656116][ T8872] [ 178.656125][ T8872] dump_stack_lvl+0x189/0x250 [ 178.656172][ T8872] ? __pfx____ratelimit+0x10/0x10 [ 178.656197][ T8872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.656226][ T8872] ? __pfx__printk+0x10/0x10 [ 178.656263][ T8872] should_fail_ex+0x414/0x560 [ 178.656302][ T8872] _copy_to_user+0x31/0xb0 [ 178.656332][ T8872] simple_read_from_buffer+0xe1/0x170 [ 178.656370][ T8872] proc_fail_nth_read+0x1b3/0x220 [ 178.656402][ T8872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.656433][ T8872] ? rw_verify_area+0x2a6/0x4d0 [ 178.656461][ T8872] ? __lock_acquire+0xab9/0xd20 [ 178.656480][ T8872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.656510][ T8872] vfs_read+0x200/0xa30 [ 178.656538][ T8872] ? fdget_pos+0x247/0x320 [ 178.656564][ T8872] ? __pfx___mutex_lock+0x10/0x10 [ 178.656592][ T8872] ? __pfx_vfs_read+0x10/0x10 [ 178.656623][ T8872] ? __fget_files+0x2a/0x420 [ 178.656649][ T8872] ? __fget_files+0x3a0/0x420 [ 178.656667][ T8872] ? __fget_files+0x2a/0x420 [ 178.656698][ T8872] ksys_read+0x145/0x250 [ 178.656731][ T8872] ? __pfx_ksys_read+0x10/0x10 [ 178.656765][ T8872] ? do_syscall_64+0xbe/0xfa0 [ 178.656796][ T8872] do_syscall_64+0xfa/0xfa0 [ 178.656823][ T8872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.656842][ T8872] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 178.656862][ T8872] ? clear_bhb_loop+0x60/0xb0 [ 178.656888][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.656908][ T8872] RIP: 0033:0x7f3e20d8e15c [ 178.656936][ T8872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.656958][ T8872] RSP: 002b:00007f3e21c3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.656991][ T8872] RAX: ffffffffffffffda RBX: 00007f3e20fe5fa0 RCX: 00007f3e20d8e15c [ 178.657006][ T8872] RDX: 000000000000000f RSI: 00007f3e21c3d0a0 RDI: 0000000000000003 [ 178.657019][ T8872] RBP: 00007f3e21c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.657032][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.657044][ T8872] R13: 00007f3e20fe6038 R14: 00007f3e20fe5fa0 R15: 00007ffc249a2e08 [ 178.657081][ T8872] [ 179.074905][ T8877] wg1 speed is unknown, defaulting to 1000 [ 179.167632][ T8884] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.176846][ T8884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.184445][ T8884] IPv6: NLM_F_CREATE should be set when creating new route [ 179.191783][ T8884] IPv6: NLM_F_CREATE should be set when creating new route [ 179.428378][ T8898] __nla_validate_parse: 4 callbacks suppressed [ 179.428399][ T8898] netlink: 52 bytes leftover after parsing attributes in process `syz.4.756'. [ 179.726944][ T8907] x_tables: ip_tables: ah match: only valid for protocol 51 [ 179.735804][ T8907] netlink: 'syz.4.758': attribute type 13 has an invalid length. [ 179.767022][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.759'. [ 180.661701][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 180.695451][ T8942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.762'. [ 181.178295][ T8973] wg1 speed is unknown, defaulting to 1000 [ 181.374810][ T8979] wg1 speed is unknown, defaulting to 1000 [ 181.675950][ T8991] x_tables: duplicate underflow at hook 1 [ 182.482501][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 182.501602][ T9019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.781'. [ 182.799600][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 182.903722][ T9028] : entered promiscuous mode [ 183.096846][ T9044] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.791'. [ 183.187004][ T9049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.790'. [ 183.222022][ T9042] wg1 speed is unknown, defaulting to 1000 [ 183.256997][ T9049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.790'. [ 183.308095][ T9051] sctp: [Deprecated]: syz.0.793 (pid 9051) Use of int in maxseg socket option. [ 183.308095][ T9051] Use struct sctp_assoc_value instead [ 183.373299][ T9048] can: request_module (can-proto-0) failed. [ 183.746297][ T9067] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 183.831203][ T9067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.875604][ T9071] bond3: (slave geneve2): making interface the new active one [ 183.885554][ T9071] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 183.894585][ T9070] netlink: 'syz.4.800': attribute type 5 has an invalid length. [ 183.949010][ T9074] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 184.280832][ T9080] wg1 speed is unknown, defaulting to 1000 [ 184.341639][ T9086] netlink: 'syz.2.804': attribute type 2 has an invalid length. [ 184.795278][ T9087] netlink: 'syz.4.803': attribute type 6 has an invalid length. [ 184.849259][ T9092] FAULT_INJECTION: forcing a failure. [ 184.849259][ T9092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.875293][ T9092] CPU: 0 UID: 0 PID: 9092 Comm: syz.0.806 Not tainted syzkaller #0 PREEMPT(full) [ 184.875325][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.875338][ T9092] Call Trace: [ 184.875347][ T9092] [ 184.875374][ T9092] dump_stack_lvl+0x189/0x250 [ 184.875410][ T9092] ? __pfx____ratelimit+0x10/0x10 [ 184.875435][ T9092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.875464][ T9092] ? __pfx__printk+0x10/0x10 [ 184.875486][ T9092] ? __might_fault+0xb0/0x130 [ 184.875530][ T9092] should_fail_ex+0x414/0x560 [ 184.875569][ T9092] _copy_from_user+0x2d/0xb0 [ 184.875607][ T9092] ___sys_sendmsg+0x158/0x2a0 [ 184.875639][ T9092] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.875707][ T9092] ? __fget_files+0x2a/0x420 [ 184.875727][ T9092] ? __fget_files+0x3a0/0x420 [ 184.875767][ T9092] __x64_sys_sendmsg+0x19b/0x260 [ 184.875798][ T9092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.875836][ T9092] ? __pfx_ksys_write+0x10/0x10 [ 184.875872][ T9092] ? do_syscall_64+0xbe/0xfa0 [ 184.875902][ T9092] do_syscall_64+0xfa/0xfa0 [ 184.875926][ T9092] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.875951][ T9092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.875972][ T9092] ? clear_bhb_loop+0x60/0xb0 [ 184.875999][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.876019][ T9092] RIP: 0033:0x7ff08658f749 [ 184.876043][ T9092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.876062][ T9092] RSP: 002b:00007ff087342038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.876084][ T9092] RAX: ffffffffffffffda RBX: 00007ff0867e5fa0 RCX: 00007ff08658f749 [ 184.876100][ T9092] RDX: 0000000000004004 RSI: 0000200000000000 RDI: 0000000000000003 [ 184.876114][ T9092] RBP: 00007ff087342090 R08: 0000000000000000 R09: 0000000000000000 [ 184.876127][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.876139][ T9092] R13: 00007ff0867e6038 R14: 00007ff0867e5fa0 R15: 00007ffe6a79b958 [ 184.876176][ T9092] [ 185.438052][ T9108] __nla_validate_parse: 1 callbacks suppressed [ 185.438074][ T9108] netlink: 56 bytes leftover after parsing attributes in process `syz.3.811'. [ 185.510469][ T9108] unsupported nlmsg_type 40 [ 185.557532][ T9112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.813'. [ 185.617520][ T9114] netlink: 124 bytes leftover after parsing attributes in process `syz.4.814'. [ 186.021530][ T9123] syzkaller1: entered promiscuous mode [ 186.038780][ T9123] syzkaller1: entered allmulticast mode [ 186.167849][ T9140] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 186.176670][ T9141] netlink: 52 bytes leftover after parsing attributes in process `syz.1.821'. [ 186.192448][ T9140] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 186.386112][ T9152] tipc: Enabled bearer , priority 0 [ 186.462503][ T9161] syzkaller0: entered promiscuous mode [ 186.507538][ T9161] syzkaller0: entered allmulticast mode [ 186.606838][ T9172] tipc: Resetting bearer [ 186.621762][ T9172] netlink: 'syz.1.825': attribute type 10 has an invalid length. [ 186.674268][ T9161] can: request_module (can-proto-0) failed. [ 186.787410][ T9173] wg1 speed is unknown, defaulting to 1000 [ 186.853700][ T9175] wg1 speed is unknown, defaulting to 1000 [ 187.194747][ T9195] wg1 speed is unknown, defaulting to 1000 [ 187.211859][ T9193] wg1 speed is unknown, defaulting to 1000 [ 187.321303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.352145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.358062][ T9202] netlink: 96 bytes leftover after parsing attributes in process `syz.1.835'. [ 187.530778][ T5924] tipc: Node number set to 1451188147 [ 187.603932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.717176][ T9209] sctp: [Deprecated]: syz.2.837 (pid 9209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.717176][ T9209] Use struct sctp_sack_info instead [ 187.756676][ T9209] bridge0: entered promiscuous mode [ 187.763658][ T9209] bridge0: port 3(macvtap1) entered blocking state [ 187.770784][ T9209] bridge0: port 3(macvtap1) entered disabled state [ 187.777685][ T9209] macvtap1: entered allmulticast mode [ 187.784584][ T9209] bridge0: entered allmulticast mode [ 187.793801][ T9209] macvtap1: left allmulticast mode [ 187.799014][ T9209] bridge0: left allmulticast mode [ 187.814426][ T9209] bridge0: left promiscuous mode [ 187.880675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.150454][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.419247][ T9204] wg1 speed is unknown, defaulting to 1000 [ 189.430788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.647589][ T9225] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.842'. [ 189.808760][ T9226] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.842'. [ 189.819281][ T9225] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.842'. [ 189.846544][ T981] IPVS: starting estimator thread 0... [ 189.864418][ T9231] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 189.873541][ T9231] netlink: 34 bytes leftover after parsing attributes in process `syz.4.843'. [ 189.969988][ T9232] IPVS: using max 24 ests per chain, 57600 per kthread [ 190.400855][ T9244] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20000 [ 190.459322][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'. [ 190.480488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.816330][ T9258] wg1 speed is unknown, defaulting to 1000 [ 190.930628][ T9260] wg1 speed is unknown, defaulting to 1000 [ 191.357670][ T9267] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 191.383422][ T9267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.854'. [ 191.503258][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 191.703836][ T9283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.857'. [ 191.704854][ T9282] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 191.821538][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.846908][ T9282] bond0: (slave team0): Enslaving as an active interface with an up link [ 191.871605][ T9289] tipc: Enabling of bearer rejected, already enabled [ 192.550625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.762482][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 192.884268][ T9308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.864'. [ 193.289823][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.871'. [ 193.401418][ T9350] FAULT_INJECTION: forcing a failure. [ 193.401418][ T9350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.403561][ T9348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.870'. [ 193.417907][ T9350] CPU: 1 UID: 0 PID: 9350 Comm: syz.2.872 Not tainted syzkaller #0 PREEMPT(full) [ 193.417940][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.417954][ T9350] Call Trace: [ 193.417964][ T9350] [ 193.417974][ T9350] dump_stack_lvl+0x189/0x250 [ 193.418015][ T9350] ? __pfx____ratelimit+0x10/0x10 [ 193.418044][ T9350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.418077][ T9350] ? __pfx__printk+0x10/0x10 [ 193.418101][ T9350] ? __might_fault+0xb0/0x130 [ 193.418154][ T9350] should_fail_ex+0x414/0x560 [ 193.418199][ T9350] _copy_from_iter+0x1de/0x1790 [ 193.418226][ T9350] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 193.418261][ T9350] ? kmalloc_reserve+0xbd/0x290 [ 193.418313][ T9350] ? __pfx__copy_from_iter+0x10/0x10 [ 193.418338][ T9350] ? __alloc_skb+0x2f1/0x430 [ 193.418367][ T9350] ? __pfx___alloc_skb+0x10/0x10 [ 193.418397][ T9350] ? netlink_sendmsg+0x642/0xb30 [ 193.418426][ T9350] ? skb_put+0x11b/0x210 [ 193.418458][ T9350] netlink_sendmsg+0x6b2/0xb30 [ 193.418502][ T9350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.418536][ T9350] ? aa_sock_msg_perm+0xf1/0x1d0 [ 193.418575][ T9350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.418600][ T9350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.418631][ T9350] __sock_sendmsg+0x21c/0x270 [ 193.418674][ T9350] ____sys_sendmsg+0x505/0x830 [ 193.418711][ T9350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.418754][ T9350] ? import_iovec+0x74/0xa0 [ 193.418788][ T9350] ___sys_sendmsg+0x21f/0x2a0 [ 193.418821][ T9350] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.418896][ T9350] ? __fget_files+0x2a/0x420 [ 193.418919][ T9350] ? __fget_files+0x3a0/0x420 [ 193.418955][ T9350] __x64_sys_sendmsg+0x19b/0x260 [ 193.418989][ T9350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.419032][ T9350] ? __pfx_ksys_write+0x10/0x10 [ 193.419072][ T9350] ? do_syscall_64+0xbe/0xfa0 [ 193.419105][ T9350] do_syscall_64+0xfa/0xfa0 [ 193.419132][ T9350] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.419161][ T9350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.419185][ T9350] ? clear_bhb_loop+0x60/0xb0 [ 193.419214][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.419238][ T9350] RIP: 0033:0x7f0af5b8f749 [ 193.419258][ T9350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.419278][ T9350] RSP: 002b:00007f0af6a91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.419313][ T9350] RAX: ffffffffffffffda RBX: 00007f0af5de5fa0 RCX: 00007f0af5b8f749 [ 193.419331][ T9350] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 193.419344][ T9350] RBP: 00007f0af6a91090 R08: 0000000000000000 R09: 0000000000000000 [ 193.419360][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.419372][ T9350] R13: 00007f0af5de6038 R14: 00007f0af5de5fa0 R15: 00007fffc45efbf8 [ 193.419414][ T9350] [ 193.600718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.617321][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.870'. [ 193.737678][ T9342] wg1 speed is unknown, defaulting to 1000 [ 193.775205][ T9355] netlink: 1 bytes leftover after parsing attributes in process `syz.4.873'. [ 193.802654][ T9346] wg1 speed is unknown, defaulting to 1000 [ 193.888679][ T9358] tun0: tun_chr_ioctl cmd 1074025675 [ 193.907476][ T9358] tun0: persist disabled [ 194.290076][ T9374] tipc: Enabled bearer , priority 0 [ 194.341530][ T9374] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 194.348987][ T9374] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 194.471971][ T9374] syzkaller0: mtu less than device minimum [ 194.583896][ T9385] netlink: 'syz.4.883': attribute type 1 has an invalid length. [ 194.611915][ T9385] lo: Caught tx_queue_len zero misconfig [ 195.039669][ T9398] netlink: 'syz.2.886': attribute type 12 has an invalid length. [ 195.670390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.046901][ T9437] __nla_validate_parse: 7 callbacks suppressed [ 196.046924][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 196.313100][ T9452] sock: sock_timestamping_bind_phc: sock not bind to device [ 196.716946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.862946][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 197.219289][ T9484] netlink: 156 bytes leftover after parsing attributes in process `syz.2.907'. [ 197.385263][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'. [ 197.982873][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 198.790735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.853358][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 198.964669][ T9539] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 199.062977][ T9539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.137107][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 199.148669][ T9547] netlink: 56 bytes leftover after parsing attributes in process `syz.0.923'. [ 199.274565][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 199.283949][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 199.295540][ T9551] wg1 speed is unknown, defaulting to 1000 [ 199.444545][ T9555] wg1 speed is unknown, defaulting to 1000 [ 199.680220][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.686602][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.802672][ T9583] geneve2: entered promiscuous mode [ 199.814125][ T2988] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.828095][ T2988] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.840147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.859099][ T2988] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.040769][ T2988] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.078584][ T9577] wg1 speed is unknown, defaulting to 1000 [ 200.656012][ T9599] netlink: 'syz.4.935': attribute type 12 has an invalid length. [ 200.801965][ T9599] netlink: 'syz.4.935': attribute type 12 has an invalid length. [ 201.628498][ T9627] ip6gre1: entered promiscuous mode [ 201.796155][ T9636] tipc: Enabling of bearer rejected, already enabled [ 201.920326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.020947][ T9644] lo speed is unknown, defaulting to 1000 [ 202.027711][ T9644] lo speed is unknown, defaulting to 1000 [ 202.035079][ T9644] lo speed is unknown, defaulting to 1000 [ 202.073683][ T9644] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 202.118826][ T9644] lo speed is unknown, defaulting to 1000 [ 202.138950][ T9644] lo speed is unknown, defaulting to 1000 [ 202.182644][ T9647] __nla_validate_parse: 4 callbacks suppressed [ 202.182664][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 202.188427][ T9644] lo speed is unknown, defaulting to 1000 [ 202.191675][ T9647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.949'. [ 202.268900][ T9644] lo speed is unknown, defaulting to 1000 [ 202.283983][ T9644] lo speed is unknown, defaulting to 1000 [ 202.425647][ T9658] tipc: Enabled bearer , priority 0 [ 202.443719][ T9658] syzkaller0: entered promiscuous mode [ 202.459362][ T9658] syzkaller0: entered allmulticast mode [ 202.548775][ T9658] tipc: Resetting bearer [ 202.583323][ T9658] tipc: Disabling bearer [ 202.674619][ T9672] netlink: 176 bytes leftover after parsing attributes in process `syz.0.956'. [ 202.862785][ T9682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 202.951350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.989174][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 203.141314][ T9710] netlink: 36 bytes leftover after parsing attributes in process `syz.4.962'. [ 203.265121][ T9717] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 203.427317][ T9726] IPv6: addrconf: prefix option has invalid lifetime [ 203.496482][ T9728] netlink: 'syz.2.971': attribute type 3 has an invalid length. [ 203.506071][ T9728] netlink: 244 bytes leftover after parsing attributes in process `syz.2.971'. [ 204.018829][ T9742] wg1 speed is unknown, defaulting to 1000 [ 204.426661][ T9747] bond0: (slave bond_slave_0): Releasing backup interface [ 204.567597][ T9747] bond0: (slave bond_slave_1): Releasing backup interface [ 204.594460][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 204.608367][ T9747] `: Failed to send options change via netlink (err -105) [ 204.626204][ T9747] `: Failed to send port change of device team_slave_0 via netlink (err -105) [ 204.646699][ T9747] `: Port device team_slave_0 removed [ 204.680454][ T9747] `: Failed to send options change via netlink (err -105) [ 204.692550][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'. [ 204.701105][ T9747] `: Failed to send port change of device team_slave_1 via netlink (err -105) [ 204.734446][ T9747] `: Port device team_slave_1 removed [ 204.742441][ T9747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.752572][ T9747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.775764][ T9747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.885507][ T9748] bridge0: port 1(veth5) entered blocking state [ 204.895122][ T9748] bridge0: port 1(veth5) entered disabled state [ 204.902607][ T9748] veth5: entered allmulticast mode [ 204.924353][ T9748] veth5: entered promiscuous mode [ 204.967063][ T9742] lo speed is unknown, defaulting to 1000 [ 204.978635][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.981'. [ 205.030816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.445471][ T9797] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.561192][ T9796] vlan0: entered promiscuous mode [ 205.591289][ T9796] geneve1: entered promiscuous mode [ 205.596849][ T9796] vlan0: entered allmulticast mode [ 205.609635][ T9796] geneve1: entered allmulticast mode [ 205.745555][ T9797] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.876991][ T9797] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.906689][ T9807] wg1 speed is unknown, defaulting to 1000 [ 205.955705][ T9797] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.070889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.095548][ T1340] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.168962][ T1340] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.242652][ T1340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.296234][ T9835] geneve3: entered promiscuous mode [ 206.329183][ T1340] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.522855][ T9807] lo speed is unknown, defaulting to 1000 [ 206.692723][ T9855] netlink: 'syz.3.1007': attribute type 32 has an invalid length. [ 206.797197][ T9858] Bluetooth: MGMT ver 1.23 [ 206.868372][ T9853] vxcan3: entered allmulticast mode [ 206.874994][ T9858] can: request_module (can-proto-5) failed. [ 207.420336][ T9858] bridge_slave_0: left allmulticast mode [ 207.426145][ T9858] bridge_slave_0: left promiscuous mode [ 207.433687][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.869023][ T9887] __nla_validate_parse: 6 callbacks suppressed [ 207.869042][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 207.927396][ T9889] tipc: Enabled bearer , priority 0 [ 207.977128][ T9889] syzkaller0: entered promiscuous mode [ 207.995402][ T9889] syzkaller0: entered allmulticast mode [ 208.036800][ T9889] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 208.063085][ T9889] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1014'. [ 208.108961][ T9896] bond4: option lacp_rate: invalid value (255) [ 208.139662][ T9896] bond4 (unregistering): Released all slaves [ 208.150046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.219522][ T9895] tipc: Enabling of bearer rejected, already enabled [ 208.270633][ T9906] tipc: Resetting bearer [ 208.296461][ T9888] tipc: Resetting bearer [ 208.359329][ T9888] tipc: Disabling bearer [ 208.382410][ T9895] nbd0: detected capacity change from 0 to 127 [ 208.411594][ T5148] block nbd0: Receive control failed (result -32) [ 208.453027][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 208.463154][ T9915] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1020'. [ 208.639052][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1023'. [ 208.892123][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 208.902402][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 208.938658][ T9933] bond4: option lacp_rate: invalid value (255) [ 208.945363][ T9931] netlink: 'syz.0.1025': attribute type 5 has an invalid length. [ 208.972067][ T9933] bond4 (unregistering): Released all slaves [ 208.979943][ T9931] netlink: 'syz.0.1025': attribute type 6 has an invalid length. [ 209.034729][ T9943] team_slave_1: entered promiscuous mode [ 209.190215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.613325][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 209.915355][ T9993] bond4: option lacp_rate: invalid value (255) [ 209.947420][T10000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 209.953347][ T9993] bond4 (unregistering): Released all slaves [ 210.246303][T10013] syzkaller0: entered promiscuous mode [ 210.306642][T10013] syzkaller0: entered allmulticast mode [ 210.346950][T10025] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 210.494674][T10025] bond1: entered promiscuous mode [ 210.513748][T10025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.588322][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 210.629825][T10038] bond1: (slave bridge3): making interface the new active one [ 210.667378][T10038] bridge3: entered promiscuous mode [ 210.687455][T10038] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 211.021044][T10051] bond4: option lacp_rate: invalid value (255) [ 211.109177][T10051] bond4 (unregistering): Released all slaves [ 211.633192][T10103] tipc: Resetting bearer [ 211.733602][T10108] netlink: 'syz.1.1068': attribute type 3 has an invalid length. [ 211.948007][T10121] veth10: entered allmulticast mode [ 212.206360][T10129] bond4: option lacp_rate: invalid value (255) [ 212.224822][T10129] bond4 (unregistering): Released all slaves [ 212.319081][T10139] netlink: 'syz.4.1076': attribute type 39 has an invalid length. [ 212.390367][T10141] Cannot find add_set index 4 as target [ 213.010129][T10170] __nla_validate_parse: 6 callbacks suppressed [ 213.010150][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 213.053067][T10175] ip6gre0: entered promiscuous mode [ 213.766034][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1087'. [ 213.939555][T10163] ip6gre0: left promiscuous mode [ 214.253530][T10202] wg1 speed is unknown, defaulting to 1000 [ 214.622711][T10217] sctp: [Deprecated]: syz.1.1094 (pid 10217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.622711][T10217] Use struct sctp_sack_info instead [ 214.651875][T10216] tun0: tun_chr_ioctl cmd 1074025675 [ 214.680730][T10216] tun0: persist enabled [ 214.693592][T10216] tun0: tun_chr_ioctl cmd 1074025675 [ 214.705643][T10216] tun0: persist disabled [ 214.797061][T10222] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1094'. [ 214.937281][T10202] lo speed is unknown, defaulting to 1000 [ 214.979581][T10221] netlink: 'syz.2.1095': attribute type 13 has an invalid length. [ 215.019526][T10221] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 215.122861][T10216] wg1 speed is unknown, defaulting to 1000 [ 215.360809][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 215.549809][T10232] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.643292][T10216] lo speed is unknown, defaulting to 1000 [ 216.717895][T10274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1108'. [ 216.731808][T10274] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1108'. [ 216.837545][T10285] netlink: 'syz.4.1111': attribute type 3 has an invalid length. [ 217.035528][T10293] sock: sock_timestamping_bind_phc: sock not bind to device [ 217.149928][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 217.156032][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 217.160949][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 217.182189][T10293] team0: Device veth0_macvtap failed to register rx_handler [ 217.209623][T10304] netlink: 'syz.3.1113': attribute type 4 has an invalid length. [ 217.398049][T10301] wg1 speed is unknown, defaulting to 1000 [ 217.510268][T10316] IPv6: addrconf: prefix option has invalid lifetime [ 217.678758][T10317] wg1 speed is unknown, defaulting to 1000 [ 217.899645][T10301] lo speed is unknown, defaulting to 1000 [ 217.906734][T10332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1121'. [ 218.434918][T10317] lo speed is unknown, defaulting to 1000 [ 218.773803][T10363] macsec2: entered promiscuous mode [ 218.789173][T10363] macsec2: entered allmulticast mode [ 218.838106][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 218.850437][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 218.936883][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1132'. [ 218.947104][T10374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1132'. [ 218.970699][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 219.042655][T10384] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 219.302708][T10389] bond2: (slave gretap1): making interface the new active one [ 219.324874][T10389] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 219.771406][T10413] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 219.825991][T10413] bond2: entered promiscuous mode [ 219.838165][T10413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.858689][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 219.928351][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 219.932753][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1141'. [ 219.954412][T10416] bond3: option lacp_rate: invalid value (255) [ 219.974669][T10416] bond3 (unregistering): Released all slaves [ 220.115385][T10434] ip6t_rpfilter: unknown options [ 220.230318][T10439] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 220.284643][T10446] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 220.330096][T10446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.455688][T10454] bond3: (slave gretap3): making interface the new active one [ 220.467655][T10454] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 220.510212][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1148'. [ 220.521989][T10465] IPv6: addrconf: prefix option has invalid lifetime [ 220.603294][T10446] wg1 speed is unknown, defaulting to 1000 [ 220.658109][T10474] wg1 speed is unknown, defaulting to 1000 [ 220.879377][T10446] lo speed is unknown, defaulting to 1000 [ 221.000909][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1157'. [ 221.142921][T10492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.316585][T10467] wg1 speed is unknown, defaulting to 1000 [ 221.373901][T10474] lo speed is unknown, defaulting to 1000 [ 221.430328][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.615864][T10501] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20004 [ 221.827866][T10496] wg1 speed is unknown, defaulting to 1000 [ 221.900323][T10467] lo speed is unknown, defaulting to 1000 [ 222.163425][T10508] [†’Ì: entered promiscuous mode [ 222.614506][T10526] tipc: Enabled bearer , priority 0 [ 222.624906][T10526] syzkaller0: entered promiscuous mode [ 222.631302][T10526] syzkaller0: entered allmulticast mode [ 222.777900][T10496] lo speed is unknown, defaulting to 1000 [ 222.804996][T10526] tipc: Resetting bearer [ 222.850343][T10525] tipc: Resetting bearer [ 222.946345][T10525] tipc: Disabling bearer [ 223.414042][T10547] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 223.849443][T10564] __nla_validate_parse: 6 callbacks suppressed [ 223.849465][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 224.027996][T10579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1185'. [ 224.052801][T10579] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 224.119444][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 224.227757][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 224.325083][T10579] xfrm0: left promiscuous mode [ 224.348615][T10579] gretap1: left promiscuous mode [ 224.357461][T10579] vlan0: left promiscuous mode [ 224.365614][T10579] geneve1: left promiscuous mode [ 224.372828][ T5936] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.385005][T10579] geneve3: left promiscuous mode [ 224.402026][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 224.436104][T10582] wg1 speed is unknown, defaulting to 1000 [ 224.469714][T10599] netlink: 'syz.4.1191': attribute type 5 has an invalid length. [ 224.560215][ T5953] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.716010][T10582] lo speed is unknown, defaulting to 1000 [ 225.028224][T10619] netlink: 'syz.4.1197': attribute type 39 has an invalid length. [ 225.103114][T10624] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 225.194840][T10619] hsr_slave_1 (unregistering): left promiscuous mode [ 225.207752][T10575] infiniband syz2: set active [ 225.224867][T10575] infiniband syz2: added vxcan1 [ 225.231555][T10575] syz2: rxe_create_cq: returned err = -12 [ 225.244109][T10575] infiniband syz2: Couldn't create ib_mad CQ [ 225.254328][T10575] infiniband syz2: Couldn't open port 1 [ 225.292494][T10624] bond4: entered promiscuous mode [ 225.298785][T10624] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.308838][T10625] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 225.319602][T10575] RDS/IB: syz2: added [ 225.335635][T10575] smc: adding ib device syz2 with port count 1 [ 225.344017][ T8353] vxcan1 speed is unknown, defaulting to 1000 [ 225.352232][T10575] smc: ib device syz2 port 1 has no pnetid [ 225.358444][ T8353] vxcan1 speed is unknown, defaulting to 1000 [ 225.369177][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 225.406197][T10631] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.960973][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 226.109067][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 226.194548][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 226.266589][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 226.293803][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 226.320807][T10656] hsr_slave_0: left promiscuous mode [ 226.349633][T10656] hsr_slave_1: left promiscuous mode [ 226.428218][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 226.797305][T10687] batadv1: entered promiscuous mode [ 226.831727][T10684] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1219'. [ 226.883686][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 226.890022][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 226.893995][T10684] 0ªX¹¦À: renamed from caif0 [ 226.918292][T10692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1218'. [ 226.942789][T10684] 0ªX¹¦À: entered allmulticast mode [ 226.948258][T10684] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 227.176981][T10687] wg1 speed is unknown, defaulting to 1000 [ 227.330337][T10708] netlink: 'syz.1.1225': attribute type 4 has an invalid length. [ 227.554736][T10715] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 227.568244][T10687] lo speed is unknown, defaulting to 1000 [ 227.576265][T10705] wg1 speed is unknown, defaulting to 1000 [ 227.594217][T10714] batadv_slave_1: entered promiscuous mode [ 227.724092][T10715] wg1 speed is unknown, defaulting to 1000 [ 227.759345][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 227.824983][T10718] wg1 speed is unknown, defaulting to 1000 [ 228.054246][T10705] lo speed is unknown, defaulting to 1000 [ 228.218499][T10687] vxcan1 speed is unknown, defaulting to 1000 [ 228.360412][T10714] batadv_slave_1: left promiscuous mode [ 228.481448][T10723] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 228.552899][T10723] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.591187][T10728] bond3: (slave gretap1): making interface the new active one [ 228.614341][T10728] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 228.639824][T10715] lo speed is unknown, defaulting to 1000 [ 228.707445][T10705] vxcan1 speed is unknown, defaulting to 1000 [ 228.896574][T10735] __nla_validate_parse: 5 callbacks suppressed [ 228.896595][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 228.948422][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 229.089517][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 229.118939][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 229.259536][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 229.301209][T10747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1232'. [ 229.507894][T10751] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1232'. [ 229.518208][T10751] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1232'. [ 229.594938][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 229.771459][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 229.842580][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 229.919297][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1234'. [ 230.032853][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 230.042276][T10759] 8021q: VLANs not supported on caif0 [ 230.150407][T10718] lo speed is unknown, defaulting to 1000 [ 230.962943][T10775] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 230.971773][T10775] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 231.509672][T10797] IPVS: Scheduler module ip_vs_sip not found [ 231.602102][T10804] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.775225][T10806] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 231.934855][T10818] Bluetooth: MGMT ver 1.23 [ 232.000135][T10806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.251005][T10865] tipc: Enabling of bearer rejected, already enabled [ 233.281001][T10865] tipc: Resetting bearer [ 233.396442][T10871] netlink: 'syz.2.1262': attribute type 13 has an invalid length. [ 233.404868][T10871] netlink: 'syz.2.1262': attribute type 12 has an invalid length. [ 233.637927][T10882] bond4: option lacp_rate: invalid value (255) [ 233.681189][T10882] bond4 (unregistering): Released all slaves [ 233.932116][T10884] __nla_validate_parse: 13 callbacks suppressed [ 233.932135][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 234.051727][T10913] netlink: 'syz.4.1271': attribute type 83 has an invalid length. [ 234.172387][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'. [ 234.200997][T10918] tipc: Enabling of bearer rejected, already enabled [ 234.487504][T10923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.538267][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 234.559493][T10925] sctp: [Deprecated]: syz.2.1275 (pid 10925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.559493][T10925] Use struct sctp_sack_info instead [ 234.664002][T10928] æÿîÿ: entered promiscuous mode [ 234.811634][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 234.821606][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 234.832686][T10935] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 234.860117][T10935] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1278'. [ 234.880051][T10935] block nbd1: Unsupported socket: should be TCP or UNIX. [ 235.035119][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 235.156069][T10957] wg1 speed is unknown, defaulting to 1000 [ 235.240894][T10951] netlink: 'syz.0.1282': attribute type 13 has an invalid length. [ 235.387904][T10951] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.395889][T10951] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.577387][T10951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.595129][T10951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.781795][ T8353] vxcan1 speed is unknown, defaulting to 1000 [ 235.788139][T10957] lo speed is unknown, defaulting to 1000 [ 235.791168][ T8353] syz2: Port: 1 Link DOWN [ 235.818968][T10970] batman_adv: batadv0: Adding interface: macsec1 [ 235.825580][T10970] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.861771][T10970] batman_adv: batadv0: Interface activated: macsec1 [ 235.885817][T10971] ip6tnl1: entered promiscuous mode [ 235.893422][ T151] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.903995][ T151] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.921908][ T8353] vxcan1 speed is unknown, defaulting to 1000 [ 236.011442][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 236.024148][ T151] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.050112][T10957] vxcan1 speed is unknown, defaulting to 1000 [ 236.052055][ T151] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.460534][T10998] netlink: 'syz.1.1293': attribute type 1 has an invalid length. [ 236.534304][T10998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.596930][T10998] bond4: (slave gretap2): making interface the new active one [ 236.628185][T10998] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 236.683304][T10998] netlink: 'syz.1.1293': attribute type 22 has an invalid length. [ 236.725289][T11003] vlan4: entered promiscuous mode [ 236.737482][T11003] bond4: entered promiscuous mode [ 236.750697][T11003] gretap2: entered promiscuous mode [ 236.770359][T11003] vlan4: entered allmulticast mode [ 236.786051][T11003] bond4: entered allmulticast mode [ 236.806330][T11003] gretap2: entered allmulticast mode [ 236.940096][T11024] tipc: Enabling of bearer rejected, failed to enable media [ 236.985257][T11027] netlink: 'syz.0.1300': attribute type 3 has an invalid length. [ 237.074783][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 237.258205][T11037] wg1 speed is unknown, defaulting to 1000 [ 237.377601][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 237.952576][T11052] tipc: Enabled bearer , priority 0 [ 237.964022][T11053] syzkaller0: entered promiscuous mode [ 237.970295][T11053] syzkaller0: entered allmulticast mode [ 238.030295][T11053] tipc: Resetting bearer [ 238.148076][T11053] tipc: Disabling bearer [ 238.180541][T11037] lo speed is unknown, defaulting to 1000 [ 238.194121][T11037] vxcan1 speed is unknown, defaulting to 1000 [ 238.656511][T11079] netlink: 'syz.4.1316': attribute type 30 has an invalid length. [ 238.752025][T11079] netlink: 'syz.4.1316': attribute type 30 has an invalid length. [ 239.367567][T11102] __nla_validate_parse: 3 callbacks suppressed [ 239.367590][T11102] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1321'. [ 239.541482][T11106] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1322'. [ 239.571024][T11106] x_tables: duplicate underflow at hook 1 [ 240.014814][T11115] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 240.050543][T11115] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 240.063811][T11117] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1324'. [ 240.373365][T11116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.401155][T11116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.518865][T11116] veth1_macvtap: left allmulticast mode [ 240.584771][T11116] macsec0: left allmulticast mode [ 240.636663][ T5953] wg1 speed is unknown, defaulting to 1000 [ 240.648822][ T7359] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.669294][ T5953] syz0: Port: 1 Link DOWN [ 240.675697][ T7359] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.686640][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 240.696529][ T7359] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.726502][ T7359] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.747960][T11148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.761213][T11148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.769793][T11148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.779272][T11148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.841263][ T7359] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.856088][T11151] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 240.864228][T11151] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1334'. [ 240.876768][ T7359] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.889428][ T7359] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.919997][ T7359] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.114770][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1337'. [ 241.296365][T11165] delete_channel: no stack [ 241.800621][T11210] bond5: option lacp_rate: invalid value (255) [ 241.822674][T11210] bond5 (unregistering): Released all slaves [ 242.009574][T11221] tipc: Enabling of bearer rejected, already enabled [ 242.026049][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1354'. [ 242.203857][T11231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1356'. [ 242.320354][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 242.407478][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 242.593719][T11250] bond6: option lacp_rate: invalid value (255) [ 242.611799][T11250] bond6 (unregistering): Released all slaves [ 242.667051][T11255] bond4: option resend_igmp: invalid value (2878) [ 242.673622][T11255] bond4: option resend_igmp: allowed values 0 - 255 [ 242.683171][T11255] bond4 (unregistering): Released all slaves [ 242.708261][T11257] tipc: Enabling of bearer rejected, failed to enable media [ 242.886210][T11274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.212823][T11289] syzkaller1: entered promiscuous mode [ 243.218379][T11289] syzkaller1: entered allmulticast mode [ 243.398290][T11294] gretap0: entered promiscuous mode [ 243.543730][T11302] sch_fq: defrate 4294967293 ignored. [ 243.622931][T11305] ip6gre2: entered promiscuous mode [ 244.752520][T11345] netlink: 'syz.1.1389': attribute type 4 has an invalid length. [ 244.780446][T11345] netlink: 'syz.1.1389': attribute type 4 has an invalid length. [ 244.882523][T11350] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 244.889741][T11350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.233887][T11362] __nla_validate_parse: 3 callbacks suppressed [ 245.233908][T11362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1393'. [ 245.598469][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 245.701078][T11389] syzkaller0: entered promiscuous mode [ 245.706709][T11389] syzkaller0: entered allmulticast mode [ 245.812046][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 245.896516][T11399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1404'. [ 245.910212][T11392] wg1 speed is unknown, defaulting to 1000 [ 246.441625][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 247.997791][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 248.016330][T11392] lo speed is unknown, defaulting to 1000 [ 248.042275][T11392] vxcan1 speed is unknown, defaulting to 1000 [ 248.223565][T11432] netlink: 'syz.2.1412': attribute type 16 has an invalid length. [ 248.240173][T11432] netlink: 'syz.2.1412': attribute type 3 has an invalid length. [ 248.247960][T11432] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1412'. [ 248.277292][T11439] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 248.320373][T11439] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 248.352347][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1413'. [ 248.369311][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1413'. [ 248.669079][T11455] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 249.039063][ T5936] IPVS: starting estimator thread 0... [ 249.250055][T11476] IPVS: using max 27 ests per chain, 64800 per kthread [ 249.782481][T11494] IPVS: set_ctl: invalid protocol: 104 255.255.255.255:20004 [ 250.511511][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 250.955501][T11527] wg1: entered promiscuous mode [ 250.960706][T11527] wg1: entered allmulticast mode [ 251.043593][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 251.134022][T11537] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1437'. [ 251.254897][T11534] syzkaller0: entered promiscuous mode [ 251.261363][T11534] syzkaller0: entered allmulticast mode [ 251.837577][T11555] netlink: 'syz.1.1441': attribute type 2 has an invalid length. [ 251.860374][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 251.881357][T11555] netlink: 'syz.1.1441': attribute type 2 has an invalid length. [ 251.889146][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 251.931293][T11555] SET target dimension over the limit! [ 251.937439][T11555] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1441'. [ 251.977171][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 252.012852][T11560] vlan0: entered promiscuous mode [ 252.018142][T11560] geneve1: entered promiscuous mode [ 252.024241][T11560] vlan0: entered allmulticast mode [ 252.029564][T11560] geneve1: entered allmulticast mode [ 252.206997][T11575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1448'. [ 252.226125][T11575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1448'. [ 252.240847][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1448'. [ 252.498115][T11593] wg1 speed is unknown, defaulting to 1000 [ 252.888985][T11593] lo speed is unknown, defaulting to 1000 [ 252.902630][T11593] vxcan1 speed is unknown, defaulting to 1000 [ 253.226713][T11604] syzkaller1: entered promiscuous mode [ 253.232965][T11604] syzkaller1: entered allmulticast mode [ 253.825771][T11621] tipc: Trying to set illegal importance in message [ 254.096991][T11612] geneve3: entered promiscuous mode [ 254.107955][T11612] geneve3: entered allmulticast mode [ 254.118442][ T151] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.149294][ T151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.276530][T11614] wg1 speed is unknown, defaulting to 1000 [ 254.293061][ T151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.481305][ T151] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.490707][T11624] wg1 speed is unknown, defaulting to 1000 [ 254.879798][T11614] lo speed is unknown, defaulting to 1000 [ 254.903617][T11614] vxcan1 speed is unknown, defaulting to 1000 [ 255.158221][T11650] tipc: Invalid UDP bearer configuration [ 255.158282][T11650] tipc: Enabling of bearer rejected, failed to enable media [ 255.413338][T11624] lo speed is unknown, defaulting to 1000 [ 255.477955][T11624] vxcan1 speed is unknown, defaulting to 1000 [ 255.599389][T11663] __nla_validate_parse: 6 callbacks suppressed [ 255.599409][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 255.861907][T11672] : renamed from bond_slave_0 [ 256.549733][T11693] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1480'. [ 257.147772][ T2954] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 257.404824][T11720] netlink: 'syz.2.1487': attribute type 12 has an invalid length. [ 257.415675][T11720] netlink: 'syz.2.1487': attribute type 29 has an invalid length. [ 257.424391][T11720] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1487'. [ 257.450495][T11720] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1487'. [ 257.494558][T11723] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1488'. [ 257.564482][T11723] wg1 speed is unknown, defaulting to 1000 [ 258.081718][T11723] lo speed is unknown, defaulting to 1000 [ 258.084547][T11734] bond0: (slave sit0): Error: Device type is different from other slaves [ 258.096133][T11723] vxcan1 speed is unknown, defaulting to 1000 [ 258.113295][T11732] wg1 speed is unknown, defaulting to 1000 [ 258.233125][T11741] 0ªX¹¦À: left allmulticast mode [ 258.238205][T11741] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 258.425675][T11745] bond5: option lacp_rate: invalid value (255) [ 258.452152][T11745] bond5 (unregistering): Released all slaves [ 258.651968][T11732] lo speed is unknown, defaulting to 1000 [ 258.659706][T11732] vxcan1 speed is unknown, defaulting to 1000 [ 258.802460][T11753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1496'. [ 258.947297][T11758] veth0_to_bridge: entered promiscuous mode [ 258.991094][T11758] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 259.020618][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 259.062104][T11757] veth0_to_bridge: left promiscuous mode [ 259.183017][T11764] netlink: 'syz.4.1498': attribute type 15 has an invalid length. [ 260.024626][T11798] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1508'. [ 260.304132][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1511'. [ 260.394425][T11807] netlink: 'syz.2.1513': attribute type 10 has an invalid length. [ 260.442517][T11807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1513'. [ 260.698012][T11810] bond3: option lacp_rate: invalid value (255) [ 260.707064][T11810] bond3 (unregistering): Released all slaves [ 260.812900][T11807] dummy0: entered promiscuous mode [ 260.819313][T11807] bridge0: port 3(dummy0) entered blocking state [ 260.827305][T11807] bridge0: port 3(dummy0) entered disabled state [ 260.846370][T11807] bridge0: port 3(dummy0) entered blocking state [ 260.852972][T11807] bridge0: port 3(dummy0) entered forwarding state [ 261.075533][T11824] __nla_validate_parse: 1 callbacks suppressed [ 261.075553][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 261.118038][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.124497][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.398024][T11845] syzkaller0: entered promiscuous mode [ 261.408623][T11845] syzkaller0: entered allmulticast mode [ 261.512806][T11840] syz.2.1520: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.531252][T11840] CPU: 1 UID: 0 PID: 11840 Comm: syz.2.1520 Not tainted syzkaller #0 PREEMPT(full) [ 261.531281][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.531295][T11840] Call Trace: [ 261.531304][T11840] [ 261.531313][T11840] dump_stack_lvl+0x189/0x250 [ 261.531354][T11840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.531384][T11840] ? __pfx__printk+0x10/0x10 [ 261.531408][T11840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.531439][T11840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.531472][T11840] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 261.531507][T11840] warn_alloc+0x214/0x310 [ 261.531549][T11840] ? __pfx_warn_alloc+0x10/0x10 [ 261.531594][T11840] ? __get_vm_area_node+0x28f/0x300 [ 261.531626][T11840] ? xp_create_and_assign_umem+0x197/0xd10 [ 261.531659][T11840] __vmalloc_node_range_noprof+0x690/0x12d0 [ 261.531728][T11840] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.531761][T11840] ? xp_create_and_assign_umem+0x197/0xd10 [ 261.531792][T11840] ? rcu_is_watching+0x15/0xb0 [ 261.531818][T11840] ? xp_create_and_assign_umem+0x197/0xd10 [ 261.531846][T11840] __kvmalloc_node_noprof+0x674/0x910 [ 261.531880][T11840] ? xp_create_and_assign_umem+0x197/0xd10 [ 261.531908][T11840] ? xp_create_and_assign_umem+0xa9/0xd10 [ 261.531942][T11840] xp_create_and_assign_umem+0x197/0xd10 [ 261.531981][T11840] ? dev_get_by_index+0x22/0x2e0 [ 261.532012][T11840] ? dev_get_by_index+0x22/0x2e0 [ 261.532050][T11840] xsk_bind+0x42d/0xf90 [ 261.532070][T11840] ? apparmor_socket_bind+0xff/0x1e0 [ 261.532110][T11840] __sys_bind+0x2c6/0x3e0 [ 261.532136][T11840] ? __pfx___sys_bind+0x10/0x10 [ 261.532172][T11840] ? rcu_is_watching+0x15/0xb0 [ 261.532206][T11840] __x64_sys_bind+0x7a/0x90 [ 261.532237][T11840] do_syscall_64+0xfa/0xfa0 [ 261.532263][T11840] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.532289][T11840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.532311][T11840] ? clear_bhb_loop+0x60/0xb0 [ 261.532337][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.532359][T11840] RIP: 0033:0x7f0af5b8f749 [ 261.532378][T11840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.532397][T11840] RSP: 002b:00007f0af6a70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 261.532419][T11840] RAX: ffffffffffffffda RBX: 00007f0af5de6090 RCX: 00007f0af5b8f749 [ 261.532434][T11840] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 261.532448][T11840] RBP: 00007f0af5c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.532461][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.532472][T11840] R13: 00007f0af5de6128 R14: 00007f0af5de6090 R15: 00007fffc45efbf8 [ 261.532510][T11840] [ 261.532530][T11840] Mem-Info: [ 261.810442][T11840] active_anon:10993 inactive_anon:0 isolated_anon:0 [ 261.810442][T11840] active_file:3333 inactive_file:39956 isolated_file:0 [ 261.810442][T11840] unevictable:769 dirty:221 writeback:0 [ 261.810442][T11840] slab_reclaimable:11946 slab_unreclaimable:140387 [ 261.810442][T11840] mapped:33583 shmem:4346 pagetables:977 [ 261.810442][T11840] sec_pagetables:0 bounce:0 [ 261.810442][T11840] kernel_misc_reclaimable:0 [ 261.810442][T11840] free:1270037 free_pcp:13792 free_cma:0 [ 261.856661][T11840] Node 0 active_anon:43972kB inactive_anon:0kB active_file:13332kB inactive_file:159620kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:134332kB dirty:880kB writeback:0kB shmem:15848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12860kB pagetables:3768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.889008][T11840] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.919516][T11840] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.950367][T11840] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 261.956227][T11840] Node 0 DMA32 free:1173296kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43972kB inactive_anon:0kB active_file:13332kB inactive_file:159620kB unevictable:1540kB writepending:880kB zspages:0kB present:3129332kB managed:2565032kB mlocked:4kB bounce:0kB free_pcp:36688kB local_pcp:19532kB free_cma:0kB [ 261.990924][T11840] lowmem_reserve[]: 0 0 0 0 0 [ 261.995836][T11840] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.026023][T11840] lowmem_reserve[]: 0 0 0 0 0 [ 262.030987][T11840] Node 1 Normal free:3891492kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18340kB local_pcp:10144kB free_cma:0kB [ 262.063710][T11840] lowmem_reserve[]: 0 0 0 0 0 [ 262.068489][T11840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 262.081501][T11840] Node 0 DMA32: 1*4kB (E) 98*8kB (UME) 239*16kB (UME) 147*32kB (UME) 69*64kB (UM) 27*128kB (M) 8*256kB (UM) 2*512kB (UM) 2*1024kB (M) 6*2048kB (UM) 278*4096kB (UM) = 1173284kB [ 262.099546][T11840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 262.111318][T11840] Node 1 Normal: 205*4kB (UME) 48*8kB (UME) 47*16kB (UME) 162*32kB (UME) 41*64kB (UME) 10*128kB (UME) 2*256kB (M) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3891492kB [ 262.130387][T11840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.140099][T11840] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 262.149428][T11840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.159281][T11840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.170112][T11840] 47644 total pagecache pages [ 262.174842][T11840] 0 pages in swap cache [ 262.179032][T11840] Free swap = 124996kB [ 262.183318][T11840] Total swap = 124996kB [ 262.187504][T11840] 2097051 pages RAM [ 262.191783][T11840] 0 pages HighMem/MovableOnly [ 262.196482][T11840] 424151 pages reserved [ 262.200748][T11840] 0 pages cma reserved [ 262.374051][T11852] bridge0: port 3(hsr0) entered blocking state [ 262.381624][T11852] bridge0: port 3(hsr0) entered disabled state [ 262.388074][T11852] hsr0: entered allmulticast mode [ 262.422040][T11852] hsr_slave_0: entered allmulticast mode [ 262.443627][T11852] hsr_slave_1: entered allmulticast mode [ 262.471179][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1523'. [ 262.501710][T11852] hsr0: entered promiscuous mode [ 262.816804][T11874] netlink: 'syz.4.1529': attribute type 11 has an invalid length. [ 262.885629][T11879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1531'. [ 263.077427][T11891] IPVS: Scheduler module ip_vs_sip not found [ 263.112997][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 263.135055][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'. [ 263.154853][T11895] IPVS: length: 141 != 8 [ 263.446387][T11898] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 263.461178][T11916] wg1 speed is unknown, defaulting to 1000 [ 263.484363][T11912] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 263.541692][T11917] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 263.824812][T11934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1545'. [ 263.831380][T11930] wg1 speed is unknown, defaulting to 1000 [ 263.866934][T11934] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1545'. [ 263.877404][T11934] netlink: 'syz.3.1545': attribute type 6 has an invalid length. [ 263.893306][T11934] netlink: 'syz.3.1545': attribute type 5 has an invalid length. [ 263.901563][T11934] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1545'. [ 263.919441][T11937] netlink: 'syz.3.1545': attribute type 4 has an invalid length. [ 263.931114][T11934] netlink: 'syz.3.1545': attribute type 4 has an invalid length. [ 264.048785][T11916] lo speed is unknown, defaulting to 1000 [ 264.089681][T11916] vxcan1 speed is unknown, defaulting to 1000 [ 264.097569][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 264.179726][T11948] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1549'. [ 264.956753][T11930] lo speed is unknown, defaulting to 1000 [ 265.182305][T11930] vxcan1 speed is unknown, defaulting to 1000 [ 265.661974][T11970] netlink: 'syz.0.1554': attribute type 33 has an invalid length. [ 265.980456][T11970] wg1 speed is unknown, defaulting to 1000 [ 266.304416][T11973] __nla_validate_parse: 3 callbacks suppressed [ 266.304437][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1555'. [ 267.077533][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 267.088842][T11990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.228158][T11993] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1561'. [ 267.243339][T11916] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 267.255287][T11916] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 267.263729][T11916] CPU: 0 UID: 0 PID: 11916 Comm: syz.1.1540 Not tainted syzkaller #0 PREEMPT(full) [ 267.273132][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.283218][T11916] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 267.288985][T11916] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 6d e6 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 45 e6 ab f7 4d 8b 75 00 4d 8d a7 30 [ 267.308630][T11916] RSP: 0018:ffffc9001b9ef808 EFLAGS: 00010046 [ 267.314743][T11916] RAX: 0000000000000000 RBX: ffff88807ec35400 RCX: dffffc0000000000 [ 267.322768][T11916] RDX: 0000000000000000 RSI: ffffffff8bbf08c0 RDI: ffff88807ec35400 [ 267.330779][T11916] RBP: ffff888031074000 R08: ffffffff8e67fa33 R09: 1ffffffff1ccff46 [ 267.338806][T11916] R10: dffffc0000000000 R11: fffffbfff1ccff47 R12: ffff88807c03f650 [ 267.346903][T11916] R13: 0000000000000000 R14: ffff88807ec35430 R15: ffff88807c03f000 [ 267.354912][T11916] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 267.360555][T11994] ieee80211 û: Selected rate control algorithm 'minstrel_ht' [ 267.363868][T11916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.377842][T11916] CR2: 0000001b31123ffc CR3: 0000000078d7e000 CR4: 00000000003526f0 [ 267.385851][T11916] Call Trace: [ 267.389150][T11916] [ 267.392108][T11916] lec_push+0x3cb/0x1860 [ 267.396402][T11916] ? __pfx_lec_push+0x10/0x10 [ 267.401122][T11916] vcc_release+0x15f/0x580 [ 267.405581][T11916] sock_close+0xc3/0x240 [ 267.409863][T11916] ? __pfx_sock_close+0x10/0x10 [ 267.414758][T11916] __fput+0x44c/0xa70 [ 267.418783][T11916] task_work_run+0x1d4/0x260 [ 267.423430][T11916] ? __pfx_task_work_run+0x10/0x10 [ 267.426259][T11989] wg1 speed is unknown, defaulting to 1000 [ 267.428583][T11916] do_exit+0x6b5/0x2300 [ 267.428622][T11916] ? do_raw_spin_lock+0x121/0x290 [ 267.436943][T11970] lo speed is unknown, defaulting to 1000 [ 267.438665][T11916] ? __pfx_do_exit+0x10/0x10 [ 267.444810][T11993] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 267.449432][T11916] do_group_exit+0x21c/0x2d0 [ 267.466482][T11916] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.471722][T11916] get_signal+0x1285/0x1340 [ 267.476271][T11916] arch_do_signal_or_restart+0xa0/0x790 [ 267.481861][T11916] ? unshare_nsproxy_namespaces+0x145/0x170 [ 267.487788][T11916] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.489641][T11970] vxcan1 speed is unknown, defaulting to 1000 [ 267.493975][T11916] ? ksys_unshare+0x7b7/0x8c0 [ 267.494016][T11916] ? exit_to_user_mode_loop+0x40/0x130 [ 267.510231][T11916] exit_to_user_mode_loop+0x72/0x130 [ 267.515557][T11916] do_syscall_64+0x2bd/0xfa0 [ 267.520186][T11916] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.525418][T11916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.531514][T11916] ? clear_bhb_loop+0x60/0xb0 [ 267.536310][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.542315][T11916] RIP: 0033:0x7fcaff58f749 [ 267.546744][T11916] Code: Unable to access opcode bytes at 0x7fcaff58f71f. [ 267.553807][T11916] RSP: 002b:00007fcb0039d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 267.562230][T11916] RAX: fffffffffffffffc RBX: 00007fcaff7e6090 RCX: 00007fcaff58f749 [ 267.570210][T11916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 267.578184][T11916] RBP: 00007fcaff613f91 R08: 0000000000000000 R09: 0000000000000000 [ 267.586159][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.594137][T11916] R13: 00007fcaff7e6128 R14: 00007fcaff7e6090 R15: 00007ffc33030388 [ 267.602123][T11916] [ 267.605144][T11916] Modules linked in: [ 267.609058][T11916] ---[ end trace 0000000000000000 ]--- [ 267.614518][T11916] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 267.620255][T11916] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 6d e6 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 45 e6 ab f7 4d 8b 75 00 4d 8d a7 30 [ 267.639882][T11916] RSP: 0018:ffffc9001b9ef808 EFLAGS: 00010046 [ 267.645982][T11916] RAX: 0000000000000000 RBX: ffff88807ec35400 RCX: dffffc0000000000 [ 267.653978][T11916] RDX: 0000000000000000 RSI: ffffffff8bbf08c0 RDI: ffff88807ec35400 [ 267.661962][T11916] RBP: ffff888031074000 R08: ffffffff8e67fa33 R09: 1ffffffff1ccff46 [ 267.669946][T11916] R10: dffffc0000000000 R11: fffffbfff1ccff47 R12: ffff88807c03f650 [ 267.677934][T11916] R13: 0000000000000000 R14: ffff88807ec35430 R15: ffff88807c03f000 [ 267.685918][T11916] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 267.694874][T11916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.701470][T11916] CR2: 0000001b31123ffc CR3: 0000000078d7e000 CR4: 00000000003526f0 [ 267.709456][T11916] Kernel panic - not syncing: Fatal exception [ 267.721033][T11916] Kernel Offset: disabled [ 267.725367][T11916] Rebooting in 86400 seconds..