last executing test programs: 44.63152472s ago: executing program 3 (id=4358): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) r2 = accept(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) recvmsg$kcm(r1, &(0x7f0000001440)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x4}, 0x20000020) r4 = accept4$unix(r2, &(0x7f0000001480), &(0x7f0000001500)=0x6e, 0x80000) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000001540), &(0x7f0000001580)=0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000015c0)=0x0) sendmsg(r0, &(0x7f0000001dc0)={&(0x7f0000001600)=@nfc={0x27, r6, 0x1, 0x7}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001680)="0120add96a", 0x5}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="cbe223df6edd587bce8833a4cf4b6811130bc0e3f507891cfd414898b4d4b06cae3895b6f65ed614994d752a84581e1fca026bd4634fbd910a5dbbdcaf17c1b17e470944e7bf1c32483cac65c758f046ef6286b4bd7a9f36fc5d197c280bd60f27fca6e48a2268cdc90086601c0ab1c223e9a0c2a35d319247ea82cd06404df40a073124af85252dfbce51d2e8ca6a80e2a85797947b8be7d1f84128565f15", 0x9f}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="433fb54dcd9ed5c6b9b5918dd7d47065edeac1d39e0b52bc609d1aeca3", 0x1d}, {&(0x7f0000001840)="c6f1455cf7cf3520331c76ec206345b13072279c1e9b02cf6f156b568ff4eb998ab57218890cc9f2f1e93945355fbcd2776c33bb4a21c532399cee10c0be4616e7ea0cb2d28e07d580ea2d111fa2db959f0398535d416fac41de2a610f157b0b90f3ae32bf703b2d88992ba21bc7ad7f51f629ef7bb3ea5af82a2973e8206ddfb9225891bd16ea56ef0cbee50764682efa5d8e8969b04798f84008ca730c8ed335ae81da16f4f37327b2ac227b4f5757f96918c7e1c311bca002b1e3073c9c84306b232183127054dd552fce5aa0ca2e19fcf69447f5d7e415e4d51a0c0e2e347a7f07022c1b58", 0xe7}, {&(0x7f0000001940)="7d5cb8a578aaed220a25139cce0f3d42a5c4e3448bd74778a1eb2de3c2899a784d06e0e8df1bd2354f75297d050bbc45b8fa63377f6d3221ba00407b048722495ff0589f026c302eff8c47f8ebbcc5fe304217501a4567966a145498495330fdca05d90ae1923f2daf79d595f2bffbe120fb5486a98fefc6354091e7ca000b952202557e84c37623c906d2e4ab59d47854f928921d7e0d39dda2031778937a702d28383e256fff67fbc3bccdb3b4278ed7a108e7d24586762c17bc0e8093010a54148a5601965d51acc222aea9c8249361e4b73146b52e0d03663c0b4769dbbfccb44edb9fec41c17581dd5fc188158ed377d79e878a4b4b4433", 0xfa}, {&(0x7f0000001a40)="30d55cd337a0c1cba9d3b07c651ca944643249227a029d2f9a13baec0aab73b8d9c100658f64a5e7e809dac08c6efbea02d68e8355380498644100301dc7fc66d0753c276152fbcbfaf91af3b34168d1649c482372326fbc45abe67ccc2b1cbfa572568c071687b5073028690820a654aaf04ae96dd176f1a7838589a6480bb626db71ce405e9938da02166253db93b73a1577ecb1f641180e78e93b52129bd79d420dbd8959e46494ea40f527c3c94ab2306980eee67f540d590b1ace", 0xbd}, {&(0x7f0000001b00)="349e549ff743e47c71491fc98a582cbbc1712b6b6329066292890c846b335ddc326250357cac65b097ac58fd7e1926663f940533b5d4bcba590e9a533398c7b6b194d473dbdc40cc81e8d9d4aee38946b570dd2647442f940158548a92590f1c6b17df6b9dc959f529042c81cdcdbc3058db73e36ccb012a18542dfb439ede50c758065dddf50333b161389578139ee07bb44b56346f802f467a001c1fcf9ac40b5e", 0xa2}, {&(0x7f0000001bc0)="18aa1aaa67b50b8f69fa2cfce7171b704ca15ffd80d21497ece330ee233e51c956b092c4ddd2fbb2244d16726b946b3278dd076bfbbd17a2cfe01ad98475674450f8ad493d7875834bfe579c9c7250d4da7329cb2a545549bf0d1c7aaffa6e59f8c811943a0884ef6344839d16be4ff47dec736b387e5f5a71222cc656942dc1e2aec9d8b653125650dfb7b0aab6495d0ec9e3bdd089fa019692bae1b0c22d6cf3fa2bbac00a5d10004c7bdd3f6c757cc2af8553f714f091bc641c47c0c4f2b19e46c5f2520517ac4003d840fe78c423cf100f23370892bed915250b", 0xdc}], 0xa, &(0x7f0000001d80)}, 0x4000800) r7 = socket$caif_seqpacket(0x25, 0x5, 0x4) recvmmsg(r7, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/247, 0xf7}, {&(0x7f0000001f00)=""/42, 0x2a}], 0x2, &(0x7f0000001f80)=""/101, 0x65}, 0x700}, {{&(0x7f0000002000)=@ethernet, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002080)=""/182, 0xb6}, {&(0x7f0000002140)=""/211, 0xd3}, {&(0x7f0000002240)=""/77, 0x4d}], 0x3, &(0x7f0000002300)=""/4096, 0x1000}, 0xfffffffc}, {{&(0x7f0000003300)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003380)=""/137, 0x89}, {&(0x7f0000003440)=""/21, 0x15}, {&(0x7f0000003480)=""/14, 0xe}], 0x3, &(0x7f0000003500)=""/4096, 0x1000}}, {{&(0x7f0000004500), 0x80, &(0x7f0000004780)=[{&(0x7f0000004580)=""/11, 0xb}, {&(0x7f00000045c0)=""/183, 0xb7}, {&(0x7f0000004680)=""/232, 0xe8}], 0x3}, 0xe}], 0x4, 0x10040, 0x0) write(r5, &(0x7f00000048c0)="ea709519c3afccfa1a6a5f0ee4ffae8db5c676829ad23bee285d413d42452402fbbc42c1f2a525f1277dfabe6740a242725dcdfec6b1becae144ea4b30b014eb470884c5dad8aed4a2801931df63b8603f21ce73c19f49bd77258e732b281cb700d84ffed6704a0a1c353b9134f470887fa7bc7c3487ace43f55ba114b5dfcee03c4fb062dfd47a05911fb39ca075a7548fe7558d2544f606c863f93fecfc7268a3c83578188bf49e57e16d6c11e5e006e724a5ae6218e73327aaf61e0b97281404cdf96d384fd61e39f3d0dda84898c", 0xd0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000004d00)=0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000004d40)=0x0) r10 = accept4(r1, &(0x7f0000004d80)=@isdn, &(0x7f0000004e00)=0x80, 0x40000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000052c0)={0x0}, &(0x7f0000005300)=0xc) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000005340)=0x0) r15 = getgid() r16 = getpid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000005380)={0x0, 0x0}, &(0x7f00000053c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005400)={0x0, 0x0, 0x0}, &(0x7f0000005440)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005880)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000058c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000059c0)=0xe8) r21 = getgid() sendmmsg$unix(r2, &(0x7f000000a740)=[{{&(0x7f00000049c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004a40)="b7a50d3a48ae9bcc078be10e99c708bb8dfa2c082c4a592003db4a1662bef163ae4e671576d41a118cd5f37a16778c9521c233993da11c0902e1b7a586961caf44fabb3775f12349c3196d0e3c1a166b3d8822531071cbe65cf4e5ba8aa9ddfcdc428d49ca3cf2584097d880d3e0a5d4ab594dd31c106be93e7c22a1ed0bca81d98fa2102dc129c2cde0f1da9203396c3d784677351e3e9e21057c3fb850f719bd8506643dfe931c365167af46ca0afa9cf68a496311b37db4470486af6d0dec7c8f886e2ec9c221267d8e9be4ed6e", 0xcf}, {&(0x7f0000004b40)="52eca4faa3993e9257891202dd6eac26a945ac285ec848f6698b0f00061a7f9d1d7731add53045de5a5bfdbda0695e814966dbd853f2c70124666cfe4a8afd1cf9cef14bd06fba04d8888eaffb9324653b8a8bbf223f278081dea030ac0737735c58d7255e389d3b68e83843bc6496a6b1a3f2484261c023899f403ba35a0873b300d815fcc813b743e87598aa90c6321d7fca008583f2228c4dfa5b934d91f6063d16c5565db74e7b", 0xa9}, {&(0x7f0000004c00)="966c4a2df31f0e0a39c92b7cbe68c5ef0687c49b8148351ee8a6bd8b48327dd47597393b3ef735ffff83896c362d54a398ff9e8260de1312a014356831ca68a70a2bc90fb729922188d80c27732da2676de63b7a65f9b839e6f85cb7b2830b6d6d", 0x61}, {&(0x7f0000004c80)="ddd998893af95350deb4850105a26a", 0xf}], 0x4, &(0x7f0000004e40)=[@cred={{0x1c, 0x1, 0x2, {r8, r9}}}, @rights={{0x24, 0x1, 0x1, [r10, r7, r7, r2, r4]}}], 0x48, 0x40}}, {{&(0x7f0000004ec0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004f80)=[{&(0x7f0000004f40)="21895f3d38ef0cebbe429bf90b7d1131d6e332aac99250baf7b72f7dc631c12b143baa", 0x23}], 0x1, &(0x7f0000004fc0)=[@rights={{0x18, 0x1, 0x1, [r11, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r7, r12, r7, r4, r0]}}], 0x48, 0x840}}, {{&(0x7f0000005040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005280)=[{&(0x7f00000050c0)="c12b31073bf07ee5fb1a21d3827a0fcda3755f8d96300fc36b7524329ce946e4509739a730327cff662745a715fffebddc76a5f895d87e9c6e1b01e5e8e6b5eab7e6c06a056e48b1ea9bbbff903369fb4465cf3fedede0fec801fe249937d8e1f028f8550ceb100777fae4a0487fe39c082d7d548bab11799dc77dc608ec624809e01cd91fb8f2f6b6f852e2a2706a731f9b9302d60c1f8d5ee121b87a038cd55f34826281a23da8be3480ab0c36217b6403130f1df72406", 0xb8}, {&(0x7f0000005180)="594fef85d87e04bc211c697f326b4869e3f07163212f27e61767427ac5e27936f1de74c7364314978e503ff3ade2f726c1b1a388b93e20800f18fcdd13e5cc0abc13f65bb2c735fce33a9e7db946884f2aa345359e20f3f699ae451c48f5b344b3f50b531cf416a201f404174b3ed16fdc6b82e1a39c021b45159d48490e4400dd304ff9510dbb2b2bf99b7ae84fc2c28e316956786d7858a6ee4e73d8895a0d8291aa8fd9d4218ef26234cacdb4cbd32449570ae17fb36bbdc179a8e5607a144005c6c901b9eebf77637bf38334d78705b2aaaedf7d64e6840751", 0xdb}], 0x2, &(0x7f0000005480)=[@rights={{0x1c, 0x1, 0x1, [r4, r7, r7]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x2c, 0x1, 0x1, [r2, r5, r7, r2, r3, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0, 0x802}}, {{&(0x7f0000005540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005840)=[{&(0x7f00000055c0)="9a2218a49e7f93976d346ef3ab2e90fda177334e34ae252372f83643d9fd700d8f3c5b79b95b9bef3e780e0da52129400384a6775ee6554fe117629f35bc6fec679566c63dcfecf24f03f00cf6836de3855319dab7a0b9ce5a751bd823cc3b3d7674e1b9609e4e0ff9937438a30d79ae028b43a3ee7e6b6e9eebcd7676e78f92e0b982c532901381ffd062137d5969eb7f3a74325ffb9043f2eb588b646224fba9c70fa69cc8db38ae9849a9ac60fa", 0xaf}, {&(0x7f0000005680)="b44bf7e7c3c4c65e973a4ace6b6343d2d1d8de0f133c940d7f084ff6a2db9430560893215fe421efdd1b95c964f2793616bce24cc71a628a2d85508a16cd462175da723e5e9e68022da367516aee110b722f1e818ccf26cda42aa892f8ace438430b9a382dd9b4b52921385f239b50bd6c4af136a22a3abe3607b2b569f3ef33d95d94ff7038388787520d8352793a549262a28adf", 0x95}, {&(0x7f0000005740)="672461c4edd943e003de1ee3be3b65288d4a19791517735f283b69aa02ee98282ae7ac4716924758f495251d60c7b7dff3ef4ce31240780444316365e2e662211fa4fe7c993941bf36e7acb7976587700be6f02d75c1c1f422d5fe3f750796c90f002d6901b7ed3a2f58e8bfb16635ec56b6dadb80e8d1b206de2bba7435f37657b8c1f14cdcdc28e888cba71cede8af38f5ceca0a69302afc50c3caf4bddecb3287c58de657a2eb507c1679bdb7a4d6b6e273b0a5301d8f054e803fe1b64f6571a2bfdb106441e42c61", 0xca}], 0x3, &(0x7f0000005a40)=[@cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x38, 0x1, 0x1, [r7, r7, r2, r1, r1, r1, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x40d0}}, {{&(0x7f0000005ac0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005b40)="50842c955eee1b18df291bbe4bc3b64f37b68aa4a45c5b4b530de6a8365696e9ea88901eb292ec45f2b16b4fed8063436e47e2c5d2dbfd354303a815e6a0bb702a3e543612bd0a70392d2b7562ee03ad80ed57362acd786e63200146b371a9ca0daa8a5a85b5ec7689e7070aa34e378a83aabbf29f83964602d5f261adb14a6f14f24ab7966294b040a259c1f397cc60717557c03e6620da8a8c2fe198f654", 0x9f}, {&(0x7f0000005c00)}, {&(0x7f0000005c40)="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", 0xfa}], 0x3, &(0x7f0000006140)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r2, r4, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0xe0, 0x4018800}}, {{&(0x7f0000006240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006540)=[{&(0x7f00000062c0)="27055454d6f1a0c7abf374367694b9abea847e94d45fe397826e874e6ee20381dcda", 0x22}, {&(0x7f0000006300)="86b8acfd1ca82f8c815a21aa4b8163cb7914627292087cb6d5011e076471a20fd85f57afa3208853199092e13818af14a15e1d2cf2169771088ca7a2eb9d451d84791a4d69862667ba4e877fee9f66e7e89533efa8da8b5bb1022c402cee7d4042cccc8372a31c4d1c6bf2d91df884773cf6d669bf050d64ac8c33af9352496beffbc1553b3a288740f5f8826da80e0fc3350dd10b85433e17fef8341eb8648c8649a6464b2cacccbfd2ef3baa593b7da37f50cee075a1f5e8c94ccb40ec4510dee9fde2ec7b615cef7c88a04f2fd6151002aac63c42cfce", 0xd8}, {&(0x7f0000006400)="d859e13cd57a6f320bc5756b1f609782f576767ad44f24cfaaa37cfa7d", 0x1d}, {&(0x7f0000006440)="2095f85db74ca8003c0dd9e4085044897776798a6f993a782a22cf146899b02c3dc78e7d91ebb202602336a5b4764f5528ec256ff81fecf13835d811e83d117d45159b033ceae46684a0d56d6a114c71d2d126de365487a423e9694d785547c3eb2a6c093671b327d5befdb54753f04fa4c6d7d67e2d9aeecedecf152d5098bae86fe35237b3956248a9bc398afb59b43b7a30623e2bfe4e0ef62a4dd017184b4a6e7295b4729279cdb00e38bfe06a9075d486662dd25176900759ca8d8a588afc76e90b6c6740f9bb0993de7c9dce2beb30e7e2c9536cabdc70b360b2a5b9b3acaf735196579402b35e8401e56e0b587bfd22116ce7f30a58", 0xf9}], 0x4, &(0x7f00000069c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r3]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r0, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}], 0xc0, 0x10}}, {{&(0x7f0000006a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006f80)=[{&(0x7f0000006b00)="adb57b17df6b4dd4bfb4b55ff8cc4b323a0127763b084314defecb132fde0765bc6496de4a19a8b1edef36424e7bb131638c8747c688dc2dcd43cf94ac0950e860393eae628eecd2f8164b8568913b61a6e86ec09c0a91f92161bc0a1fbe73adf0f79394f70a9fc5db07989f662ca78fe0828e7fffb4b99cea1f23364d3549ef83ef2ad9", 0x84}, {&(0x7f0000006bc0)="d98561069ccfbd7f6b005060403b29908e035ae2d7fc55632accac3f8e8875cdc6b7f7a26f5c693620e295e64fe28ac2a5f20ccb30717b3f205d83beda10b270953ad0f443e96db3b84951f77fb364a18c473214ddc6855474fba1f3e4bd0cf9ef9fb87ed01322b811636952b8f2e9aa92e972f5a74532161c7161a38274dc15fd9a8f80e92d1e41af4f3a3fd4a2dbe237df2c1bf559b4d5de10b79ef5a226382bf7a85137bf0c4ebac56e0a4f92f6c81b028447cb4502da353249fa93a04286fe3e3a2ac39e050938a4a6296e51dd1223e4d8be49f0242a47a054d7abc3c4a37ee64a94", 0xe4}, {&(0x7f0000006cc0)="197b5552ba0bed7921", 0x9}, {&(0x7f0000006d00)="ab4d1455c0649b482a3e034b4526f20f9921c1c12a63cd9acec44f", 0x1b}, {&(0x7f0000006d40)="d5e6faec34b56aeabaa6f24a3c3ced3afe667a643ed161526d1c1ad2b8d3c665c51be5a4f41c", 0x26}, {&(0x7f0000006d80)="b2695d41f0f750dd75579f562a5a7ad3e7cc30d2c4c7", 0x16}, {&(0x7f0000006dc0)="ae798d7b5c1adb780fdafaa664c0843bc8e49f1be495a23db896e15de6ba3c8770c41dcab7d5a36b89f1512cd280ec66bc9b2867d952875b23b02d313f66c443891fbe165366553633bb064bd0dc98278f589f1176ecd69bc070746164b27ec96e65f9a622e6f56516a88bb24b869e1750ab31523b7cf84b2d61d41776e8add6f0b8fdf58ab7ed20be08da9fb2d2d79937b7163b566548c7ca13b406d9827cb25dc4962d6fd5dfeb310525952a0f69225ef9c8c68624f02390f1c7e078126ac1a3462a11a98b9d0b4830523ccb103c206b627d6f1711d329668f54ce360e9cba719a22b17f514a00b1", 0xe9}, {&(0x7f0000006ec0)="99a26d5eba4cd09cac15d2a4316912fa8de27001aba5d59f1add69fec16acab79d4d3b83867e370ce75c6a3bb84a038a35681a6612c4390345b042e1cc400caf249db1dff7cd2d53eb9a6b8aba6b7c13d2c48cb8972e17", 0x57}, {&(0x7f0000006f40)="d6453534629dc67a36b987738c71ce9cb74cb6e61fa7d7180eac0456def486718eca807d7c6e50046afd998188b1b88650471e089136", 0x36}], 0x9, &(0x7f0000007a80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r2, r7, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x158, 0x20000010}}, {{0x0, 0x0, &(0x7f0000008080)=[{&(0x7f0000007c00)="74d9ef02c65d46c60c08a284cca81bbde52923295467bb825ad49f1ea30aad331abb957b791c25b96324fdbc7c6ce30179396766e3fd90d23d8b745cbaadba4d5a24c1dbafde646451b21010523729d9b11f6db2432ae63b9dfa7563fda698b9d3c5efac4856f6fb99061fe5e2a3e994c00c1791e122dd221f22f8f4e3b621c6d79b82c85fbe666d5a767aace0db16fefb1e96e10217769f9440d210da589162d7d42930ea91a5be1cfa92ac323399f34285e488ded77389b3f251176a47ded453f02d905ac6831df071239e0aabe836a5980b197748526ac3981c", 0xdb}, {&(0x7f0000007d00)="188eb73266fd684028bf009c4025eab970f06f9252ae3926c7cea7a129e7b76327421f3db730e10d13b1462dd910de5d6cc5f063c27bacdb236e76998c0ae0207fac6256ecad5203ae1de33537c7ab2fe56fea67fb1dd76af65e289888b4ee172212e777f1025ceafedccd110ac3360eae08cb8e4d67d5bf044c5ffd66a97f0bc67508540146a345073d6c6b991513973fcb9d96b8bb8ae2b188c20f4e9335258745b3b7433786e5bd2bad67cb2e8070f36f480e716f00cfaf34c194", 0xbc}, {&(0x7f0000007dc0)="2afcc97f93fba4e080473628c56d4ddaaa0e866c9be83c3daa67aff051b0a1e6d950ab68d8ae997a4ac66234c81fbba3abdc2f22d201b9304d86eb323da216b89e4a8024cfe3bde442b23f4587551c61e4fc487bba48539d1abf9851dc4ab5a6322d5444f729cb24dfa505c89d8c7fbc684ab16facb0067c3ced20f206c451c4a447d02f1239077091aa3599b15b7a8da3861b78090c60795c7f358af43537a118b28e5ef49fd510be163b14ac9fb1f8d849065836fce0739928338b67ad024ac9ea23e2bb9113c41c851154028233519ac9ab9e2c7d56ad5fc861110c893c1fc1cb5a", 0xe3}, {&(0x7f0000007ec0)="31d7af9b14adc0cccaff1827017f1b1d2634", 0x12}, {&(0x7f0000007f00)}, {&(0x7f0000007f40)="86dc3bbe4e930aea204e643300e6d2a488e90c03ade8ec453fcfc7bce4309e286bf37263e24b5b47309233a600b60f369245cf6d10b87f698fbb576ce6842dbd0271c472b3caa59a617797bbe162adea82f2cf9d469ebab1e6d55be2477f17973074f346d31ca5ea32e443d9db92e4887ce8402670da287f07a3986958f81ab4f6c69b3d9da29d3d0accff5add9215a4cefdacdbec693a2bb04fc3fc6dcdb6b15136a5313d4ede0774a1a21c80d1cb191ff111092121b1a3d9fcd88cbedd3e935715201b", 0xc4}, {&(0x7f0000008040)="67deed874b6e6165778b5fb68fdb86a4", 0x10}], 0x7, &(0x7f0000008240)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r5, r7, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r0]}}], 0x78, 0x4000000}}, {{&(0x7f00000082c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000a6c0)=[{&(0x7f0000008340)="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", 0x1000}, {&(0x7f0000009340)="a46f4d08b16ec671f2b58aa4dc4d61716706056b3f28975aeb28fa7c", 0x1c}, {&(0x7f0000009380)="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", 0xfe}, {&(0x7f0000009480)="966cdef0f46746cc62cabb01e0a224209ce275163cff274765e934c3bd0cf9a9a425aeac9963c47348acdd710cea795271201cc789bbda1777f7bdf46df8243eb3455f81b0f130c6eaf74c53d369dd4f6d7a6aff5e14e6d13c3fba3a51aea74e8333868b0ba3e57f85db28c15c4bfd1d968bc2956a8941018c9cd061fc47a5ca890821a6fee64288962f589aca3c120a0a4ae7de9c11d0671e8abcf64c8c4baf0bd15e6b7f30d3646b1177e812f217a0fa6a06adf74d8beda85e2d7e4488e4a9fd9c167ab4f9e6f8", 0xc8}, {&(0x7f0000009580)="7c15df100d400aadaafd581d6a754a65d4c4507e0dbc1a41e0faff93f92efde30d8fecf9169dc9a1ca8fdac6061e37667a9c5130a75bf04f11c5e98be5275b9049dd82d285c9c195580f0a90c6442d222d264738185254d2128bccc356a45c76898cd65d8e486c20de5a5064230224c64d5619071ec2be29cd36502ccccd029c9a41cf698c44b9b19faa474c1ceee474a8d1d2", 0x93}, {&(0x7f0000009640)="509b1637ea74e7115e1d66cda10ce32505dd9a5e1b6bf996e597e04b3598f54a6567cd0b7698527d4cc38b8c73d29db9b1be3b7a078ddf5c054b1f25745f751a059b4fff961d2fd394a9c3797ebfb564c2c712c34ea938", 0x57}, {&(0x7f00000096c0)="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", 0x1000}], 0x7, 0x0, 0x0, 0x20000000}}], 0x9, 0x0) 44.480998826s ago: executing program 3 (id=4359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r2, 0x100, 0x0, 0xfffffffe, {0x27}, [{@pci={{0x8}, {0x11}}, {0x1c, 0x51}}]}, 0x4c}}, 0x0) 44.380591051s ago: executing program 3 (id=4362): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@loopback, @loopback, 0x0}, &(0x7f0000000080)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xed3f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xed}]}, 0x5c}}, 0x8840) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000280)="30684f3cbe4f1593a1b58911029486e3125a217e72d38c67c414c0c5fd46294be8cac35b68b947a5dc4ed3082cbaee5fc87d82a3bf2a36310e321a05f7388a9f38e21c3c33", 0x45) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000300)={0x1d88, 0x3, 0x4}, 0xc) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet(r4, &(0x7f0000000340)="48e60e3cb8259670b5eae715d8d666c1616ba7036b00", 0x16, 0x20000000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000003c0)={'pim6reg1\x00', 0x6}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x14) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000600)={0x358, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x79}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8e}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa45}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff22dd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x154}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x165}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf5d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffba226dc9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @local, 0xd1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x718}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x840}, 0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb4, r9, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4080}, 0x8) (async) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000bc0)="98a595a1930cf9bed20d371344ff3c802559481cb8da61525e7afabe4137950d58ab3773bc13b2acfa21a11eab023b28ec175e9f8d2c00c65e79541e77be6e694179249b427b090beea49f34ce63af4c613bc2748e65b36fa9a4b39eeeee4e2179e70e9f72f19b92") (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x140a, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x20000880) getsockopt$inet_buf(r4, 0x0, 0x2c, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=0x1000) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000001d80)='wg1\x00', 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001dc0), 0x4) (async) r11 = getpid() (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000001f00)=0xe8) (async) r13 = getgid() setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001f40)={r11, r12, r13}, 0xc) (async) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) 44.239589927s ago: executing program 3 (id=4365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r1, 0x1, 0x70b92a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe27, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x1f, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sk_msg, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 43.997574364s ago: executing program 3 (id=4370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000000000080003400500000105000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000020605000000000000010500040001000000250001000600000005000500020000000900020073797a32000000000d0003006c6973743a73657400"/72], 0x48}}, 0x820) 43.440881851s ago: executing program 3 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000bb42407200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="1800000020000000000000000000000018110000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x2, r5}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x258, 0x12, 0x2, 0x70bd26, 0x25dfdbff, {0x22, 0x7f, 0x9, 0x1, {0x4e21, 0x4e20, [0x401, 0x8000, 0x80, 0xa], [0x6, 0x1, 0xfffffffe, 0x5e], r5, [0xffffffff, 0x5]}, 0xd6, 0xfffffffa}, [@INET_DIAG_REQ_BYTECODE={0x42, 0x1, "1f33d73485f27af6af7cd0abbfc8dabe783f507ef07dc9d0a408bae0e78186473b82e226d29f94f3966cc219519032a724753a30f37af778c21bcfb809c7"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "e149b142c90ed7d2f572d7a3688c2b79f55a9399d6e10045af5da894b937ddb64da800a2dd18fd06d71c5d8aa287e89820ce20278263dc065191257eebbc355f14b63dbe5b056ef937e4e39c1ccb5a61e83c7ee5d6b061b70ff8c6b81e306b191577d4fa8febae47d8b33504e33c14d986b502839b716397a157cb48c155523e22d456f2f59c82186f0057ebcdfbfe92c4818f12629db7c11144ef9dd97097bef5adcf903ec7a57fa67c1132f986b03d7f81f264a5b02d203b515e8642fa83c4480e217a92f8105a33b0c357962f"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "e8"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "787f15f60d816a9426653c713a0105e4c590d98ae8318080cb2564e19f01de7e678ffb2a32ed97f86b776f6fd7721cb18840f66100bf52917073285c4a79c2071ad572f6603d74d51d86b3eb8092b80425b0f684892c0e4d959791363930bd574429562896d8ed529a3cc65f2438ad3e7c06a1571caf844619a1bd020bcf75ae9d6f51b7893d0cdd22070f43edc943d7fce93f04752cd736e1fb3df414c5c8ef5af608855db36101f486a03abf54f5140919d6599fa754cafe53e2c8d3d40024e203b704b9acf8e6ca1c7718bc555eabd83340d7a45d70246d755329a74647ed5f9545b79fa4"}]}, 0x258}, 0x1, 0x0, 0x0, 0x8005}, 0x6051) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000200)}, 0x10) (rerun: 64) 43.051131408s ago: executing program 32 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000bb42407200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="1800000020000000000000000000000018110000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x2, r5}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x258, 0x12, 0x2, 0x70bd26, 0x25dfdbff, {0x22, 0x7f, 0x9, 0x1, {0x4e21, 0x4e20, [0x401, 0x8000, 0x80, 0xa], [0x6, 0x1, 0xfffffffe, 0x5e], r5, [0xffffffff, 0x5]}, 0xd6, 0xfffffffa}, [@INET_DIAG_REQ_BYTECODE={0x42, 0x1, "1f33d73485f27af6af7cd0abbfc8dabe783f507ef07dc9d0a408bae0e78186473b82e226d29f94f3966cc219519032a724753a30f37af778c21bcfb809c7"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "e149b142c90ed7d2f572d7a3688c2b79f55a9399d6e10045af5da894b937ddb64da800a2dd18fd06d71c5d8aa287e89820ce20278263dc065191257eebbc355f14b63dbe5b056ef937e4e39c1ccb5a61e83c7ee5d6b061b70ff8c6b81e306b191577d4fa8febae47d8b33504e33c14d986b502839b716397a157cb48c155523e22d456f2f59c82186f0057ebcdfbfe92c4818f12629db7c11144ef9dd97097bef5adcf903ec7a57fa67c1132f986b03d7f81f264a5b02d203b515e8642fa83c4480e217a92f8105a33b0c357962f"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "e8"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "787f15f60d816a9426653c713a0105e4c590d98ae8318080cb2564e19f01de7e678ffb2a32ed97f86b776f6fd7721cb18840f66100bf52917073285c4a79c2071ad572f6603d74d51d86b3eb8092b80425b0f684892c0e4d959791363930bd574429562896d8ed529a3cc65f2438ad3e7c06a1571caf844619a1bd020bcf75ae9d6f51b7893d0cdd22070f43edc943d7fce93f04752cd736e1fb3df414c5c8ef5af608855db36101f486a03abf54f5140919d6599fa754cafe53e2c8d3d40024e203b704b9acf8e6ca1c7718bc555eabd83340d7a45d70246d755329a74647ed5f9545b79fa4"}]}, 0x258}, 0x1, 0x0, 0x0, 0x8005}, 0x6051) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000200)}, 0x10) (rerun: 64) 3.404348491s ago: executing program 5 (id=4871): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010080000000001c0012800b0001006d616373656300000c000280050003000c060075b3e4eb0b7800739f54858c730000003d439c6816a17b3186369f31f468de5c68624ff0a1f38342165b5cdd57f947997849e7936a90cb882c725beeac0220d176796fdef46cb86d93b4e5a9ad28c5e7bc09bcd5ed13f5380665d0c65e8626d7d4ba4a7b4803a43e6a96b15774446c600d8c205349a9cc2096b029e8ff4afbc9be9f731a21c8b24dea788ced71c504fbf57b9d9f4e83d24dd613f5"], 0x3c}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e0b581a82216e953297c341652738d899ab12f0ef15cd6f95c548fc5f6bc5a93d708378e85ac169629be7397e818cf2de1df126b6d08cbf69def1258f1d26ff29ae7ba12e7e2b52c09d352bfab60590bb367d1fdf3f9014b64b60b52b7840811eb7bdeb274c27c5bf80a3b6c22fc4eef4131678c67f47ba530320e4be5805894cd5a09757927e2ae0328b6eddd42c196b0588b3629443339c5790a121ad79601", 0xa0, 0x80, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0)={r3, 0x40, 0x8}, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x3c, @local, 0x0, 0x0, 'none\x00', 0x29, 0x8, 0x14}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2b, 0x1, 0x2, 0x25dfdbfc, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29"]}]}, 0x118}], 0x1}, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000280)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x5c, @rand_addr=0x64010101, 0x4e20, 0x1, 'fo\x00', 0xa, 0x1ff, 0x3a}, {@empty, 0x4e23, 0x10000, 0x53, 0x7, 0x498}}, 0x44) 2.431595591s ago: executing program 5 (id=4888): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/47, 0x2f}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0xa, &(0x7f0000002b80)=""/4096, 0x1000}, 0x40000002) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x20000080) 2.039934827s ago: executing program 4 (id=4895): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300a00000000802110000010802110000"], 0x3c}}, 0x10) 1.95571801s ago: executing program 0 (id=4897): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000c0003006861", @ANYRES32=0x0, @ANYRES64=0x0], 0x50}}, 0x4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000280), 0x4) 1.882214091s ago: executing program 4 (id=4899): unshare(0x22020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.700552875s ago: executing program 0 (id=4902): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110005010802110000"], 0x3c}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.61770953s ago: executing program 0 (id=4904): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.48123994s ago: executing program 5 (id=4907): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0d0}, 0x40041) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa, 0x1}}, 0x26) sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000000240)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x18}], 0x1}}], 0x1, 0x8040) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="0803000000d550da638cb1bc30d7956b6dc9279e4448df800d1e690ca9849416f2d11aabb34cae4e8e9db95f48393e694c8af63ff311599d8a6a11b38102a9d40c529e75d7beb827b72394cf1dacedecb6d8e81a0cfe0d14f762f2bd14d1bd00"/106, 0x6a}], 0x1}, 0x4004040) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a919733469", @ANYBLOB="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", @ANYRESHEX=r4, @ANYBLOB="235a4f1909957614aaaae001e0833f44cf186c6269b46876c3c9b88b0ed186e4203d44b08597dd103c59d046554254419bb1b9bdd3cb4c038f63d44d98173dc5f2352eb90027f3ea1d47cd3c6155168293e969f9b13451d6a3808f88e42de409ca09e64de38960c39d10b43e54cbd7ab37c9a600a71079ca06", @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc000) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r2], 0x58}, 0x1, 0x0, 0x0, 0x2000c051}, 0x240088d1) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x204, 0x4, 0xffff}, &(0x7f0000000500)=0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x2}, 0x10) 1.096003025s ago: executing program 2 (id=4914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001a14010002000000fcdbdf2508004b0013"], 0x38}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) unshare(0x20000) close(r0) 1.028232633s ago: executing program 2 (id=4916): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e23, 0x1, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x5, 0x800}, {0xc}, 0x70bd28, 0x0, 0x2, 0x3, 0x0, 0x92}}, 0xf0}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c0002800800034000000002080001400000001408000240000000120800064000000000080006400000000a0900010073797a30"], 0x110}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x26, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$can_raw(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, r7, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r3, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x81}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) (async) unshare(0x20000400) (async) syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000140)=@req={0x7, 0x5, 0x8, 0x9d}, 0x10) (async) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 904.748127ms ago: executing program 2 (id=4917): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0200000000020000000000000000340000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000e00c00000000"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000180001000000000000000000026000000000000100000000ba0efc7eb1e86cca963f7210c258a410ceb1cb864b34c9a3331d59c8dedbbea104a1352514de52ed7f8ce7aadfdc2b49cf570b00000000000000"], 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000840)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r5, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x7}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$kcm(0xa, 0x7, 0x3a) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x12, r6, 0x1f4d2000) close(r8) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="f7849cfe3e23312e5b9c8d5780f6101233010537775f2b237beada088a0a26fbf4c4ba0dbdacb6756e3d42dd3119b0965adc09b9f042997e3e6acb86cf188d8c02c4419ccda8890f2ea6026471d7e971dac09bcda8f80e695430d8027fc8ab7ddae6d9e9e4aa634add5e876363daac2714f03c94f2d7ec374c314faee517fa6d224be737f12b360f14ecdbd13c080ae022c2628882a6b9f6a6594781b5851a22a16265e25145a3408ddc7ddb137bb8e44b5ed35ff6149c8945d6020a7493efc312", 0xc1}, {&(0x7f0000000480)="a945d27248b1446b3fdafda262ed2a25bf51079ac6bbf90595cd451edc3c536c89a68a4947f8ae5cf49074206f3db85ff1fb0a2fce4519e0310a9f1df45df64e77cf7096b4f3c93d8b5012348b90bfac0a2e4c20f5aad183e76e73dfb1431b3452fae92061a7553ca0cbd64924bbdae3ee7672a402fcd5e8051ac06b87c90d240b2794d38b1eaf35f27eeb15ab7ed4e02dee6b37b49f29b7d84e91b6cded694280ec8d037967b17111fb49595995ee6f4de4e8d129ad18cba05cc9f5114f7b95e8", 0xc1}], 0x2, &(0x7f0000000180)=ANY=[], 0x18}, 0x8080) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000400)=0x9000, 0x4) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 903.975717ms ago: executing program 1 (id=4918): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 842.009264ms ago: executing program 4 (id=4919): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x19c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xa2aa}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x13a}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0xc3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0xc2f}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6e}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4b8}, {0x6, 0x16, 0x6}, {0x5}, {0x6}, {0x8, 0xb, 0xa}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24040004}, 0x40085) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) 807.620788ms ago: executing program 1 (id=4920): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000040601020000000000000000030000070900020073797a3100000000050001000700000005000100070500010007000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r2, 0x0, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}, {}, {0x8, 0x6558, 0x4000}}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x210000, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000300)={'bond0\x00'}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4094, 0xffe}, {&(0x7f0000002280)=""/4095, 0xfff}, {&(0x7f0000001140)=""/161, 0xa1}], 0x3}, 0x40000020) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r6, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000009500000000000000000000004600000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24}, 0x94) 672.888044ms ago: executing program 4 (id=4921): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300a00000000802110000010802110000"], 0x3c}}, 0x10) 672.395825ms ago: executing program 1 (id=4922): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000200)=""/6, &(0x7f0000000280)=0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}}) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4048800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000500)=[{0x2, 0x1, 0x8, 0x7}, {0x5, 0x1, 0x3, 0x6}, {0x1, 0x3, 0xe, 0x8}, {0x4, 0x3, 0x10, 0x6}, {0x1, 0x5, 0x8, 0x6}], 0x10, 0x8}, 0x94) sendmmsg$inet(r4, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x30}}], 0x1, 0x4000c50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x50, r3, 0x104, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x86}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) unshare(0x24060400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1200000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0100df000000000000000000000000000000a10645a09533fe02877ad7adda98d66301da179eccdd542aa0cb5c4c3dde2f5142cdafa772cf1877c0c506cb1a37a7b6a4cf02554ef09fc550abe20c2829e59601830f4989ce656bc448b58ec955bc3e33040000000000000000000eb7dbf5e056adf57e1c3d1941c22e1b0cff2ff0f129046038ba5ba96f6f5c23dafc7f696b33225acfe143f6d121312b5037712ff3c9e451993c0148244c113cc0fbde09d9715a3ee0883d85a569a1081b7cea3e5791e899291b56916369021259a7847254cdedbe04a729664373a0deb4c832b364207ccef85ead92c62adb11b59d0f7fb7ee53a22027627f93406c17ea8e27f9170cd9d80885177aecb4bee030b6a06b26f7c239be1647cb2b9292c92669e1029b989799bae440d334fe0464d52a6e7b433df5b8b82081a5ae31602fed350f206df878618fb46afac08ee707edd74f528c1e68f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r6}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) write(r0, &(0x7f0000000040)="ca43c42feb0ff810647c010b74b82360d0d362eaa42aa36aafec2d476cd4f7884fb0bbaff933ef64aeabcab17aba4dff8cc73dcf9263c655b8f4ea424e427d9dc66faf0be860d78d1a95833e13cda5e277407ef0bcd1d351709d965b91d605b9177c9e579ec0543b69819b5b736da9f9b2945bf8177f4b0b795686698341775e42a1bee7", 0x84) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) 638.992251ms ago: executing program 2 (id=4923): r0 = socket(0x9, 0x1, 0xfffffffd) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) 614.379633ms ago: executing program 0 (id=4924): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) accept4(r0, 0x0, 0x0, 0x0) 496.766072ms ago: executing program 2 (id=4925): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000002c0)=@fragment, 0x8) (async) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) r5 = accept4(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80, 0x80000) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r4, 0x2f, r6}, 0x10) (async, rerun: 64) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f00000002c0)) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0xfffffffffffffffe, &(0x7f0000000100)) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r4, 0x2f, 0xed, 0x10, 0xaf04, 0x50, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x40, 0x700, 0x3, 0x1d}}) (async, rerun: 32) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @loopback}}) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x11, 0xa, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @mcast1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xc}]}, 0x58) 496.231593ms ago: executing program 5 (id=4926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xad01a927d4210f60}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 495.885331ms ago: executing program 4 (id=4927): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xf0b, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, r1, {0x3, 0x2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x242e}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5a}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}]}}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xf0b, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, r1, {0x3, 0x2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x242e}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5a}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x7d, "1bf95590c01d4b933b888e14eab8bb4ae3c9d972da6708c86cd68457b14a128c1052c5e6fb623173998cd1e69d2267447f0007ed97b70fa2a9c5b773b842dc804b3b1208bcfb21b64d05cb35e4fa71a7668f2ab90c3ea9428e222923a8ddb5cd2f045fdbbb28095383c647ce1db24744af1dc3b903961ba294d6d1ed73"}, &(0x7f0000000000)=0xa1) (async) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x7d, "1bf95590c01d4b933b888e14eab8bb4ae3c9d972da6708c86cd68457b14a128c1052c5e6fb623173998cd1e69d2267447f0007ed97b70fa2a9c5b773b842dc804b3b1208bcfb21b64d05cb35e4fa71a7668f2ab90c3ea9428e222923a8ddb5cd2f045fdbbb28095383c647ce1db24744af1dc3b903961ba294d6d1ed73"}, &(0x7f0000000000)=0xa1) 437.218043ms ago: executing program 1 (id=4928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x26048018) 372.365249ms ago: executing program 0 (id=4929): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xe0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 224.883875ms ago: executing program 5 (id=4930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0x13, 0x3169, 0x9, 0x1, 0x6, 0x9, 0x8, 0x2, 0x8000fff, 0x10000, 0x4, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5, 0x1, 0x2400, 0xf529, 0x9, 0xede, 0x80000000}}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c0001800600060086dd"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 224.517264ms ago: executing program 1 (id=4931): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x405, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x405, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) (async) 178.222573ms ago: executing program 4 (id=4932): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2d, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x5, 0x80000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x709d29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x48000) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2d, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket(0x5, 0x80000, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x709d29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x48000) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) (async) 170.737619ms ago: executing program 0 (id=4933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r5 = socket$kcm(0x21, 0x2, 0xa) ioctl(r4, 0x7, &(0x7f0000000240)="22b3d8db6a3dc3686734386fc10ccd920e7e63336e5bad6c53d52f43cecbec4661151d12265a34c21da22bad6020f4f8b5be3e2161b46313462759649552e912474f") sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@perr={0x84, 0x2, {0x1}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x84}}, 0xc010) 100.998151ms ago: executing program 2 (id=4934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x3, {0x2, 0xff, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x1d, r4, 0x1, {0x1, 0xff, 0x1}}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="95ca0763accf4b6a47ae12a081dab743db", 0x11}, 0x1, 0x0, 0x0, 0x20004081}, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xfffffe03, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0) 51.421134ms ago: executing program 1 (id=4935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d0400"}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0xac}}, 0x0) 0s ago: executing program 5 (id=4936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0xde8, 0x4) recvmmsg(r3, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x4f9}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) kernel console output (not intermixed with test programs): im2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.920408][ T5185] Bluetooth: hci2: command tx timeout [ 384.134607][T17630] netlink: 'syz.4.3249': attribute type 5 has an invalid length. [ 384.231248][T17638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.440125][ T1044] erspan0 (unregistering): left promiscuous mode [ 384.467299][ T1044] gretap0 (unregistering): left promiscuous mode [ 384.921561][ T1044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.934801][ T1044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.945264][ T1044] bond0 (unregistering): Released all slaves [ 384.961798][ T1044] bond1 (unregistering): Released all slaves [ 385.104987][ T1044] bond2 (unregistering): Released all slaves [ 385.246991][ T1044] bond3 (unregistering): Released all slaves [ 385.269906][ T1044] bond4 (unregistering): Released all slaves [ 385.417891][ T1044] bond5 (unregistering): Released all slaves [ 385.557590][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.583240][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.674456][T17651] netlink: 'syz.3.3253': attribute type 5 has an invalid length. [ 385.695672][ T1044] tipc: Disabling bearer [ 385.723619][ T1044] tipc: Left network mode [ 385.796361][ T9401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.817314][ T9401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.861061][T17660] netlink: 'syz.4.3256': attribute type 4 has an invalid length. [ 385.921624][T17667] netlink: 'syz.4.3256': attribute type 4 has an invalid length. [ 385.994504][ T5185] Bluetooth: hci2: command tx timeout [ 386.099777][T17676] netlink: 'syz.2.3152': attribute type 4 has an invalid length. [ 386.131859][T17671] delete_channel: no stack [ 386.174948][T17682] netlink: 'syz.2.3152': attribute type 4 has an invalid length. [ 386.210579][T17670] syzkaller0: entered promiscuous mode [ 386.236918][T17670] syzkaller0: entered allmulticast mode [ 386.513138][T17692] netlink: 'syz.3.3262': attribute type 10 has an invalid length. [ 387.203976][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.229076][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.246898][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.276995][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.288021][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.919561][T17692] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 389.361773][ T5185] Bluetooth: hci3: command tx timeout [ 389.431435][ T1044] hsr_slave_0: left promiscuous mode [ 389.464408][ T1044] hsr_slave_1: left promiscuous mode [ 389.534906][T17715] __nla_validate_parse: 32 callbacks suppressed [ 389.534930][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'. [ 389.567409][T17717] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3272'. [ 389.578331][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 389.800837][T17730] netlink: 'syz.3.3275': attribute type 1 has an invalid length. [ 389.921461][T17732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3275'. [ 389.999369][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 390.451150][T17730] bond1: entered promiscuous mode [ 390.456915][T17730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.582711][T17693] hsr0 speed is unknown, defaulting to 1000 [ 390.734149][T17744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3278'. [ 391.076073][T17693] chnl_net:caif_netlink_parms(): no params data found [ 391.262656][ T1044] IPVS: stop unused estimator thread 0... [ 391.433321][ T5185] Bluetooth: hci3: command tx timeout [ 391.490786][T17774] netlink: 'syz.3.3284': attribute type 1 has an invalid length. [ 391.610440][T17693] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.643199][T17693] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.664754][T17693] bridge_slave_0: entered allmulticast mode [ 391.693451][T17693] bridge_slave_0: entered promiscuous mode [ 391.772240][T17693] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.826999][T17693] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.836285][T17693] bridge_slave_1: entered allmulticast mode [ 391.846301][T17797] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3290'. [ 391.893085][T17693] bridge_slave_1: entered promiscuous mode [ 392.058788][T17693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.109221][T17693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.143877][T17815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3297'. [ 392.223651][T17818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.287335][T17693] team0: Port device team_slave_0 added [ 392.308894][T17693] team0: Port device team_slave_1 added [ 392.322767][T17820] netlink: 'syz.4.3298': attribute type 4 has an invalid length. [ 392.476730][T17693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.513915][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.577801][T17693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.611063][T17693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.622282][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.658796][T17693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.930230][T17693] hsr_slave_0: entered promiscuous mode [ 392.946891][T17693] hsr_slave_1: entered promiscuous mode [ 392.954258][T17693] debugfs: 'hsr0' already exists in 'hsr' [ 392.960136][T17693] Cannot create hsr debugfs directory [ 393.036728][T17854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3308'. [ 393.130419][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3310'. [ 393.267156][T17862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.514103][ T5185] Bluetooth: hci3: command tx timeout [ 393.977525][ T1044] bond9 (unregistering): (slave bridge0): Releasing active interface [ 394.029320][ T1044] bond0 (unregistering): Released all slaves [ 394.168021][ T1044] bond1 (unregistering): Released all slaves [ 394.183504][ T1044] bond2 (unregistering): Released all slaves [ 394.338349][ T1044] bond3 (unregistering): Released all slaves [ 394.403059][ T5185] Bluetooth: hci1: command tx timeout [ 394.652002][ T1044] bond4 (unregistering): Released all slaves [ 394.825433][ T1044] bond5 (unregistering): Released all slaves [ 394.956738][ T1044] bond6 (unregistering): Released all slaves [ 394.979175][ T1044] bond7 (unregistering): Released all slaves [ 395.119428][ T1044] bond8 (unregistering): Released all slaves [ 395.140351][ T1044] bond9 (unregistering): Released all slaves [ 395.429145][T17880] __nla_validate_parse: 1 callbacks suppressed [ 395.429166][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 395.451020][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 395.585765][T17887] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 395.606922][ T5185] Bluetooth: hci3: command tx timeout [ 395.917804][ T1044] : left promiscuous mode [ 396.029145][T17890] syzkaller1: entered promiscuous mode [ 396.034968][T17890] syzkaller1: entered allmulticast mode [ 396.227426][ T1044] tipc: Disabling bearer [ 396.260387][ T1044] tipc: Left network mode [ 396.578713][T17908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3325'. [ 396.915621][T17921] netlink: 'syz.3.3328': attribute type 1 has an invalid length. [ 396.926067][T17923] netlink: 'syz.3.3328': attribute type 1 has an invalid length. [ 397.045048][ T1044] hsr_slave_0: left promiscuous mode [ 397.064183][ T1044] hsr_slave_1: left promiscuous mode [ 397.130556][T17933] netlink: 'syz.3.3334': attribute type 10 has an invalid length. [ 398.110774][T17929] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 398.186979][T17933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 398.236646][T17944] tipc: Started in network mode [ 398.263308][T17944] tipc: Node identity ffffffff, cluster identity 4711 [ 398.301266][T17944] tipc: Node number set to 4294967295 [ 398.579084][T17693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 398.630022][T17693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 398.680321][T17693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 398.723468][T17693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 398.940332][T17971] RDS: rds_bind could not find a transport for ::ffff:10.1.0.254, load rds_tcp or rds_rdma? [ 398.947906][ T1044] IPVS: stop unused estimator thread 0... [ 399.152670][T17693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.214128][T17976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3345'. [ 399.316199][T17693] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.342628][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.349888][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.359811][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 399.415577][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.423005][ T9416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.424343][T17990] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3350'. [ 399.540472][T17995] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3349'. [ 399.610070][T17997] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3352'. [ 400.390330][T17693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.663785][T17693] veth0_vlan: entered promiscuous mode [ 400.733920][T17693] veth1_vlan: entered promiscuous mode [ 400.781535][T18034] netlink: 'syz.4.3359': attribute type 7 has an invalid length. [ 400.927261][T17693] veth0_macvtap: entered promiscuous mode [ 401.010732][T18045] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3362'. [ 401.034378][T17693] veth1_macvtap: entered promiscuous mode [ 401.271627][T18053] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.330529][T18053] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.579234][T17693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.591942][T18068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.626816][T17693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.640950][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'. [ 401.745231][ T8499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.778412][ T8499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.796045][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3371'. [ 401.842471][ T8499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.863775][T18073] bridge_slave_1: left allmulticast mode [ 401.870246][T18082] sock: sock_timestamping_bind_phc: sock not bind to device [ 401.883606][T18073] bridge_slave_1: left promiscuous mode [ 401.898615][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.899954][T18082] netlink: 'syz.3.3373': attribute type 2 has an invalid length. [ 401.929665][T18082] netlink: 'syz.3.3373': attribute type 8 has an invalid length. [ 401.940423][T18082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3373'. [ 401.941434][T18073] bridge_slave_0: left allmulticast mode [ 401.959566][T18073] bridge_slave_0: left promiscuous mode [ 401.966179][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.075688][ T8499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.315495][T18095] netlink: 'syz.2.3378': attribute type 10 has an invalid length. [ 402.323860][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.323885][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.365435][T18095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3378'. [ 402.378963][T18097] netlink: 'syz.0.3379': attribute type 1 has an invalid length. [ 402.388895][T18106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3378'. [ 402.427137][T18097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.608679][T18095] team0: Port device geneve0 added [ 402.652012][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.666937][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.837752][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3384'. [ 402.961182][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'. [ 403.081300][T18142] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 403.338568][T18152] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 403.350388][T18152] bridge1: entered promiscuous mode [ 403.362970][T18152] bridge1: entered allmulticast mode [ 403.528890][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3400'. [ 403.705281][T18173] syzkaller1: entered promiscuous mode [ 403.728048][T18173] syzkaller1: entered allmulticast mode [ 403.765759][T18173] netlink: 'syz.1.3401': attribute type 83 has an invalid length. [ 403.953959][T18185] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 403.991203][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 404.225851][T18199] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 404.331539][T18208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.338879][T18208] IPv6: NLM_F_CREATE should be set when creating new route [ 404.346441][T18208] IPv6: NLM_F_CREATE should be set when creating new route [ 404.353890][T18208] IPv6: NLM_F_CREATE should be set when creating new route [ 404.634076][T18232] netlink: 'syz.0.3417': attribute type 21 has an invalid length. [ 405.167655][T18253] syzkaller1: entered promiscuous mode [ 405.175781][T18253] syzkaller1: entered allmulticast mode [ 405.209682][T18257] veth0: entered promiscuous mode [ 405.394002][T18253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.407134][T18253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.442051][T18232] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 405.560220][ T61] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.613212][T18259] veth0: left promiscuous mode [ 405.620829][ T61] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.669439][ T61] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.681055][ T61] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.893513][T18273] nbd2: detected capacity change from 0 to 127 [ 405.902164][ T5185] block nbd2: Receive control failed (result -32) [ 406.425398][T18298] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 406.760443][T18323] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 406.822700][T18323] bond3: entered promiscuous mode [ 406.836664][T18323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.869093][T18325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.876104][ T5185] Bluetooth: hci2: command 0x0401 tx timeout [ 406.878775][T18325] bond3: (slave bond4): making interface the new active one [ 406.893472][T18325] bond4: entered promiscuous mode [ 406.902437][T18325] bond3: (slave bond4): Enslaving as an active interface with an up link [ 406.985147][T18328] __nla_validate_parse: 7 callbacks suppressed [ 406.985192][T18328] netlink: 5992 bytes leftover after parsing attributes in process `syz.0.3443'. [ 407.010024][T18328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3443'. [ 407.259036][T18337] openvswitch: netlink: Message has 4 unknown bytes. [ 407.394027][T18346] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 407.427250][T18348] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3451'. [ 407.583942][T18356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3452'. [ 407.601471][T18356] netlink: 'syz.3.3452': attribute type 7 has an invalid length. [ 407.623043][T18356] netlink: 'syz.3.3452': attribute type 8 has an invalid length. [ 407.644475][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 407.656306][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 407.713379][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'. [ 407.767030][T18356] sctp: [Deprecated]: syz.3.3452 (pid 18356) Use of int in maxseg socket option. [ 407.767030][T18356] Use struct sctp_assoc_value instead [ 407.967164][T18373] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3457'. [ 408.056489][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3460'. [ 408.099503][T18381] bridge_slave_1: left allmulticast mode [ 408.109382][T18381] bridge_slave_1: left promiscuous mode [ 408.120008][T18381] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.261225][T18381] bridge_slave_0: left allmulticast mode [ 408.270431][T18381] bridge_slave_0: left promiscuous mode [ 408.277320][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.367373][T18396] tipc: Started in network mode [ 408.373068][T18396] tipc: Node identity 724f6f6c944a, cluster identity 4711 [ 408.380900][T18396] tipc: Enabled bearer , priority 0 [ 408.462406][T18393] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3463'. [ 408.521563][T18393] syzkaller0: entered promiscuous mode [ 408.527933][T18393] syzkaller0: entered allmulticast mode [ 408.569857][T18393] tipc: Resetting bearer [ 408.588820][T18392] tipc: Resetting bearer [ 408.654302][T18392] tipc: Disabling bearer [ 408.680934][T18405] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 408.897575][T18415] Bluetooth: MGMT ver 1.23 [ 408.984230][ T30] audit: type=1107 audit(1757658355.941:5): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/þóŠ§ dÞþÁDºÂÖaÖ.ea¯é¹±;üí' [ 409.025130][T18423] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 409.093261][T18424] vlan2: entered allmulticast mode [ 409.100064][T18424] bridge0: entered allmulticast mode [ 409.119942][T18424] bridge1: port 1(vlan2) entered blocking state [ 409.193447][T18424] bridge1: port 1(vlan2) entered disabled state [ 409.202248][T18424] vlan2: entered promiscuous mode [ 409.223182][T18424] bridge0: entered promiscuous mode [ 409.434578][ T5185] Bluetooth: hci0: command tx timeout [ 409.841567][T18463] sctp: [Deprecated]: syz.1.3485 (pid 18463) Use of int in maxseg socket option. [ 409.841567][T18463] Use struct sctp_assoc_value instead [ 409.897116][T18472] netlink: 'syz.2.3489': attribute type 5 has an invalid length. [ 410.229607][T18490] netlink: 'syz.0.3494': attribute type 21 has an invalid length. [ 410.553794][T18511] IPv6: NLM_F_CREATE should be specified when creating new route [ 410.610170][T18506] lo speed is unknown, defaulting to 1000 [ 410.621209][T18506] lo speed is unknown, defaulting to 1000 [ 410.636591][T18506] lo speed is unknown, defaulting to 1000 [ 410.909254][T18524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.035971][T18528] openvswitch: netlink: Key type 29 is not supported [ 411.322743][ T43] lo speed is unknown, defaulting to 1000 [ 411.330440][T18506] infiniband syz0: set active [ 411.337886][T18506] infiniband syz0: added lo [ 411.344778][T18542] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 411.353698][T18542] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 411.355442][T18506] syz0: rxe_create_cq: returned err = -12 [ 411.378052][T18506] infiniband syz0: Couldn't create ib_mad CQ [ 411.387748][T18506] infiniband syz0: Couldn't open port 1 [ 411.398085][T18542] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 411.399101][T18544] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 411.405570][T18542] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 411.426484][T18542] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 411.433967][T18542] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 411.436256][T18546] Bluetooth: MGMT ver 1.23 [ 411.462967][T18542] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 411.532549][T18506] RDS/IB: syz0: added [ 411.548539][T18506] smc: adding ib device syz0 with port count 1 [ 411.570056][T18506] smc: ib device syz0 port 1 has pnetid [ 411.600538][ T43] lo speed is unknown, defaulting to 1000 [ 411.625548][T18506] lo speed is unknown, defaulting to 1000 [ 412.189086][T18570] __nla_validate_parse: 72 callbacks suppressed [ 412.189108][T18570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3520'. [ 412.221411][T18562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3520'. [ 412.510065][T18506] lo speed is unknown, defaulting to 1000 [ 414.668442][T18506] lo speed is unknown, defaulting to 1000 [ 415.078193][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3533'. [ 415.089046][T18618] netlink: 170200 bytes leftover after parsing attributes in process `syz.1.3535'. [ 415.370593][T18632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.386366][T18627] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 415.410916][T18627] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 415.426590][T18627] gretap1: entered promiscuous mode [ 415.431849][T18627] gretap1: entered allmulticast mode [ 415.453087][T18630] tipc: Started in network mode [ 415.458756][T18630] tipc: Node identity ce804f2132b9, cluster identity 4711 [ 415.467556][T18630] tipc: Enabled bearer , priority 0 [ 415.479247][T18506] lo speed is unknown, defaulting to 1000 [ 415.481950][T18630] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 415.507690][T18630] tipc: Resetting bearer [ 415.528147][T18629] tipc: Disabling bearer [ 415.718125][T18644] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3543'. [ 415.824030][T18506] lo speed is unknown, defaulting to 1000 [ 415.936046][T18650] tipc: Enabled bearer , priority 0 [ 415.944304][T18651] syzkaller0: entered promiscuous mode [ 415.950001][T18651] syzkaller0: entered allmulticast mode [ 415.959604][T18650] tipc: Enabling of bearer rejected, already enabled [ 416.025278][T18650] tipc: Resetting bearer [ 416.068205][T18650] tipc: Disabling bearer [ 416.169125][T18506] lo speed is unknown, defaulting to 1000 [ 416.494391][T18506] lo speed is unknown, defaulting to 1000 [ 416.909565][T18633] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 417.221146][T18689] syz.4.3557: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 417.264962][T18689] CPU: 1 UID: 0 PID: 18689 Comm: syz.4.3557 Not tainted syzkaller #0 PREEMPT(full) [ 417.264994][T18689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.265006][T18689] Call Trace: [ 417.265015][T18689] [ 417.265024][T18689] dump_stack_lvl+0x189/0x250 [ 417.265060][T18689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.265114][T18689] ? __pfx__printk+0x10/0x10 [ 417.265145][T18689] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 417.265169][T18689] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 417.265196][T18689] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 417.265237][T18689] warn_alloc+0x214/0x310 [ 417.265269][T18689] ? stack_depot_save_flags+0x40/0x860 [ 417.265301][T18689] ? __pfx_warn_alloc+0x10/0x10 [ 417.265333][T18689] ? kasan_save_track+0x4f/0x80 [ 417.265359][T18689] ? xskq_create+0x56/0x170 [ 417.265385][T18689] ? xsk_init_queue+0xb0/0x110 [ 417.265408][T18689] ? xsk_setsockopt+0x4dc/0x8d0 [ 417.265431][T18689] ? do_sock_setsockopt+0x179/0x1b0 [ 417.265451][T18689] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 417.265469][T18689] ? do_syscall_64+0xfa/0x3b0 [ 417.265486][T18689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.265516][T18689] __vmalloc_node_range_noprof+0x125/0x12f0 [ 417.265583][T18689] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.265621][T18689] ? __kasan_kmalloc+0x93/0xb0 [ 417.265652][T18689] vmalloc_user_noprof+0xad/0xf0 [ 417.265680][T18689] ? xskq_create+0xbf/0x170 [ 417.265710][T18689] xskq_create+0xbf/0x170 [ 417.265742][T18689] xsk_init_queue+0xb0/0x110 [ 417.265773][T18689] xsk_setsockopt+0x4dc/0x8d0 [ 417.265804][T18689] ? __pfx_xsk_setsockopt+0x10/0x10 [ 417.265829][T18689] ? __pfx_aa_sk_perm+0x10/0x10 [ 417.265864][T18689] ? aa_sock_opt_perm+0xff/0x1b0 [ 417.265888][T18689] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 417.265909][T18689] ? __pfx_xsk_setsockopt+0x10/0x10 [ 417.265937][T18689] do_sock_setsockopt+0x179/0x1b0 [ 417.265976][T18689] __x64_sys_setsockopt+0x13f/0x1b0 [ 417.266006][T18689] do_syscall_64+0xfa/0x3b0 [ 417.266023][T18689] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.266052][T18689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.266071][T18689] ? clear_bhb_loop+0x60/0xb0 [ 417.266096][T18689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.266114][T18689] RIP: 0033:0x7fc32138eba9 [ 417.266133][T18689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.266150][T18689] RSP: 002b:00007fc3222dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 417.266172][T18689] RAX: ffffffffffffffda RBX: 00007fc3215d5fa0 RCX: 00007fc32138eba9 [ 417.266186][T18689] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 417.266199][T18689] RBP: 00007fc321411e19 R08: 0000000000000004 R09: 0000000000000000 [ 417.266210][T18689] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.266230][T18689] R13: 00007fc3215d6038 R14: 00007fc3215d5fa0 R15: 00007ffd085d4a38 [ 417.266262][T18689] [ 417.266269][T18689] Mem-Info: [ 417.614772][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3560'. [ 417.631845][T18689] active_anon:3751 inactive_anon:0 isolated_anon:0 [ 417.631845][T18689] active_file:3469 inactive_file:39998 isolated_file:0 [ 417.631845][T18689] unevictable:771 dirty:72 writeback:0 [ 417.631845][T18689] slab_reclaimable:12314 slab_unreclaimable:112763 [ 417.631845][T18689] mapped:28997 shmem:1365 pagetables:914 [ 417.631845][T18689] sec_pagetables:0 bounce:0 [ 417.631845][T18689] kernel_misc_reclaimable:0 [ 417.631845][T18689] free:1311799 free_pcp:11305 free_cma:0 [ 417.719797][T18689] Node 0 active_anon:15204kB inactive_anon:0kB active_file:13876kB inactive_file:159788kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:115988kB dirty:284kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13772kB pagetables:3720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.758868][T18689] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.820725][T18689] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.894748][T18689] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 417.900862][T18689] Node 0 DMA32 free:1344732kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15156kB inactive_anon:0kB active_file:13876kB inactive_file:158212kB unevictable:1548kB writepending:284kB present:3129332kB managed:2557436kB mlocked:12kB bounce:0kB free_pcp:28764kB local_pcp:7276kB free_cma:0kB [ 417.931697][T18709] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3563'. [ 417.937666][T18689] lowmem_reserve[]: 0 0 1 1 1 [ 417.949955][T18709] net_ratelimit: 123 callbacks suppressed [ 417.949975][T18709] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 417.987465][T18689] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 418.028551][T18689] lowmem_reserve[]: 0 0 0 0 0 [ 418.067435][T18689] Node 1 Normal free:3886504kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:7520kB free_cma:0kB [ 418.113328][T18689] lowmem_reserve[]: 0 0 0 0 0 [ 418.118535][T18689] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.127708][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3566'. [ 418.139828][T18689] Node 0 DMA32: 1162*4kB (UME) 467*8kB (UME) 314*16kB (UM) 214*32kB (UME) 69*64kB (UME) 51*128kB (UM) 15*256kB (UM) 12*512kB (UME) 23*1024kB (UME) 7*2048kB (UM) 309*4096kB (UM) = 1344736kB [ 418.169795][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3566'. [ 418.170667][T18689] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 418.199776][T18689] Node 1 Normal: 196*4kB (UME) 49*8kB (UME) 43*16kB (UME) 171*32kB (UME) 50*64kB (UME) 11*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3886504kB [ 418.226210][T18689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.236605][T18689] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.270928][T18689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.297961][T18689] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.321598][T18689] 44829 total pagecache pages [ 418.335611][T18689] 0 pages in swap cache [ 418.344534][T18689] Free swap = 124996kB [ 418.348980][T18689] Total swap = 124996kB [ 418.355549][T18689] 2097051 pages RAM [ 418.359549][T18689] 0 pages HighMem/MovableOnly [ 418.364475][T18689] 425666 pages reserved [ 418.370832][T18689] 0 pages cma reserved [ 418.512594][T18732] netlink: 'syz.0.3570': attribute type 1 has an invalid length. [ 418.537214][T18732] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3570'. [ 418.772143][T18751] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3574'. [ 418.856746][T18751] syzkaller0: entered promiscuous mode [ 418.874413][T18751] syzkaller0: entered allmulticast mode [ 421.086313][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3576'. [ 421.095611][T18767] veth0: entered promiscuous mode [ 421.113955][T18768] veth0: left promiscuous mode [ 421.580428][T18793] netlink: 'syz.2.3585': attribute type 5 has an invalid length. [ 421.979262][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3591'. [ 422.006915][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3594'. [ 422.504409][T18860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3601'. [ 422.911968][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3605'. [ 422.980492][T18884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3607'. [ 423.088593][T18890] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 423.329871][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3613'. [ 423.344191][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3613'. [ 423.424089][T18913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3614'. [ 423.956668][T18935] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 423.971293][T18937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3622'. [ 423.995981][T18937] sctp: [Deprecated]: syz.2.3622 (pid 18937) Use of int in max_burst socket option. [ 423.995981][T18937] Use struct sctp_assoc_value instead [ 424.091663][T18931] syzkaller1: entered promiscuous mode [ 424.123173][T18931] syzkaller1: entered allmulticast mode [ 424.220440][T18939] netlink: 'syz.1.3619': attribute type 5 has an invalid length. [ 424.221449][T18946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3625'. [ 424.468376][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 424.516435][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 424.720373][T18973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.731581][T18975] netlink: 'syz.2.3634': attribute type 1 has an invalid length. [ 424.741326][T18973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.747705][T18975] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3634'. [ 424.760638][T18973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.779815][T18973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.216705][T18999] netlink: 'syz.2.3639': attribute type 13 has an invalid length. [ 425.320560][T18999] lo: entered promiscuous mode [ 425.333029][T18999] lo: entered allmulticast mode [ 425.354584][T18999] tunl0: entered promiscuous mode [ 425.392582][T18999] tunl0: entered allmulticast mode [ 425.402440][T19001] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 425.433272][T19001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.433759][T18999] gre0: entered promiscuous mode [ 425.500454][T18999] gre0: entered allmulticast mode [ 425.565371][T18999] gretap0: entered promiscuous mode [ 425.570915][T18999] gretap0: entered allmulticast mode [ 425.608777][T18999] gretap0: refused to change device tx_queue_len [ 425.630737][T18999] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 425.660885][ T43] lo speed is unknown, defaulting to 1000 [ 425.694400][ T43] syz0: Port: 1 Link DOWN [ 425.723049][ T9454] lo speed is unknown, defaulting to 1000 [ 425.868888][T19022] macvtap1: entered promiscuous mode [ 425.874436][T19022] vlan0: entered promiscuous mode [ 425.880132][T19022] macvtap1: entered allmulticast mode [ 425.885822][T19022] vlan0: entered allmulticast mode [ 425.891442][T19022] veth0_vlan: entered allmulticast mode [ 425.981862][T19030] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 426.009003][T19030] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 426.034968][T19030] gretap2: entered promiscuous mode [ 426.049090][T19030] gretap2: entered allmulticast mode [ 426.101921][T19036] veth5: entered promiscuous mode [ 426.108157][T19036] veth5: entered allmulticast mode [ 426.211784][T19044] Bluetooth: MGMT ver 1.23 [ 426.430988][T19052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.449619][T19052] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.491367][T19052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.115963][T19086] tipc: Enabled bearer , priority 10 [ 427.130475][T19088] netlink: 'syz.0.3665': attribute type 5 has an invalid length. [ 427.139220][T16475] IPVS: starting estimator thread 0... [ 427.175138][T19088] geneve2: entered promiscuous mode [ 427.222932][T19088] geneve2: entered allmulticast mode [ 427.242988][T19090] IPVS: using max 26 ests per chain, 62400 per kthread [ 427.260106][T13138] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 427.288414][T13138] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 427.343859][T13138] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 427.352548][T13138] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 427.737592][T19116] team_slave_0: entered promiscuous mode [ 427.743671][T19116] team_slave_1: entered promiscuous mode [ 427.749603][T19116] geneve0: entered promiscuous mode [ 427.777366][T19116] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 427.791416][T19119] netlink: 'syz.1.3675': attribute type 21 has an invalid length. [ 427.791799][T19116] team0: Device macvtap1 is already an upper device of the team interface [ 427.855016][T19116] team_slave_0: left promiscuous mode [ 427.860833][T19116] team_slave_1: left promiscuous mode [ 427.866530][T19116] geneve0: left promiscuous mode [ 427.918204][T19123] __nla_validate_parse: 11 callbacks suppressed [ 427.918229][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'. [ 428.000526][T19126] dvmrp0: entered allmulticast mode [ 428.072750][T19127] dvmrp0: left allmulticast mode [ 428.235297][ T9454] tipc: Node number set to 4231614241 [ 428.282439][T19133] netlink: 'syz.2.3679': attribute type 25 has an invalid length. [ 428.328224][T19135] netlink: 'syz.2.3679': attribute type 25 has an invalid length. [ 428.698346][T19149] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.3686'. [ 428.727778][T19149] openvswitch: netlink: Message has 5 unknown bytes. [ 429.000962][T19159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3689'. [ 429.107121][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 429.262513][T19172] tap0: tun_chr_ioctl cmd 1074025676 [ 429.271351][T19172] tap0: owner set to 0 [ 429.321257][T19175] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3693'. [ 429.339060][T19175] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 429.350615][T19175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.365127][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3694'. [ 429.387582][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 429.576404][T19190] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3699'. [ 429.890859][T19207] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3704'. [ 429.921361][T19207] xt_socket: unknown flags 0xd0 [ 429.930883][T19212] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3704'. [ 429.942658][T19212] xt_socket: unknown flags 0xd0 [ 430.283194][T19226] netlink: 'syz.2.3710': attribute type 16 has an invalid length. [ 430.682338][T19245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.332716][T19279] : entered promiscuous mode [ 431.387011][T19288] syz_tun: entered allmulticast mode [ 431.659674][T19303] syz.3.3733: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 431.685648][T19305] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 431.717770][T19303] CPU: 0 UID: 0 PID: 19303 Comm: syz.3.3733 Not tainted syzkaller #0 PREEMPT(full) [ 431.717804][T19303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.717816][T19303] Call Trace: [ 431.717825][T19303] [ 431.717833][T19303] dump_stack_lvl+0x189/0x250 [ 431.717869][T19303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.717893][T19303] ? __pfx__printk+0x10/0x10 [ 431.717921][T19303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 431.717945][T19303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 431.717969][T19303] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 431.717993][T19303] warn_alloc+0x214/0x310 [ 431.718022][T19303] ? stack_depot_save_flags+0x40/0x860 [ 431.718050][T19303] ? __pfx_warn_alloc+0x10/0x10 [ 431.718080][T19303] ? kasan_save_track+0x4f/0x80 [ 431.718103][T19303] ? xskq_create+0x56/0x170 [ 431.718128][T19303] ? xsk_init_queue+0xb0/0x110 [ 431.718152][T19303] ? xsk_setsockopt+0x4dc/0x8d0 [ 431.718172][T19303] ? do_sock_setsockopt+0x179/0x1b0 [ 431.718189][T19303] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 431.718206][T19303] ? do_syscall_64+0xfa/0x3b0 [ 431.718222][T19303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.718251][T19303] __vmalloc_node_range_noprof+0x125/0x12f0 [ 431.718314][T19303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 431.718351][T19303] ? __kasan_kmalloc+0x93/0xb0 [ 431.718378][T19303] vmalloc_user_noprof+0xad/0xf0 [ 431.718415][T19303] ? xskq_create+0xbf/0x170 [ 431.718442][T19303] xskq_create+0xbf/0x170 [ 431.718473][T19303] xsk_init_queue+0xb0/0x110 [ 431.718503][T19303] xsk_setsockopt+0x4dc/0x8d0 [ 431.718531][T19303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.718557][T19303] ? __pfx_aa_sk_perm+0x10/0x10 [ 431.718589][T19303] ? aa_sock_opt_perm+0xff/0x1b0 [ 431.718613][T19303] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 431.718633][T19303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.718658][T19303] do_sock_setsockopt+0x179/0x1b0 [ 431.718685][T19303] __x64_sys_setsockopt+0x13f/0x1b0 [ 431.718714][T19303] do_syscall_64+0xfa/0x3b0 [ 431.718738][T19303] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.718767][T19303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.718786][T19303] ? clear_bhb_loop+0x60/0xb0 [ 431.718812][T19303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.718830][T19303] RIP: 0033:0x7f596dd8eba9 [ 431.718850][T19303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.718866][T19303] RSP: 002b:00007f596bff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.718888][T19303] RAX: ffffffffffffffda RBX: 00007f596dfd6180 RCX: 00007f596dd8eba9 [ 431.718903][T19303] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 431.718914][T19303] RBP: 00007f596de11e19 R08: 0000000000000004 R09: 0000000000000000 [ 431.718925][T19303] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.718937][T19303] R13: 00007f596dfd6218 R14: 00007f596dfd6180 R15: 00007fff812eb478 [ 431.718971][T19303] [ 431.719094][T19303] Mem-Info: [ 432.041508][T19303] active_anon:3833 inactive_anon:0 isolated_anon:0 [ 432.041508][T19303] active_file:3469 inactive_file:40005 isolated_file:0 [ 432.041508][T19303] unevictable:768 dirty:85 writeback:0 [ 432.041508][T19303] slab_reclaimable:12182 slab_unreclaimable:113980 [ 432.041508][T19303] mapped:29010 shmem:1365 pagetables:1024 [ 432.041508][T19303] sec_pagetables:0 bounce:0 [ 432.041508][T19303] kernel_misc_reclaimable:0 [ 432.041508][T19303] free:1306316 free_pcp:14968 free_cma:0 [ 432.102723][T19303] Node 0 active_anon:15332kB inactive_anon:0kB active_file:13876kB inactive_file:159816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116040kB dirty:340kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13932kB pagetables:3960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 432.148477][T19303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 432.195949][T19303] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.235253][T19303] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 432.241225][T19303] Node 0 DMA32 free:1323180kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15336kB inactive_anon:0kB active_file:13876kB inactive_file:158240kB unevictable:1536kB writepending:308kB present:3129332kB managed:2557436kB mlocked:0kB bounce:0kB free_pcp:43304kB local_pcp:21404kB free_cma:0kB [ 432.283383][T19303] lowmem_reserve[]: 0 0 1 1 1 [ 432.288301][T19303] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 432.330415][T19303] lowmem_reserve[]: 0 0 0 0 0 [ 432.337768][T19303] Node 1 Normal free:3887280kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15776kB local_pcp:8512kB free_cma:0kB [ 432.406618][T19303] lowmem_reserve[]: 0 0 0 0 0 [ 432.430652][T19303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 432.461994][T19303] Node 0 DMA32: 1217*4kB (UME) 836*8kB (UME) 462*16kB (UME) 345*32kB (UME) 76*64kB (UME) 41*128kB (UM) 15*256kB (UME) 10*512kB (UME) 5*1024kB (UME) 7*2048kB (UM) 306*4096kB (M) = 1321892kB [ 432.603321][T19303] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 432.629388][T19303] Node 1 Normal: 196*4kB (UME) 50*8kB (UME) 43*16kB (UME) 181*32kB (UME) 57*64kB (UME) 11*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3887280kB [ 432.729711][T19303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.746412][T19303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.766689][T19322] netlink: 'syz.4.3740': attribute type 8 has an invalid length. [ 432.769841][T19303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.811306][T19303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.879613][T19303] 44838 total pagecache pages [ 432.889759][T19303] 0 pages in swap cache [ 432.920562][T19303] Free swap = 124996kB [ 432.943316][T19303] Total swap = 124996kB [ 432.959382][T19303] 2097051 pages RAM [ 432.972898][T19303] 0 pages HighMem/MovableOnly [ 432.977639][T19303] 425666 pages reserved [ 433.000149][T19331] tipc: Enabled bearer , priority 0 [ 433.013448][T19303] 0 pages cma reserved [ 433.044327][T19332] tipc: Resetting bearer [ 433.155648][T19329] tipc: Disabling bearer [ 433.698594][T19365] __nla_validate_parse: 8 callbacks suppressed [ 433.698613][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 433.771688][T19365] dummy0: entered promiscuous mode [ 433.804475][T19365] batadv_slave_1: entered promiscuous mode [ 434.050278][T19380] netlink: 'syz.1.3763': attribute type 2 has an invalid length. [ 434.271145][T19394] netlink: 'syz.1.3765': attribute type 1 has an invalid length. [ 434.283389][T19394] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3765'. [ 434.477573][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3768'. [ 434.722323][T19419] tipc: Enabled bearer , priority 0 [ 434.746844][T19424] netlink: 'syz.3.3775': attribute type 64 has an invalid length. [ 434.771368][T19424] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3775'. [ 434.824689][T19424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3775'. [ 434.877254][T19415] tipc: Disabling bearer [ 435.142270][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'. [ 435.170126][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'. [ 435.212250][T19443] macvtap1: entered promiscuous mode [ 435.219485][T19443] vlan0: entered promiscuous mode [ 435.257119][T19452] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3782'. [ 435.257340][T19443] macvtap1: entered allmulticast mode [ 435.282194][T19443] vlan0: entered allmulticast mode [ 435.290322][T19443] veth0_vlan: entered allmulticast mode [ 435.323925][T19446] macvtap2: entered promiscuous mode [ 435.330300][T19446] macvtap2: entered allmulticast mode [ 435.442983][T19456] sctp: [Deprecated]: syz.2.3784 (pid 19456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.442983][T19456] Use struct sctp_sack_info instead [ 435.606337][T19462] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3787'. [ 436.043289][T19495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3794'. [ 436.304094][T19511] netlink: 'syz.4.3798': attribute type 2 has an invalid length. [ 436.367129][T19511] nbd: must specify a device to reconfigure [ 437.437617][T19573] netlink: 'syz.2.3818': attribute type 10 has an invalid length. [ 437.490517][T19572] syzkaller1: entered promiscuous mode [ 437.503107][T19572] syzkaller1: entered allmulticast mode [ 437.914158][T19594] tipc: Enabled bearer , priority 0 [ 437.941697][T19599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.008840][T19594] tipc: Disabling bearer [ 438.230429][T19611] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 438.321719][T19621] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 438.327493][T19620] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 438.340591][T19619] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 438.553707][ T5185] Bluetooth: hci3: command tx timeout [ 438.707446][T19642] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 438.794746][T19642] __nla_validate_parse: 5 callbacks suppressed [ 438.811120][T19642] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3838'. [ 438.865907][T19655] netlink: 'syz.2.3843': attribute type 33 has an invalid length. [ 438.879378][T19655] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 439.210479][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 439.799088][T19699] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3859'. [ 439.918367][T19704] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3860'. [ 439.950907][T19704] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 440.254887][T19713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3864'. [ 440.749901][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3871'. [ 440.853520][T19744] bridge_slave_0: entered promiscuous mode [ 440.903479][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3875'. [ 440.919455][T19747] netlink: 'syz.1.3875': attribute type 5 has an invalid length. [ 440.931511][T19747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3875'. [ 440.948556][T19749] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.3874'. [ 441.011143][T19756] netlink: 'syz.4.3878': attribute type 1 has an invalid length. [ 441.042274][T19747] geneve2: entered promiscuous mode [ 441.052349][T19747] geneve2: entered allmulticast mode [ 441.065563][ T1044] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 441.091072][ T1044] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 441.117184][ T1044] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 441.132054][ T1044] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 441.415268][T19773] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3882'. [ 441.691554][T19786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.713441][T19781] block nbd4: server does not support multiple connections per device. [ 441.731356][T19781] block nbd4: shutting down sockets [ 442.168017][T19805] IPVS: ip_vs_edit_dest(): server weight less than zero [ 442.198637][T19805] netlink: 'syz.0.3897': attribute type 4 has an invalid length. [ 442.579479][T19835] netlink: 'syz.3.3906': attribute type 3 has an invalid length. [ 442.930741][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.964479][T16477] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.974107][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.116704][T19854] can: request_module (can-proto-5) failed. [ 443.217413][T19864] netlink: 'syz.2.3916': attribute type 1 has an invalid length. [ 443.281276][T19867] netlink: 'syz.1.3919': attribute type 2 has an invalid length. [ 443.314032][T19873] pim6reg527: entered allmulticast mode [ 443.523223][T16477] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.913937][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.980735][T19909] __nla_validate_parse: 10 callbacks suppressed [ 443.980758][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3930'. [ 444.087580][T19919] openvswitch: netlink: IP tunnel dst address not specified [ 444.424604][ T5185] Bluetooth: hci3: link tx timeout [ 444.430423][ T5185] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 444.605210][T19932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3937'. [ 444.944737][T19941] netlink: 'syz.0.3940': attribute type 4 has an invalid length. [ 445.117683][T19939] syz.4.3939: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.187001][T19939] CPU: 1 UID: 0 PID: 19939 Comm: syz.4.3939 Not tainted syzkaller #0 PREEMPT(full) [ 445.187031][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.187043][T19939] Call Trace: [ 445.187051][T19939] [ 445.187060][T19939] dump_stack_lvl+0x189/0x250 [ 445.187093][T19939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.187116][T19939] ? __pfx__printk+0x10/0x10 [ 445.187144][T19939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 445.187166][T19939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 445.187191][T19939] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 445.187218][T19939] warn_alloc+0x214/0x310 [ 445.187254][T19939] ? __pfx_warn_alloc+0x10/0x10 [ 445.187295][T19939] ? __get_vm_area_node+0x28f/0x300 [ 445.187331][T19939] ? nf_tables_newset+0x132b/0x2530 [ 445.187357][T19939] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 445.187417][T19939] ? alloc_pages_mpol+0x3cd/0x4a0 [ 445.187445][T19939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.187479][T19939] ? rcu_is_watching+0x15/0xb0 [ 445.187501][T19939] ? nf_tables_newset+0x132b/0x2530 [ 445.187520][T19939] ? nf_tables_newset+0x132b/0x2530 [ 445.187539][T19939] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 445.187566][T19939] ? nf_tables_newset+0x132b/0x2530 [ 445.187585][T19939] ? nft_table_lookup+0x211/0x230 [ 445.187604][T19939] ? nft_set_lookup+0x128/0x150 [ 445.187626][T19939] ? nft_hash_privsize+0xaf/0xf0 [ 445.187647][T19939] nf_tables_newset+0x132b/0x2530 [ 445.187681][T19939] ? __pfx_nf_tables_newset+0x10/0x10 [ 445.187726][T19939] ? __nla_parse+0x40/0x60 [ 445.187760][T19939] nfnetlink_rcv+0x112f/0x2520 [ 445.187828][T19939] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 445.187874][T19939] ? ref_tracker_free+0x63a/0x7d0 [ 445.187938][T19939] ? __netlink_deliver_tap+0x807/0x850 [ 445.187968][T19939] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.188018][T19939] netlink_unicast+0x82c/0x9e0 [ 445.188054][T19939] ? __pfx_netlink_unicast+0x10/0x10 [ 445.188082][T19939] ? netlink_sendmsg+0x642/0xb30 [ 445.188098][T19939] ? skb_put+0x11b/0x210 [ 445.188124][T19939] netlink_sendmsg+0x805/0xb30 [ 445.188155][T19939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.188179][T19939] ? aa_sock_msg_perm+0xf1/0x1d0 [ 445.188201][T19939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.188222][T19939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.188242][T19939] __sock_sendmsg+0x21c/0x270 [ 445.188273][T19939] ____sys_sendmsg+0x505/0x830 [ 445.188311][T19939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.188345][T19939] ? import_iovec+0x74/0xa0 [ 445.188373][T19939] ___sys_sendmsg+0x21f/0x2a0 [ 445.188398][T19939] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.188466][T19939] ? __fget_files+0x2a/0x420 [ 445.188482][T19939] ? __fget_files+0x3a0/0x420 [ 445.188514][T19939] __x64_sys_sendmsg+0x19b/0x260 [ 445.188540][T19939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.188576][T19939] ? rcu_is_watching+0x15/0xb0 [ 445.188602][T19939] ? do_syscall_64+0xbe/0x3b0 [ 445.188628][T19939] do_syscall_64+0xfa/0x3b0 [ 445.188644][T19939] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.188671][T19939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.188691][T19939] ? clear_bhb_loop+0x60/0xb0 [ 445.188715][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.188733][T19939] RIP: 0033:0x7fc32138eba9 [ 445.188751][T19939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.188767][T19939] RSP: 002b:00007fc32229b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.188790][T19939] RAX: ffffffffffffffda RBX: 00007fc3215d6180 RCX: 00007fc32138eba9 [ 445.188804][T19939] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 445.188816][T19939] RBP: 00007fc321411e19 R08: 0000000000000000 R09: 0000000000000000 [ 445.188828][T19939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.188839][T19939] R13: 00007fc3215d6218 R14: 00007fc3215d6180 R15: 00007ffd085d4a38 [ 445.188875][T19939] [ 445.188882][T19939] Mem-Info: [ 445.594415][T19939] active_anon:3729 inactive_anon:0 isolated_anon:0 [ 445.594415][T19939] active_file:3469 inactive_file:40011 isolated_file:0 [ 445.594415][T19939] unevictable:768 dirty:60 writeback:0 [ 445.594415][T19939] slab_reclaimable:12514 slab_unreclaimable:113272 [ 445.594415][T19939] mapped:28984 shmem:1365 pagetables:1057 [ 445.594415][T19939] sec_pagetables:0 bounce:0 [ 445.594415][T19939] kernel_misc_reclaimable:0 [ 445.594415][T19939] free:1305953 free_pcp:13503 free_cma:0 [ 445.681299][T19939] Node 0 active_anon:15016kB inactive_anon:0kB active_file:13876kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115936kB dirty:236kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13616kB pagetables:3692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 445.725968][T19939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 445.832356][T19939] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.863013][T19939] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 445.874258][T19939] Node 0 DMA32 free:1320704kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15168kB inactive_anon:0kB active_file:13876kB inactive_file:158264kB unevictable:1536kB writepending:236kB present:3129332kB managed:2557436kB mlocked:0kB bounce:0kB free_pcp:38796kB local_pcp:20828kB free_cma:0kB [ 445.937708][T19939] lowmem_reserve[]: 0 0 1 1 1 [ 445.951980][T19939] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 445.990049][T19939] lowmem_reserve[]: 0 0 0 0 0 [ 445.996934][T19939] Node 1 Normal free:3887536kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15552kB local_pcp:7040kB free_cma:0kB [ 446.044215][T19939] lowmem_reserve[]: 0 0 0 0 0 [ 446.058966][T19939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.114678][T19939] Node 0 DMA32: 823*4kB (UME) 514*8kB (UME) 306*16kB (UME) 242*32kB (UM) 168*64kB (UME) 81*128kB (UM) 16*256kB (UME) 9*512kB (ME) 5*1024kB (UME) 6*2048kB (UM) 306*4096kB (M) = 1320652kB [ 446.139975][T19980] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 446.163189][T19939] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 446.212948][T19939] Node 1 Normal: 196*4kB (UME) 50*8kB (UME) 43*16kB (UME) 183*32kB (UME) 58*64kB (UME) 12*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3887536kB [ 446.259257][T19939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.281749][T19939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.296456][T19939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.353750][T19939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.398309][T19939] 44842 total pagecache pages [ 446.419718][T19939] 0 pages in swap cache [ 446.439199][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3961'. [ 446.457665][T19939] Free swap = 124996kB [ 446.462079][T19939] Total swap = 124996kB [ 446.476489][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 446.482949][T19939] 2097051 pages RAM [ 446.487316][T19939] 0 pages HighMem/MovableOnly [ 446.494635][T19998] nbd: must specify a size in bytes for the device [ 446.518142][T19939] 425666 pages reserved [ 446.548070][T19939] 0 pages cma reserved [ 446.600841][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3963'. [ 446.997684][T20016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.033092][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.534723][T20041] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3973'. [ 447.547066][T20033] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3971'. [ 447.634128][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3975'. [ 447.659075][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3974'. [ 447.708072][T20053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3976'. [ 447.737022][T20049] syz_tun (unregistering): left allmulticast mode [ 448.149916][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3982'. [ 448.748634][T20086] netlink: 'syz.3.3987': attribute type 18 has an invalid length. [ 450.183776][T20069] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 450.203744][ T61] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.234268][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.256665][ T61] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.287163][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.345763][T20095] __nla_validate_parse: 1 callbacks suppressed [ 450.345784][T20095] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3989'. [ 450.409739][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 450.421179][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 450.437636][T20097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'. [ 450.563277][T20108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3994'. [ 450.586251][T20108] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 450.605375][T20112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3996'. [ 450.708042][T20118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3998'. [ 450.754807][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3998'. [ 450.796342][T20118] geneve0: entered promiscuous mode [ 450.825147][T20118] batadv_slave_1: entered promiscuous mode [ 450.833361][T20123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4001'. [ 450.855054][T20118] debugfs: 'hsr1' already exists in 'hsr' [ 450.861125][T20118] Cannot create hsr debugfs directory [ 450.915461][T20129] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 451.286142][T20149] netlink: zone id is out of range [ 451.300700][T20149] netlink: zone id is out of range [ 451.315562][T20149] netlink: zone id is out of range [ 451.354698][T20149] netlink: zone id is out of range [ 451.360739][T20149] netlink: zone id is out of range [ 451.367412][T20149] netlink: zone id is out of range [ 451.373772][T20147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4009'. [ 451.374540][T20149] netlink: zone id is out of range [ 451.388695][T20149] netlink: zone id is out of range [ 451.397499][T20149] netlink: zone id is out of range [ 451.398156][T20147] netlink: 'syz.2.4009': attribute type 23 has an invalid length. [ 451.402981][T20149] netlink: zone id is out of range [ 451.445452][T20153] netlink: 'syz.0.4012': attribute type 14 has an invalid length. [ 451.481998][T20156] netlink: 'syz.1.4013': attribute type 1 has an invalid length. [ 451.512263][T20159] netlink: 'syz.4.4014': attribute type 10 has an invalid length. [ 451.593742][T20159] veth0_vlan: entered allmulticast mode [ 451.627394][T20159] veth0_vlan: left promiscuous mode [ 451.648758][T20159] veth0_vlan: entered promiscuous mode [ 451.696365][T20159] team0: Device veth0_vlan failed to register rx_handler [ 452.053592][T20179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.236398][T20186] netlink: 'syz.1.4024': attribute type 12 has an invalid length. [ 452.279285][T20186] ip6gre1: entered allmulticast mode [ 452.467750][T20199] netlink: 'syz.2.4028': attribute type 3 has an invalid length. [ 452.525414][T20204] wg2: entered promiscuous mode [ 452.531041][T20204] wg2: entered allmulticast mode [ 452.558654][T20205] wg2: left promiscuous mode [ 452.571275][T20205] wg2: left allmulticast mode [ 452.827561][T20214] netlink: 'syz.4.4034': attribute type 1 has an invalid length. [ 453.062341][T20223] bond1 (unregistering): Released all slaves [ 454.006349][T20260] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 454.151864][T20276] FAULT_INJECTION: forcing a failure. [ 454.151864][T20276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.174201][T20276] CPU: 1 UID: 0 PID: 20276 Comm: syz.0.4051 Not tainted syzkaller #0 PREEMPT(full) [ 454.174229][T20276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.174241][T20276] Call Trace: [ 454.174248][T20276] [ 454.174256][T20276] dump_stack_lvl+0x189/0x250 [ 454.174286][T20276] ? __pfx____ratelimit+0x10/0x10 [ 454.174315][T20276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.174348][T20276] ? __pfx__printk+0x10/0x10 [ 454.174374][T20276] ? __might_fault+0xb0/0x130 [ 454.174414][T20276] should_fail_ex+0x414/0x560 [ 454.174446][T20276] _copy_from_iter+0x1de/0x1790 [ 454.174475][T20276] ? rcu_is_watching+0x15/0xb0 [ 454.174497][T20276] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 454.174526][T20276] ? __pfx__copy_from_iter+0x10/0x10 [ 454.174549][T20276] ? __build_skb_around+0x257/0x3e0 [ 454.174572][T20276] ? netlink_sendmsg+0x642/0xb30 [ 454.174595][T20276] ? skb_put+0x11b/0x210 [ 454.174618][T20276] netlink_sendmsg+0x6b2/0xb30 [ 454.174648][T20276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.174671][T20276] ? aa_sock_msg_perm+0xf1/0x1d0 [ 454.174692][T20276] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.174712][T20276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.174732][T20276] __sock_sendmsg+0x21c/0x270 [ 454.174762][T20276] ____sys_sendmsg+0x505/0x830 [ 454.174790][T20276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.174823][T20276] ? import_iovec+0x74/0xa0 [ 454.174849][T20276] ___sys_sendmsg+0x21f/0x2a0 [ 454.174873][T20276] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.174939][T20276] ? __fget_files+0x2a/0x420 [ 454.174955][T20276] ? __fget_files+0x3a0/0x420 [ 454.174985][T20276] __x64_sys_sendmsg+0x19b/0x260 [ 454.175017][T20276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.175050][T20276] ? __pfx_ksys_write+0x10/0x10 [ 454.175072][T20276] ? rcu_is_watching+0x15/0xb0 [ 454.175098][T20276] ? do_syscall_64+0xbe/0x3b0 [ 454.175120][T20276] do_syscall_64+0xfa/0x3b0 [ 454.175137][T20276] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.175163][T20276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.175182][T20276] ? clear_bhb_loop+0x60/0xb0 [ 454.175205][T20276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.175223][T20276] RIP: 0033:0x7f69ab38eba9 [ 454.175241][T20276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.175256][T20276] RSP: 002b:00007f69a95ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.175278][T20276] RAX: ffffffffffffffda RBX: 00007f69ab5d5fa0 RCX: 00007f69ab38eba9 [ 454.175292][T20276] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000008 [ 454.175304][T20276] RBP: 00007f69a95ee090 R08: 0000000000000000 R09: 0000000000000000 [ 454.175316][T20276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.175327][T20276] R13: 00007f69ab5d6038 R14: 00007f69ab5d5fa0 R15: 00007ffcde347958 [ 454.175361][T20276] [ 454.178882][T20277] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20002 [ 454.592582][T20290] netlink: 'syz.4.4054': attribute type 10 has an invalid length. [ 454.604506][T20290] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 454.610226][T20294] netlink: 'syz.2.4055': attribute type 1 has an invalid length. [ 454.761534][T20301] netlink: 'syz.0.4058': attribute type 10 has an invalid length. [ 454.781541][T20301] team0: Device ipvlan1 failed to register rx_handler [ 454.977898][T20312] FAULT_INJECTION: forcing a failure. [ 454.977898][T20312] name failslab, interval 1, probability 0, space 0, times 0 [ 455.068969][T20312] CPU: 0 UID: 0 PID: 20312 Comm: syz.0.4062 Not tainted syzkaller #0 PREEMPT(full) [ 455.069008][T20312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 455.069020][T20312] Call Trace: [ 455.069028][T20312] [ 455.069036][T20312] dump_stack_lvl+0x189/0x250 [ 455.069065][T20312] ? __pfx____ratelimit+0x10/0x10 [ 455.069094][T20312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.069117][T20312] ? __pfx__printk+0x10/0x10 [ 455.069145][T20312] ? __lock_acquire+0xab9/0xd20 [ 455.069184][T20312] should_fail_ex+0x414/0x560 [ 455.069216][T20312] should_failslab+0xa8/0x100 [ 455.069244][T20312] kmem_cache_alloc_noprof+0x73/0x3c0 [ 455.069269][T20312] ? skb_clone+0x212/0x3a0 [ 455.069297][T20312] skb_clone+0x212/0x3a0 [ 455.069324][T20312] __netlink_deliver_tap+0x404/0x850 [ 455.069369][T20312] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.069399][T20312] netlink_deliver_tap+0x19c/0x1b0 [ 455.069430][T20312] netlink_unicast+0x7fa/0x9e0 [ 455.069466][T20312] ? __pfx_netlink_unicast+0x10/0x10 [ 455.069495][T20312] ? netlink_sendmsg+0x642/0xb30 [ 455.069511][T20312] ? skb_put+0x11b/0x210 [ 455.069534][T20312] netlink_sendmsg+0x805/0xb30 [ 455.069565][T20312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.069587][T20312] ? aa_sock_msg_perm+0xf1/0x1d0 [ 455.069608][T20312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.069629][T20312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.069647][T20312] __sock_sendmsg+0x21c/0x270 [ 455.069678][T20312] ____sys_sendmsg+0x505/0x830 [ 455.069707][T20312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.069741][T20312] ? import_iovec+0x74/0xa0 [ 455.069768][T20312] ___sys_sendmsg+0x21f/0x2a0 [ 455.069793][T20312] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.069860][T20312] ? __fget_files+0x2a/0x420 [ 455.069876][T20312] ? __fget_files+0x3a0/0x420 [ 455.069906][T20312] __x64_sys_sendmsg+0x19b/0x260 [ 455.069931][T20312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.069965][T20312] ? __pfx_ksys_write+0x10/0x10 [ 455.070000][T20312] ? rcu_is_watching+0x15/0xb0 [ 455.070026][T20312] ? do_syscall_64+0xbe/0x3b0 [ 455.070048][T20312] do_syscall_64+0xfa/0x3b0 [ 455.070065][T20312] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.070092][T20312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.070111][T20312] ? clear_bhb_loop+0x60/0xb0 [ 455.070135][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.070152][T20312] RIP: 0033:0x7f69ab38eba9 [ 455.070169][T20312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.070185][T20312] RSP: 002b:00007f69a95ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.070207][T20312] RAX: ffffffffffffffda RBX: 00007f69ab5d5fa0 RCX: 00007f69ab38eba9 [ 455.070220][T20312] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000008 [ 455.070232][T20312] RBP: 00007f69a95ee090 R08: 0000000000000000 R09: 0000000000000000 [ 455.070243][T20312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.070254][T20312] R13: 00007f69ab5d6038 R14: 00007f69ab5d5fa0 R15: 00007ffcde347958 [ 455.070288][T20312] [ 455.090345][T20322] atomic_op ffff88805e400998 conn xmit_atomic 0000000000000000 [ 455.113055][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.175074][T20323] atomic_op ffff88805e407998 conn xmit_atomic 0000000000000000 [ 455.478837][T20331] __nla_validate_parse: 10 callbacks suppressed [ 455.478861][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4067'. [ 455.703104][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4073'. [ 455.908808][T20354] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4077'. [ 455.930195][T20356] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.950649][T20354] ksmbd: Unknown IPC event: 3, ignore. [ 455.972090][T20351] syzkaller0: entered promiscuous mode [ 455.980968][T20351] syzkaller0: entered allmulticast mode [ 456.410082][T20377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4082'. [ 456.638463][T20391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4088'. [ 456.679059][T20392] sit1: entered promiscuous mode [ 456.808075][T20390] tipc: Enabled bearer , priority 0 [ 456.914241][T20400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4091'. [ 456.970904][T20401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4091'. [ 457.112192][T20408] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4093'. [ 457.159168][T16477] IPVS: starting estimator thread 0... [ 457.165889][T20406] net_ratelimit: 15 callbacks suppressed [ 457.165909][T20406] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 457.197588][T20412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.205180][T20412] IPv6: NLM_F_CREATE should be set when creating new route [ 457.214800][T20408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.233643][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 457.273649][T20413] IPVS: using max 28 ests per chain, 67200 per kthread [ 457.349977][T20386] tipc: Disabling bearer [ 457.609865][T20429] netlink: 'syz.4.4099': attribute type 16 has an invalid length. [ 457.618983][T20429] netlink: 'syz.4.4099': attribute type 17 has an invalid length. [ 457.664387][T20429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.732321][T20432] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4100'. [ 458.832349][T20490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4113'. [ 459.721396][T20540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.797893][T20542] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 459.800900][T20540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.825382][T20540] batadv_slave_1 (unregistering): left promiscuous mode [ 460.080321][T20560] hsr_slave_0: left promiscuous mode [ 460.090439][T20560] hsr_slave_1: left promiscuous mode [ 460.314674][T20569] team0: Device wireguard0 is of different type [ 460.560254][T20586] FAULT_INJECTION: forcing a failure. [ 460.560254][T20586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.573956][T20586] CPU: 0 UID: 0 PID: 20586 Comm: syz.0.4143 Not tainted syzkaller #0 PREEMPT(full) [ 460.573988][T20586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.573999][T20586] Call Trace: [ 460.574007][T20586] [ 460.574015][T20586] dump_stack_lvl+0x189/0x250 [ 460.574045][T20586] ? __pfx____ratelimit+0x10/0x10 [ 460.574074][T20586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.574097][T20586] ? __pfx__printk+0x10/0x10 [ 460.574139][T20586] should_fail_ex+0x414/0x560 [ 460.574171][T20586] _copy_to_user+0x31/0xb0 [ 460.574195][T20586] simple_read_from_buffer+0xe1/0x170 [ 460.574228][T20586] proc_fail_nth_read+0x1b3/0x220 [ 460.574254][T20586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.574280][T20586] ? rw_verify_area+0x2a6/0x4d0 [ 460.574304][T20586] ? __lock_acquire+0xab9/0xd20 [ 460.574328][T20586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.574352][T20586] vfs_read+0x200/0xa30 [ 460.574375][T20586] ? fdget_pos+0x247/0x320 [ 460.574397][T20586] ? __pfx___mutex_lock+0x10/0x10 [ 460.574418][T20586] ? __pfx_vfs_read+0x10/0x10 [ 460.574444][T20586] ? __fget_files+0x2a/0x420 [ 460.574468][T20586] ? __fget_files+0x3a0/0x420 [ 460.574483][T20586] ? __fget_files+0x2a/0x420 [ 460.574512][T20586] ksys_read+0x145/0x250 [ 460.574538][T20586] ? __pfx_ksys_read+0x10/0x10 [ 460.574559][T20586] ? rcu_is_watching+0x15/0xb0 [ 460.574585][T20586] ? do_syscall_64+0xbe/0x3b0 [ 460.574609][T20586] do_syscall_64+0xfa/0x3b0 [ 460.574625][T20586] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.574652][T20586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.574671][T20586] ? clear_bhb_loop+0x60/0xb0 [ 460.574696][T20586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.574714][T20586] RIP: 0033:0x7f69ab38d5bc [ 460.574733][T20586] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 460.574749][T20586] RSP: 002b:00007f69a95ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.574771][T20586] RAX: ffffffffffffffda RBX: 00007f69ab5d5fa0 RCX: 00007f69ab38d5bc [ 460.574785][T20586] RDX: 000000000000000f RSI: 00007f69a95ee0a0 RDI: 0000000000000009 [ 460.574798][T20586] RBP: 00007f69a95ee090 R08: 0000000000000000 R09: 0000000000000000 [ 460.574809][T20586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.574821][T20586] R13: 00007f69ab5d6038 R14: 00007f69ab5d5fa0 R15: 00007ffcde347958 [ 460.574857][T20586] [ 461.097521][T20606] netlink: 'syz.0.4147': attribute type 3 has an invalid length. [ 461.105816][T20606] netlink: 'syz.0.4147': attribute type 1 has an invalid length. [ 461.243710][T20611] __nla_validate_parse: 8 callbacks suppressed [ 461.243731][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 461.510237][T20623] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4156'. [ 461.576045][T20626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.831555][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4162'. [ 462.059534][T20649] veth0_to_bridge: entered promiscuous mode [ 462.061572][T20654] netlink: 'syz.2.4165': attribute type 1 has an invalid length. [ 462.073447][T20649] veth0_to_bridge: left promiscuous mode [ 462.075562][T20654] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4165'. [ 462.109917][T20654] netlink: 'syz.2.4165': attribute type 2 has an invalid length. [ 462.121808][T20654] netlink: 'syz.2.4165': attribute type 1 has an invalid length. [ 462.208644][T20661] netlink: 'syz.3.4168': attribute type 1 has an invalid length. [ 462.221415][T20661] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4168'. [ 462.263534][T20659] unknown channel width for channel at 909000KHz? [ 462.306280][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 462.337534][T20661] netlink: 'syz.3.4168': attribute type 1 has an invalid length. [ 462.361045][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4171'. [ 462.372376][T20670] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 462.383141][T20670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.394759][T20661] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4168'. [ 462.692204][T20691] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4177'. [ 462.812585][T20691] only policy match revision 0 supported [ 462.812608][T20691] unable to load match [ 462.953966][ T5871] Bluetooth: hci5: command 0x0406 tx timeout [ 463.293574][T20720] netlink: 'syz.1.4185': attribute type 1 has an invalid length. [ 463.330609][T20720] netlink: 'syz.1.4185': attribute type 2 has an invalid length. [ 463.583275][T20735] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4188'. [ 463.602050][T20728] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 463.629654][T20728] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 463.637905][T20728] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 463.646336][T20728] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 463.655106][T20728] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 463.663703][T20728] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 463.702655][T20728] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 463.711817][T20728] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 463.944617][T20744] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 464.008961][T20744] bond1: entered promiscuous mode [ 464.016233][T20744] bond1: entered allmulticast mode [ 464.024635][T20744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.519881][T20890] IPVS: rr: FWM 3 0x00000003 - no destination available [ 466.689156][T20900] __nla_validate_parse: 37 callbacks suppressed [ 466.689180][T20900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4236'. [ 466.746312][T20901] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4235'. [ 466.888913][T20909] openvswitch: netlink: Key type 8220 is out of range max 32 [ 466.970391][T20909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.092485][T20916] bond2: (slave veth5): Enslaving as an active interface with a down link [ 467.140348][T20909] bond2: (slave veth0_to_bond): making interface the new active one [ 467.150445][T20909] veth0_to_bond: entered promiscuous mode [ 467.159167][T20909] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 467.183872][T20923] syz.4.4243 (20923) used obsolete PPPIOCDETACH ioctl [ 467.185759][T20929] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.4244'. [ 467.216450][T20929] openvswitch: netlink: Message has 5 unknown bytes. [ 467.680128][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'. [ 467.886245][T20959] openvswitch: netlink: Unknown key attributes 2 [ 468.136255][T20965] bond1: (slave gretap1): making interface the new active one [ 468.145510][T20965] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 468.162943][T20965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4257'. [ 468.176690][T20965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.351028][T20972] tipc: Enabled bearer , priority 0 [ 468.360297][T20975] validate_nla: 116 callbacks suppressed [ 468.360319][T20975] netlink: 'syz.4.4262': attribute type 10 has an invalid length. [ 468.374841][T20978] netlink: 'syz.0.4263': attribute type 10 has an invalid length. [ 468.391978][T20971] tipc: Disabling bearer [ 468.408602][T20975] bridge_slave_1: left allmulticast mode [ 468.416048][T20975] bridge_slave_1: left promiscuous mode [ 468.441092][T20975] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.481176][T20975] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 468.511417][T20978] team0: Device hsr_slave_0 failed to register rx_handler [ 468.665662][T20987] tipc: Enabling not permitted [ 468.671311][T20987] tipc: Enabling of bearer rejected, failed to enable media [ 468.750787][T20994] tipc: Enabled bearer , priority 0 [ 468.777499][T20996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4269'. [ 468.815129][T21000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4270'. [ 468.826379][T21007] netlink: 'syz.3.4271': attribute type 2 has an invalid length. [ 468.865902][T20998] syzkaller0: entered promiscuous mode [ 468.871627][T20998] syzkaller0: entered allmulticast mode [ 468.879885][T20998] tipc: Resetting bearer [ 469.063048][T21009] tipc: Resetting bearer [ 469.102504][T21015] openvswitch: netlink: Flow key attribute not present in set flow. [ 469.162418][T21015] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4273'. [ 469.219118][T21023] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 470.218669][T21039] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 471.113544][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.540818][T21009] tipc: Disabling bearer [ 471.671570][T21043] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 471.730869][T21043] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 472.112414][T21077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4293'. [ 472.191587][T21066] syzkaller1: entered promiscuous mode [ 472.210578][T21066] syzkaller1: entered allmulticast mode [ 472.427053][T21094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.519616][T21094] netlink: 'syz.4.4297': attribute type 49 has an invalid length. [ 472.640470][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4298'. [ 472.650532][T21100] bridge4: entered promiscuous mode [ 472.656045][T21100] bridge4: entered allmulticast mode [ 472.711010][T21107] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 472.964226][T21118] netlink: 'syz.0.4307': attribute type 1 has an invalid length. [ 473.057322][T21118] bond6: entered promiscuous mode [ 473.100648][T21118] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.146984][T21119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.156977][T21119] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 473.175450][T21119] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 473.212603][T21119] bond6: (slave wireguard0): making interface the new active one [ 473.222716][T21119] wireguard0: entered promiscuous mode [ 473.230421][T21119] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 473.242019][T21137] netlink: 'syz.1.4310': attribute type 1 has an invalid length. [ 473.318978][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4311'. [ 473.344591][T21143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4311'. [ 473.351197][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4312'. [ 473.631473][T21156] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 473.670184][T21155] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4313'. [ 473.852280][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4317'. [ 474.840640][T21194] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 475.693768][T21223] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 475.708392][T21223] openvswitch: netlink: Invalid VLAN frame [ 475.864191][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4335'. [ 476.042244][T21242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4339'. [ 476.169039][T21242] netlink: 'syz.4.4339': attribute type 1 has an invalid length. [ 476.236267][T21242] vlan3: entered promiscuous mode [ 476.401000][T21256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4344'. [ 476.554757][T21266] netlink: 'syz.1.4347': attribute type 2 has an invalid length. [ 476.709955][T21275] tipc: Enabling of bearer rejected, failed to enable media [ 476.865881][T21291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.931881][T21287] sctp: [Deprecated]: syz.4.4350 (pid 21287) Use of int in maxseg socket option. [ 476.931881][T21287] Use struct sctp_assoc_value instead [ 477.002381][T21297] netlink: 'syz.1.4354': attribute type 1 has an invalid length. [ 477.057462][T21297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.117820][T21297] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 477.160377][T21297] vlan3: entered allmulticast mode [ 477.165903][T21297] veth1: entered allmulticast mode [ 477.378893][T21318] __nla_validate_parse: 6 callbacks suppressed [ 477.378915][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'. [ 477.463179][T21321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'. [ 477.633606][T21339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4365'. [ 477.803500][T21346] netlink: 'syz.4.4368': attribute type 1 has an invalid length. [ 477.811312][T21346] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4368'. [ 477.840360][T21346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4368'. [ 477.900797][T21351] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4370'. [ 477.982687][T21356] tipc: Enabled bearer , priority 0 [ 477.991162][T21356] syzkaller0: entered promiscuous mode [ 478.018690][T21356] syzkaller0: entered allmulticast mode [ 478.192433][T21356] tipc: Resetting bearer [ 478.235944][T21355] tipc: Resetting bearer [ 478.309476][T21355] tipc: Disabling bearer [ 478.483633][ T9402] veth0_to_bond: left promiscuous mode [ 478.806396][T21379] Unsupported ieee802154 address type: 0 [ 479.169200][T21402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4390'. [ 479.563865][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.576228][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.592173][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.601480][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.620037][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.781876][T21410] lo speed is unknown, defaulting to 1000 [ 479.853646][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 479.894075][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 480.036678][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4395'. [ 481.455604][T13138] bond2: (slave wlan0): failed to get link speed/duplex [ 481.504853][ T9415] bridge0: port 3(batadv0) entered disabled state [ 481.556091][ T9415] bridge_slave_0: left allmulticast mode [ 481.561816][ T9415] bridge_slave_0: left promiscuous mode [ 481.591225][ T9415] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.673246][ T5871] Bluetooth: hci1: command tx timeout [ 481.925541][ T9415] bond3 (unregistering): (slave gretap0): Releasing active interface [ 481.935833][ T9415] gretap0 (unregistering): left promiscuous mode [ 481.950880][ T9415] gretap0 (unregistering): left allmulticast mode [ 481.995015][ T9415] bond4 (unregistering): (slave gretap1): Releasing active interface [ 482.249251][ T9415] dvmrp0 (unregistering): left allmulticast mode [ 482.331410][ T9415] team0: Port device geneve0 removed [ 483.030365][ T9415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.042444][ T9415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.055926][ T9415] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 483.066653][ T9415] bond0 (unregistering): Released all slaves [ 483.221254][ T9415] bond1 (unregistering): Released all slaves [ 483.370797][ T9415] bond2 (unregistering): (slave veth7): Releasing active interface [ 483.380398][ T9415] veth0_to_bond: entered promiscuous mode [ 483.388681][ T9415] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 483.401520][ T9415] bond2 (unregistering): Released all slaves [ 483.556164][ T9415] bond3 (unregistering): Released all slaves [ 483.571567][ T9415] bond4 (unregistering): Released all slaves [ 483.716065][ T9415] bond5 (unregistering): Released all slaves [ 483.747260][T21512] tipc: Started in network mode [ 483.752681][T21512] tipc: Node identity 7aeb92fc1b71, cluster identity 4711 [ 483.762389][T21512] tipc: Enabled bearer , priority 0 [ 483.769503][ T5871] Bluetooth: hci1: command tx timeout [ 483.778370][T21515] syzkaller0: entered promiscuous mode [ 483.808481][T21515] syzkaller0: entered allmulticast mode [ 483.857465][T21523] tipc: Resetting bearer [ 483.867737][T21410] chnl_net:caif_netlink_parms(): no params data found [ 483.953152][ T9400] bond2: (slave wlan0): failed to get link speed/duplex [ 484.090305][T21523] tipc: Resetting bearer [ 484.118444][T21523] tipc: Disabling bearer [ 484.148826][T21543] batadv_slave_0: entered promiscuous mode [ 484.225738][T21551] __nla_validate_parse: 2 callbacks suppressed [ 484.225770][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4426'. [ 484.271220][T21410] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.278873][T21410] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.287324][T21410] bridge_slave_0: entered allmulticast mode [ 484.295863][T21410] bridge_slave_0: entered promiscuous mode [ 484.308479][T21410] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.323545][T21554] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4425'. [ 484.373164][T21410] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.390778][T21410] bridge_slave_1: entered allmulticast mode [ 484.432122][T21410] bridge_slave_1: entered promiscuous mode [ 484.540981][T21564] netlink: 'syz.0.4429': attribute type 1 has an invalid length. [ 484.573856][ T9401] bond2: (slave wlan0): failed to get link speed/duplex [ 484.583021][T21541] batadv_slave_0: left promiscuous mode [ 484.593005][T21410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.604855][T21569] netlink: 'syz.2.4430': attribute type 10 has an invalid length. [ 484.619876][T21410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.631732][T21564] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 484.650627][T21569] veth1_macvtap: left promiscuous mode [ 484.845221][T21580] netlink: 'syz.1.4434': attribute type 1 has an invalid length. [ 484.870594][T21410] team0: Port device team_slave_0 added [ 484.908716][T21410] team0: Port device team_slave_1 added [ 485.032591][T21410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.054138][T21410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.087443][T21410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.106426][T21410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.114290][T21410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.141924][T21410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.164731][ T9402] bond2: (slave wlan0): failed to get link speed/duplex [ 485.308009][ T9415] : left promiscuous mode [ 485.338698][T21410] hsr_slave_0: entered promiscuous mode [ 485.346546][T21410] hsr_slave_1: entered promiscuous mode [ 485.353693][T21410] debugfs: 'hsr0' already exists in 'hsr' [ 485.359687][T21410] Cannot create hsr debugfs directory [ 485.380882][T21599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.408334][ T9415] tipc: Left network mode [ 485.506325][T21609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4443'. [ 485.531943][T21607] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4442'. [ 485.582053][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4442'. [ 485.618988][ T9415] batman_adv: batadv0: Removing interface: wlan1 [ 485.734010][ T9400] bond2: (slave wlan0): failed to get link speed/duplex [ 485.797264][T21613] openvswitch: netlink: Key type 85 is out of range max 32 [ 485.833301][ T5871] Bluetooth: hci1: command tx timeout [ 485.894627][ T9402] bond2: (slave wlan0): failed to get link speed/duplex [ 485.927875][T21613] netlink: 'syz.0.4445': attribute type 1 has an invalid length. [ 485.944781][T21613] netlink: 'syz.0.4445': attribute type 1 has an invalid length. [ 485.980878][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4445'. [ 485.985990][T21613] netlink: 'syz.0.4445': attribute type 1 has an invalid length. [ 486.026171][ T9402] bond2: (slave wlan0): failed to get link speed/duplex [ 486.039685][T21613] netlink: 'syz.0.4445': attribute type 2 has an invalid length. [ 486.171392][T21613] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4445'. [ 486.204716][ T9401] bond2: (slave wlan0): failed to get link speed/duplex [ 486.350759][ T9415] hsr_slave_0: left promiscuous mode [ 486.377029][ T9415] hsr_slave_1: left promiscuous mode [ 486.393944][ T9415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.640149][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4451'. [ 487.923031][ T5871] Bluetooth: hci1: command tx timeout [ 488.619906][ T9415] team0 (unregistering): Port device team_slave_1 removed [ 488.670563][ T9415] team0 (unregistering): Port device team_slave_0 removed [ 488.960237][T16477] page_pool_release_retry() stalled pool shutdown: id 91, 1 inflight 60 sec [ 489.035438][T13138] bond2: (slave wlan0): failed to get link speed/duplex [ 489.183099][T21410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 489.213999][ T9402] bond2: (slave wlan0): failed to get link speed/duplex [ 489.221477][T21410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 489.247202][T21410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 489.338361][T21410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 489.425353][ T9402] bond2: (slave wlan0): failed to get link speed/duplex [ 489.454044][T21678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.488759][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.498435][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.508289][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.520843][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.531907][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.556560][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.574423][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.590473][ T9400] bond2: (slave wlan0): failed to get link speed/duplex [ 489.612044][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4460'. [ 489.636724][T21685] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4461'. [ 489.907552][ T43] IPVS: starting estimator thread 0... [ 490.004103][T21692] IPVS: using max 25 ests per chain, 60000 per kthread [ 490.012282][T21410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.156746][T21410] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.185342][ T9402] bond2: (slave wlan0): failed to get link speed/duplex [ 490.228307][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.235662][ T9401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.307074][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.314829][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.347093][ T9402] bond2: (slave wlan0): failed to get link speed/duplex [ 490.488879][T13138] bond2: (slave wlan0): failed to get link speed/duplex [ 490.516296][T21718] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 490.615989][T13138] bond2: (slave wlan0): failed to get link speed/duplex [ 490.630596][ T9401] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.651304][ T9401] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.704853][T13138] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.733604][T13138] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.874227][ T36] bond2: (slave wlan0): failed to get link speed/duplex [ 490.961720][T21746] tipc: Enabling of bearer rejected, failed to enable media [ 491.012527][T21753] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.242731][T21763] sctp: [Deprecated]: syz.2.4481 (pid 21763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.242731][T21763] Use struct sctp_sack_info instead [ 491.328677][T21769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.429239][T21410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.495852][ T9415] IPVS: stop unused estimator thread 0... [ 492.022461][T21410] veth0_vlan: entered promiscuous mode [ 492.045787][T21410] veth1_vlan: entered promiscuous mode [ 492.145977][T21803] dvmrp1: entered allmulticast mode [ 492.279401][T21410] veth0_macvtap: entered promiscuous mode [ 492.328648][T21810] netlink: 'syz.0.4494': attribute type 1 has an invalid length. [ 492.354981][T21807] bridge0: port 1(veth3) entered blocking state [ 492.361594][T21807] bridge0: port 1(veth3) entered disabled state [ 492.374268][T21807] veth3: entered allmulticast mode [ 492.382224][T21807] veth3: entered promiscuous mode [ 492.454606][T21805] vlan3: entered allmulticast mode [ 492.459885][T21805] veth0_to_bond: entered allmulticast mode [ 492.490692][T21805] bridge0: port 2(vlan3) entered blocking state [ 492.503998][T21805] bridge0: port 2(vlan3) entered disabled state [ 492.514656][T21805] vlan3: entered promiscuous mode [ 492.519983][T21805] veth0_to_bond: entered promiscuous mode [ 492.536732][T21410] veth1_macvtap: entered promiscuous mode [ 492.619987][T21410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.728347][T21410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.769977][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.786934][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.820077][ T1044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.844605][ T1044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.170793][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.240454][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.329935][T21849] tipc: Enabled bearer , priority 0 [ 493.341275][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.350408][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.382985][T21849] syzkaller0: entered promiscuous mode [ 493.388601][T21849] syzkaller0: entered allmulticast mode [ 493.493827][T21849] tipc: Resetting bearer [ 493.551791][T21860] xfrm1: entered promiscuous mode [ 493.565113][T21860] xfrm1: entered allmulticast mode [ 493.572133][T21847] tipc: Resetting bearer [ 493.594559][T21847] tipc: Disabling bearer [ 493.957757][T21880] veth5: entered allmulticast mode [ 494.103634][T13138] net_ratelimit: 21 callbacks suppressed [ 494.103657][T13138] bond2: (slave wlan0): failed to get link speed/duplex [ 494.306454][ T1044] bond2: (slave wlan0): failed to get link speed/duplex [ 494.434942][ T9401] bond2: (slave wlan0): failed to get link speed/duplex [ 494.564320][ T1044] bond2: (slave wlan0): failed to get link speed/duplex [ 494.656303][T21922] syzkaller0: entered promiscuous mode [ 494.662073][T21922] syzkaller0: entered allmulticast mode [ 494.674144][ T61] bond2: (slave wlan0): failed to get link speed/duplex [ 494.782947][ T61] bond2: (slave wlan0): failed to get link speed/duplex [ 494.894220][ T9415] bond2: (slave wlan0): failed to get link speed/duplex [ 495.093161][ T9415] bond2: (slave wlan0): failed to get link speed/duplex [ 495.224072][ T61] bond2: (slave wlan0): failed to get link speed/duplex [ 495.353759][ T9415] bond2: (slave wlan0): failed to get link speed/duplex [ 495.422278][T21948] __nla_validate_parse: 71 callbacks suppressed [ 495.422298][T21948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4530'. [ 495.517558][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4532'. [ 496.124517][T21986] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.4546'. [ 496.246968][T21991] netlink: 'syz.4.4546': attribute type 21 has an invalid length. [ 496.291253][T21991] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4546'. [ 496.359618][T21997] netlink: 'syz.2.4549': attribute type 58 has an invalid length. [ 496.385927][T22001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4551'. [ 496.392181][T21997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4549'. [ 496.859565][T22025] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4558'. [ 496.958220][T22033] netlink: 'syz.0.4560': attribute type 1 has an invalid length. [ 497.112561][T22037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4562'. [ 497.191643][T22044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4564'. [ 497.426534][T22055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4570'. [ 497.526460][T22062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.655470][T22075] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 498.208185][T22106] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 498.257212][T22106] netlink: 'syz.4.4586': attribute type 10 has an invalid length. [ 498.295557][T22111] bond0: (slave bond_slave_0): Releasing backup interface [ 498.338264][T22111] bond0: (slave bond_slave_1): Releasing backup interface [ 498.394907][T22111] team0: Port device team_slave_0 removed [ 498.430087][T22111] team0: Port device team_slave_1 removed [ 498.441000][T22111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.451052][T22111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.469948][T22111] bond2: (slave wlan0): Releasing active interface [ 498.490705][T22111] bond1: (slave gretap1): Releasing active interface [ 498.509560][T22111] veth3: left allmulticast mode [ 498.519705][T22111] veth3: left promiscuous mode [ 498.525062][T22111] bridge0: port 1(veth3) entered disabled state [ 498.537561][T22111] vlan3: left promiscuous mode [ 498.542443][T22111] veth0_to_bond: left promiscuous mode [ 498.549623][T22111] bridge0: port 2(vlan3) entered disabled state [ 498.569348][T22106] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 498.772587][ T1044] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 498.812522][ T1044] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 498.820392][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 498.884100][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 499.351379][T22155] netlink: 'syz.5.4600': attribute type 8 has an invalid length. [ 499.516553][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 499.538741][T22167] netlink: 'syz.4.4605': attribute type 33 has an invalid length. [ 499.551874][T22168] bridge_slave_1: left allmulticast mode [ 499.576488][T22168] bridge_slave_1: left promiscuous mode [ 499.599930][T22168] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.667198][T22168] bridge_slave_0: left allmulticast mode [ 499.698577][T22168] bridge_slave_0: left promiscuous mode [ 499.712158][T22168] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.111278][T22210] netlink: 'syz.4.4614': attribute type 14 has an invalid length. [ 500.120137][T22210] netlink: 'syz.4.4614': attribute type 13 has an invalid length. [ 500.269157][T22220] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 500.279402][T22220] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 501.208036][T22259] tipc: Enabling of bearer rejected, failed to enable media [ 501.439151][T22265] net_ratelimit: 25 callbacks suppressed [ 501.439164][T22265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.471482][T22271] pim6reg1: entered promiscuous mode [ 501.481185][T22271] pim6reg1: entered allmulticast mode [ 501.498730][T22265] sctp: [Deprecated]: syz.5.4633 (pid 22265) Use of int in max_burst socket option. [ 501.498730][T22265] Use struct sctp_assoc_value instead [ 501.611691][T22265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.632035][T22275] __nla_validate_parse: 16 callbacks suppressed [ 501.632055][T22275] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4637'. [ 501.710401][T22280] sctp: [Deprecated]: syz.0.4637 (pid 22280) Use of int in max_burst socket option deprecated. [ 501.710401][T22280] Use struct sctp_assoc_value instead [ 501.764475][T22281] netlink: 'syz.1.4639': attribute type 10 has an invalid length. [ 501.816735][T22285] netlink: 'syz.1.4639': attribute type 10 has an invalid length. [ 501.866297][T22279] netlink: 'syz.1.4639': attribute type 1 has an invalid length. [ 501.875722][T22281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4639'. [ 501.894712][T22279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4639'. [ 501.919073][T22279] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4639'. [ 501.983440][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4643'. [ 501.993408][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4643'. [ 502.021594][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4643'. [ 502.032714][ T1044] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.033683][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4643'. [ 502.060222][ T1044] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.085727][ T1044] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.100925][ T1044] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.242221][T22300] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 502.286565][T22301] netlink: 'syz.5.4646': attribute type 1 has an invalid length. [ 502.306032][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4648'. [ 502.327951][T22300] netlink: 'syz.5.4646': attribute type 1 has an invalid length. [ 502.348369][T22307] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 502.356551][T22309] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4650'. [ 502.473711][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.712978][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.822010][T22332] bridge_slave_1: entered promiscuous mode [ 502.851178][T22332] bridge_slave_1: entered allmulticast mode [ 503.431278][T22371] validate_nla: 1 callbacks suppressed [ 503.431299][T22371] netlink: 'syz.0.4669': attribute type 2 has an invalid length. [ 503.476587][T22373] netlink: 'syz.0.4669': attribute type 2 has an invalid length. [ 503.561267][T22375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.580002][T22382] netlink: 'syz.5.4672': attribute type 1 has an invalid length. [ 503.606293][T22382] netlink: 'syz.5.4672': attribute type 1 has an invalid length. [ 503.915847][ T5881] Bluetooth: hci2: command 0x0401 tx timeout [ 503.977704][T22408] tipc: Enabled bearer , priority 0 [ 503.987830][T22408] syzkaller0: entered promiscuous mode [ 504.004546][T22408] syzkaller0: entered allmulticast mode [ 504.042699][T22408] tipc: Resetting bearer [ 504.056414][T22405] tipc: Resetting bearer [ 504.082995][T22405] tipc: Disabling bearer [ 504.129293][T22413] netlink: 'syz.0.4681': attribute type 21 has an invalid length. [ 504.138766][T22413] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 504.322570][T22419] netlink: 'syz.2.4684': attribute type 11 has an invalid length. [ 504.395671][ T5871] Bluetooth: hci1: command 0x0405 tx timeout [ 504.694729][T22437] veth0: entered promiscuous mode [ 504.701022][T22437] veth0: left promiscuous mode [ 505.065680][T22453] netlink: 'syz.4.4691': attribute type 2 has an invalid length. [ 505.467173][T22468] netlink: 'syz.4.4696': attribute type 29 has an invalid length. [ 505.527878][T22468] netlink: 'syz.4.4696': attribute type 29 has an invalid length. [ 505.818548][T22458] netlink: 'syz.5.4692': attribute type 1 has an invalid length. [ 505.931700][T22494] netlink: 'syz.4.4705': attribute type 3 has an invalid length. [ 506.126976][T22506] tipc: Enabled bearer , priority 0 [ 506.174400][T22506] syzkaller0: entered promiscuous mode [ 506.180115][T22506] syzkaller0: entered allmulticast mode [ 506.227717][T22506] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 506.235937][T22514] sctp: [Deprecated]: syz.5.4709 (pid 22514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.235937][T22514] Use struct sctp_sack_info instead [ 506.445020][T22506] tipc: Resetting bearer [ 506.474243][ T5871] Bluetooth: hci1: command 0x0405 tx timeout [ 506.568402][T22506] tipc: Disabling bearer [ 506.913363][T22544] team0: Device veth1_macvtap failed to register rx_handler [ 507.028640][T22563] __nla_validate_parse: 24 callbacks suppressed [ 507.028664][T22563] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.4722'. [ 507.439757][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4729'. [ 508.195033][T22599] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4734'. [ 508.282577][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4735'. [ 508.364624][T22604] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 508.402609][T22604] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 508.434962][T22604] gretap2: entered promiscuous mode [ 508.444635][T22604] gretap2: entered allmulticast mode [ 508.616092][T22620] vlan0: entered allmulticast mode [ 508.628625][T22620] veth1: entered allmulticast mode [ 509.018193][T22641] validate_nla: 6 callbacks suppressed [ 509.018215][T22641] netlink: 'syz.1.4745': attribute type 1 has an invalid length. [ 509.055775][T22641] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4745'. [ 509.816874][T22669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4752'. [ 509.875373][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4755'. [ 510.792971][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.123087][T22729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4769'. [ 511.232078][T22731] netlink: 'syz.2.4770': attribute type 2 has an invalid length. [ 511.279612][T22731] netlink: 'syz.2.4770': attribute type 8 has an invalid length. [ 511.317062][T22731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4770'. [ 511.462575][T22743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4775'. [ 511.701376][T22743] hsr_slave_0 (unregistering): left promiscuous mode [ 511.705826][T22763] netlink: del zone limit has 4 unknown bytes [ 511.743027][T22762] team0: No ports can be present during mode change [ 512.118231][T22787] __nla_validate_parse: 2 callbacks suppressed [ 512.118253][T22787] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4786'. [ 512.144608][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4785'. [ 512.168103][T22787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4786'. [ 512.479298][T22807] : renamed from bridge_slave_0 (while UP) [ 512.685271][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4796'. [ 512.710423][T22821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.787849][T22824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4798'. [ 512.958730][T22838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.071560][T22845] sit3: entered promiscuous mode [ 513.093814][T22848] netlink: 'syz.4.4806': attribute type 10 has an invalid length. [ 513.112238][T22845] sit3: entered allmulticast mode [ 513.145081][T22848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4806'. [ 513.180888][T22850] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 513.321800][T22859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4810'. [ 513.363643][T22859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4810'. [ 513.375303][T22863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4811'. [ 513.401818][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4811'. [ 513.755428][T22887] netlink: 'syz.2.4819': attribute type 64 has an invalid length. [ 513.845281][T22888] vlan3: entered promiscuous mode [ 514.937709][T22962] tipc: Enabled bearer , priority 0 [ 515.074893][T22962] syzkaller0: entered promiscuous mode [ 515.080703][T22962] syzkaller0: entered allmulticast mode [ 515.087254][T22962] tipc: Resetting bearer [ 515.154857][T22968] wg1: entered promiscuous mode [ 515.174521][T22962] tipc: Resetting bearer [ 517.488922][T22962] tipc: Disabling bearer [ 517.722090][T22992] __nla_validate_parse: 13 callbacks suppressed [ 517.722137][T22992] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.4857'. [ 517.743806][T22995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4857'. [ 517.810955][T22997] netlink: 'syz.0.4859': attribute type 14 has an invalid length. [ 517.853905][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4859'. [ 517.873149][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4859'. [ 517.955403][T23002] batadv_slave_1: entered promiscuous mode [ 517.975678][ T9400] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.998197][ T9400] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.049959][ T9400] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.061572][ T9400] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.084033][T22993] batadv_slave_1: left promiscuous mode [ 518.365919][T23027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.384220][T23031] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4870'. [ 518.477609][T23045] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:0 [ 518.501548][T23045] netlink: 'syz.5.4871': attribute type 1 has an invalid length. [ 518.510950][T23045] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4871'. [ 518.521515][T23045] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20000 [ 518.564919][T23037] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4872'. [ 518.930539][T23059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.997726][T23065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4879'. [ 519.021213][T23065] xfrm1: entered promiscuous mode [ 519.032545][T23065] xfrm1: entered allmulticast mode [ 519.050577][T23065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4879'. [ 519.278971][T23077] bridge0: port 1(veth0_to_bridge) entered blocking state [ 519.294487][T23077] bridge0: port 1(veth0_to_bridge) entered disabled state [ 519.313293][T23077] veth0_to_bridge: entered allmulticast mode [ 519.327414][T23077] veth0_to_bridge: entered promiscuous mode [ 519.335047][ T9400] tipc: Subscription rejected, illegal request [ 519.357087][T23077] bridge0: port 1(veth0_to_bridge) entered blocking state [ 519.364424][T23077] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 519.422238][T23088] netlink: 'syz.4.4889': attribute type 2 has an invalid length. [ 519.444066][T23089] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4888'. [ 519.462390][T23088] netlink: 'syz.4.4889': attribute type 2 has an invalid length. [ 519.475386][T23088] netlink: 'syz.4.4889': attribute type 2 has an invalid length. [ 519.483993][T23088] netlink: 'syz.4.4889': attribute type 2 has an invalid length. [ 519.492312][T23088] netlink: 'syz.4.4889': attribute type 2 has an invalid length. [ 520.250162][T23134] netlink: 'syz.2.4906': attribute type 10 has an invalid length. [ 520.263739][T23133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.306403][T23134] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 520.328984][T23141] netlink: 'syz.0.4904': attribute type 4 has an invalid length. [ 520.341533][T23134] veth0_to_bridge: entered promiscuous mode [ 520.341968][T23136] netlink: 'syz.0.4904': attribute type 4 has an invalid length. [ 520.353127][T23132] veth0_to_bridge: left promiscuous mode [ 520.730427][T23167] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 520.871300][T23180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.137291][T23190] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 521.687432][ C0] ------------[ cut here ]------------ [ 521.693188][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 521.704178][ C0] WARNING: CPU: 0 PID: 23226 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 521.711731][T23227] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 521.714798][ C0] Modules linked in: [ 521.714828][ C0] CPU: 0 UID: 0 PID: 23226 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 521.714852][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 521.714866][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 521.752804][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 85 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 e2 f0 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 521.772634][ C0] RSP: 0000:ffffc90000007538 EFLAGS: 00010246 [ 521.778790][ C0] RAX: 4e51f7b46c798f00 RBX: 000000000000000c RCX: ffff888052ca1e00 [ 521.786938][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 521.795088][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 521.803319][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff888075b798e8 [ 521.811685][ C0] R13: 0000000000000000 R14: ffff8880645f0e40 R15: ffff8880645f30d8 [ 521.819836][ C0] FS: 0000555559b4e500(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 521.829021][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.835689][ C0] CR2: 00007fc32143a78c CR3: 00000000610ea000 CR4: 00000000003526f0 [ 521.843901][ C0] Call Trace: [ 521.847286][ C0] [ 521.850165][ C0] rate_control_send_low+0x194/0x7a0 [ 521.855630][ C0] rate_control_get_rate+0x20b/0x5d0 [ 521.860942][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 521.867021][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 521.873653][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 521.879096][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 521.884941][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 521.890764][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 521.896893][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 521.902566][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 521.908330][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 521.914132][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 521.919719][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 521.925507][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 521.930995][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 521.937130][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 521.942699][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 521.950245][ C0] __iterate_interfaces+0x2a8/0x590 [ 521.955498][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 521.961593][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 521.968826][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 521.974986][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 521.982017][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 521.987789][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 521.993640][ C0] __hrtimer_run_queues+0x529/0xc60 [ 521.998978][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 522.004822][ C0] ? read_tsc+0x9/0x20 [ 522.008913][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 522.014812][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 522.019940][ C0] handle_softirqs+0x283/0x870 [ 522.024759][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 522.029587][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 522.035227][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 522.041045][ C0] __irq_exit_rcu+0xca/0x1f0 [ 522.045675][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 522.050972][ C0] irq_exit_rcu+0x9/0x30 [ 522.055255][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 522.060929][ C0] [ 522.064078][ C0] [ 522.067014][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.073336][ C0] RIP: 0010:lock_is_held_type+0x137/0x190 [ 522.079496][ C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 f9 93 26 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 522.099563][ C0] RSP: 0000:ffffc90014cf7908 EFLAGS: 00000206 [ 522.106126][ C0] RAX: 4e51f7b46c798f00 RBX: 0000000000000000 RCX: 4e51f7b46c798f00 [ 522.114222][ C0] RDX: ffff888052ca1e00 RSI: ffffffff8dba7ff7 RDI: ffffffff8be33880 [ 522.122230][ C0] RBP: 00000000ffffffff R08: ffffea000068ca37 R09: 1ffffd40000d1946 [ 522.131015][ C0] R10: dffffc0000000000 R11: fffff940000d1947 R12: 0000000000000246 [ 522.139273][ C0] R13: ffff888052ca1e00 R14: ffff88807e622188 R15: 0000000000000005 [ 522.147517][ C0] xas_next_entry+0x1de/0x3d0 [ 522.152657][ C0] next_uptodate_folio+0x32/0x5d0 [ 522.157722][ C0] ? folio_unlock+0x101/0x160 [ 522.162585][ C0] filemap_map_pages+0x102b/0x1740 [ 522.167760][ C0] ? filemap_map_pages+0x150/0x1740 [ 522.173194][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 522.178676][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 522.184291][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 522.189590][ C0] __handle_mm_fault+0x34a9/0x5440 [ 522.194842][ C0] ? __lock_acquire+0xab9/0xd20 [ 522.199801][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 522.205503][ C0] ? lock_vma_under_rcu+0xdf/0x3d0 [ 522.210723][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 522.216307][ C0] handle_mm_fault+0x40a/0x8e0 [ 522.221093][ C0] do_user_addr_fault+0xa81/0x1390 [ 522.226240][ C0] ? rcu_is_watching+0x15/0xb0 [ 522.231006][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 522.236413][ C0] exc_page_fault+0x76/0xf0 [ 522.241099][ C0] asm_exc_page_fault+0x26/0x30 [ 522.246081][ C0] RIP: 0033:0x7fc32133a1c7 [ 522.250502][ C0] Code: 24 64 00 00 00 00 45 31 ff 83 e8 20 c7 44 24 20 00 00 00 00 45 31 f6 45 31 db 48 98 c7 44 24 10 00 00 00 00 41 ba ff ff ff ff <0f> b6 04 01 48 8d 0d 4e df 25 00 c7 44 24 60 00 00 00 00 c7 44 24 [ 522.270213][ C0] RSP: 002b:00007ffd085d4600 EFLAGS: 00010246 [ 522.276366][ C0] RAX: 000000000000004c RBX: 00007ffd085d4b60 RCX: 00007fc32143a740 [ 522.284628][ C0] RDX: 0000000000000000 RSI: 00007fc3214135a2 RDI: 00007ffd085d4e50 [ 522.292624][ C0] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000000 [ 522.300945][ C0] R10: 00000000ffffffff R11: 0000000000000000 R12: 000000000000006c [ 522.309164][ C0] R13: 00007ffd085d4ce0 R14: 0000000000000000 R15: 0000000000000000 [ 522.317289][ C0] [ 522.320344][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 522.327684][ C0] CPU: 0 UID: 0 PID: 23226 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 522.337358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 522.347670][ C0] Call Trace: [ 522.350967][ C0] [ 522.353861][ C0] dump_stack_lvl+0x99/0x250 [ 522.358651][ C0] ? __asan_memcpy+0x40/0x70 [ 522.363248][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.368453][ C0] ? __pfx__printk+0x10/0x10 [ 522.373082][ C0] vpanic+0x281/0x750 [ 522.377205][ C0] ? __pfx__printk+0x10/0x10 [ 522.381909][ C0] ? __pfx_vpanic+0x10/0x10 [ 522.386606][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 522.391941][ C0] panic+0xb9/0xc0 [ 522.395717][ C0] ? __pfx_panic+0x10/0x10 [ 522.400425][ C0] __warn+0x31b/0x4b0 [ 522.404414][ C0] ? __rate_control_send_low+0x5df/0x820 [ 522.410151][ C0] ? __rate_control_send_low+0x5df/0x820 [ 522.415881][ C0] report_bug+0x2be/0x4f0 [ 522.420226][ C0] ? __rate_control_send_low+0x5df/0x820 [ 522.426120][ C0] ? __rate_control_send_low+0x5df/0x820 [ 522.431762][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 522.437404][ C0] handle_bug+0x84/0x160 [ 522.441933][ C0] exc_invalid_op+0x1a/0x50 [ 522.446824][ C0] asm_exc_invalid_op+0x1a/0x20 [ 522.451795][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 522.458135][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 85 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 e2 f0 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 522.478095][ C0] RSP: 0000:ffffc90000007538 EFLAGS: 00010246 [ 522.484201][ C0] RAX: 4e51f7b46c798f00 RBX: 000000000000000c RCX: ffff888052ca1e00 [ 522.492226][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 522.500536][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 522.508820][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff888075b798e8 [ 522.516813][ C0] R13: 0000000000000000 R14: ffff8880645f0e40 R15: ffff8880645f30d8 [ 522.524944][ C0] ? __rate_control_send_low+0x5de/0x820 [ 522.530599][ C0] rate_control_send_low+0x194/0x7a0 [ 522.535888][ C0] rate_control_get_rate+0x20b/0x5d0 [ 522.541543][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 522.547561][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 522.553904][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 522.559301][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 522.565027][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 522.570730][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 522.577621][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 522.583305][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 522.589003][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 522.594639][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 522.600295][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 522.605853][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 522.611509][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 522.617687][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 522.623346][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 522.630676][ C0] __iterate_interfaces+0x2a8/0x590 [ 522.636026][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 522.642143][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 522.649466][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 522.655674][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 522.662883][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 522.668119][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 522.674211][ C0] __hrtimer_run_queues+0x529/0xc60 [ 522.679446][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 522.685197][ C0] ? read_tsc+0x9/0x20 [ 522.689396][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 522.695397][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 522.700790][ C0] handle_softirqs+0x283/0x870 [ 522.705580][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 522.710538][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 522.715867][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 522.721403][ C0] __irq_exit_rcu+0xca/0x1f0 [ 522.726114][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 522.731884][ C0] irq_exit_rcu+0x9/0x30 [ 522.736479][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 522.742164][ C0] [ 522.745116][ C0] [ 522.748096][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.754530][ C0] RIP: 0010:lock_is_held_type+0x137/0x190 [ 522.760523][ C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 f9 93 26 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 522.780874][ C0] RSP: 0000:ffffc90014cf7908 EFLAGS: 00000206 [ 522.787153][ C0] RAX: 4e51f7b46c798f00 RBX: 0000000000000000 RCX: 4e51f7b46c798f00 [ 522.795665][ C0] RDX: ffff888052ca1e00 RSI: ffffffff8dba7ff7 RDI: ffffffff8be33880 [ 522.803844][ C0] RBP: 00000000ffffffff R08: ffffea000068ca37 R09: 1ffffd40000d1946 [ 522.811944][ C0] R10: dffffc0000000000 R11: fffff940000d1947 R12: 0000000000000246 [ 522.819916][ C0] R13: ffff888052ca1e00 R14: ffff88807e622188 R15: 0000000000000005 [ 522.827903][ C0] xas_next_entry+0x1de/0x3d0 [ 522.832684][ C0] next_uptodate_folio+0x32/0x5d0 [ 522.837814][ C0] ? folio_unlock+0x101/0x160 [ 522.842672][ C0] filemap_map_pages+0x102b/0x1740 [ 522.848237][ C0] ? filemap_map_pages+0x150/0x1740 [ 522.853679][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 522.859257][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 522.864668][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 522.870000][ C0] __handle_mm_fault+0x34a9/0x5440 [ 522.875211][ C0] ? __lock_acquire+0xab9/0xd20 [ 522.880108][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 522.885581][ C0] ? lock_vma_under_rcu+0xdf/0x3d0 [ 522.890716][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 522.896289][ C0] handle_mm_fault+0x40a/0x8e0 [ 522.901203][ C0] do_user_addr_fault+0xa81/0x1390 [ 522.906452][ C0] ? rcu_is_watching+0x15/0xb0 [ 522.911263][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 522.916762][ C0] exc_page_fault+0x76/0xf0 [ 522.921352][ C0] asm_exc_page_fault+0x26/0x30 [ 522.926210][ C0] RIP: 0033:0x7fc32133a1c7 [ 522.930801][ C0] Code: 24 64 00 00 00 00 45 31 ff 83 e8 20 c7 44 24 20 00 00 00 00 45 31 f6 45 31 db 48 98 c7 44 24 10 00 00 00 00 41 ba ff ff ff ff <0f> b6 04 01 48 8d 0d 4e df 25 00 c7 44 24 60 00 00 00 00 c7 44 24 [ 522.951385][ C0] RSP: 002b:00007ffd085d4600 EFLAGS: 00010246 [ 522.957643][ C0] RAX: 000000000000004c RBX: 00007ffd085d4b60 RCX: 00007fc32143a740 [ 522.966262][ C0] RDX: 0000000000000000 RSI: 00007fc3214135a2 RDI: 00007ffd085d4e50 [ 522.974873][ C0] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000000 [ 522.983226][ C0] R10: 00000000ffffffff R11: 0000000000000000 R12: 000000000000006c [ 522.991387][ C0] R13: 00007ffd085d4ce0 R14: 0000000000000000 R15: 0000000000000000 [ 523.000073][ C0] [ 523.003710][ C0] Kernel Offset: disabled [ 523.008161][ C0] Rebooting in 86400 seconds..