last executing test programs: 3.531670694s ago: executing program 4 (id=1661): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8000, 0x80, 0x3, 0x8d77, {{0x40, 0x4, 0x0, 0x7, 0x100, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x8, [{@rand_addr=0x64010101, 0xfffffffa}, {@loopback, 0x2}, {@private=0xa010102, 0x2}, {@loopback, 0x80}]}, @lsrr={0x83, 0xf, 0x8b, [@rand_addr=0x1, @loopback, @multicast1]}, @cipso={0x86, 0x1d, 0x0, [{0x6, 0x3, '\f'}, {0x1, 0x7, "6173eb4477"}, {0x0, 0xd, "48b771f504c62bb6b77101"}]}, @lsrr={0x83, 0x23, 0xf1, [@remote, @private=0xa010100, @loopback, @rand_addr=0x64010102, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x4d, 0x0, [{0x1, 0x12, "0866cc5cf80cb96b428e4ca5b9e37a0d"}, {0x6, 0xe, "df5c85b6549db92e3b8334e3"}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x12, "439d0254f5ce5334584cb24447a45e57"}, {0x0, 0x5, "7f0f19"}, {0x2, 0xa, "365d39ada1f4d534"}]}, @noop, @lsrr={0x83, 0x17, 0x90, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3}, @empty, @empty, @local]}, @lsrr={0x83, 0xf, 0xcb, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200fffc09000200730008000440000000000900010073797a30000000000800140a03000000000000000000020000000900010073797a300000000008000340000000090900020073797a3100000000140000001100010000000000000000000000000a00"/146], 0x98}}, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r6, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x48}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01040000000000000000050000070900020073797a3200d800000000000000797a310000000020000000000a01080000000000000000020000030900010073797a3100000000140000001100010000000000000000000200000a"], 0x74}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={@default, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null, @default]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x38b137f9a619bb39, 0x14, '\x00', 0x0, @fallback=0x2f, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.485795448s ago: executing program 3 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x54, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.380543322s ago: executing program 4 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r3, r3}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, 0xfffffffffffffffc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10320) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x3) (async) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) (async) close(r6) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7, 0x9bc5280eb99784e}, 0xc) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 3.345475222s ago: executing program 3 (id=1667): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10802, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x8, 0xfe, 0x1, 0x6}, {0x5, 0xa, 0x80, 0x9}, {0x8, 0x7f, 0xa, 0x3056}, {0x6, 0xc0, 0xf1, 0x7}, {0x7, 0x0, 0xa4, 0x3}, {0x0, 0x7e, 0x5, 0x1}, {0xf, 0x4, 0x20, 0x3}, {0x5, 0xfb, 0x8, 0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x230, 0x1d8, 0x1d8, 0x230, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffffff, 0xff, 'batadv0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x7, {0xb}}}, @common=@icmp={{0x28}, {0x8, "1cdf", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7008, 0x4, [0x22, 0x38, 0x16, 0x35, 0x14, 0x8, 0x3, 0x8, 0x1f, 0x6, 0x2b, 0x1, 0xa, 0x22, 0x15, 0x23], 0x2, 0xb, 0x40000007}}}, {{@uncond, 0x3202, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x7, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff8d0100"}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2], [0x8, 0xb3, 0x5, 0x9, 0x6c]}}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/147, 0x93, 0x1, &(0x7f0000000680)=""/175, 0xaf}, &(0x7f00000004c0)=0x40) close(0x3) 2.405899043s ago: executing program 1 (id=1671): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000200)={r0}) 2.364018418s ago: executing program 2 (id=1672): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ac14142e0000000000000000000000000000030000000000020080802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0200000000000000000000000000010000000000000000000000000000000100030000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141439000000000000000000000000ac14142c0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0xc080}, 0x4020800) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ac14142e0000000000000000000000000000030000000000020080802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0200000000000000000000000000010000000000000000000000000000000100030000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141439000000000000000000000000ac14142c0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0xc080}, 0x4020800) (async) 2.278631189s ago: executing program 4 (id=1673): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xb, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2a, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf256600000008000300", @ANYRES32=r8, @ANYBLOB="0c009900010400003d0000000800b7007a0000000800b700530000000800a100020000000800a0000800000008009f0005000000080026006c09000008002700020000000800a100000000000800275004dd2b3c8987c6000100000008002700000000000500190105000000050019010d0000000800a000020000000800b7003d0000000800b700710000001c00b9801800bb000800bf0007000500000405004c00fcff04000a00080026006c0900000400b800"], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x64, 0x0, 0xd0a, 0x6, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x14004) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {0x0, 0x5}, {0x1c, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x5c}]}}]}, 0x44}}, 0x24004000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.276834449s ago: executing program 2 (id=1674): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x6, @mcast2, 0x7}}, 0x0, 0x0, 0x400, 0x20000000, 0x15, 0x0, 0xb}, 0x9c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (rerun: 64) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3) (async) ioctl$PPPIOCGIDLE(r3, 0x4004743c, &(0x7f0000000100)) (async) shutdown(r0, 0x2) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000002000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f0100000000edff0000000000000000008400002e5f2e00"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.244149116s ago: executing program 0 (id=1675): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0x8, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) 2.213958471s ago: executing program 3 (id=1676): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000001c0)) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x104400, 0x4) 2.114711151s ago: executing program 4 (id=1677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r4, 0x0) accept$ax25(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000007000000140600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) close(r1) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="280000001100010027bd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="c000000000140000ef4da59a0f000800"], 0x28}, 0x1, 0x0, 0x0, 0x60000145}, 0x40804) 2.11447497s ago: executing program 2 (id=1678): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 2.101522271s ago: executing program 0 (id=1679): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @empty, 'ip6erspan0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000100000000000004000006000008001b0000000000"], 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0x3}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x101}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3ae3bd30910dde7a}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x1843}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000462400001800e000100627974656f726465720000002c00028008000140000000120800024000000000080004400000009b080003400000000108000540000000230900010073797a300000000093c55d4286bfb3aee1afd549b119f45b797a3200000000140000001100010000000000000000000000000a0000000000bc000e438febec6c014c49828bb81d54369143ce3699fdcdf8427aa42fbb26a49a1a6eb5f0392b47990ca1ef77bd0e31ce2bc7b2725a3e820d29e22ee01d2d93b2313efe"], 0x98}}, 0x44000) r8 = socket$key(0xf, 0x3, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r11, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x8, 0x4}}}}}}, 0x0) 1.68706661s ago: executing program 0 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000002030102000000000000000007000000080005c34000000008000100000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe, 0x7, 0x6361, 0x1, 0xfffffffd, 0x6}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x7, 0xfffff8d2, 0x1, 0x80, 0x1}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.482649715s ago: executing program 3 (id=1681): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000940)="03a6be14a92ea04cea4b5dc4221fa028e54d35272a78f6942ee89e17d6ab6b20f7d17108d85a954df0cfdcfe1376fa83af1d99e71df4b922102f8c7c08c71730b755618c5eee579b84e0c3", 0x4b}, {&(0x7f00000009c0)="ee8b6d11b1929f95970402ca44c2ad1549094c0dfbb22c5bc56a1f0e04997b00c00ba22596dc6f54874e9eed9239b4e1095cf853355ac96707599043d2164bba482db53a44f3502fcd1ce8feeca716dc1fef9cf46e2e86563dc7d4b139bad348c54088760aecab52b2aa3c422519e49b5f7bd313d807a4b2a938e10ad1eedd073bb8d902cc241a108063d2719ba5df695eefe1f3975a8b43d9d1ff", 0x9b}, {&(0x7f0000000b40)="3c264a0a5f40b017566cb66614f97541f8a5094b9ee10a9d61e5588ce65fda7598bd5152b368c7c05c48180b6616685b60172337af85bf1b3f5e82746d3d2b3918d2112015eb2a702566b8dd6b4e1c9d5ffeabb8dfef3e3d23ec1abf0b7a0770694ff32b4c4dafca81c5f49d996c07dae0dbc13efaeb65334793be5613b2e1af18b7f3c668f587306ed1b285a27495e5d949ec1f0c311a7bcd51c982e50d3c97", 0xa0}, {&(0x7f0000000c00)="a98c28be61e88d37d23c6353ec60db1173d3813908731b0d19e755155aa91a0d55d80e184899e276640d11374b3207e05b75217268ddeb5ea752e92e4f09f54008643cda0a9d0756e559", 0x4a}, {&(0x7f0000000c80)="caf0648e07c12b1870e573580345bf8712b621ae6793a182ec049939fcd8b49b3827cac4d05726dfb4588269cb8df2beb7328154ad38b617220a41deb0633140cfe225f4136419931ed4ef922d7128bb6f6bcd08f93036072aada8d443f7433ac51534e27241368645ea828b2d5b30c6c7cc", 0x72}], 0x5, &(0x7f0000000d80)=[@assoc={0x18, 0x117, 0x4, 0x19b}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x38, 0x117, 0x2, 0x21, "12dee9f73129f98103a78c301390ab3d28ec3eb1c9b75a83d7ea97d9fd608a041f"}], 0x80, 0x20048800}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e00)="884f667f848413d89e0a2010e42b18c370f3245a63d3c145a45e4d957311abb24cf21383810bfde2bc643afc95e523e2301251385c9a96a371a460e6292ba2022d121e", 0x43}, {&(0x7f0000000e80)="b47b483e015b56efedd56432a6bda2d6c128d829cc6eeb359387e3fd68523adb43d2326703bfabf1a7d65a17ad546886405bcacc4322e981510f480a9bfef7df8834a39e38c103c8160825", 0x4b}, {&(0x7f0000000f00)="fc908bc24b047ea87c469780610f1f942322588cf3fc519785a39c296cd1180edbd360a90da9a11c88e4b7e31a63094f5f99cbbfa1112d78f5515291401cb8b32d4b4c52ef2eb2952a6aebe28a6ba4ecd6c24a23c643e18af2711cd2a7088cac8b7ce23c258a477f54b9e2f39452d7404fafb936e243dec228b9da9d1e4a8d616aeab75b6b5c6033c2c6db307a63ba8c4fea04301756e4f00a08f785fc38121fb59b87cb3386e7200ad17db8a67abb", 0xaf}, {&(0x7f0000000340)="fb7f31a9769d497c1802de3f85f19b025427965657e8b06b4a97", 0x1a}], 0x4, &(0x7f0000000fc0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @iv={0xc0, 0x117, 0x2, 0xa9, "d940b0cb9a1f11914291dd6221b19cafa1f41bffad99a2c022f8f81917f63b07c35029be467cc2429e1377c6e43d7a8030e1cfa82bd3f0eb4a010ce575651d247762545bee26c54692eb82b44f88527fb92586c53f571cb3782de99391a45ae91e0dc2fc0d25b1e4635377009702f58c6ea4b0f7bf4e162d0c498f0d48cf0fe62338e49e1702556fd4a433515bb351c19e16f4aa2f49aa4bb207b257f422c7b959e3d31e21f119917d"}, @op={0x18, 0x117, 0x3, 0x1}], 0x138, 0x4000}, {0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000a80)="6f7db15459c9d44fc5ced4f753a76099929416dc649b7cbbcd15374abf5b65299d06bfa05144be0a75afdaf232b6663c14c92fba8a14ccea", 0x38}], 0x1, &(0x7f0000001140)=[@op={0x18}], 0x18, 0xa801}, {0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001180)="0382c307dac851a4212e1ec662ee759e40371a724d2bf499b55b64031f9904c6eca1925229b013b8c5cd107e0ecc2e1c3373e935110ecc4dbc6b08428e4c87edb64ef87172d3d1c96e90603e4ffb3badd188cc53a7220026329057bc22426f259e7b7e407e3c23ee06c01753723886993c8b5ee054b3824ca4b5b625de29cf7eb1dcf3783c3678823058b37ea8431672a9c4846d17180ceb24f0d7d51e65ddd06a924a297309d06e08a1583d2514b06f10d315c1ecaa8c4f585ce67560cba70bf9829a27b5537487aa2e3cdbcc6a864b1a8e9e1d8ee278a3ddeadfa529f42d0a464e93ea2902", 0xe6}, {&(0x7f0000001280)="1d45a11bd456bd18199d47ee09e2b0d205cac2fc76703ec3886c189676b88463eb7efc3496a7a718acf9615157e0548260b30f6165429d34978f0323b9758b8927e2e2cedbb75fd13b2e6cd34c30d9478826eef3bc114fdac3823fdeeb4e7d19578b1ad4d1dd6450d700942113c7edc91b2a03ff71f434c6e87f075a6b7229e4780c1afec055e6ec83b8f9c0af1ef3963294083fbc3a937fb2f17b05cc16d7a792db7c6c7014513200", 0xa9}, {&(0x7f0000001480)="f65bfe4770afcf32217100053a68df563526cee7321589b982b954d0019440b6e1ae8165c7ef6e6b315d407d59a225a80fe270ee705f3ce4346fdb5c5535ece954696932d978e6277f7238a30fb065d7e7c64bc2ffdcf937a66f91a2da9832cfb58025adfb6c9707681ee6f14f14d6b76bbb360a9bd91987cb4a67916be906aa2a8c94e9fe683ac94acef267731122fe581681a6c61ebe85104035cfebfecb18ece82f169ef4cc345cdc7a18291f2f57fe22fd91ead001d7654c13d4d350277aaba8bf40372b07c6fbb7e0e713dfdb5d72b7e91be7e18df1740f356be15bcc324f042784487b2cb3038741877fd6e2aad467e3c1a7b0a2d5", 0xf8}, {&(0x7f0000001340)="0668e7038ad119d243afd56ac8f35dcaa02b72d719cabfca8fa7afffcb6dce4288d18d1001575b585e3fef38cb28a857cf4f42137cdad0b5417d1b62a6f2cb9accdc39f7d82b5b8725a4953d65b4b221b750ce722261d69ac1e558202a3ef11bfd287cc77ee3d2ea3c9ad4fb5e", 0x6d}, {&(0x7f0000002ec0)="23ed040b3ca02388c6063991abb8d82fba0711008043bb1493f0103ae42fd644e92c929e591fb236c325da35a44f96e8810590a00576fcf46c856c47b2b31a878362d527ce07e6914d5b40cfe1e43bfeaa3b3a8f0a187d10a18b19f594b5710e393aaff5025baccd7748a40f9b40ebe69d32300babbf33609e6ea3cf8ce07431323ec73a49cff643f2331144ccfae57f86a7db8e4f662a56d9d8823437591102e365f76a07c94a076b62597db6eba92fdaadae6ce895a45fe7bdb43189a7c6eed94e332ae1caa93ba658aea2a0bf93eae1b788e5b9abae70c0a2952a07d9e87b", 0xe0}, {&(0x7f0000001680)="1fe0854b4cbd573ec3ef020319012102ad7905e5221c95c7687e601d0b71b58a429b3ff7566507d3fca4b1ba1d51238e7d176947dbb72dbbedeb218950b674a4c309f855885d2db91063b3a984f32cf56f540a339a1f187bf2c389", 0x5b}, {&(0x7f0000001700)="0b02b416883af8316a6887cbc2bff3487fa3ee2244bd611b95a5dc4e2c948cbaf34778c0710b44a88c2879f471b990dc743498c2b0357a84479611", 0x3b}], 0x7, &(0x7f0000001880)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xf2, "2d43335fa6e4e57a829de643a752d83f983ce96d0aabfa928781b0227296988f6a56d790a5f28640c1817b1d06a2cad36fc7479c2280f50d7785d40c37809c04874c970cf180639713b06bf2d7297e8e0f98785bc9f84e8cb334c0e20fddc146b3ee6ce9f60b44a61094f3af912748efc5ba7080f811ddc7c9e475092a57fc10f90c8aeeb7256f39971dcaaa95bea063066b181b978fa3c431c25406e56cead94e1a3091a92276c28368913bddc85e4aca695c3540a532856274f9e84c5ab6fe59c843ddb866fc67aa6627d14500d7f39ac54b9eff51ef2b1356a90d6c350804aaa11759646e0699620d22a1b6c4608b3ee4"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xe1e}, @op={0x18}], 0x1e0, 0x48000}, {0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001a80)}, {&(0x7f0000001ac0)="450a60b5aebb95d372684e54a2a2444e9db775fe48c2132036b3ad5bcddc13a3660b39d034c4c2085c045ab4130eec6bb2979f7853d9e04dff599acd84d7ea77a43cd84287ac7f155bfbafbb5e11ec157d98a7904eb9e646d028de9049b02da97069e1409aa707cfa2ccf17eaa97cc7b53fa820fc6ba4ac2df208c45632688398cc737fc1cdaf082890018f5e76f04db6f1cde0baf0898df1930", 0x9a}, {&(0x7f0000001b80)="e569bc7ff39fd0809c88ea6a47f58cfe15d3507c57c1f522aed81fd82115bd678927a90f6a0fa7f7a678884010b97020de8cf7d69686ae6fa2a0b97b89", 0x3d}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="2272da15847b9a6daeef0efb1d0a5d76e8a8c2916105faf9feafcfbc5e70cbf696aff95dcc7afde528b82284d7f2ae267e100e00ec9dabfac58f6ef53b65293ddadebd3a061f6a3fcbbf", 0x4a}], 0x5, &(0x7f0000002cc0)=[@op={0x18}, @iv={0x40, 0x117, 0x2, 0x26, "b13fde9c869fcfedb18a816878891a7a58a0f6d9d64cfd743d80d83078af00f4cdd14503363d"}, @assoc={0x18, 0x117, 0x4, 0x7ff}], 0x70, 0x800}], 0x5, 0x20008800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030425bd700000469d0000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@authinfo={0x18, 0x84, 0x6, {0x68f6}}], 0x18}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000001a80)='nmi_handler\x00', r7, 0x0, 0x8001}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) 1.400841381s ago: executing program 1 (id=1682): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x261, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048880) 1.203619225s ago: executing program 2 (id=1683): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='xen_cpu_set_ldt\x00', r0, 0x0, 0xfffffffffffffffa}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x3, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x2000000000000140, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000002570a00080000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000009a9850000100000007330a08d30000001846000007000000000000000000000018190000", @ANYBLOB="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", @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000f1000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 1.094957695s ago: executing program 1 (id=1684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280400, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6gretap0\x00', @broadcast}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x100000001, 0x6, 0x5e65}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) 1.07846007s ago: executing program 2 (id=1685): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010007010078340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e0cc014c"], 0x4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) 1.017420891s ago: executing program 1 (id=1686): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000000100000851000000600000018000000000000000000000000000000650000000000000018000000000000000000000000000000950000000000000074e9ffffff0000009500000000000001"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x40, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x55}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x104, 0x4, 0x3c0, 0x1f0, 0xe8, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0xff000000, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x40}, @local, 0xffffff00, 0xffffff00, 0x6, 0x8, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x5, 0x797b, 0x78, 0x96a4, 0x7, 'team0\x00', 'wlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtaction={0x704, 0x30, 0x200, 0x0, 0x0, {0x9}, [{0x68, 0x1, [@m_sample={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5ff}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0xe, 0x6, "753d3c870ae83e7c539f"}, {0xc}, {0xc, 0x8, {0x7}}}}]}, {0x688, 0x1, [@m_mpls={0x128, 0x4, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x0, 0x8, 0x9}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x80000001, 0x1, 0x6, 0x1}, 0x2}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0xa00}]}, {0xac, 0x6, "c6d1588d24cd8301ea4c8ecfca1399d9eb27c487f8a5043162d0538c309fe678e4812332dc14e9190dc17ccfb1a1cba7e7518aa3c7ae4aa2853f66eee34f2040ea930358664c18a56a84e455c7f7cd8d7b1f85a176208967b8a94faf808fe168aa3ccc5b80bbffb86a55185ebe88c04269a4bf5624dcdef3e7162c106b44fbf185760aa07135dff1e4e5cfb906035bfcf24f4d33a24fcbfb7488d9afb69189303c293db27fc62ecd"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x130, 0x13, 0x0, 0x0, {{0x7}, {0x94, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x3f, 0x6, {0x7, 'nat\x00', 0x4, 0xb, "c6925029de945d68b7b04b3b6355b6faa6db117bc6"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x75, 0x6, "d8dd140b5b52ac30be5ef3f5abc4cca6ab8f0b0fde4bdbe6ca553b5f637a2d62ae99e2d8c47bb3eaa30452d56e5a6cb9292bbf492bbfd13c71c79bd6a40dcbb1abadaff7640c101f4cc1095d6744a5008a89ddf8df832f2a5ef7f8ebb5195997fd6a5a76db3cfda0c3e12e5bd48d9cc25e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x1d4, 0x18, 0x0, 0x0, {{0x7}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x112, 0x6, {0x5b, 'raw\x00', 0x10, 0x5, "d64bc60441e76360c29ef8ec667a2b754a67fde298213f8f5efbc68b4348295a70921f8c3f8c45a0b339caf5010362735f811c693691b59cd1702661a0addbd7943612ee87b520241a80ad3673b2326594b03f5b7a722d1fa6f15ae31b4e3afe64b8d0873541dbde3a57d5fc95b32314bac4920e30042daefe38c6ba628aad8e98e106756df770bb9145c06d1f2e71f6c2b9e5969e73115a9c40c5b5365f1560c890a389070341fd38f4d19e170e83e924f32607082a7b6ca3494260d2c912baad53cadde178cfef548f315fdc1ea148c96097f63a205b7a7bbcd39cc2939e2bbe5acbf438bc486c"}}]}, {0x98, 0x6, "e03c5590cbccb8df2a1e20edd0eef99af66a236adef6488724be9200048cad09afcd19547f616d04d7e22860a410c9daf5d948668cd4ed9a101afb7ff698608719f85362f5e34b9bc58f17bddc172f73dfa37c0eefac9b550d064f1746867c94de97910ee1d60353c76a4ca8abfc8be11c25397097a4afe09e6d1f28e4344957fc2ae14695543823870938b01752fe055a4d2e77"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x120, 0x12, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xa0d, 0x1, 0x80000001, 0x7fffffff}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7fffffff, 0x5, 0xd, 0xc}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x0, 0x5, 0x4, 0xfffffffc}, 0xde7a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x8, 0x7, 0x6ec, 0x7}, 0x229}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x7, 0x4, 0x4}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8001, 0x1, 0x7fffffff, 0x4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x4, 0x2, 0x9}, 0xfffa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x2, 0x9, 0xc}, 0x2}}]}, {0x10, 0x6, "2a64c8f5068113ba32ea03d0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x138, 0x5, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x704}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x1, 0x1, 0x2, 0x74c7}, {0x4, 0x4, 0x4, 0x7ff}, {0x6, 0x1, 0x6, 0x9}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f00000002c0)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f4, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 922.894753ms ago: executing program 0 (id=1687): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000100)="120000001a009b8a5feee09a140000003b9b", 0x12) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000140)=0x10) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r4, 0x0, 0xd}, 0x18) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619ba", 0x11}, {&(0x7f00000048c0)="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", 0x131}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r7, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000500)=""/232, 0xe8}], 0x3}, 0x3}], 0x1, 0x2100, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000000000001f3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000180)={0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r8, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r5}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x8}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000000000006cfdf67000000000000", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d000100000008002900477e0400"], 0x38}}, 0x0) r11 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r12, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$unix(0x1, 0x5, 0x0) 890.006477ms ago: executing program 4 (id=1688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, 0x0, 0x20040) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xb014, 0x80000000, 0x1f, 0x10001, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0xa, @void, @value, @value=r2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) 866.119081ms ago: executing program 1 (id=1689): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) r6 = socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r8, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) (async) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000007c0)={0x0, @default, @rose={'rose', 0x0}, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x0, [@bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000400)=0x1, 0x8) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x400c050) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 776.876088ms ago: executing program 3 (id=1690): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000240)) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001240)={0x1040, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "83e263ea887921d8176a619d36cd697a27f9082ba53511d235367b47191c65020765b9d5e05fb2bb33b57dbd5c0970a399914cecfe07346293318b73fca764af018d144c0c6691d508d620b5c6692b9f13805aecf9c5a30b8dd309a5969a8fd8bbe3a3c7cef05866e1225bcc375336965361929d617571307efc849e00c409348b393690d2a21dcabf0d4d4c3ef1a5bd21bb4533235c6002eb3556adabe360f7729ccae34fcbcf378c63d188d525dcd719fb40ac3568a59103bc110ba90b6e42b6137992477288e8a0e957dacbf414502ff1d67df37f182a29e6f5e65fd6a2ea8de293fa30d0707caca459c38a436bed192d9864f43a40cc0d2c3177c83671c9254fef34092fba0fe85b91ac3253ca6e9f606e5efd49d607b8c126bb83770e6df4af8d6214175bbabe32de6fa2d9bf3d27b1956305e2def295de07da5b43d078ff72bfde56d014225cfd0bbfd6894f9c19d7852a2879bec46bbea70bbf4aa3c63e9d4204cfc38f91fde9cab12a4bf1e1626d10548b69efb1978473fafcdadba6647bcbd09149cf7139c4f2440c0275998881abcefbd9859a54c8f0dff98c0bc61dc8142cb0d95ab49048d88ef456a836934f43290aa0cfb8d2bb8e3983d6c8d547140969992fb40ee945389fa4fc99bbea4b4f9e503d834173555a484c9682d6372a78ee44508d6659fedea598d6f6e6d53a5abd5eeeaca07ce8f7ec2416d01fe9e768d1f76329302a4912efe73bb5d72ad0536d8fca1b110f1187ec53aa3d8628cf20dcd72261efcab10f02c52f8f3b886b033a72617c88b97a4675a5139bbf1c95bc3e1d9d2336352695c57cc53f24867d4c26e91911c1486081f6e799c1d27f7dc20da34951d62ecc5bddd829c5cabf46c8e83ae095c5c77831e3ce904ef8471c43f0b43d2422661441cf036c7e7437b167c9d7c6ac63a3c437efec70b276279dcdb7358caf8d71747eb748252b1f4778b50ef153e4e8879aed6f28832f6419371711196207b0db2e87c68cb96c1b37d9b16bdf0a5f330a6ee33864ad3124f420dc22416d07424ec1a19839f154a3927d5e9c4aa553789cafab8a89f9cd68829f1daa892d2538034d71cd1101ede91a2a949d399cf52dec3c54bbfa557e6beaa4639adf17b2bbfa66eb52e168fa6c77fe4c145cf04c8ad6bf986ed8671a1c1e1b66340ae2de282c123dd1b81000b5ecb5f9b1785e693162679e5efbee8e657376b25655a428f91dda0db44ab2086033eddbbf577a510a975588df54e696ba794da9dd00959b53f7a6e8d3bd8dcd76a9dd7f48d3922fba006eee9d13d3e57de6f790be9aece80860ae840e783b0dcc4eacc7f630f3511b4b187f3d02ecec6abc897c84d181e5e1d1524b18bb196592d22a8ca27b09149e344f2883a16760d19702aa43b5ae7c98f7fdb3f03bd947baa69feed7fcc6075b0b3fa09b2445b7716ca7a90e75a559e3c0743d9fe1312f61b8c6c9284a58e6f8f39286f4a4d9d634fd24932dcceeaade7224dcf9b8931168b73a42b3d86358261154af38e9633f3196f0ed9165e956a589b5653144ce4df05778d9c422b6835a1124fe62e78930e99c5586f014a28e947a7456859ab0c5b935c6e4412071b5380ba4c6615f8738303053cab3e2b8691bbca7574d0fe4221e257d871b3f7c1d54ce3e1c8ee6594dea0b661b9de5f6c865e096346b6253f76cfa331d7ad7abae3169e2a56ca7390e8c4911ba6b3f82ca7fe7a7f55867c7b7acb08572b6656746ad5a02351aa80912acae151b40e09f2b7bb3761e2bf01fdb9783ffcc810962111f5d2fec9f61ed506e5774572464ab5478d08af6e9c05064fee921b69b625a8ee17daee4662310964899d0d7e38a5209c1267a5813ae11f50d0eaf9072382c21b54c565d40a6eab80689935c8420e0a6a7e8b3ede9293d06d2aff58c3836b862f255343fee2a1237d090752262f147ef87a883f20f64d5724b1430f2c08c09d07bd0ce3051db181caf5d9861c359d32caf9ff6f7a7c959f4af2f7d6826a32e4240db54152fb42900403a8cb192fe1da54a660c0fd59fe60e3aa0051794fc4f272bcd7ef43059f1b86be2ac89731e00a5cb0b7797ef1eb09a417a25d011e5908c62d470874a3efd8131f95962734b00bb3e5342d5f3a7767fbb8a2e5eeed20f5a2be9a21432ffd59cc28f13bd666ef16b72cee23d65db6fba9e1b1f6a8718b5c6a09050c7f8d6acbb218866a6871c473c6033c9c79f7f88a26973267352ec9ff13e104efef97a0ee28d10b8f24621b4c519b2ff479819eda45ea6786a584a273cb1e6894e122ee1af7279580302de909c226793d420205974ef96599d6dbad740e21a2f7796e93a0a7070a75ebfae37e7429fadc7e8e5ed81d4eaa04b3a27b2f93e044e2fe10b098b8b9f1d0ece10fad4cbf5408559fd021958b91351d3488277b76f656ff75ecfd0ab8f26f52b378ae3a19f23048fe11eaaee31c6eea9e5d438b070d1d8f67756e0ca9544d9b2c94fab48092bbd962e611ca7ae8075a1f069548a7c70d0bc4df5618b21a5cb43e59b753ac11e0e7685f74196f5ad8e94121c22d454734ee59eeafb04afd58aa90ae235ae4886a82fc08d586ba7fb1d0bef62f4966269e36fa89135507f8e6653f2171aa4b42f7aee1956a6668cdc3afca832d322489f9fa886695cfcd3fd9cce049fa00c3bdd720f6393e099942ff4665c6c721ad14bf9f731b7a20dc06e3d27c0c499665d734226a7df481820011996ebd0ec3499fced6ed29df30a6747246c1acd5ae1f1f237591f11db3a802c55458772ec2a00342eb06b34d3a9cddb76431b380a203b6174d3ccd01be4dc82e682340706b470d074e0a7fdce0886938a487d1283d7a76879a24f6b061048fe6b7ce10c8f869d1e5b72bf2fa15633601274bf96b3bb968c456fa35b2f0190393ac7920cc642b9b64e67683d6224437f21ac94b7e82d4beb636d95392b762980e6703a9644091ecfd1e62c41bf51c5096f690baaa048d9385d8be6284dbf7fdd7d39634c430447c86179c4b51835794943a8ed13a5a10586047b184008771b3d85b484cb3f315c03d549bb1eb469ff3ab710ad98cda6e398ea7980d320163333c12ac7b102aab55b6cbd348a6c59d012473a4ab0ea9f34e095075c77fc9982d2a06f94567f406a4004663bce845593842e34d6239454bdd5554e0ae0246a036a49311b5b1b244fb2f85e0ed6418b8c3a4195ba1c4aa56138b85acd29d2b8a9d2cdb2fa76508826d64984abdaf6a62d56cc7b77b6d884c723785875d9875a6a85345bf6374d23200683a33f7307be278664725276ae6666be452f86132b94eb32280680cd6758ff24e1dac47604c1bb0233b0c0e6de4d35dc65ff4849e96ed23bab5fd260351db8aaf5aa8047b36f654a2162d5d8870423553fe670054c0ee208de55c510e8fa15536ba3651344b84da6e78f96b97987b7053295d714895b651c46a773a22f2f0fc707930ab5249fa49a86b442e256b6d92f4a8613dbf0f8350b0eef6d1ed3333ed4891b71b973cf961ea1a40e3462ba1edd4f67f91c67198487ea8aa1483d659fb7cd8605acede5d8409209f5b4c2789791d89f3e57ef618ca6d12d65a651e3a24ea78bf7c0333a00ce3fe87f5458427a5d2f6996861576d2829c54ed63e0d8b9f5d3e38d48825536e1c84f930157898495d950745b58e3410e099979582a1f36db9eed2d551cb227767aa61804a40fc179c63145cb864cbf267f14bc4f6d7b6c904f252fe9a01dcee4af6bf5861bcba9fd1a9806af4844a89f12b46f9c1a41bb71bda824d32a908d04b4720dad3e34e578c101dd90896e3834162125dac3975788ec5fd796664f65d485515214ea08686d52eebc5874a37d21d4e90185e69d7f3ba90e3b2c106a4278b4fc0312c0d8b9434fa15c79308f0c1bd2266f4e65bfbef3260b86ae8567533c9898236eee21fd8a304d5a26c221189a6a59bbf75f77d4044e0d2aaab0c074d4e01bde504685c437560303f35ab60da03dd33efe95c3837fc46b371adca9fa00b7727882b89ead0f44ddc3b2b285c07f12e3abae25a63b7df3e727b5e6e51d82a3c3b5c4fe8c58ef356c16ff0ec585f528751c688dcae50afe710c3b71b4a38ca2f6cb94d4349ee4e9c4feb7430ba2033fa6a243a93bd12da0590c0d6e70ca0c12652a1e02810000a143bb506715c2b60a354074063e58c7538678e15145716ce4d7080428f974bd8834a8c004388a113358b28731a2b25d18d33570c7daee9e84a9c2888a09f2bf221a14873bf37220ce790ceb0cd62c25e6b4b5a0327e35f4ab69dfe9d61dc5f189fe200f0aeb8399e30b3a539efee9051e3b037fc667bc9f4ead3b11ae39a71f8a62e81aa3e5cb83c34e3ab18384594e53c7bd76c2f0d5ae444c07a1b9b3a1d2e7bd879f336031e58b58bab5e858557b964a8ab1978bc6528908976d27bd38141c313e1616738beeaf096a06a7a1daff7a2c2c4a3a0e93c4dda8ca75ab0828157494f821b244373fe0905aab6d8e2972c8770d810c7aec6a53d3a7f9cc2ed0ab7d15b465f1af7ed4a58bbe553d395c9eeecf99d7028e8b3d5c223ae483c7b71ef99951fe2e116cf081a12675809489c3e3b81d48ddd31d3a7c29decd52dba0cdf51e827eb4707a0152f345ddca457baf6746ed3e17c8f72693db274b1ff24fee26c3443f0f6bb24c15d044a2812da6b1506194865f70bf09eb3520245c066c3bf3da937723438990894f3222ae2e74502dc68ef984e55e7f7fc761fa8a3cc8a8f0af41ed06cf0ca8d4b49a6d6178a7c8de6d6b0d07879dc97dafc6a9d7e6e285c8f0704dd3b02531ac44fff7e5fcc1862247dcefd68b476c0a8e59b08c6cd930037d20860047aed1971ca65f382e87ec80abafd4cbac45eeb15812124a1b9e6e4f8c29c007ccfafe4dfe82cca008abc492a4ca9b4a0e3222975b4fbce19629910a04cfa79d8884b4b3798bc7af69d2b69005d4c2b2d19d0ee74c35fba91f787388e16f61537fd65de01f6c880924084126022cf1ef7f7c8c667d11485eca461cf323965454da7f025cd3502e8978baa2749ea5968480d797231dd56d9bf5eb2fe5f92198bfea81f3629dbc52c70f64840e294b5b5111e20d3a4cd8bc2ca1ed966a424dc9edf6062cf98cb26ed0b761af5da550736c3bc3b711b49d718a266931c6fe7d75f88b2180d5b70265a8c0eb01c1cb7036b48f5074dee855ae308c1b4ce80a6180d5a20e0bba4540dc35e6ba2cf8c0f4e377d5f5f31d9fbd6013d9016faa074be335fc91d0466c0efa6a9f9634b8d93dc14cce1f8306e56ca98ad81cc8f6d1bae10fd5fde22b0162f75dbc96a4be374e09b6304c625c7dee36cfd87f464b89278707e9107e9e41f8a38ad29140ea96637cdb40ea2930881838b7dad08556db671da06e53221724d34f82bb6934ec8dfa99e3e017dc2496b8d4f54196b33bc59dd4a7f07058384a92550125b9cee70342ff6cdc24fe1c406b0f2d68dc5aa391a7ffcbcb1335017f29a202a85155dd57806592e51d990720d7d2601fa58773a1e45fde1e88d98856571e9f31d7ba925a85dce5b8940db5f5dc5e6c14fcdfdc5443937a3e1fd9c3110b04dca4dc48127704e66633218dd21b40ca18fd8faadb39aefbb3847dcaa7b80c1fd8bba1dfdc1514526bd2c50f800d15e6e04d255e252926107171ffccc806dc51a54c5f3f0fd2c0916c5741087084b2ee6437ed9921dfbe4f506501e47e03dd276457c5fff2fa5ef2344cd8c2d7b15342be2841e0cc14566a49d53e3828b254b941629e622a2177b12cd3"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40000) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x2, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x3c, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x100}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}]}, 0x3c}}, 0x48080) 438.551968ms ago: executing program 0 (id=1691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x24}, 0x28) 334.855521ms ago: executing program 0 (id=1692): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)=0x51) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0x5, 0x43) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090ef2dbb"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/274], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000080), &(0x7f0000000440), 0x3, r5}, 0x38) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @remote, 0x10001}}, 0x24) close(r2) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r7, 0x0, 0x4, 0x0, 0x44) socket$inet6_udplite(0xa, 0x2, 0x88) 122.308107ms ago: executing program 4 (id=1693): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 113.232187ms ago: executing program 1 (id=1694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000002ea100000000000740854e65e08bc0009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x6}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc11000900000000060015000400000014001680100008800c00038005000100"], 0x38}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e40)="1408760a648197fba905f8e486db", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = socket(0x10, 0x803, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r10, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)="31249d", 0x3}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x280}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000840)="c04dac56", 0x4}], 0x1}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x6, @private1, 0x1ff}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000c40)="dd769117", 0x4}], 0x1}}], 0x3, 0x40048d1) setsockopt(r10, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r11, 0x1, 0x6, 0x6, @broadcast}, 0x14) 51.006247ms ago: executing program 2 (id=1695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) sendmmsg(r1, &(0x7f000000a400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101c000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000f6ff000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c00038008000140180003801400010076657468315f00005f626f6e64000000080002"], 0x104}}, 0x800) 0s ago: executing program 3 (id=1696): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29"], 0x6c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 938392][ T7660] syzkaller0: entered promiscuous mode [ 124.944010][ T7660] syzkaller0: entered allmulticast mode [ 125.008623][ T7670] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 125.038742][ T7670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.044358][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 125.049841][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.444'. [ 125.074102][ T7670] bond0: (slave dummy0): Releasing backup interface [ 125.085542][ T7670] bond5: (slave dummy0): making interface the new active one [ 125.094310][ T7670] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 125.115242][ T7674] netlink: 72 bytes leftover after parsing attributes in process `syz.3.440'. [ 125.530588][ T7679] netlink: 72 bytes leftover after parsing attributes in process `syz.0.446'. [ 125.572598][ T7681] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.447'. [ 126.010187][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'. [ 126.844284][ T7719] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 127.021894][ T7725] netlink: set zone limit has 8 unknown bytes [ 127.160622][ T7725] sctp: [Deprecated]: syz.2.459 (pid 7725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.160622][ T7725] Use struct sctp_sack_info instead [ 127.252980][ T7730] netlink: set zone limit has 8 unknown bytes [ 127.382706][ T4828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.398926][ T4828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.775294][ T7762] tipc: Enabled bearer , priority 0 [ 127.862253][ T7762] syzkaller0: entered promiscuous mode [ 127.876274][ T7762] syzkaller0: entered allmulticast mode [ 127.916603][ T7759] tipc: Resetting bearer [ 127.963443][ T7758] tipc: Resetting bearer [ 128.011552][ T7758] tipc: Disabling bearer [ 128.335213][ T7792] openvswitch: netlink: EtherType 0 is less than min 600 [ 128.371029][ T7792] xt_hashlimit: max too large, truncated to 1048576 [ 128.619589][ T5889] IPVS: starting estimator thread 0... [ 128.622473][ T7801] __nla_validate_parse: 3 callbacks suppressed [ 128.622490][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 128.631907][ T7784] netlink: 'syz.0.474': attribute type 4 has an invalid length. [ 128.729098][ T7802] IPVS: using max 32 ests per chain, 76800 per kthread [ 129.213654][ T7815] tipc: Enabling of bearer rejected, already enabled [ 129.387420][ T7818] sctp: [Deprecated]: syz.0.485 (pid 7818) Use of int in max_burst socket option deprecated. [ 129.387420][ T7818] Use struct sctp_assoc_value instead [ 129.604053][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.487'. [ 129.615639][ T7829] netlink: 72 bytes leftover after parsing attributes in process `syz.4.487'. [ 129.639398][ T7828] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 129.746375][ T7828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.772317][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 129.811744][ T7828] bond3: (slave dummy0): making interface the new active one [ 129.824499][ T7828] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 130.112807][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 130.902426][ T7869] tipc: Enabled bearer , priority 0 [ 130.910170][ T7869] syzkaller0: entered promiscuous mode [ 130.915699][ T7869] syzkaller0: entered allmulticast mode [ 130.943245][ T7869] tipc: Resetting bearer [ 130.951786][ T7866] tipc: Resetting bearer [ 130.971628][ T7866] tipc: Disabling bearer [ 131.086295][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 131.114602][ T7872] netlink: 84 bytes leftover after parsing attributes in process `syz.2.499'. [ 131.138343][ T7874] sctp: [Deprecated]: syz.0.500 (pid 7874) Use of int in max_burst socket option deprecated. [ 131.138343][ T7874] Use struct sctp_assoc_value instead [ 131.436395][ T7881] syzkaller1: entered allmulticast mode [ 131.983749][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.505'. [ 132.174240][ T7907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.186769][ T7907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.361333][ T7907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.389319][ T7907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.522512][ T7907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.533793][ T7907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.661163][ T7907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.693366][ T7907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.725949][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.509'. [ 132.919390][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935930][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.073625][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.512'. [ 133.142001][ T4828] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.164101][ T4828] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.224080][ T7929] sctp: [Deprecated]: syz.2.514 (pid 7929) Use of int in max_burst socket option deprecated. [ 133.224080][ T7929] Use struct sctp_assoc_value instead [ 133.228498][ T7340] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.279579][ T7340] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.327436][ T7932] netlink: 'syz.0.515': attribute type 33 has an invalid length. [ 133.332310][ T7340] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.350895][ T7340] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.423573][ T7934] bridge0: port 1(macvtap1) entered blocking state [ 133.431132][ T7934] bridge0: port 1(macvtap1) entered disabled state [ 133.439790][ T7934] macvtap1: entered allmulticast mode [ 133.445321][ T7934] bridge0: entered allmulticast mode [ 133.458677][ T7934] macvtap1: left allmulticast mode [ 133.463919][ T7934] bridge0: left allmulticast mode [ 133.503150][ T1320] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.515111][ T1320] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.539125][ T7936] bridge0: port 1(macvtap1) entered blocking state [ 133.545859][ T7936] bridge0: port 1(macvtap1) entered disabled state [ 133.552827][ T7936] macvtap1: entered allmulticast mode [ 133.558278][ T7936] bridge0: entered allmulticast mode [ 133.568337][ T7936] macvtap1: left allmulticast mode [ 133.573925][ T7936] bridge0: left allmulticast mode [ 133.658265][ T1320] bond3: (slave dummy0): link status definitely down, disabling slave [ 133.685308][ T1320] bond3: now running without any active interface! [ 133.783775][ T7944] tipc: Enabled bearer , priority 0 [ 133.791354][ T7944] syzkaller0: entered promiscuous mode [ 133.796848][ T7944] syzkaller0: entered allmulticast mode [ 133.834641][ T7944] tipc: Resetting bearer [ 133.849855][ T7942] tipc: Resetting bearer [ 133.886936][ T7942] tipc: Disabling bearer [ 134.309626][ T7971] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 134.646974][ T7986] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 134.702184][ T7988] sctp: [Deprecated]: syz.0.531 (pid 7988) Use of int in max_burst socket option deprecated. [ 134.702184][ T7988] Use struct sctp_assoc_value instead [ 134.804789][ T7993] sch_tbf: peakrate 65535 is lower than or equals to rate 15348107221646557341 ! [ 134.806288][ T7995] netlink: 'syz.0.534': attribute type 11 has an invalid length. [ 134.823633][ T7995] __nla_validate_parse: 2 callbacks suppressed [ 134.823649][ T7995] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.534'. [ 134.859162][ T7997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.533'. [ 134.868206][ T7997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.533'. [ 134.926281][ T7995] vlan2: entered promiscuous mode [ 134.945448][ T7995] bond0: entered promiscuous mode [ 134.954721][ T7995] bond_slave_0: entered promiscuous mode [ 134.963359][ T7995] bond_slave_1: entered promiscuous mode [ 134.969798][ T7995] vlan2: entered allmulticast mode [ 134.975030][ T7995] bond0: entered allmulticast mode [ 134.980257][ T7995] bond_slave_0: entered allmulticast mode [ 134.993750][ T7995] bond_slave_1: entered allmulticast mode [ 135.103648][ T8009] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 135.167462][ T8011] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 135.243139][ T8011] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.258632][ T8015] bond5: (slave dummy0): Releasing active interface [ 135.286993][ T8015] bond6: (slave dummy0): making interface the new active one [ 135.297495][ T8015] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 135.321171][ T8023] tipc: Started in network mode [ 135.326297][ T8023] tipc: Node identity 3e47b1dfcf79, cluster identity 4711 [ 135.334434][ T8023] tipc: Enabled bearer , priority 0 [ 135.342154][ T8023] syzkaller0: entered promiscuous mode [ 135.358407][ T8023] syzkaller0: entered allmulticast mode [ 135.386442][ T8022] tipc: Resetting bearer [ 135.426148][ T8022] tipc: Disabling bearer [ 135.609303][ T8042] netlink: 44 bytes leftover after parsing attributes in process `syz.1.548'. [ 135.821235][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.551'. [ 135.879828][ T8054] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.955505][ T8054] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.023470][ T8054] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.071613][ T8058] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.553'. [ 136.082607][ T8058] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.553'. [ 136.093413][ T8058] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.553'. [ 136.095474][ T8054] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.103694][ T8058] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.553'. [ 136.127781][ T8058] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.553'. [ 136.177546][ T3927] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.196498][ T3927] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.215532][ T3927] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.241161][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.702035][ T8087] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 136.778696][ T8087] 8021q: adding VLAN 0 to HW filter on device bond6 [ 136.840957][ T8087] bond5: (slave dummy0): Releasing active interface [ 136.850819][ T8087] dummy0: left allmulticast mode [ 136.864035][ T8087] bond6: (slave dummy0): making interface the new active one [ 136.873445][ T8087] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 137.426270][ T40] IPVS: starting estimator thread 0... [ 137.434263][ T8130] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 137.519023][ T8131] IPVS: using max 34 ests per chain, 81600 per kthread [ 137.529681][ T8130] bond7: entered promiscuous mode [ 137.554985][ T8130] bond7: entered allmulticast mode [ 137.584358][ T8130] 8021q: adding VLAN 0 to HW filter on device bond7 [ 137.802606][ T8148] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 137.903813][ T8148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.924773][ T8159] netlink: 'syz.1.582': attribute type 2 has an invalid length. [ 137.998696][ T8157] bond3: (slave dummy0): Releasing active interface [ 138.041701][ T8157] bond4: (slave dummy0): Enslaving as an active interface with a down link [ 138.066140][ T8165] netlink: 'syz.1.584': attribute type 4 has an invalid length. [ 138.083694][ T8165] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 138.820431][ T8172] infiniband !yz!: set active [ 138.827152][ T8172] infiniband !yz!: added team_slave_0 [ 138.840736][ T8172] !yz!: rxe_create_cq: returned err = -12 [ 138.847779][ T8172] infiniband !yz!: Couldn't create ib_mad CQ [ 138.855083][ T8212] sctp: [Deprecated]: syz.3.596 (pid 8212) Use of int in max_burst socket option deprecated. [ 138.855083][ T8212] Use struct sctp_assoc_value instead [ 138.870931][ T8172] infiniband !yz!: Couldn't open port 1 [ 138.900231][ T8215] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 138.962990][ T8172] RDS/IB: !yz!: added [ 138.986190][ T8172] smc: adding ib device !yz! with port count 1 [ 138.994132][ T8172] smc: ib device !yz! port 1 has no pnetid [ 139.015486][ T8215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.043658][ T8220] bond3: (slave dummy0): Releasing active interface [ 139.067270][ T8220] bond4: (slave dummy0): making interface the new active one [ 139.083601][ T8220] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 139.374763][ T8236] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 139.880333][ T8253] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 139.904160][ T8253] tipc: Cannot configure node identity twice [ 140.554763][ T8292] __nla_validate_parse: 38 callbacks suppressed [ 140.554791][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.621'. [ 141.135517][ T8303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.625'. [ 141.145013][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.625'. [ 141.209788][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 141.455196][ T8312] xt_connbytes: Forcing CT accounting to be enabled [ 141.634130][ T8323] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 141.703526][ T8326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 141.730716][ T8323] 8021q: adding VLAN 0 to HW filter on device bond7 [ 141.743274][ T8326] veth0_to_batadv: entered allmulticast mode [ 141.787563][ T8333] No such timeout policy "syz1" [ 141.803336][ T8323] bond6: (slave dummy0): Releasing active interface [ 141.811773][ T8332] netlink: zone id is out of range [ 141.816924][ T8332] netlink: zone id is out of range [ 141.836525][ T8323] bond7: (slave dummy0): making interface the new active one [ 141.860691][ T8323] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 142.108802][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.637'. [ 142.140877][ T8352] Driver unsupported XDP return value 0 on prog (id 329) dev N/A, expect packet loss! [ 142.319820][ T8359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.639'. [ 142.946801][ T8382] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 142.990792][ T8382] 8021q: adding VLAN 0 to HW filter on device bond8 [ 143.012305][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.647'. [ 143.059912][ T8382] bond7: (slave dummy0): Releasing active interface [ 143.081356][ T8388] IPVS: set_ctl: invalid protocol: 137 172.20.20.33:0 [ 143.116795][ T8382] bond8: (slave dummy0): making interface the new active one [ 143.131748][ T8382] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 143.159120][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 143.241465][ T8398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 143.387007][ T8402] openvswitch: netlink: IPv4 tunnel dst address is zero [ 143.492709][ T8402] sctp: [Deprecated]: syz.4.652 (pid 8402) Use of int in max_burst socket option. [ 143.492709][ T8402] Use struct sctp_assoc_value instead [ 143.552980][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 143.572361][ T8413] tipc: Enabling of bearer rejected, media not registered [ 143.937698][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'. [ 144.089516][ T8431] vxlan0: entered promiscuous mode [ 144.094679][ T8431] vxlan0: entered allmulticast mode [ 144.139116][ T1320] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.157492][ T1320] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.179468][ T1320] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.269530][ T1320] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.735034][ T8456] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 144.778532][ T8452] tipc: Invalid UDP bearer configuration [ 144.778579][ T8452] tipc: Enabling of bearer rejected, failed to enable media [ 144.822462][ T8456] team0: Device veth0_macvtap failed to register rx_handler [ 145.162027][ T8477] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 145.176361][ T8477] xt_limit: Overflow, try lower: 268435456/134217728 [ 145.301509][ T8490] netlink: 'syz.3.676': attribute type 20 has an invalid length. [ 145.326311][ T8492] x_tables: unsorted underflow at hook 1 [ 145.333343][ T8490] netlink: 'syz.3.676': attribute type 20 has an invalid length. [ 145.334131][ T8493] x_tables: unsorted underflow at hook 1 [ 145.344562][ T8490] netlink: 'syz.3.676': attribute type 20 has an invalid length. [ 145.355696][ T8490] netlink: 'syz.3.676': attribute type 20 has an invalid length. [ 145.621148][ T8517] __nla_validate_parse: 6 callbacks suppressed [ 145.621164][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.679'. [ 145.711848][ T25] block nbd0: Possible stuck request ffff888024d95080: control (read@0,1024B). Runtime 60 seconds [ 146.610306][ T8564] netlink: 'syz.2.692': attribute type 13 has an invalid length. [ 146.658382][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'. [ 147.140781][ T8575] syzkaller0: entered promiscuous mode [ 147.147116][ T8579] netlink: 68 bytes leftover after parsing attributes in process `syz.4.695'. [ 147.156691][ T8575] syzkaller0: entered allmulticast mode [ 147.453539][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 147.474033][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 147.509777][ T8588] kthread_run failed with err -4 [ 147.522230][ T8595] netlink: 44 bytes leftover after parsing attributes in process `syz.2.702'. [ 147.535597][ T8595] veth0: Caught tx_queue_len zero misconfig [ 147.587772][ T8596] bond8: entered promiscuous mode [ 147.593608][ T8596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 147.729220][ T8603] netlink: 'syz.4.704': attribute type 5 has an invalid length. [ 147.767074][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.707'. [ 148.023692][ T8620] x_tables: duplicate underflow at hook 1 [ 148.366324][ T8641] netlink: 'syz.0.713': attribute type 2 has an invalid length. [ 149.014023][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.718'. [ 149.596478][ T8682] ip6tnl1: entered promiscuous mode [ 149.639019][ T8682] ip6tnl1: entered allmulticast mode [ 149.983111][ T8696] tipc: Enabled bearer , priority 0 [ 150.080156][ T8696] syzkaller0: entered promiscuous mode [ 150.085644][ T8696] syzkaller0: entered allmulticast mode [ 150.091878][ T8696] tipc: Resetting bearer [ 150.099043][ T8704] tipc: Resetting bearer [ 150.119109][ T8696] netlink: 'syz.3.726': attribute type 33 has an invalid length. [ 150.127222][ T8696] netlink: 152 bytes leftover after parsing attributes in process `syz.3.726'. [ 151.422514][ T8704] tipc: Disabling bearer [ 151.432328][ T8696] `: renamed from team0 (while UP) [ 151.529470][ T8718] bond5: option mode: invalid value (254) [ 151.564103][ T8718] bond5 (unregistering): Released all slaves [ 151.632028][ T5831] tipc: Node number set to 2069417988 [ 151.660562][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 151.662342][ T8723] netlink: 'syz.4.731': attribute type 11 has an invalid length. [ 151.679553][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'. [ 151.682633][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 151.710979][ T8723] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 151.719549][ T8723] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.731'. [ 151.769050][ T8726] bond9: entered allmulticast mode [ 151.775179][ T8726] 8021q: adding VLAN 0 to HW filter on device bond9 [ 151.877806][ T8723] 8021q: adding VLAN 0 to HW filter on device bond10 [ 151.923327][ T8723] bond10: entered allmulticast mode [ 151.939776][ T8723] bond9: (slave bond10): Enslaving as an active interface with an up link [ 151.951033][ T8735] x_tables: duplicate underflow at hook 2 [ 151.963633][ T8738] x_tables: duplicate underflow at hook 2 [ 152.130334][ T8747] lo: entered allmulticast mode [ 152.188144][ T8746] lo: left allmulticast mode [ 152.378350][ T8761] netlink: 'syz.1.741': attribute type 19 has an invalid length. [ 152.386746][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 152.444581][ T8373] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.469398][ T8373] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.484157][ T8373] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.505450][ T8768] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 152.509447][ T8373] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.649511][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.743'. [ 152.651936][ T8768] 8021q: adding VLAN 0 to HW filter on device bond11 [ 152.695522][ T8774] bond8: (slave dummy0): Releasing active interface [ 152.735724][ T8774] bond11: (slave dummy0): making interface the new active one [ 152.759798][ T8774] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 152.782425][ T8773] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.794864][ T8773] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.867349][ T8778] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.744'. [ 152.926357][ T8773] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.937218][ T8773] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.025264][ T8779] syzkaller1: entered promiscuous mode [ 153.037849][ T8779] syzkaller1: entered allmulticast mode [ 153.056426][ T8773] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.070645][ T8773] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.150657][ T8773] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.160810][ T8773] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.212034][ T8373] bond6: (slave dummy0): link status definitely down, disabling slave [ 153.236117][ T8373] bond6: now running without any active interface! [ 153.261953][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 153.464917][ T8794] hsr_slave_1 (unregistering): left promiscuous mode [ 153.541146][ T1320] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.551287][ T1320] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.604374][ T1320] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.616750][ T1320] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.628140][ T8798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.748'. [ 153.688121][ T3449] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.696859][ T3449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.742794][ T3449] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.764948][ T3449] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.926321][ T8803] pim6reg1: entered promiscuous mode [ 153.936792][ T8803] pim6reg1: entered allmulticast mode [ 154.203783][ T8817] vlan2: entered promiscuous mode [ 154.211632][ T8817] vlan2: entered allmulticast mode [ 154.216960][ T8817] hsr_slave_1: entered allmulticast mode [ 154.226067][ T8813] syzkaller0: entered promiscuous mode [ 154.239768][ T8813] syzkaller0: entered allmulticast mode [ 154.294335][ T8822] wg1 speed is unknown, defaulting to 1000 [ 154.300829][ T8822] wg1 speed is unknown, defaulting to 1000 [ 154.308944][ T8822] wg1 speed is unknown, defaulting to 1000 [ 154.917208][ T8822] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.956915][ T8822] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 155.081033][ T8822] wg1 speed is unknown, defaulting to 1000 [ 155.154458][ T8822] wg1 speed is unknown, defaulting to 1000 [ 155.173544][ T8822] wg1 speed is unknown, defaulting to 1000 [ 155.198320][ T8822] wg1 speed is unknown, defaulting to 1000 [ 155.229446][ T8822] wg1 speed is unknown, defaulting to 1000 [ 155.237127][ T8822] wg1 speed is unknown, defaulting to 1000 [ 155.330285][ T8845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.761'. [ 155.341614][ T8845] unsupported nlmsg_type 40 [ 155.559945][ T8860] tipc: Enabling of bearer rejected, already enabled [ 156.504235][ T8864] wg1 speed is unknown, defaulting to 1000 [ 156.933659][ T8912] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 157.027370][ T8914] netlink: 'syz.1.776': attribute type 83 has an invalid length. [ 157.135956][ T8914] nbd1: detected capacity change from 0 to 63 [ 157.142440][ T8895] wg1 speed is unknown, defaulting to 1000 [ 157.189166][ T5850] block nbd1: Receive control failed (result -32) [ 157.194791][ T5838] block nbd1: Send control failed (result -32) [ 157.205997][ T5838] block nbd1: Request send failed, requeueing [ 157.220951][ T11] block nbd1: Dead connection, failed to find a fallback [ 157.231685][ T11] block nbd1: shutting down sockets [ 157.237732][ T11] blk_print_req_error: 136 callbacks suppressed [ 157.237749][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.258646][ T11] buffer_io_error: 139 callbacks suppressed [ 157.258661][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 157.276000][ T5838] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.299110][ T8924] __nla_validate_parse: 3 callbacks suppressed [ 157.300505][ T5838] Buffer I/O error on dev nbd1, logical block 1, async page read [ 157.303581][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'. [ 157.306982][ T5838] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.337997][ T5838] Buffer I/O error on dev nbd1, logical block 2, async page read [ 157.361456][ T5838] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.373564][ T5838] Buffer I/O error on dev nbd1, logical block 3, async page read [ 157.385683][ T5838] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.399542][ T5838] Buffer I/O error on dev nbd1, logical block 0, async page read [ 157.407470][ T5838] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.465019][ T5838] Buffer I/O error on dev nbd1, logical block 1, async page read [ 157.481934][ T5838] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.519616][ T5838] Buffer I/O error on dev nbd1, logical block 2, async page read [ 157.527633][ T5838] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.544096][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 157.624496][ T5838] Buffer I/O error on dev nbd1, logical block 3, async page read [ 157.636580][ T5838] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.647040][ T5838] Buffer I/O error on dev nbd1, logical block 0, async page read [ 157.658551][ T5838] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.671307][ T5838] Buffer I/O error on dev nbd1, logical block 1, async page read [ 157.683768][ T5838] ldm_validate_partition_table(): Disk read failed. [ 157.693572][ T5838] Dev nbd1: unable to read RDB block 0 [ 157.707457][ T5838] nbd1: unable to read partition table [ 157.723404][ T8931] syzkaller0: entered promiscuous mode [ 157.730793][ T8931] syzkaller0: entered allmulticast mode [ 157.764173][ T8931] tipc: Enabled bearer , priority 0 [ 157.764446][ T5838] ldm_validate_partition_table(): Disk read failed. [ 157.788192][ T5838] Dev nbd1: unable to read RDB block 0 [ 157.808713][ T5838] nbd1: unable to read partition table [ 157.847039][ T8931] tipc: Resetting bearer [ 157.935558][ T8931] tipc: Resetting bearer [ 157.973132][ T8931] tipc: Disabling bearer [ 158.159230][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 158.170117][ T8949] netlink: 72 bytes leftover after parsing attributes in process `syz.3.783'. [ 158.391590][ T8936] wg1 speed is unknown, defaulting to 1000 [ 158.402054][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 158.623409][ T8967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.790'. [ 158.797567][ T8972] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 158.892032][ T8974] syzkaller0: entered promiscuous mode [ 158.897600][ T8974] syzkaller0: entered allmulticast mode [ 158.967148][ T8979] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 158.989185][ T8979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.794'. [ 159.003950][ T30] audit: type=1804 audit(1764852969.462:2): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.795" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=811 res=1 errno=0 [ 159.037085][ T30] audit: type=1800 audit(1764852969.462:3): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.795" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=811 res=0 errno=0 [ 159.150637][ T8983] netlink: 592 bytes leftover after parsing attributes in process `syz.3.797'. [ 159.168054][ T8985] netlink: 'syz.4.796': attribute type 58 has an invalid length. [ 159.193359][ T8985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.796'. [ 159.568502][ T8990] wg1 speed is unknown, defaulting to 1000 [ 159.677601][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 159.837489][ T9007] wg1 speed is unknown, defaulting to 1000 [ 160.533096][ T9057] netlink: 'syz.0.813': attribute type 15 has an invalid length. [ 160.764213][ T9068] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 160.809783][ T9068] erspan1: entered allmulticast mode [ 160.827294][ T9035] wg1 speed is unknown, defaulting to 1000 [ 160.884916][ T9075] tipc: Enabled bearer , priority 0 [ 160.941174][ T9075] tipc: Resetting bearer [ 160.972886][ T9074] tipc: Disabling bearer [ 161.007693][ T9080] syzkaller0: entered promiscuous mode [ 161.013620][ T9080] syzkaller0: entered allmulticast mode [ 161.138391][ T9089] FAULT_INJECTION: forcing a failure. [ 161.138391][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.179126][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.1.819 Not tainted syzkaller #0 PREEMPT(full) [ 161.179151][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.179161][ T9089] Call Trace: [ 161.179168][ T9089] [ 161.179174][ T9089] dump_stack_lvl+0x189/0x250 [ 161.179195][ T9089] ? __pfx____ratelimit+0x10/0x10 [ 161.179213][ T9089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.179230][ T9089] ? __pfx__printk+0x10/0x10 [ 161.179259][ T9089] ? __might_fault+0xb0/0x130 [ 161.179288][ T9089] should_fail_ex+0x414/0x560 [ 161.179311][ T9089] _copy_from_user+0x2d/0xb0 [ 161.179334][ T9089] __sys_sendto+0x25c/0x520 [ 161.179357][ T9089] ? __pfx___sys_sendto+0x10/0x10 [ 161.179374][ T9089] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 161.179405][ T9089] ? __fget_files+0x3a0/0x420 [ 161.179429][ T9089] ? ksys_write+0x22a/0x250 [ 161.179450][ T9089] ? __pfx_ksys_write+0x10/0x10 [ 161.179469][ T9089] __x64_sys_sendto+0xde/0x100 [ 161.179492][ T9089] do_syscall_64+0xfa/0xf80 [ 161.179513][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.179529][ T9089] ? clear_bhb_loop+0x60/0xb0 [ 161.179549][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.179562][ T9089] RIP: 0033:0x7fb90138f749 [ 161.179576][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.179588][ T9089] RSP: 002b:00007fb902178038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 161.179605][ T9089] RAX: ffffffffffffffda RBX: 00007fb9015e6180 RCX: 00007fb90138f749 [ 161.179616][ T9089] RDX: 00000000000005ea RSI: 0000200000000240 RDI: 0000000000000007 [ 161.179624][ T9089] RBP: 00007fb902178090 R08: 00002000000001c0 R09: 0000000000000014 [ 161.179634][ T9089] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 161.179644][ T9089] R13: 00007fb9015e6218 R14: 00007fb9015e6180 R15: 00007fffb32f93b8 [ 161.179674][ T9089] [ 161.777088][ T9045] wg1 speed is unknown, defaulting to 1000 [ 161.849403][ T9037] wg1 speed is unknown, defaulting to 1000 [ 162.395527][ T9124] tipc: Enabled bearer , priority 0 [ 162.424926][ T9124] tipc: Resetting bearer [ 162.450824][ T9123] tipc: Disabling bearer [ 162.561888][ T9111] wg1 speed is unknown, defaulting to 1000 [ 162.802602][ T9141] syzkaller0: entered promiscuous mode [ 162.808116][ T9141] syzkaller0: entered allmulticast mode [ 162.851195][ T9146] netlink: 'syz.1.834': attribute type 12 has an invalid length. [ 162.972492][ T9141] FAULT_INJECTION: forcing a failure. [ 162.972492][ T9141] name failslab, interval 1, probability 0, space 0, times 1 [ 162.995899][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.0.832 Not tainted syzkaller #0 PREEMPT(full) [ 162.995920][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.995930][ T9141] Call Trace: [ 162.995937][ T9141] [ 162.995945][ T9141] dump_stack_lvl+0x189/0x250 [ 162.995967][ T9141] ? __pfx____ratelimit+0x10/0x10 [ 162.995986][ T9141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.996003][ T9141] ? __pfx__printk+0x10/0x10 [ 162.996026][ T9141] ? __pfx___might_resched+0x10/0x10 [ 162.996042][ T9141] ? fs_reclaim_acquire+0x7d/0x100 [ 162.996067][ T9141] should_fail_ex+0x414/0x560 [ 162.996089][ T9141] should_failslab+0xa8/0x100 [ 162.996113][ T9141] kmem_cache_alloc_node_noprof+0x77/0x710 [ 162.996133][ T9141] ? __alloc_skb+0x255/0x430 [ 162.996152][ T9141] ? napi_skb_cache_get+0x4a5/0x780 [ 162.996172][ T9141] ? napi_skb_cache_get+0x151/0x780 [ 162.996195][ T9141] __alloc_skb+0x255/0x430 [ 162.996217][ T9141] ? __pfx___alloc_skb+0x10/0x10 [ 162.996241][ T9141] alloc_skb_with_frags+0xca/0x890 [ 162.996263][ T9141] ? __lock_acquire+0x6b6/0x2cf0 [ 162.996280][ T9141] sock_alloc_send_pskb+0x84d/0x980 [ 162.996313][ T9141] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 162.996334][ T9141] ? dev_get_by_index+0x22/0x2e0 [ 162.996353][ T9141] ? dev_get_by_index+0x22/0x2e0 [ 162.996376][ T9141] packet_sendmsg+0x33a0/0x5080 [ 162.996404][ T9141] ? aa_label_merge+0xd01/0xdf0 [ 162.996443][ T9141] ? __pfx___might_resched+0x10/0x10 [ 162.996471][ T9141] ? aa_sk_perm+0x15f/0x920 [ 162.996494][ T9141] ? __pfx_packet_sendmsg+0x10/0x10 [ 162.996507][ T9141] ? aa_sk_perm+0x7ee/0x920 [ 162.996536][ T9141] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 162.996559][ T9141] ? aa_sock_msg_perm+0xf1/0x1b0 [ 162.996577][ T9141] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.996596][ T9141] ? __pfx_packet_sendmsg+0x10/0x10 [ 162.996612][ T9141] __sock_sendmsg+0x21c/0x270 [ 162.996634][ T9141] __sys_sendto+0x3bd/0x520 [ 162.996658][ T9141] ? __pfx___sys_sendto+0x10/0x10 [ 162.996677][ T9141] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 162.996711][ T9141] ? __fget_files+0x3a0/0x420 [ 162.996736][ T9141] ? ksys_write+0x22a/0x250 [ 162.996758][ T9141] ? __pfx_ksys_write+0x10/0x10 [ 162.996781][ T9141] __x64_sys_sendto+0xde/0x100 [ 162.996805][ T9141] do_syscall_64+0xfa/0xf80 [ 162.996825][ T9141] ? rcu_is_watching+0x15/0xb0 [ 162.996848][ T9141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.996864][ T9141] ? clear_bhb_loop+0x60/0xb0 [ 162.996884][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.996899][ T9141] RIP: 0033:0x7fbdd538f749 [ 162.996914][ T9141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.996927][ T9141] RSP: 002b:00007fbdd61cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 162.996945][ T9141] RAX: ffffffffffffffda RBX: 00007fbdd55e5fa0 RCX: 00007fbdd538f749 [ 162.996957][ T9141] RDX: 00000000000005ea RSI: 0000200000000240 RDI: 0000000000000007 [ 162.996967][ T9141] RBP: 00007fbdd61cc090 R08: 00002000000001c0 R09: 0000000000000014 [ 162.996977][ T9141] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 162.996987][ T9141] R13: 00007fbdd55e6038 R14: 00007fbdd55e5fa0 R15: 00007ffc4af004e8 [ 162.997015][ T9141] [ 163.656550][ T9172] nbd3: detected capacity change from 0 to 63 [ 163.704967][ T9169] block nbd3: NBD_DISCONNECT [ 163.721865][ T9169] block nbd3: Disconnected due to user request. [ 163.739243][ T9169] block nbd3: shutting down sockets [ 163.784218][ C0] blk_print_req_error: 138 callbacks suppressed [ 163.784238][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.799734][ C0] buffer_io_error: 138 callbacks suppressed [ 163.799750][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.821939][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.831082][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 163.839162][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.848362][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 163.856261][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.865359][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 163.874810][ T5838] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.913001][ T5838] Buffer I/O error on dev nbd3, logical block 0, async page read [ 163.934561][ T5838] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.958095][ T5838] Buffer I/O error on dev nbd3, logical block 1, async page read [ 164.013510][ T5838] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.045544][ T5838] Buffer I/O error on dev nbd3, logical block 2, async page read [ 164.090580][ T5838] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.115504][ T5838] Buffer I/O error on dev nbd3, logical block 3, async page read [ 164.134287][ T5838] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.146717][ T5838] Buffer I/O error on dev nbd3, logical block 0, async page read [ 164.184419][ T5838] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.248483][ T5838] Buffer I/O error on dev nbd3, logical block 1, async page read [ 164.304521][ T5838] ldm_validate_partition_table(): Disk read failed. [ 164.346140][ T5838] Dev nbd3: unable to read RDB block 0 [ 164.371655][ T5838] nbd3: unable to read partition table [ 164.453351][ T9234] ¾x9ÿ: renamed from bridge_slave_0 [ 164.471292][ T5838] ldm_validate_partition_table(): Disk read failed. [ 164.484941][ T9234] __nla_validate_parse: 4 callbacks suppressed [ 164.484957][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.846'. [ 164.562231][ T5838] Dev nbd3: unable to read RDB block 0 [ 164.577582][ T5838] nbd3: unable to read partition table [ 164.802638][ T9242] syzkaller0: entered promiscuous mode [ 164.818461][ T9242] syzkaller0: entered allmulticast mode [ 164.868795][ T9200] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 164.931252][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 165.188288][ T9258] tipc: Enabled bearer , priority 0 [ 165.206691][ T9258] syzkaller0: entered promiscuous mode [ 165.216301][ T9258] syzkaller0: entered allmulticast mode [ 165.263545][ T9258] tipc: Resetting bearer [ 165.741152][ T9251] wg1 speed is unknown, defaulting to 1000 [ 165.850842][ T9278] netlink: 3 bytes leftover after parsing attributes in process `syz.3.860'. [ 165.993392][ T9257] tipc: Resetting bearer [ 166.025364][ T9257] tipc: Disabling bearer [ 166.229512][ T9272] wg1 speed is unknown, defaulting to 1000 [ 166.337823][ T9288] syzkaller0: entered promiscuous mode [ 166.343925][ T9288] syzkaller0: entered allmulticast mode [ 166.547577][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 166.618003][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'. [ 166.777834][ T9321] netlink: 7052 bytes leftover after parsing attributes in process `syz.2.869'. [ 166.793576][ T9321] openvswitch: netlink: Message has 8 unknown bytes. [ 166.802092][ T9314] syzkaller0: entered promiscuous mode [ 166.810436][ T9314] syzkaller0: entered allmulticast mode [ 166.969151][ T9324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.870'. [ 166.969277][ T9315] syzkaller0: entered promiscuous mode [ 167.009342][ T9315] syzkaller0: entered allmulticast mode [ 167.366729][ T9332] syzkaller1: entered promiscuous mode [ 167.391569][ T9332] syzkaller1: entered allmulticast mode [ 167.451250][ T9292] wg1 speed is unknown, defaulting to 1000 [ 167.570808][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 167.631760][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.877'. [ 167.901742][ T9360] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 167.976935][ T9360] bond5: option lacp_rate: invalid value (255) [ 167.985456][ T9360] bond5 (unregistering): Released all slaves [ 168.015691][ T9357] : entered promiscuous mode [ 168.173683][ T9374] vlan2: entered promiscuous mode [ 168.189073][ T9374] team0: entered promiscuous mode [ 168.195328][ T9374] team_slave_0: entered promiscuous mode [ 168.201597][ T9374] team_slave_1: entered promiscuous mode [ 168.217880][ T9374] geneve0: entered promiscuous mode [ 168.374255][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 168.502169][ T9392] pimreg: tun_chr_ioctl cmd 2147767506 [ 169.184963][ T9431] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 169.287693][ T9431] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.330729][ T9403] wg1 speed is unknown, defaulting to 1000 [ 169.572420][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 169.599800][ T9449] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 169.669271][ T9453] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20004 [ 169.780324][ T9431] wg1 speed is unknown, defaulting to 1000 [ 169.846830][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 170.415142][ T9485] netlink: 'syz.4.917': attribute type 1 has an invalid length. [ 170.482712][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.917'. [ 170.547897][ T9485] 8021q: adding VLAN 0 to HW filter on device bond12 [ 170.573279][ T9489] bond12: entered allmulticast mode [ 170.591069][ T9483] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 170.666708][ T9483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.689965][ T9483] team0: Port device bond0 added [ 170.971881][ T9513] netlink: 'syz.3.925': attribute type 15 has an invalid length. [ 171.090631][ T9520] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.928'. [ 171.231833][ T9529] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 171.283091][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.930'. [ 171.300745][ T9535] netlink: 56 bytes leftover after parsing attributes in process `syz.2.932'. [ 171.324906][ T9529] 8021q: adding VLAN 0 to HW filter on device bond9 [ 171.352097][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 171.377325][ T9533] bond9: entered allmulticast mode [ 171.476440][ T9542] ip6tnl2: entered promiscuous mode [ 171.486013][ T9542] ip6tnl2: entered allmulticast mode [ 171.552620][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 171.563994][ T9546] netlink: 48 bytes leftover after parsing attributes in process `syz.1.936'. [ 171.579464][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'. [ 171.649529][ T9546] vlan2: entered allmulticast mode [ 171.661231][ T9546] dummy0: entered allmulticast mode [ 171.791094][ T9559] netlink: 'syz.2.938': attribute type 13 has an invalid length. [ 171.956032][ T9570] netlink: 'syz.3.943': attribute type 5 has an invalid length. [ 172.000462][ T9571] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 172.326470][ T9587] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.821301][ T9571] 8021q: adding VLAN 0 to HW filter on device bond13 [ 172.840493][ T9576] tipc: Enabled bearer , priority 0 [ 172.850084][ T9578] bond13: entered allmulticast mode [ 172.856432][ T9579] syzkaller0: entered promiscuous mode [ 172.862359][ T9579] syzkaller0: entered allmulticast mode [ 172.880829][ T9592] geneve2: entered promiscuous mode [ 172.898056][ T9203] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.918950][ T9203] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.965284][ T9203] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.976046][ T9203] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.987209][ T9592] tipc: Resetting bearer [ 173.048464][ T9592] tipc: Disabling bearer [ 173.072677][ T9602] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.096141][ T9602] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.146192][ T9602] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.167420][ T9602] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.281175][ T9602] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.291343][ T9602] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.317048][ T9617] tipc: Enabled bearer , priority 0 [ 173.350540][ T9621] syzkaller0: entered promiscuous mode [ 173.357211][ T9621] syzkaller0: entered allmulticast mode [ 173.375944][ T9602] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.398584][ T9602] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.457149][ T9617] tipc: Resetting bearer [ 173.506978][ T9616] tipc: Resetting bearer [ 173.550372][ T9616] tipc: Disabling bearer [ 173.573754][ T9625] syzkaller0: entered promiscuous mode [ 173.580896][ T9625] syzkaller0: entered allmulticast mode [ 173.607154][ T5202] udevd[5202]: worker [5848] /devices/virtual/block/nbd0 is taking a long time [ 173.626204][ T144] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.643452][ T144] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.662407][ T144] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.678072][ T144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.716504][ T144] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.729073][ T144] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.780944][ T9635] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 173.793159][ T9633] tipc: Enabled bearer , priority 0 [ 173.822364][ T9226] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.837374][ T9226] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.891537][ T9635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.918403][ T9639] bond5: entered allmulticast mode [ 173.993021][ T9624] tipc: Resetting bearer [ 174.051750][ T9624] tipc: Disabling bearer [ 174.075816][ T9647] sctp: [Deprecated]: syz.2.961 (pid 9647) Use of int in maxseg socket option. [ 174.075816][ T9647] Use struct sctp_assoc_value instead [ 174.407635][ T9656] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 174.430728][ T9656] bond6 (unregistering): Released all slaves [ 174.432792][ T9667] sctp: [Deprecated]: syz.0.964 (pid 9667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.432792][ T9667] Use struct sctp_sack_info instead [ 174.546340][ T9670] netlink: 'syz.3.966': attribute type 1 has an invalid length. [ 174.580777][ T9670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.589920][ T9670] __nla_validate_parse: 4 callbacks suppressed [ 174.589936][ T9670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'. [ 174.608782][ T9671] veth1: entered promiscuous mode [ 174.619414][ T9670] bond5: entered promiscuous mode [ 174.625434][ T9670] bond5: entered allmulticast mode [ 174.724458][ T9670] bond4: (slave dummy0): Releasing active interface [ 174.751383][ T9670] bond5: (slave dummy0): making interface the new active one [ 174.764173][ T9670] dummy0: entered promiscuous mode [ 174.771299][ T9670] dummy0: entered allmulticast mode [ 174.777417][ T9670] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 174.790967][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.968'. [ 174.800546][ T9684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.968'. [ 174.947083][ T9676] bond5 (unregistering): (slave dummy0): Releasing active interface [ 174.956433][ T9676] dummy0: left promiscuous mode [ 174.961707][ T9676] dummy0: left allmulticast mode [ 174.971744][ T9676] bond5 (unregistering): Released all slaves [ 174.991336][ T9683] netlink: 'syz.0.968': attribute type 12 has an invalid length. [ 174.999369][ T9683] netlink: 'syz.0.968': attribute type 29 has an invalid length. [ 175.007101][ T9683] netlink: 148 bytes leftover after parsing attributes in process `syz.0.968'. [ 175.018462][ T9651] wg1 speed is unknown, defaulting to 1000 [ 175.167855][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.405190][ T9698] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 175.448625][ T9655] wg1 speed is unknown, defaulting to 1000 [ 175.467007][ T9699] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.477790][ T9699] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.587954][ T9699] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.599417][ T9699] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.697326][ T9711] netlink: 356 bytes leftover after parsing attributes in process `syz.0.977'. [ 175.723478][ T9699] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.736340][ T9699] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.793570][ T25] block nbd0: Possible stuck request ffff888024d95080: control (read@0,1024B). Runtime 90 seconds [ 175.825444][ T9699] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.843514][ T9699] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.857083][ T9716] netlink: 'syz.0.978': attribute type 3 has an invalid length. [ 175.874527][ T9716] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 175.882909][ T9716] netlink: 224 bytes leftover after parsing attributes in process `syz.0.978'. [ 176.087115][ T9204] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.097245][ T9204] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.173930][ T9204] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.185510][ T9204] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.255724][ T9204] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.285368][ T9204] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.330067][ T9204] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.351917][ T9204] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.640250][ T9745] netlink: 'syz.1.986': attribute type 1 has an invalid length. [ 176.677380][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 176.710957][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'. [ 176.775706][ T9745] 8021q: adding VLAN 0 to HW filter on device bond10 [ 176.789250][ T9753] bond10: entered allmulticast mode [ 177.070770][ T9748] hsr_slave_1 (unregistering): left promiscuous mode [ 177.564472][ T9756] wg1 speed is unknown, defaulting to 1000 [ 177.921966][ T9812] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 177.995408][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1002'. [ 178.066155][ T9824] netlink: 'syz.0.1004': attribute type 10 has an invalid length. [ 178.069786][ T9812] 8021q: adding VLAN 0 to HW filter on device bond14 [ 178.090429][ T9769] wg1 speed is unknown, defaulting to 1000 [ 178.090769][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.104188][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.154053][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.161297][ T9824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.168881][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.176052][ T9824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.189734][ T9824] bridge0: entered promiscuous mode [ 178.195945][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 178.227257][ T9824] bridge0: entered allmulticast mode [ 178.291705][ T9824] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 178.500669][ T9819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.643673][ T9832] team0: left allmulticast mode [ 178.648580][ T9832] team_slave_0: left allmulticast mode [ 178.654411][ T9832] team_slave_1: left allmulticast mode [ 178.661343][ T9832] bridge1: left allmulticast mode [ 178.666610][ T9832] geneve0: left allmulticast mode [ 178.680698][ T9832] team0: left promiscuous mode [ 178.685822][ T9832] team_slave_0: left promiscuous mode [ 178.692842][ T9832] team_slave_1: left promiscuous mode [ 178.700319][ T9832] bridge1: left promiscuous mode [ 178.706426][ T9832] geneve0: left promiscuous mode [ 178.716865][ T9832] bridge0: port 3(team0) entered disabled state [ 178.732147][ T9832] bridge_slave_1: left allmulticast mode [ 178.737841][ T9832] bridge_slave_1: left promiscuous mode [ 178.752275][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.763946][ T9832] bridge_slave_0: left allmulticast mode [ 178.770115][ T9832] bridge_slave_0: left promiscuous mode [ 178.793342][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.916055][ T9851] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 178.957828][ T9849] geneve2: entered promiscuous mode [ 178.998982][ T9849] geneve2: entered allmulticast mode [ 179.215353][ T9839] wg1 speed is unknown, defaulting to 1000 [ 179.295517][ T9863] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 179.459998][ T9863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 179.481276][ T9869] bond6: entered allmulticast mode [ 179.574601][ T9877] veth1_to_batadv: mtu less than device minimum [ 179.645683][ T9879] netlink: 'syz.4.1018': attribute type 1 has an invalid length. [ 179.786558][ T9879] __nla_validate_parse: 4 callbacks suppressed [ 179.786577][ T9879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1018'. [ 179.847616][ T9885] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 179.905732][ T9885] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 179.932754][ T9879] bond15: (slave bridge0): Enslaving as an active interface with a down link [ 179.952977][ T9891] bond15: (slave bridge2): Enslaving as an active interface with a down link [ 179.981372][ T9894] macvlan2: entered promiscuous mode [ 179.986706][ T9894] macvlan2: entered allmulticast mode [ 179.993158][ T9894] bond15: entered promiscuous mode [ 179.999972][ T9894] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.008639][ T9894] bond15: left promiscuous mode [ 180.243676][ T9902] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1024'. [ 180.299946][ T9906] netlink: 'syz.1.1027': attribute type 1 has an invalid length. [ 180.361867][ T9906] 8021q: adding VLAN 0 to HW filter on device bond11 [ 180.398930][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1027'. [ 180.415550][ T9906] bond11: entered allmulticast mode [ 180.629740][ T9937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'. [ 180.647890][ T9937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'. [ 180.683547][ T9942] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.693141][ T9942] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.715188][ T9942] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.743839][ T9943] pimreg: entered allmulticast mode [ 180.914162][ T9950] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 181.050643][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 181.134415][ T9942] infiniband syz2: set down [ 181.141191][ T9594] ip6_vti0 speed is unknown, defaulting to 1000 [ 181.178252][ T9942] infiniband syz2: added ip6_vti0 [ 181.323312][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 181.416879][ T9942] RDS/IB: syz2: added [ 181.459023][ T9942] smc: adding ib device syz2 with port count 1 [ 181.469596][ T9942] smc: ib device syz2 port 1 has pnetid S (user defined) [ 181.489284][ T5915] ip6_vti0 speed is unknown, defaulting to 1000 [ 181.499728][ T9942] ip6_vti0 speed is unknown, defaulting to 1000 [ 181.533083][ T9955] wg1 speed is unknown, defaulting to 1000 [ 181.644025][ T9973] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 181.686867][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 181.721001][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1045'. [ 181.750354][ T9973] 8021q: adding VLAN 0 to HW filter on device bond12 [ 181.777880][ T9977] bond12: entered allmulticast mode [ 181.855363][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 181.999826][ T9980] syzkaller0: entered promiscuous mode [ 182.005419][ T9980] syzkaller0: entered allmulticast mode [ 183.490388][ T9942] ip6_vti0 speed is unknown, defaulting to 1000 [ 183.490422][ T9965] wg1 speed is unknown, defaulting to 1000 [ 183.787072][ T9955] ip6_vti0 speed is unknown, defaulting to 1000 [ 183.980931][T10007] netlink: 'syz.3.1054': attribute type 96 has an invalid length. [ 184.047308][ T9965] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.172687][T10018] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 184.214720][T10018] 8021q: adding VLAN 0 to HW filter on device bond13 [ 184.262682][T10018] bond13: entered allmulticast mode [ 184.346008][ T9942] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.406061][T10026] netlink: 'syz.1.1059': attribute type 2 has an invalid length. [ 184.459019][T10026] netlink: 'syz.1.1059': attribute type 8 has an invalid length. [ 184.570028][T10031] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 184.849793][ T9942] ip6_vti0 speed is unknown, defaulting to 1000 [ 185.101543][ T9942] ip6_vti0 speed is unknown, defaulting to 1000 [ 186.156030][T10071] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 186.164985][T10071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.186407][T10068] __nla_validate_parse: 6 callbacks suppressed [ 186.186425][T10068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1068'. [ 186.236046][T10071] netlink: 'syz.4.1069': attribute type 10 has an invalid length. [ 186.253892][T10071] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1069'. [ 186.805099][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 186.805991][T10081] sctp: [Deprecated]: syz.0.1072 (pid 10081) Use of int in max_burst socket option. [ 186.805991][T10081] Use struct sctp_assoc_value instead [ 186.839048][T10061] wg1 speed is unknown, defaulting to 1000 [ 186.845921][T10061] ip6_vti0 speed is unknown, defaulting to 1000 [ 186.869576][T10084] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 186.951221][T10090] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 187.021343][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1074'. [ 187.045141][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 187.070241][T10090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.140759][T10091] bond14: (slave veth3): Enslaving as an active interface with a down link [ 187.164662][T10084] bond14 (unregistering): (slave veth3): Releasing active interface [ 187.196131][T10084] bond14 (unregistering): Released all slaves [ 187.221369][T10094] bond7: entered allmulticast mode [ 187.435184][T10110] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 187.442246][T10110] syzkaller1: linktype set to 768 [ 188.529362][T10141] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 188.610763][T10141] 8021q: adding VLAN 0 to HW filter on device bond16 [ 188.647213][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1086'. [ 188.678745][T10141] bond16: entered allmulticast mode [ 188.716459][T10148] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 188.897215][T10128] wg1 speed is unknown, defaulting to 1000 [ 188.910797][T10128] ip6_vti0 speed is unknown, defaulting to 1000 [ 189.061938][T10159] xt_hashlimit: size too large, truncated to 1048576 [ 189.093707][T10159] syz.4.1091: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 189.141514][T10159] CPU: 0 UID: 0 PID: 10159 Comm: syz.4.1091 Not tainted syzkaller #0 PREEMPT(full) [ 189.141539][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.141550][T10159] Call Trace: [ 189.141557][T10159] [ 189.141564][T10159] dump_stack_lvl+0x189/0x250 [ 189.141602][T10159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.141620][T10159] ? __pfx__printk+0x10/0x10 [ 189.141642][T10159] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 189.141667][T10159] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 189.141693][T10159] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 189.141720][T10159] warn_alloc+0x214/0x310 [ 189.141748][T10159] ? __pfx_warn_alloc+0x10/0x10 [ 189.141779][T10159] ? __get_vm_area_node+0x28f/0x300 [ 189.141801][T10159] ? htable_create+0x101/0x7a0 [ 189.141827][T10159] __vmalloc_node_range_noprof+0x690/0x12d0 [ 189.141877][T10159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.141897][T10159] ? htable_create+0x101/0x7a0 [ 189.141921][T10159] ? rcu_is_watching+0x15/0xb0 [ 189.141941][T10159] ? htable_create+0x101/0x7a0 [ 189.141962][T10159] __kvmalloc_node_noprof+0x670/0x910 [ 189.141981][T10159] ? htable_create+0x101/0x7a0 [ 189.142000][T10159] ? hashlimit_pernet+0x23/0x240 [ 189.142018][T10159] ? hashlimit_pernet+0x23/0x240 [ 189.142036][T10159] ? hashlimit_pernet+0x23/0x240 [ 189.142060][T10159] htable_create+0x101/0x7a0 [ 189.142089][T10159] hashlimit_mt_check_common+0x719/0xa10 [ 189.142121][T10159] xt_check_match+0x3d1/0xab0 [ 189.142148][T10159] ? __pfx_xt_check_match+0x10/0x10 [ 189.142173][T10159] ? pcpu_alloc_noprof+0xf95/0x1750 [ 189.142203][T10159] ? xt_find_match+0x1f7/0x250 [ 189.142231][T10159] translate_table+0x1553/0x2040 [ 189.142279][T10159] ? __pfx_translate_table+0x10/0x10 [ 189.142298][T10159] ? __might_fault+0xb0/0x130 [ 189.142338][T10159] ? _copy_from_user+0x94/0xb0 [ 189.142367][T10159] do_ip6t_set_ctl+0x970/0xce0 [ 189.142388][T10159] ? rcu_is_watching+0x15/0xb0 [ 189.142407][T10159] ? trace_contention_end+0x39/0x100 [ 189.142427][T10159] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 189.142466][T10159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.142491][T10159] ? __pfx_netdev_run_todo+0x10/0x10 [ 189.142510][T10159] ? ns_capable+0x8a/0xf0 [ 189.142532][T10159] nf_setsockopt+0x26f/0x290 [ 189.142560][T10159] rawv6_setsockopt+0x23b/0x5b0 [ 189.142582][T10159] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 189.142599][T10159] ? aa_sock_opt_perm+0xff/0x1a0 [ 189.142618][T10159] ? sock_common_setsockopt+0x36/0xc0 [ 189.142638][T10159] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 189.142660][T10159] do_sock_setsockopt+0x17c/0x1b0 [ 189.142689][T10159] __x64_sys_setsockopt+0x13f/0x1b0 [ 189.142718][T10159] do_syscall_64+0xfa/0xf80 [ 189.142739][T10159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.142756][T10159] ? clear_bhb_loop+0x60/0xb0 [ 189.142776][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.142792][T10159] RIP: 0033:0x7feaf058f749 [ 189.142813][T10159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.142827][T10159] RSP: 002b:00007feaee7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 189.142846][T10159] RAX: ffffffffffffffda RBX: 00007feaf07e5fa0 RCX: 00007feaf058f749 [ 189.142858][T10159] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 189.142868][T10159] RBP: 00007feaf0613f91 R08: 0000000000000588 R09: 0000000000000000 [ 189.142879][T10159] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 189.142889][T10159] R13: 00007feaf07e6038 R14: 00007feaf07e5fa0 R15: 00007ffc7c757378 [ 189.142920][T10159] [ 189.142928][T10159] Mem-Info: [ 189.533109][T10167] xt_limit: Overflow, try lower: 271964/0 [ 189.539199][T10159] active_anon:6073 inactive_anon:0 isolated_anon:0 [ 189.539199][T10159] active_file:3140 inactive_file:39955 isolated_file:0 [ 189.539199][T10159] unevictable:768 dirty:300 writeback:0 [ 189.539199][T10159] slab_reclaimable:11718 slab_unreclaimable:135343 [ 189.539199][T10159] mapped:29420 shmem:1358 pagetables:1024 [ 189.539199][T10159] sec_pagetables:0 bounce:0 [ 189.539199][T10159] kernel_misc_reclaimable:0 [ 189.539199][T10159] free:1290486 free_pcp:16906 free_cma:0 [ 189.595158][T10168] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1093'. [ 189.637372][T10159] Node 0 active_anon:24192kB inactive_anon:0kB active_file:12560kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117680kB dirty:1200kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14848kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.683734][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'. [ 189.708927][T10159] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.791114][T10159] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.833254][T10159] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 189.843403][T10159] Node 0 DMA32 free:1258356kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24892kB inactive_anon:0kB active_file:12560kB inactive_file:159620kB unevictable:1536kB writepending:1200kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:48780kB local_pcp:20676kB free_cma:0kB [ 189.878127][T10159] lowmem_reserve[]: 0 0 0 0 0 [ 189.916349][T10159] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.976839][T10159] lowmem_reserve[]: 0 0 0 0 0 [ 189.986953][T10159] Node 1 Normal free:3887492kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19280kB local_pcp:8896kB free_cma:0kB [ 190.058988][T10159] lowmem_reserve[]: 0 0 0 0 0 [ 190.076074][T10159] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.118875][T10159] Node 0 DMA32: 2*4kB (UE) 3*8kB (UME) 116*16kB (UME) 120*32kB (ME) 55*64kB (ME) 40*128kB (M) 13*256kB (UME) 10*512kB (UM) 5*1024kB (UM) 2*2048kB (M) 299*4096kB (UM) = 1256736kB [ 190.168548][T10159] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 190.219007][T10159] Node 1 Normal: 58*4kB (UE) 54*8kB (UME) 40*16kB (UME) 105*32kB (UME) 32*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3887544kB [ 190.278668][T10159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.326824][T10159] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.349675][T10159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.376176][T10159] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.383310][T10183] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 190.417145][T10159] 44451 total pagecache pages [ 190.462180][T10159] 0 pages in swap cache [ 190.466523][T10185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1099'. [ 190.476028][T10159] Free swap = 124996kB [ 190.498376][T10159] Total swap = 124996kB [ 190.503929][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 190.522805][T10159] 2097051 pages RAM [ 190.526793][T10159] 0 pages HighMem/MovableOnly [ 190.531898][T10159] 424280 pages reserved [ 190.536163][T10159] 0 pages cma reserved [ 190.600971][T10183] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.626144][T10185] bond6: entered allmulticast mode [ 190.724232][ T5915] IPVS: starting estimator thread 0... [ 190.839013][T10196] IPVS: using max 33 ests per chain, 79200 per kthread [ 191.254537][T10211] __nla_validate_parse: 1 callbacks suppressed [ 191.254554][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 191.291504][T10211] ip6tnl1: entered allmulticast mode [ 191.654833][T10231] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 191.798130][T10235] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1115'. [ 191.798268][T10236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1114'. [ 191.841263][T10231] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.912473][T10236] bond5: entered allmulticast mode [ 191.967523][T10231] bond5: (slave dummy0): making interface the new active one [ 191.985710][T10231] dummy0: entered allmulticast mode [ 191.997887][T10231] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 192.777269][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 192.824819][T10256] hsr_slave_0: left promiscuous mode [ 193.087930][T10249] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 193.110581][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1119'. [ 193.384830][ T5834] IPVS: starting estimator thread 0... [ 193.489027][T10284] IPVS: using max 30 ests per chain, 72000 per kthread [ 193.793272][T10297] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 193.853966][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1130'. [ 193.863252][T10297] 8021q: adding VLAN 0 to HW filter on device bond7 [ 193.874832][T10300] bond7: entered allmulticast mode [ 193.883301][T10269] wg1 speed is unknown, defaulting to 1000 [ 193.901319][T10269] ip6_vti0 speed is unknown, defaulting to 1000 [ 193.916646][T10297] bond4: (slave dummy0): Releasing active interface [ 193.951216][T10297] bond7: (slave dummy0): making interface the new active one [ 193.959283][T10297] dummy0: entered allmulticast mode [ 193.966097][T10297] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 194.359614][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.452610][T10321] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1137'. [ 194.789528][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 195.654912][T10369] netlink: zone id is out of range [ 195.704579][T10367] tipc: Enabled bearer , priority 0 [ 195.712727][T10367] syzkaller0: entered promiscuous mode [ 195.713380][T10371] netlink: 'syz.2.1149': attribute type 10 has an invalid length. [ 195.718238][T10367] syzkaller0: entered allmulticast mode [ 195.739000][T10371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1149'. [ 195.758191][T10371] dummy0: entered promiscuous mode [ 195.781312][T10371] bond7: (slave dummy0): Releasing active interface [ 195.788650][T10371] dummy0: left allmulticast mode [ 195.807401][T10371] bridge0: port 1(dummy0) entered blocking state [ 195.814844][T10371] bridge0: port 1(dummy0) entered disabled state [ 195.823497][T10371] dummy0: entered allmulticast mode [ 195.859832][T10377] tipc: Resetting bearer [ 195.891838][T10366] tipc: Resetting bearer [ 195.950576][T10366] tipc: Disabling bearer [ 196.186092][T10392] netlink: 'syz.1.1154': attribute type 12 has an invalid length. [ 196.432022][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 196.432280][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 196.438137][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 196.454836][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 196.490801][T10381] wg1 speed is unknown, defaulting to 1000 [ 196.498568][T10381] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.633137][T10403] vlan2: left promiscuous mode [ 196.665764][T10401] xt_socket: unknown flags 0x50 [ 196.686158][T10403] xt_socket: unknown flags 0x50 acpid: input device has been disconnected, fd 10 [ 196.987393][T10413] netlink: 'syz.1.1160': attribute type 29 has an invalid length. [ 197.007667][T10380] wg1 speed is unknown, defaulting to 1000 [ 197.017284][T10413] netlink: 'syz.1.1160': attribute type 2 has an invalid length. [ 197.028737][T10413] netlink: 'syz.1.1160': attribute type 2 has an invalid length. [ 197.067508][T10380] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.542169][T10413] wg1 speed is unknown, defaulting to 1000 [ 197.639633][T10413] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.687219][T10431] tipc: Enabled bearer , priority 0 [ 197.724340][T10431] syzkaller0: entered promiscuous mode [ 197.740027][T10431] syzkaller0: entered allmulticast mode [ 197.826436][T10430] cgroup: fork rejected by pids controller in /syz0 [ 197.976400][T10430] tipc: Resetting bearer [ 198.032859][T10430] tipc: Disabling bearer [ 198.509045][T10543] netlink: 'syz.2.1169': attribute type 4 has an invalid length. [ 199.153974][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.198295][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.465640][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.471380][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 199.491168][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.513908][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1173'. [ 199.671292][T10553] bond6: option arp_validate: invalid value (18446744073491447809) [ 199.683102][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.693818][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.702432][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1171'. [ 199.714082][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.722437][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.723150][T10553] bond6 (unregistering): Released all slaves [ 199.738313][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.792601][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.813260][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.935129][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.958895][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.226824][ T144] bridge_slave_1: left allmulticast mode [ 200.247259][ T144] bridge_slave_1: left promiscuous mode [ 200.275850][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.321102][ T144] bridge_slave_0: left allmulticast mode [ 200.334426][ T144] bridge_slave_0: left promiscuous mode [ 200.346970][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.597821][ T144] dvmrp0 (unregistering): left allmulticast mode [ 200.616638][T10599] netlink: 'syz.1.1184': attribute type 10 has an invalid length. [ 200.648459][ T144] team0: Port device geneve0 removed [ 200.676223][ T144] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 200.686046][ T144] bridge0 (unregistering): left promiscuous mode [ 200.694350][ T144] bridge0 (unregistering): left allmulticast mode [ 200.907976][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.917853][ T144] bond_slave_0: left promiscuous mode [ 200.923515][ T144] bond_slave_0: left allmulticast mode [ 200.934467][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.944025][ T144] bond_slave_1: left promiscuous mode [ 200.949677][ T144] bond_slave_1: left allmulticast mode [ 200.956174][ T144] bond0 (unregistering): Released all slaves [ 201.050565][ T144] team0: Port device bond1 removed [ 201.056821][ T144] bond1 (unregistering): Released all slaves [ 201.149500][ T144] bond2 (unregistering): Released all slaves [ 201.240001][ T144] bond3 (unregistering): Released all slaves [ 201.335690][ T144] bond4 (unregistering): (slave dummy0): Releasing active interface [ 201.347627][ T144] bond4 (unregistering): Released all slaves [ 201.437110][ T144] bond5 (unregistering): Released all slaves [ 201.526938][ T144] bond6 (unregistering): Released all slaves [ 201.613738][ T144] bond7 (unregistering): Released all slaves [ 201.625194][T10567] wg1 speed is unknown, defaulting to 1000 [ 201.665169][T10597] tipc: Enabling of bearer rejected, failed to enable media [ 201.700643][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'. [ 201.748079][T10599] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.764950][T10599] bond0: (slave team0): Enslaving as an active interface with an up link [ 201.791859][T10567] ip6_vti0 speed is unknown, defaulting to 1000 [ 201.791891][ T5830] Bluetooth: hci1: command tx timeout [ 201.965624][T10606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1188'. [ 202.101183][T10573] wg1 speed is unknown, defaulting to 1000 [ 202.237921][T10573] ip6_vti0 speed is unknown, defaulting to 1000 [ 202.697012][T10631] netlink: 'syz.4.1192': attribute type 30 has an invalid length. [ 202.900535][T10567] chnl_net:caif_netlink_parms(): no params data found [ 202.914330][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 203.003410][T10621] wg1 speed is unknown, defaulting to 1000 [ 203.015012][T10621] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.038350][T10636] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1193'. [ 203.133445][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.145614][T10567] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.154662][T10567] bridge_slave_0: entered allmulticast mode [ 203.163156][T10567] bridge_slave_0: entered promiscuous mode [ 203.175382][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.183334][T10567] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.191846][T10567] bridge_slave_1: entered allmulticast mode [ 203.200519][T10567] bridge_slave_1: entered promiscuous mode [ 203.237718][T10641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.253263][T10604] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 203.256668][T10567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.293201][ T144] tipc: Left network mode [ 203.302027][T10567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.445876][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 203.752205][T10567] team0: Port device team_slave_0 added [ 203.808279][T10567] team0: Port device team_slave_1 added [ 203.869625][ T5830] Bluetooth: hci1: command tx timeout [ 203.944287][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 204.387624][T10567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.412445][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.469205][T10567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.555862][T10567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.563152][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.596226][T10567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.700530][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1201'. [ 204.822546][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 204.924992][T10567] hsr_slave_0: entered promiscuous mode [ 204.978263][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 204.985784][T10567] hsr_slave_1: entered promiscuous mode [ 205.013676][T10567] debugfs: 'hsr0' already exists in 'hsr' [ 205.055067][T10567] Cannot create hsr debugfs directory [ 205.336138][T10676] syzkaller0: entered promiscuous mode [ 205.345772][T10676] syzkaller0: entered allmulticast mode [ 205.454510][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.480353][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.492772][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.506086][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.537491][ T144] team_slave_0: left promiscuous mode [ 205.543232][ T144] team_slave_1: left promiscuous mode [ 205.548751][ T144] veth1_macvtap: left promiscuous mode [ 205.566118][ T144] veth1_vlan: left allmulticast mode [ 205.572363][ T144] veth1_vlan: left promiscuous mode [ 205.578318][ T144] veth0_vlan: left promiscuous mode [ 205.707434][T10693] TCP: TCP_TX_DELAY enabled [ 205.768068][ T144] pimreg (unregistering): left allmulticast mode [ 205.805465][ T144] pimreg3 (unregistering): left allmulticast mode [ 205.834241][T10695] netlink: 'syz.2.1211': attribute type 13 has an invalid length. [ 205.844095][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 205.892856][ T25] block nbd0: Possible stuck request ffff888024d95080: control (read@0,1024B). Runtime 120 seconds [ 205.949739][ T5830] Bluetooth: hci1: command tx timeout [ 206.149215][ T144] team0 (unregistering): Port device team_slave_1 removed [ 206.191093][ T144] team0 (unregistering): Port device team_slave_0 removed [ 206.217950][ T5994] smc: removing ib device !yz! [ 206.936660][T10709] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1215'. [ 207.201159][T10710] wg1 speed is unknown, defaulting to 1000 [ 207.240998][T10710] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.715823][T10724] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 208.029052][ T5830] Bluetooth: hci1: command tx timeout [ 208.062563][T10724] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.146029][T10567] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.199556][T10567] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.253242][T10567] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.291344][T10567] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.312997][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1221'. [ 208.759356][ T144] IPVS: stop unused estimator thread 0... [ 208.906032][T10567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.999254][T10567] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.042850][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.050132][ T9227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.122244][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.129435][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.600626][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 209.817675][T10567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.881900][T10785] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1230'. [ 209.979808][T10567] veth0_vlan: entered promiscuous mode [ 210.063534][T10789] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1230'. [ 210.073479][T10789] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 210.118076][T10567] veth1_vlan: entered promiscuous mode [ 210.157800][T10793] syzkaller0: entered promiscuous mode [ 210.163832][T10793] syzkaller0: entered allmulticast mode [ 210.435614][T10567] veth0_macvtap: entered promiscuous mode [ 210.489692][T10567] veth1_macvtap: entered promiscuous mode [ 210.587552][T10567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.657457][T10567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.740317][ T8373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.750770][T10797] wg1 speed is unknown, defaulting to 1000 [ 210.764461][ T8373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.781197][ T8373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.807861][T10797] ip6_vti0 speed is unknown, defaulting to 1000 [ 210.840538][ T8373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.134796][ T8373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.171640][ T8373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.193551][T10812] batadv0: entered promiscuous mode [ 211.354461][T10795] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 211.365114][T10817] wg1 speed is unknown, defaulting to 1000 [ 211.381462][ T7091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.419630][T10817] ip6_vti0 speed is unknown, defaulting to 1000 [ 211.520173][ T7091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.930678][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 212.400571][T10847] tipc: Enabled bearer , priority 0 [ 212.412326][T10850] syzkaller0: entered promiscuous mode [ 212.424219][T10850] syzkaller0: entered allmulticast mode [ 212.504427][T10855] ip6tnl2: entered promiscuous mode [ 212.517304][T10852] tipc: Enabling of bearer rejected, already enabled [ 212.598764][T10853] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1243'. [ 212.689093][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1247'. [ 212.756612][T10847] tipc: Resetting bearer [ 212.830440][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1247'. [ 213.003347][T10845] tipc: Resetting bearer [ 213.080175][T10845] tipc: Disabling bearer [ 213.216138][T10868] wg1 speed is unknown, defaulting to 1000 [ 213.231049][T10868] ip6_vti0 speed is unknown, defaulting to 1000 [ 213.231921][T10866] xt_TCPMSS: Only works on TCP SYN packets [ 213.451778][T10886] bond0: (slave wg0): Error: Device type is different from other slaves [ 213.508649][T10886] dvmrp0: entered allmulticast mode [ 213.659725][T10888] team_slave_0: entered promiscuous mode [ 213.665486][T10888] team_slave_1: entered promiscuous mode [ 213.673082][T10888] vlan2: entered promiscuous mode [ 213.678198][T10888] team0: entered promiscuous mode [ 213.841753][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 213.861906][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 213.876816][T10903] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1261'. [ 214.385694][T10939] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 214.435204][T10930] bond6: option min_links: invalid value (18446744073709551612) [ 214.458238][T10930] bond6: option min_links: allowed values 0 - 2147483647 [ 214.522754][T10939] openvswitch: netlink: Multiple metadata blocks provided [ 214.541395][T10930] bond6 (unregistering): Released all slaves [ 214.557776][T10945] netlink: 'syz.1.1273': attribute type 8 has an invalid length. [ 214.615914][T10937] syzkaller1: entered promiscuous mode [ 214.623475][T10937] syzkaller1: entered allmulticast mode [ 214.854359][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 215.218554][T10973] FAULT_INJECTION: forcing a failure. [ 215.218554][T10973] name failslab, interval 1, probability 0, space 0, times 0 [ 215.239826][T10967] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 215.259694][T10973] CPU: 1 UID: 0 PID: 10973 Comm: syz.2.1283 Not tainted syzkaller #0 PREEMPT(full) [ 215.259718][T10973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.259729][T10973] Call Trace: [ 215.259735][T10973] [ 215.259743][T10973] dump_stack_lvl+0x189/0x250 [ 215.259778][T10973] ? __pfx____ratelimit+0x10/0x10 [ 215.259800][T10973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.259817][T10973] ? __pfx__printk+0x10/0x10 [ 215.259844][T10973] ? __pfx___might_resched+0x10/0x10 [ 215.259866][T10973] should_fail_ex+0x414/0x560 [ 215.259890][T10973] should_failslab+0xa8/0x100 [ 215.259914][T10973] __kmalloc_noprof+0xcb/0x800 [ 215.259933][T10973] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.259958][T10973] tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.259977][T10973] ? tomoyo_domain+0xd8/0x130 [ 215.260000][T10973] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 215.260021][T10973] tomoyo_path_number_perm+0x1e8/0x5a0 [ 215.260047][T10973] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.260069][T10973] ? sb_end_write+0xe9/0x1c0 [ 215.260091][T10973] ? vfs_write+0x956/0xb30 [ 215.260138][T10973] ? ksys_write+0x1e1/0x250 [ 215.260161][T10973] security_file_ioctl+0xcb/0x2d0 [ 215.260184][T10973] __se_sys_ioctl+0x47/0x170 [ 215.260207][T10973] do_syscall_64+0xfa/0xf80 [ 215.260229][T10973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.260246][T10973] ? clear_bhb_loop+0x60/0xb0 [ 215.260267][T10973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.260283][T10973] RIP: 0033:0x7fc22978f749 [ 215.260299][T10973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.260314][T10973] RSP: 002b:00007fc22a5b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.260331][T10973] RAX: ffffffffffffffda RBX: 00007fc2299e5fa0 RCX: 00007fc22978f749 [ 215.260343][T10973] RDX: 0000200000000a80 RSI: 0000000000008903 RDI: 0000000000000003 [ 215.260353][T10973] RBP: 00007fc22a5b9090 R08: 0000000000000000 R09: 0000000000000000 [ 215.260363][T10973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.260373][T10973] R13: 00007fc2299e6038 R14: 00007fc2299e5fa0 R15: 00007ffecde54e68 [ 215.260403][T10973] [ 215.260410][T10973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.359578][T10981] xt_NFQUEUE: number of total queues is 0 [ 215.553496][T10992] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1286'. [ 215.706422][T11002] wg1 speed is unknown, defaulting to 1000 [ 215.714866][T11002] ip6_vti0 speed is unknown, defaulting to 1000 [ 215.751694][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 216.037455][T11018] syzkaller0: entered promiscuous mode [ 216.069104][T11018] syzkaller0: entered allmulticast mode [ 216.121338][T11018] netlink: 'syz.0.1291': attribute type 10 has an invalid length. [ 216.149255][T11018] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1291'. [ 217.758864][T11040] netlink: 'syz.1.1298': attribute type 12 has an invalid length. [ 217.886469][T11045] FAULT_INJECTION: forcing a failure. [ 217.886469][T11045] name failslab, interval 1, probability 0, space 0, times 0 [ 217.909945][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.2.1300 Not tainted syzkaller #0 PREEMPT(full) [ 217.909969][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.909980][T11045] Call Trace: [ 217.909987][T11045] [ 217.909994][T11045] dump_stack_lvl+0x189/0x250 [ 217.910018][T11045] ? __pfx____ratelimit+0x10/0x10 [ 217.910039][T11045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.910057][T11045] ? __pfx__printk+0x10/0x10 [ 217.910084][T11045] ? __pfx___might_resched+0x10/0x10 [ 217.910100][T11045] ? fs_reclaim_acquire+0x7d/0x100 [ 217.910127][T11045] should_fail_ex+0x414/0x560 [ 217.910155][T11045] should_failslab+0xa8/0x100 [ 217.910179][T11045] __kmalloc_noprof+0xcb/0x800 [ 217.910199][T11045] ? tomoyo_encode+0x28b/0x550 [ 217.910222][T11045] tomoyo_encode+0x28b/0x550 [ 217.910245][T11045] tomoyo_realpath_from_path+0x58d/0x5d0 [ 217.910263][T11045] ? tomoyo_domain+0xd8/0x130 [ 217.910285][T11045] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 217.910319][T11045] tomoyo_path_number_perm+0x1e8/0x5a0 [ 217.910344][T11045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 217.910367][T11045] ? sb_end_write+0xe9/0x1c0 [ 217.910391][T11045] ? vfs_write+0x956/0xb30 [ 217.910445][T11045] ? ksys_write+0x1e1/0x250 [ 217.910467][T11045] security_file_ioctl+0xcb/0x2d0 [ 217.910490][T11045] __se_sys_ioctl+0x47/0x170 [ 217.910512][T11045] do_syscall_64+0xfa/0xf80 [ 217.910533][T11045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.910549][T11045] ? clear_bhb_loop+0x60/0xb0 [ 217.910568][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.910582][T11045] RIP: 0033:0x7fc22978f749 [ 217.910598][T11045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.910612][T11045] RSP: 002b:00007fc22a5b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.910631][T11045] RAX: ffffffffffffffda RBX: 00007fc2299e5fa0 RCX: 00007fc22978f749 [ 217.910643][T11045] RDX: 0000200000000a80 RSI: 0000000000008903 RDI: 0000000000000003 [ 217.910654][T11045] RBP: 00007fc22a5b9090 R08: 0000000000000000 R09: 0000000000000000 [ 217.910663][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.910671][T11045] R13: 00007fc2299e6038 R14: 00007fc2299e5fa0 R15: 00007ffecde54e68 [ 217.910698][T11045] [ 217.979327][T11045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 218.730991][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 218.797421][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1306'. [ 218.908093][T11071] tipc: Enabling of bearer rejected, already enabled [ 218.930072][T11071] netem: change failed [ 218.952344][T11071] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1309'. [ 219.111900][T11087] FAULT_INJECTION: forcing a failure. [ 219.111900][T11087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.139560][T11087] CPU: 1 UID: 0 PID: 11087 Comm: syz.0.1313 Not tainted syzkaller #0 PREEMPT(full) [ 219.139584][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.139595][T11087] Call Trace: [ 219.139601][T11087] [ 219.139609][T11087] dump_stack_lvl+0x189/0x250 [ 219.139632][T11087] ? __pfx____ratelimit+0x10/0x10 [ 219.139653][T11087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.139671][T11087] ? __pfx__printk+0x10/0x10 [ 219.139711][T11087] should_fail_ex+0x414/0x560 [ 219.139734][T11087] _copy_to_user+0x31/0xb0 [ 219.139756][T11087] simple_read_from_buffer+0xe1/0x170 [ 219.139783][T11087] proc_fail_nth_read+0x1b3/0x220 [ 219.139806][T11087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.139829][T11087] ? rw_verify_area+0x2a6/0x4d0 [ 219.139847][T11087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.139869][T11087] vfs_read+0x200/0xa30 [ 219.139892][T11087] ? f_getown+0x60/0x2a0 [ 219.139911][T11087] ? __pfx_vfs_read+0x10/0x10 [ 219.139927][T11087] ? lockdep_hardirqs_on+0x98/0x140 [ 219.139948][T11087] ? _raw_read_unlock_irq+0x2e/0x50 [ 219.139967][T11087] ? f_getown+0x23a/0x2a0 [ 219.139987][T11087] ? sock_ioctl+0x53e/0x790 [ 219.140014][T11087] ksys_read+0x145/0x250 [ 219.140035][T11087] ? __pfx_ksys_read+0x10/0x10 [ 219.140058][T11087] ? do_syscall_64+0xbe/0xf80 [ 219.140082][T11087] do_syscall_64+0xfa/0xf80 [ 219.140102][T11087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.140118][T11087] ? clear_bhb_loop+0x60/0xb0 [ 219.140138][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.140154][T11087] RIP: 0033:0x7f6d2878e15c [ 219.140169][T11087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 219.140183][T11087] RSP: 002b:00007f6d29549030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.140202][T11087] RAX: ffffffffffffffda RBX: 00007f6d289e5fa0 RCX: 00007f6d2878e15c [ 219.140214][T11087] RDX: 000000000000000f RSI: 00007f6d295490a0 RDI: 0000000000000004 [ 219.140225][T11087] RBP: 00007f6d29549090 R08: 0000000000000000 R09: 0000000000000000 [ 219.140235][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.140245][T11087] R13: 00007f6d289e6038 R14: 00007f6d289e5fa0 R15: 00007ffd84cd8938 [ 219.140274][T11087] [ 219.580743][T11095] netlink: 'syz.3.1312': attribute type 10 has an invalid length. [ 220.001650][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 220.639048][T11138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.920112][T11164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1331'. [ 220.964313][T11158] wg1 speed is unknown, defaulting to 1000 [ 221.050870][T11162] wg1 speed is unknown, defaulting to 1000 [ 221.050876][T11158] ip6_vti0 speed is unknown, defaulting to 1000 [ 221.082478][T11170] wg1 speed is unknown, defaulting to 1000 [ 221.382892][ T9573] IPVS: starting estimator thread 0... [ 221.443279][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 221.479749][T11186] IPVS: using max 32 ests per chain, 76800 per kthread [ 221.541499][T11193] bond5: (slave dummy0): Releasing active interface [ 221.550725][T11193] dummy0: left allmulticast mode [ 221.616814][T11193] bridge_slave_0: left allmulticast mode [ 221.627002][T11193] bridge_slave_0: left promiscuous mode [ 221.652893][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.753799][T11193] bridge_slave_1: left allmulticast mode [ 221.761009][T11193] bridge_slave_1: left promiscuous mode [ 221.767029][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.781363][T11193] bond0: (slave bond_slave_0): Releasing backup interface [ 221.796053][T11193] bond0: (slave bond_slave_1): Releasing backup interface [ 221.818726][T11193] `: Port device team_slave_0 removed [ 221.835672][T11193] `: Port device team_slave_1 removed [ 221.842362][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.850241][T11193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.858504][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.866619][T11193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.877517][T11193] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.927670][T11162] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.096939][T11218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1345'. [ 222.135655][T11221] 8021q: VLANs not supported on vcan0 [ 222.489172][T11170] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.555501][T11240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1350'. [ 222.761498][T11237] wg1 speed is unknown, defaulting to 1000 [ 222.868653][T11237] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.939678][T11245] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 222.992565][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1352'. [ 223.038437][T11245] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.048160][T11247] bond6: entered promiscuous mode [ 223.116396][T11248] bond6: (slave dummy0): making interface the new active one [ 223.123202][T11250] xt_connbytes: Forcing CT accounting to be enabled [ 223.155656][T11248] dummy0: entered promiscuous mode [ 223.183869][T11248] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 223.485273][T11258] wg1 speed is unknown, defaulting to 1000 [ 223.533346][T11258] ip6_vti0 speed is unknown, defaulting to 1000 [ 223.736528][T11271] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1358'. [ 224.532950][T11303] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 224.592371][T11307] IPVS: stopping backup sync thread 10967 ... [ 224.728227][T11310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1367'. [ 224.735366][T11303] 8021q: adding VLAN 0 to HW filter on device bond17 [ 224.832283][T11312] sctp: [Deprecated]: syz.2.1369 (pid 11312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.832283][T11312] Use struct sctp_sack_info instead [ 224.992901][T11320] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 225.025311][T11323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.084163][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 225.241893][T11325] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 225.297005][T11325] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 225.332179][T11316] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 225.342193][T11325] team0: Port device netdevsim0 added [ 225.348511][T11316] netlink: 'syz.0.1371': attribute type 4 has an invalid length. [ 225.374667][T11316] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1371'. [ 225.400636][T11325] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 225.429691][T11325] netlink: 'syz.0.1371': attribute type 4 has an invalid length. [ 225.437460][T11325] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1371'. [ 225.886367][T11357] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 225.944393][T11363] __nla_validate_parse: 2 callbacks suppressed [ 225.944410][T11363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1380'. [ 226.001220][T11357] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.024413][T11367] sctp: [Deprecated]: syz.4.1383 (pid 11367) Use of int in max_burst socket option. [ 226.024413][T11367] Use struct sctp_assoc_value instead [ 226.044609][T11363] bond7: entered allmulticast mode [ 226.075242][T11357] bond6: (slave dummy0): Releasing active interface [ 226.095320][T11357] dummy0: left promiscuous mode [ 226.106446][T11357] bond7: (slave dummy0): making interface the new active one [ 226.116439][T11357] dummy0: entered allmulticast mode [ 226.122877][T11357] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 226.157951][T11361] wg1 speed is unknown, defaulting to 1000 [ 226.177942][T11370] wg1 speed is unknown, defaulting to 1000 [ 226.177989][T11361] ip6_vti0 speed is unknown, defaulting to 1000 [ 226.310035][T11384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.673746][T11370] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.940365][T11430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1400'. [ 229.204120][T11432] tipc: Enabling of bearer rejected, already enabled [ 229.246638][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 229.262347][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 229.273864][T11432] netem: change failed [ 229.294900][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 229.294900][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 229.734938][T11457] pimreg1: tun_chr_ioctl cmd 2147767520 [ 229.758421][T11467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1412'. [ 229.767737][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 229.912832][T11480] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 230.149815][T11480] 8021q: adding VLAN 0 to HW filter on device bond18 [ 230.193348][T11489] tc_dump_action: action bad kind [ 230.264476][T11503] ip6_vti0 speed is unknown, defaulting to 1000 [ 230.513213][T11510] netlink: 584 bytes leftover after parsing attributes in process `syz.3.1423'. [ 231.077525][T11533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1430'. [ 231.452078][ T5838] udevd[5838]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 231.534673][ T5202] udevd[5202]: worker [5838] terminated by signal 33 (Unknown signal 33) [ 232.254449][T11569] netlink: 'syz.4.1440': attribute type 10 has an invalid length. [ 232.268396][T11569] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1440'. [ 232.321637][T11569] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 232.339060][T11569] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 232.360839][T11569] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 232.622971][T11578] tipc: Enabling of bearer rejected, already enabled [ 232.697184][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 232.709727][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 232.743776][T11584] tipc: Enabling of bearer rejected, failed to enable media [ 233.107416][T11602] netlink: 'syz.3.1453': attribute type 2 has an invalid length. [ 233.127204][T11602] netlink: 'syz.3.1453': attribute type 1 has an invalid length. [ 233.280133][T11613] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 233.281933][T11604] ip6_vti0 speed is unknown, defaulting to 1000 [ 233.343236][T11614] IPVS: persistence engine module ip_vs_pe_ not found [ 233.438735][T11620] syzkaller0: entered promiscuous mode [ 233.442408][T11622] netlink: 'syz.0.1459': attribute type 13 has an invalid length. [ 233.444292][T11620] syzkaller0: entered allmulticast mode [ 233.607753][T11622] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.615507][T11622] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.749587][T11622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.763043][T11622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.959800][ T8373] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.993550][ T8373] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.054650][ T8373] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.106396][ T8373] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.160155][T11641] netlink: 'syz.4.1465': attribute type 3 has an invalid length. [ 234.341924][T11651] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 234.561011][T11651] ip6_vti0 speed is unknown, defaulting to 1000 [ 234.642670][T11664] syzkaller0: entered promiscuous mode [ 234.648449][T11664] syzkaller0: entered allmulticast mode [ 235.314219][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 235.502852][T11691] bond0: (slave team0): Releasing backup interface [ 235.515604][T11691] team_slave_0: left promiscuous mode [ 235.524093][T11691] team0 (unregistering): Port device team_slave_0 removed [ 235.527445][T11711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.533341][T11691] team_slave_1: left promiscuous mode [ 235.549849][T11691] team0 (unregistering): Port device team_slave_1 removed [ 235.557667][T11691] geneve0: left promiscuous mode [ 235.575841][T11691] team0 (unregistering): Port device geneve0 removed [ 235.599613][T11700] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 235.618347][T11705] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 235.642862][ T7130] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.651338][ T7130] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.661084][ T7130] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.679005][ T7130] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.947146][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1490'. [ 235.968177][ T25] block nbd0: Possible stuck request ffff888024d95080: control (read@0,1024B). Runtime 150 seconds [ 236.087674][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 236.100379][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 236.150364][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 236.362253][T11632] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 236.417120][T11632] team0: Port device netdevsim0 removed [ 236.466769][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1497'. [ 236.476525][T11755] netlink: 'syz.3.1497': attribute type 1 has an invalid length. [ 236.557252][T11759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1497'. [ 236.577164][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.588096][T11759] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 236.793925][T11772] netlink: 'syz.2.1504': attribute type 1 has an invalid length. [ 236.852629][T11772] 8021q: adding VLAN 0 to HW filter on device bond9 [ 236.962760][T11784] vxcan2: entered allmulticast mode [ 237.018746][T11784] syzkaller0: entered promiscuous mode [ 237.024648][T11784] syzkaller0: entered allmulticast mode [ 237.048126][T11784] tap0: tun_chr_ioctl cmd 1074812118 [ 237.354649][T11810] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 237.430000][T11813] tipc: Started in network mode [ 237.435531][T11813] tipc: Node identity 06f0714ea319, cluster identity 4711 [ 237.443227][T11813] tipc: Enabled bearer , priority 0 [ 237.576489][T11825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1520'. [ 237.602743][T11827] tipc: Enabled bearer , priority 0 [ 237.633784][T11827] syzkaller0: entered promiscuous mode [ 237.651224][T11827] syzkaller0: entered allmulticast mode [ 237.716497][T11827] tipc: Resetting bearer [ 237.735359][T11826] tipc: Resetting bearer [ 237.782274][T11826] tipc: Disabling bearer [ 237.926132][T11836] netlink: 'syz.2.1524': attribute type 13 has an invalid length. [ 237.935249][T11836] netlink: 'syz.2.1524': attribute type 17 has an invalid length. [ 238.061678][T11836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.071572][T11836] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.084856][T11836] bridge0: port 1(dummy0) entered blocking state [ 238.091687][T11836] bridge0: port 1(dummy0) entered forwarding state [ 238.103873][T11836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.138098][ T5915] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.148142][T11811] tipc: Disabling bearer [ 238.154338][ T5915] syz2: Port: 1 Link ACTIVE [ 238.170208][ T9573] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.328391][T11847] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1527'. [ 238.380385][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'. [ 238.440106][T11860] 8021q: adding VLAN 0 to HW filter on device bond15 [ 238.470797][T11867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.483725][T11867] bond15: (slave bond0): Enslaving as an active interface with an up link [ 238.606086][T11875] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 238.681600][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 238.859524][T11854] bond15 (unregistering): (slave bond0): Releasing backup interface [ 238.878659][T11854] bond15 (unregistering): Released all slaves [ 238.896969][T11875] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 239.156332][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 239.311760][T11925] netlink: 'syz.4.1546': attribute type 7 has an invalid length. [ 239.360260][T11932] netlink: 'syz.0.1549': attribute type 1 has an invalid length. [ 239.373577][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.373589][T11925] netlink: 'syz.4.1546': attribute type 7 has an invalid length. [ 239.441229][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.485295][T11938] bond1: (slave geneve2): making interface the new active one [ 239.495870][T11942] netlink: 'syz.1.1550': attribute type 5 has an invalid length. [ 239.496456][T11938] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 239.534504][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.552093][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.599295][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.607610][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.638908][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.674693][T11951] netlink: 'syz.3.1553': attribute type 29 has an invalid length. [ 239.707657][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 239.726759][T11954] netlink: 'syz.3.1553': attribute type 29 has an invalid length. [ 241.056146][T12009] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.220199][T12020] syzkaller0: entered promiscuous mode [ 241.235997][T12020] syzkaller0: entered allmulticast mode [ 241.420483][T12027] syzkaller0: entered promiscuous mode [ 241.425994][T12027] syzkaller0: entered allmulticast mode [ 241.670715][T12037] __nla_validate_parse: 13 callbacks suppressed [ 241.670734][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1581'. [ 241.726756][T12037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'. [ 241.833484][T12042] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1581'. [ 242.086917][T12043] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 242.568556][T12060] ip6t_REJECT: ECHOREPLY is not supported [ 242.741652][T12067] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.052159][T12085] x_tables: duplicate underflow at hook 2 [ 243.161636][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1595'. [ 243.304818][T12096] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1597'. [ 243.320267][T12063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'. [ 243.356521][T12066] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.368208][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 243.406709][T12096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1597'. [ 243.789015][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 243.874609][T12122] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1602'. [ 243.935569][T12076] ip6_vti0 speed is unknown, defaulting to 1000 [ 244.098976][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 244.130903][T12134] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004 [ 244.176260][T12133] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 244.258600][T12133] netlink: 'syz.0.1606': attribute type 16 has an invalid length. [ 244.283672][T12133] netlink: 'syz.0.1606': attribute type 3 has an invalid length. [ 244.506987][T12131] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.140930][T12176] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 245.159140][T12176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.054584][T12198] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 246.183828][T12198] macsec1: entered promiscuous mode [ 246.198887][T12198] hsr0: entered promiscuous mode [ 246.211729][T12198] hsr0: left promiscuous mode [ 246.283562][T12209] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.411260][T12213] netpci0: tun_chr_ioctl cmd 1074025678 [ 246.416862][T12213] netpci0: group set to 0 [ 246.740447][T12235] xt_cgroup: invalid path, errno=-2 [ 246.893949][T12245] __nla_validate_parse: 7 callbacks suppressed [ 246.893967][T12245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1627'. [ 246.931463][T12240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1634'. [ 247.019069][T12240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1634'. [ 247.154170][T12258] syzkaller0: entered promiscuous mode [ 247.180186][T12260] netlink: 'syz.2.1637': attribute type 7 has an invalid length. [ 247.180821][T12258] syzkaller0: entered allmulticast mode [ 247.305911][T12262] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.365973][T12270] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 247.480535][T12270] 8021q: adding VLAN 0 to HW filter on device bond10 [ 247.497904][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 247.524423][T12282] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1643'. [ 247.572193][T12274] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 247.584846][T12274] bond10: (slave batadv1): making interface the new active one [ 247.658265][T12274] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 247.839798][T12281] bond10 (unregistering): (slave batadv1): Releasing active interface [ 247.856941][T12281] bond10 (unregistering): Released all slaves [ 247.973797][T12289] bond16: Unable to set down delay as MII monitoring is disabled [ 248.029186][T12289] bond16 (unregistering): Released all slaves [ 248.292882][T12320] delete_channel: no stack [ 248.659619][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 248.805402][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 248.827790][T12354] netlink: 'syz.4.1655': attribute type 10 has an invalid length. [ 248.871121][T12354] team0: Device veth0_macvtap failed to register rx_handler [ 248.974353][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1656'. [ 249.041973][T12368] netlink: 'syz.0.1659': attribute type 1 has an invalid length. [ 249.050377][T12368] netlink: 'syz.0.1659': attribute type 3 has an invalid length. [ 249.058386][T12368] netlink: 'syz.0.1659': attribute type 7 has an invalid length. [ 249.066572][T12368] netlink: 'syz.0.1659': attribute type 8 has an invalid length. [ 249.076319][T12368] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1659'. [ 249.087222][T12368] NCSI netlink: No device for ifindex 131092 [ 249.196078][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1661'. [ 249.205734][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.241030][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.189109][T12401] netlink: 'syz.1.1668': attribute type 4 has an invalid length. [ 251.168336][T12444] syzkaller0: entered promiscuous mode [ 251.219106][T12444] syzkaller0: entered allmulticast mode [ 251.331964][T12446] veth11: entered promiscuous mode [ 251.376087][T12450] vxcan4: entered allmulticast mode [ 251.414101][ T9209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.441813][ T9209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.769707][ T6001] nci: nci_rx_work: unknown MT 0x7 [ 251.874213][T12463] sctp: [Deprecated]: syz.0.1687 (pid 12463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.874213][T12463] Use struct sctp_sack_info instead [ 251.933369][T12463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.120925][T12463] bond2 (unregistering): Released all slaves [ 252.156492][T12483] ip6_vti0 speed is unknown, defaulting to 1000 [ 252.613833][T12499] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 252.628913][T12499] __nla_validate_parse: 11 callbacks suppressed [ 252.628931][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 252.710097][T12495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.720127][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. Connection to 10.128.1.33 closed by remote host. [ 253.603036][ T5844] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 253.609237][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 253.618679][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.628728][ T5844] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 253.634294][ T5844] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 11 0a 5e ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 06 ee c3 ff 49 83 3f 00 0f 84 [ 253.653921][ T5844] RSP: 0018:ffffc9000410f5a0 EFLAGS: 00010206 [ 253.659998][ T5844] RAX: ffffffff8263404f RBX: 0000000000000000 RCX: ffff888031b43d00 [ 253.667964][ T5844] RDX: 0000000000000000 RSI: ffff888142682870 RDI: 0000000000000000 [ 253.675920][ T5844] RBP: 0000000000000006 R08: ffff888031b43d00 R09: 0000000000000008 [ 253.683876][ T5844] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 253.691836][ T5844] R13: ffff888142682870 R14: 0000000000000000 R15: 0000000000000030 [ 253.699792][ T5844] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 253.708708][ T5844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.715273][ T5844] CR2: 00007fb902156e80 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 253.723282][ T5844] Call Trace: [ 253.726552][ T5844] [ 253.729470][ T5844] ? trace_kmalloc+0x1f/0xb0 [ 253.734054][ T5844] kobject_move+0x525/0x6e0 [ 253.738552][ T5844] ? __pfx_kobject_move+0x10/0x10 [ 253.743563][ T5844] ? do_raw_spin_unlock+0x122/0x240 [ 253.748749][ T5844] ? get_device_parent+0x366/0x3a0 [ 253.753851][ T5844] device_move+0xe0/0x700 [ 253.758174][ T5844] ? disable_delayed_work_sync+0x5c/0xf0 [ 253.763797][ T5844] hci_conn_del_sysfs+0xb8/0x170 [ 253.768816][ T5844] hci_conn_del+0xc36/0x11b0 [ 253.773400][ T5844] hci_conn_hash_flush+0x191/0x230 [ 253.778518][ T5844] hci_dev_close_sync+0x821/0xff0 [ 253.783547][ T5844] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 253.789082][ T5844] ? up_write+0x1ac/0x410 [ 253.793395][ T5844] ? rcu_is_watching+0x15/0xb0 [ 253.798147][ T5844] hci_unregister_dev+0x21a/0x510 [ 253.803161][ T5844] vhci_release+0x152/0x1a0 [ 253.807650][ T5844] ? __pfx_vhci_release+0x10/0x10 [ 253.812660][ T5844] __fput+0x44c/0xa70 [ 253.816636][ T5844] task_work_run+0x1d4/0x260 [ 253.821216][ T5844] ? __pfx_task_work_run+0x10/0x10 [ 253.826393][ T5844] ? kmem_cache_free+0x197/0x620 [ 253.831406][ T5844] ? do_exit+0x6c0/0x2310 [ 253.835725][ T5844] do_exit+0x6c5/0x2310 [ 253.839882][ T5844] ? do_raw_spin_lock+0x121/0x290 [ 253.844925][ T5844] ? __pfx_do_exit+0x10/0x10 [ 253.849525][ T5844] ? __free_object+0x4e3/0x6d0 [ 253.854340][ T5844] do_group_exit+0x21c/0x2d0 [ 253.858926][ T5844] ? lockdep_hardirqs_on+0x98/0x140 [ 253.864218][ T5844] get_signal+0x1285/0x1340 [ 253.868828][ T5844] arch_do_signal_or_restart+0x9a/0x7a0 [ 253.874374][ T5844] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 253.879584][ T5844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 253.885756][ T5844] ? exit_to_user_mode_loop+0x55/0x4f0 [ 253.891265][ T5844] exit_to_user_mode_loop+0x87/0x4f0 [ 253.896592][ T5844] ? rcu_is_watching+0x15/0xb0 [ 253.901358][ T5844] do_syscall_64+0x2e3/0xf80 [ 253.905942][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.912010][ T5844] ? clear_bhb_loop+0x60/0xb0 [ 253.916792][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.922692][ T5844] RIP: 0033:0x7fc2297c2005 [ 253.927096][ T5844] Code: Unable to access opcode bytes at 0x7fc2297c1fdb. [ 253.934250][ T5844] RSP: 002b:00007ffecde55180 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 253.942660][ T5844] RAX: 0000000000000000 RBX: 00000000000003fe RCX: 00007fc2297c2005 [ 253.950627][ T5844] RDX: 00007ffecde551c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.958599][ T5844] RBP: 00007ffecde5522c R08: 0000000000000000 R09: 0000000000000000 [ 253.966595][ T5844] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 253.974597][ T5844] R13: 00000000000927c0 R14: 000000000003daee R15: 00007ffecde55280 [ 253.982563][ T5844] [ 253.985567][ T5844] Modules linked in: [ 253.990342][ T5844] ---[ end trace 0000000000000000 ]--- [ 254.008901][ T5844] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 254.014561][ T5844] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 11 0a 5e ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 06 ee c3 ff 49 83 3f 00 0f 84 [ 254.034965][ T5844] RSP: 0018:ffffc9000410f5a0 EFLAGS: 00010206 [ 254.041116][ T5844] RAX: ffffffff8263404f RBX: 0000000000000000 RCX: ffff888031b43d00 [ 254.049168][ T5844] RDX: 0000000000000000 RSI: ffff888142682870 RDI: 0000000000000000 [ 254.057159][ T5844] RBP: 0000000000000006 R08: ffff888031b43d00 R09: 0000000000000008 [ 254.065240][ T5844] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 254.073228][ T5844] R13: ffff888142682870 R14: 0000000000000000 R15: 0000000000000030 [ 254.081254][ T5844] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 254.090217][ T5844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.096785][ T5844] CR2: 00007fb902157d58 CR3: 000000003427e000 CR4: 00000000003526f0 [ 254.107671][ T5844] Kernel panic - not syncing: Fatal exception [ 254.114081][ T5844] Kernel Offset: disabled [ 254.118423][ T5844] Rebooting in 86400 seconds..