last executing test programs: 2.547539255s ago: executing program 1 (id=2201): bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900010073797a300000000028000480080002400000000008000140000000050400040076657468315f746f5f62617461647600090003"], 0xa4}}, 0x0) 2.383156366s ago: executing program 1 (id=2204): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x4e25, 0x0, @mcast2}}}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000002c0)={r8, 0x3}, &(0x7f00000003c0)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000440)="24906c24412a422b49c5115e22ccc2e0438fbfdb47cb026469c0db6f0470f1eb47d69da7b3c1e7b60d0a7e9ac74ecdaf350980d71ed2cd18710befad24853861f0843ada98fc7f8bbc95164ed0479906f86ffd45ae414d0568f93b5cd1a7aaa3ad3253016092ba5da72250f1f8bb24eaa0824de65a077b158be45bf918f0091853ff4def5f2e1281165b515edfeb707c9db55ed3bec60fd635444c3c4df1c6fe0a6ff44269be7bd73d4224a34131d03fd14c2faa5866717d3ffd9b1a60eee9d5fb7d0956", &(0x7f00000005c0)=""/217, &(0x7f00000001c0)="b9808d6c07f83cc75546648996dcaa6e71ed1ef503cfec0e60b47fc2518af58e575c00bb7c1c2d3dce34006cf8be775cdcc8676a7a7947584cd6d1f2997d416d241c59b05aae8d4b729ace1763dd0f73f9b96036f6fca1d59d2808e6dc94fd444d99092969ee080e29", &(0x7f00000006c0)="6ff48579c5c912afa68ebac112290462f8101c05341f2adea5d785d8a202f198a25bc394b1f49693a9f82a1fd7056b26397f750563577b151264d83dc0259dc442441318bc26a9dcc4bf8dad114d04f0aaf4a93dbaaf9c7f2cfabe8741bd46103bee605ec66fc115a39480fd5c1be3b5fc598f0d2a8fba5c68142fdc85144711ea943a2487bdabe00886d799ebe851ea0f6c2300beb2ed00aed953482f2e7676a47f99ad13e8f3711fa528c4c009010c26704a6a4f74900e210be41386e76d263624adfd84347d70ad78edf2a45907873571e0a7", 0x7, r2, 0x4}, 0x38) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.094562571s ago: executing program 1 (id=2210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000b80)="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", 0x180, 0x8001, 0x0, 0x0) recvmsg(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x2, 0x3, 0xb}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="10e5ffffff00"], 0x10}}], 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1}}], 0x2, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg1\x00', 0x4) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/246, &(0x7f00000002c0)=0xf6) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x0) 1.8783675s ago: executing program 1 (id=2215): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8992, &(0x7f0000000580)={'ip6tnl0\x00', 0x1}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9fff", 0x5f}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)=r2}, 0x20) poll(&(0x7f0000000040), 0x55, 0x0) 1.501633312s ago: executing program 3 (id=2222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00000001c0)=0x10, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x4}, 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0xffffffe) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000001140)={0x4bc, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7}}}}, [@NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x1, 0x4, 0x5, 0x6, 0x5, 0x917f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x967983e9a89e8be8, 0x16, 0x12, 0x30, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff01, 0x721, 0x3, 0xd, 0x0, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28, 0x7ff, 0x800, 0x3, 0xae, 0x2, 0x9, 0xfffa]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x4, 0x16, 0x6c, 0x1, 0x36]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x6c, 0x60, 0x5, 0x18, 0x49, 0x60, 0x2, 0x12, 0x3f, 0x4, 0x0, 0x27, 0x36]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0xad33, 0x8001, 0x7, 0x3, 0x8, 0x3]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x7}, {0x3, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x3}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x5}, {0x1, 0x9}, {0x7, 0x9}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x6, 0x5}, {0x3, 0x8}, {0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x5}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x7}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x4}, {0x7}, {0x6, 0xa}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {0x5, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x7, 0x5}, {0x2, 0x9}, {0x3}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x2c, 0xc, 0x30, 0x6c, 0xc, 0x24, 0x16, 0x9, 0x4, 0x1, 0x1, 0x6, 0x1b, 0x1, 0x48, 0x48, 0x9, 0x48, 0x1b, 0x30, 0x5, 0x5, 0x2, 0xb, 0x48, 0x18, 0x6c, 0x30, 0xc, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x4, 0xc, 0x9, 0x0, 0xc, 0x36, 0x60, 0x60, 0x3, 0x6c, 0x24, 0x12, 0x18, 0x12, 0x47, 0x24, 0x48, 0x9, 0x5, 0x30, 0x5, 0xe, 0x3, 0x3, 0x60, 0x1, 0x36, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x48, 0x0, 0x100, 0x8, 0x800, 0x1, 0x9, 0x6]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0xa}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x7}, {0x4}, {0x4, 0xa}, {0x3, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x2, 0x8}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x248, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x16, 0x9, 0x6, 0x48, 0x3, 0x36, 0x5, 0x16, 0x41, 0x16, 0x3, 0x18, 0x6c, 0x3, 0x24, 0x5, 0x12, 0x3, 0x60, 0x0, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x48, 0x5, 0x16, 0x9, 0x30, 0x6, 0x18, 0x60, 0x60, 0x48, 0x4, 0x6, 0x6c, 0xb, 0xc, 0x30, 0x5, 0x6c, 0x5, 0x12, 0x30, 0x0, 0xc, 0x2, 0x5, 0x12, 0x60, 0x6]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xff89, 0x6, 0xefb, 0x7, 0x3, 0x9, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x4ec3, 0x0, 0x5, 0x8000, 0x5, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xc, 0x743, 0x3, 0x2, 0x80, 0xe2, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x60, 0x24, 0x43, 0x18, 0x36, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xdd95, 0x746, 0x2, 0x1, 0x3, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x6, 0x159, 0x1, 0xfffb, 0x100, 0x9, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x197, 0xfff2, 0x9, 0x0, 0x9, 0x4, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x26d7, 0x4, 0x8000, 0x123, 0x1, 0xea, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x3}, {}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0xa}, {0x2}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x5}, {0x3, 0x3}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0xa}, {0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0x7}, {0x5, 0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x5, 0x2}, {0x5, 0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0xa}, {0x2}, {0x6, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x5}, {}, {0x6, 0x6}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xef, 0x1, 0x3, 0x6, 0x9, 0x3, 0xf569]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x2}, {}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x0, 0x7}, {0x3, 0x2}, {0x5, 0x6}, {0x4, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0x6}, {0x3, 0x9}, {0x2, 0x4}, {0x7, 0x4}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0x7}, {0x2, 0x7}, {0x4, 0xa}, {0x2}, {0x4, 0x3}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x7}, {0x0, 0x5}, {0x3, 0x7}, {0x4, 0x9}, {0x2, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x1}, {0x2, 0x9}, {0x2, 0x3}, {0x4, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x8}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x5, 0x7}, {0x5}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x3, 0x3}, {0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x4, 0xa}, {0x3, 0x9}, {0x6, 0xa}]}]}]}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20040000}, 0x40801) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r5 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000007700)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x11f28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, &(0x7f00000001c0)) r7 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x2, 0xb}, {0xfff3, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x1000c844) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000000), 0x0, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xf) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100039042abd7000eaffffff000003e4", @ANYRES32=r10, @ANYBLOB="03000000c010060030001280080001007369740024000280080003000a01010006000d000700000008001400ff0f0000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.224662753s ago: executing program 4 (id=2227): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80000) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="ffe300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x19) 1.206334259s ago: executing program 3 (id=2228): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x3c}}, 0x840) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x9c, 0x30, 0x53b, 0x20000000, 0x0, {0x9}, [{0x88, 0x1, [@m_sample={0x84, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x56, 0x6, "ce1592e521c66941b47604cdaa7ecc80b01cdc0cf4bb0249d1e85a423644650e60fbf5c7ce56468001e12c716d8983868c583a4d4b170f911f7bde354d90dc6a721e94efa67f7f880dc23200000000000000"}, {0xc}, {0xc, 0x4, {0x3, 0x2}}}}]}]}, 0x9c}}, 0x40081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.178803208s ago: executing program 2 (id=2229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffc0}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x91}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0xc, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x200040c4) socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400), 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) r7 = socket(0x0, 0x0, 0xcc) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x40000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000680)={r6, 0x2}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000700)={r9, 0x100}, &(0x7f0000000740)=0x8) getsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f0000000780), &(0x7f00000007c0)=0x4) recvmmsg(r7, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000800)=""/63, 0x3f}], 0x1, &(0x7f0000000880)=""/104, 0x68}, 0x9}, {{&(0x7f0000000900)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000980)=""/253, 0xfd}, {&(0x7f0000000a80)=""/85, 0x55}, {&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000000c00)=""/118, 0x76}, {&(0x7f0000000c80)=""/84, 0x54}, {&(0x7f0000000d00)=""/62, 0x3e}, {&(0x7f0000000d40)=""/243, 0xf3}, {&(0x7f0000000e40)=""/219, 0xdb}, {&(0x7f0000000f40)=""/205, 0xcd}], 0x9, &(0x7f0000001100)=""/135, 0x87}, 0x5}, {{&(0x7f00000011c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/250, 0xfa}, {&(0x7f0000001340)=""/75, 0x4b}], 0x2, &(0x7f0000001400)=""/107, 0x6b}, 0x3}, {{&(0x7f0000001480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000001540)=""/4096, 0x1000}, 0xd7d}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002540)=""/104, 0x68}, {&(0x7f00000025c0)=""/105, 0x69}, {&(0x7f0000002640)=""/192, 0xc0}, {&(0x7f0000002700)=""/165, 0xa5}, {&(0x7f00000027c0)=""/17, 0x11}, {&(0x7f0000002800)=""/150, 0x96}, {&(0x7f00000028c0)=""/101, 0x65}, {&(0x7f0000002940)=""/172, 0xac}, {&(0x7f0000002a00)=""/161, 0xa1}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0xa, &(0x7f0000003b80)=""/109, 0x6d}, 0x9}], 0x5, 0x10060, &(0x7f0000003d40)={0x0, 0x989680}) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000003d80), &(0x7f0000003dc0)=0x4) r10 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r10, &(0x7f0000004600)=[{{&(0x7f0000003e00)=@hci, 0x80, &(0x7f0000004440)=[{&(0x7f0000003e80)=""/14, 0xe}, {&(0x7f0000003ec0)=""/75, 0x4b}, {&(0x7f0000003f40)=""/201, 0xc9}, {&(0x7f0000004040)=""/144, 0x90}, {&(0x7f0000004100)=""/51, 0x33}, {&(0x7f0000004140)=""/8, 0x8}, {&(0x7f0000004180)=""/86, 0x56}, {&(0x7f0000004200)=""/177, 0xb1}, {&(0x7f00000042c0)=""/178, 0xb2}, {&(0x7f0000004380)=""/149, 0x95}], 0xa, &(0x7f0000004500)=""/239, 0xef}, 0x2}], 0x1, 0x1, &(0x7f0000004640)={0x77359400}) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000004840)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004800)={&(0x7f00000046c0)={0x104, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x81}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8010}, 0x20040080) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000048c0), r7) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f00000049c0)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004980)={&(0x7f0000004900)={0x50, r11, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0xc5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000004ac0)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x24, 0x0, 0xc, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004b00)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004e80)={0x6, 0xb, &(0x7f0000004b40)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0xc, 0x4, 0x8, 0x8, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], &(0x7f0000004bc0)='GPL\x00', 0x3, 0xc2, &(0x7f0000004c00)=""/194, 0x40f00, 0x24, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000004dc0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000004e00), &(0x7f0000004e40)=[{0x3, 0x4, 0x5, 0x1}, {0x4, 0x3, 0x0, 0xc}, {0x1, 0x4, 0xf, 0x4}], 0x10, 0x7}, 0x94) 1.030904708s ago: executing program 4 (id=2230): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1.027816834s ago: executing program 0 (id=2231): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x18}}], 0x2, 0x20004086) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="800000001100040025bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0400000000800000080025000200000004001400140003006d61637365633000000000000000000008001c00", @ANYRES32=r3, @ANYBLOB="08001f00010100c05232ed808beb016576652f8b43497463498ac3075667253000000000000000080008257b6687430a9bc9686d72656730000000000000000000"], 0x80}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="800000001100040025bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0400000000800000080025000200000004001400140003006d61637365633000000000000000000008001c00", @ANYRES32=r3, @ANYBLOB="08001f00010100c05232ed808beb016576652f8b43497463498ac3075667253000000000000000080008257b6687430a9bc9686d72656730000000000000000000"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)) 1.026570018s ago: executing program 3 (id=2232): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 974.258093ms ago: executing program 1 (id=2233): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/76, 0x4c}], 0x9, &(0x7f0000000700)=""/26, 0x1a}, 0x7f}, {{&(0x7f0000000740)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000007c0)=""/255, 0xff}, {&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f0000000940)=""/111, 0x6f}, {&(0x7f00000009c0)=""/57, 0x39}, {&(0x7f0000000a00)=""/216, 0xd8}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)}], 0x8, &(0x7f0000001c00)=""/164, 0xa4}, 0x4}], 0x2, 0x10000, &(0x7f0000001d40)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000000)={'sit0\x00', 0x0}) 933.58604ms ago: executing program 3 (id=2234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085ad08ad90407c26d62bcc061fd092c9d400000003000000950000000000000065553d01698cc59ebbf3c254f0259d06d8fc569abcfc46f1a0afdfe84daf85fcbf3eabcfd18f801f661da717cbad1656"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 838.635421ms ago: executing program 2 (id=2235): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='dummy0\x00', 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000500)=""/173, &(0x7f00000002c0)=0xad) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="b003846833bdd790c2", 0x9}}, 0xee) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x1, {0x0, 0xff, 0x4}, 0x82}, 0x18) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) r9 = socket$inet6(0xa, 0x3, 0x3c) sendmsg(r9, 0x0, 0x44004) sendmsg$sock(r7, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="d70843d0d3a7d851fa", 0x9}], 0x1}, 0x4000040) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 823.140797ms ago: executing program 0 (id=2236): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x1, @any, 0xa, 0x2}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x6f9b, 0x81, 0xc, 0x1ff, 0x7fff, 0x9}) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0xeab, @any, 0x6, 0xbeb29bfb11cd0a50}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0xf4, r8, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xf4}}, 0x0) preadv(r4, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r9 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000b40)=""/232, 0x1a, 0xe8, 0x1}, 0x20) preadv(r9, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1, 0x2, 0x1) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001000)=ANY=[@ANYBLOB="900100001900010000000000000000001d0109003201108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b00000000000000000028002d802200be00c8ef6b8ced0c8ef9408a2c6c"], 0x190}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="69bfb3e2", @ANYRES16=r11, @ANYBLOB="00022cbd7000ffdbdf2504000000080006007f00000008000500010000000800040080c40000080006000eebe353540003800800010001000000060007004e200000080005000a010102060007004e21000014000600fe8000000000000000000000000000aa080003000000000014000600ff010000000000000000000000000001080004000500000008000500faffffff3c00038008000500e00000011400020067656e6576653000000000000000000014000200766c616e30000000000000000000000006000400ff7f0000"], 0xd4}, 0x1, 0x0, 0x0, 0x48000}, 0x4) 775.139067ms ago: executing program 4 (id=2237): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002380)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048080}, 0x24044895) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x11) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000001a40)={0x2, 'erspan0\x00'}, 0x18) 758.70761ms ago: executing program 0 (id=2238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000055000107030000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00f32803", @ANYRES32=0x0, @ANYBLOB="000302000000000000000000000000000000000100000000"], 0x38}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) sendmmsg$inet6(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)="1201cd4b4d97a07d942d174acebbf947c623b0ee14e9f52e9413c1662e8c39aead7742c039358af576453d9b70b53bae04ec2f4411d58ecc501e3a15e1021e143b6849d543a57cebd905815915522ba289155db8a277ce807aa740", 0x5b}, {&(0x7f0000000080)="c0ab9db1d47e73fa7ce2adbba41e", 0xe}, {&(0x7f00000000c0)="57ad87dd882638c593ff06e77b81bda69f8b1332d59803e17a24e6f7494f4e869f10c331ae4a936b24f1c70dae35f87cb8f7c86b7307b720cb2851aa5c091b2ad221a5461e2619a51feca0eca1c2e3995ea88ce0475d7789b447b33acc3594680e4d94c992e24308c43c9a", 0x6b}, {&(0x7f0000000140)="714f96e6b5428f2794fb02f0c37fc1920122b714839fa56236e00e455b0aa67eb9479be7f5b6f04f2603b744d4a3337c2311238a6a9c60b38e9cc70f9ffc93cde7011c0246ff98df2e40a7db1858565870fc1034c4e5e8c9bc355fd4a15a1b039194c4f757ec575e85521fe02fe92cf83de389b99c796af1", 0x78}, {&(0x7f00000001c0)="47f9cc87e9ae71bb39570c172b8674706c0ace1d246d34ded5f63ad71889d1d981788a704f2458f7e78db016588df93b02ef560d8d35aa7780c35582275b59378530a74f795707c7f4db33ab76342c9aab27a8dc61ffc6577576b7a35a72251e29ef3fbdad8eba3b5b73f1a1e85dd397b67ff4089cb4338c4212ebcf99e3afa34ed9d5195f86fe90bf329b2ecb768fd88f9404f406feff0ed112efb6f81f02fec239", 0xa2}, {&(0x7f0000000480)="970f3a3cb400c83cee0ac35e3f283d7c3f18f7228bf435806ef76741c88317ef302adb67ec8fb21f62b935a397de95ff890ab162402faa83d7c178de734224cf4d52def57db0a31940c3b1d9f24ca9bafd85d7affd0391d8041a97fe79b36666bf98f68b86e8c701913e33cf5e449b43e2f638dfea46200020b509832d70fcaa5d1ce25618b7730ca27e471fbe14fb268ad25de417d1c2ece65a4a5a3c053710ab4ae6e0ca999927a447323d068abca1a4f991dd5293d52345b4a642eb9432ea21ab640949f52a9ed655d2dacd0ede0818e568c339fb18daaef0d29e9efb75c5", 0xe0}, {&(0x7f0000000340)="9f74e883d27a5dd38a46232568e6250f54f1e0e5c2379b81a09c4339ed82b6f7d73c86f76d19ea2a4f6c9510580a6a30e083d327e1e10ef7634be0eb21159dc08403d352ad09223e1a7c95b9ab573f7870307f71f52826f5d0c94357074e1ff167a4d0573e7fdab13b5e34d425f2056661952313d9fa4f080de498ca6201986dcc66ed53b7dbbb5e6ca1ad308977e2236128e69b559d594ed3ccf2118245fff97fde83264e41c89021dc84c96ca66e50a73c008030410253e879d9178cba", 0xbe}, {&(0x7f0000000580)="d06f2f483f053a794469fd75f33503825a348a5ac5478e2c0a8e736b136033e9e96abe5b97b520b01009b89f1f00805a43200db36fb0d64b653e5d026110cdf5745053a5d4eaf2c2f4ac88ab6fbad582f5f610df2bb2e20431959c7d70ad19ea879c571aeed246a84879a439b4da2b6d8ee0e1699238131a8e2a439e1346c6a3d224bb84b479c47658537da054a2e0d370d26c355dad7118f095f43faae8feaa0b5f4ae88500b589d5be4955065df104565bc97641", 0xb5}, {&(0x7f0000000640)="429b156b342d421a625d5f02e3bdae473521140a7bf9bbf8c19c6ec1ae43fd27f0b99c60b453490ff0da06fd0fd3fce6b261f19a8df6613aae8806fe0fb9a70363005316be8564ce57df1ac1f4f2dc45342393151191fec7b861483462d704b42caacfbd0eeac0896b21361b99f916ec71a5d155614b3f1d300a6bdf11a0394e210cb316bc02569811b72db032b7d0945f6064e8d4bff5e5c6373d3a001e442fc72cbd33f6569a9f1b8f1db4265eefe98eed374076028b6b7d5cc09cce9414323d7b64c5e418e37562b97eb7bf6512e1286c335c847b0aff9feaff6a7487186371ce19c0f4134254bcf3", 0xea}, {&(0x7f0000000740)="3037b73b16feda64ba3cef8bf121818307a152cc0eaccc0bfd352d8a4ec8e2606ccc098052f41fd6640ec5ed893f4110da21fa2821422aa83c7dbfcc134a77e4ed5d79bda965f49f2dc3798e61d02e2404a4c629096840ba7f5d060a05c785d8c1f406383825461c25e6f9f16bb91410fdffc0ddff8595ae7f5e64b40b1924efc143a6615c34479f314be8700677d474e8cc", 0x92}], 0xa, &(0x7f00000008c0)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x29, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@ra={0x5, 0x2, 0x6000}, @enc_lim={0x4, 0x1, 0xf6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8a83}}, @flowinfo={{0x14}}, @rthdr={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x0, 0x0, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0xf}]}}}], 0xc0}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xeff}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000980)="d3d1997535684dd7936e887ea4c48ce20b0f53cab0eacb714860a6376bc40d6bb75b1a73865b34c4f108659c08e0e9a90ef4bbd5517a4da6c296cd8810ed913949a72555064e0fb2e80fdd9ed8cfd8d94a562fd98e7984725e6f9eac83b461d37c080375ac37a24da45a745e3f4957516d9dd2be4535e2f20a018e6978200122cdc867ece8335ffebde89ae9413bc3770486a771ce7e44d01db50db69479a6a755686550a52615260137dfe9db0173b352db628fcad46d028cfeb037672d279d2be15344eec4336882b09b29", 0xcc}, {&(0x7f00000002c0)="0ac283dc12a2fc9f4957ba96e0c71c7f401cc9f88b3e", 0x16}], 0x2}}, {{&(0x7f0000000ac0)={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000000b00)="99951038ce2e6fdf1569b2c66980fa2f895ec3568418097013ea22214c7fdaa368fced6530362d798aadce7d8c2377c02c54aec7672076836f9ca8cae913827bd338c3486666b6aa0fddcce13720dbd85c0d42640d8d4dca198d63c0f95bcd5dd02c5b88303f6a6cd3d90d022ab6dc74d07f2d89966d7abe82232dd397937d78f4b86e57241db23d0c2944344b9ab1b6c566a6ddc4f35c155e62d09d93a6288b4c37f887ad11d8346bbc9f7f6d2d2d295a56dd5e3b6d1e5cc6e2cd6c2dc862d9624fa8d4f3983a7d0f9c1c3841c11aa297eb502167af22e1e712f44b8dde376ca9f58180c760ac1561fe6873d8edc56bbaa0", 0xf2}, {&(0x7f0000000c00)="4a91e42fb09715c632d42445839886c4a3a7e3c8288c2e35096eca8a222ed5da7f9769b80a3d58b04d7cafbb83d6c5afcfbab35c88c05fd9a4d0cae98c38e380b4fc92ebb2433fea7a8b0c71a4743536fc8dc8f5eeeb9c5abd68e9c5e049bdc1efe18040472998b408b9500dc55a1af87b15cb6ede1a46cc08af970dbbf7ccd091e6a2d897e778ba85d050fb2bb3f17a9ed317c7620dd6e18b4e52ca6e061419bbea3b4ef9ba7d7df2", 0xa9}, {&(0x7f0000000cc0)="137558c5d4d0fbed2d3ba9e7ead50219c5bc6be61caf84b71f1e73fb7630a3d691f82b0295e17c9c0f3a1edaca9a211e97319adef426a4f5309d3e060928078bcb4b4fde504a0b2222d56b501486a83a2839529d7d6e62aadaa510c841521510e1b63753e1297abf30234b67a29563ef1af09b12c254de4af5502a59165db3b94f5697588a1bc0edfd21481a342a8e51b822201c6a659b7b7808017ba39d5c0851bd28ef573919906f9107608a20c436817cf8a47a50f0002da477ca", 0xbc}, {&(0x7f0000000d80)="7f", 0x1}, {&(0x7f0000000dc0)="ec31cff7e9f20e9219af3842afd11bdf3301ec29b591ff", 0x17}, {&(0x7f0000000e00)="ac1794fa202702fd0a704fa615749b3146fda4aaf31b12f02243b3702df7ea6407228b8db66d7bd066fa191adbf19e59cb1c14ff7783e5139eea8951ee3505b547a62e744eecaa5089825ec5214829d8eb0123031a8f987d5464a0c9e2d1b258438fda8cef56b8913233cd3a64e8d9b7bfee6d31a810433b66a86df2c06912789fd2e033afe76376b1d91f495a133ef56bac6bed3ff1a4723ef05d8c9d5014ca7bf7b397eee333", 0xa7}, {&(0x7f0000000ec0)="7a662e91eb74b9f49e0971be467a6c02d3e149af2651a0d384d338ea81c880c69ae4ebe0ee400e58fc19a36772803b69c92884573a35ae6548cf08409b4c5d18188d5cd98139b43a24aeabf396839a8802274abfdf955ff3c58696cbaeedb548b276f0", 0x63}, {&(0x7f0000000f40)="7196a4ccdea0dbff90f52393e600ee273eb7a118df2a17a0b917319e0c87b4524dcc03d54b785d5c50a64142b290fa57aad8e16e196ffefbde0dc8a398bb3eb44d556126401e7d90f3611a463ddccefa28e72cd7f4952d6b941cc7ada0c35d00aa0dfde1a00912a3cc802d88b8e1db99be7c01e38a6ee4133654d6a99ca854e87bb8989c9e960312fb69f83dbd568a6f99413e6419428785eedaff97ab771baeec998fe532ccd75af1359318a5349a147c45c0e959500f91858e25a94d99c3adf9dbfbbe25d667ef2b2aa13ff4b32140551f39b250f7489bfafb9aed74ecf9cf989e80386a1a02ef2aa80e69b8b6f0deec6d8a7a45047eb2448785236f64f30a24b0abe8a7b336138830c0ba776b7ca9f27ae761f4cdf715182165b49a468a0fec75381d1183a46790ba45d516d7716454cda21cec37aa2c543a984fd5cc3f329a59aafd4d4d71eb24949ec80a5e62ebcce150824e431c870142082fbad90e14f7cd911ff2068650ae478cf4a48a276423369ab44e1cd9789de69a087a563aa6b6d37b7966708183febfa6c4dea15d9b8fa92de68848e78c95592e1a86e72e7570bc4459f3b1bfdbe98ea4e2695dd05e3ec6257e3bea5e0a8dbe70f8007fec5a02e97768f99c8c763af381e5135f126280d90eaba5884c18c94b74fc5333a98dedc10c78a4f469868b5788373e88b774c64c356e1b9d684253a50e3dfaa32aaad28b77fc398c7eeab41769ced296b594dda983e3d2287cb6d92214ac9b65ac8b01ef938ac8664e337fe24aea0cd47b39743444405eaccf0280a948a1af9711269f797b4e1083ba45b55662e30eb5619e2560e041c9fb3a2733d70b8ea116f5d48170ad2e222943ad7d24d5ee30a9014ccc99e5704909a63f68e0e5997c59dd7531260be62dac792a1fdf284d9874aee57e974194e9656b6091c7633e7f1d56abf0f0d06e0506d9daedb09f6cf754e1575d9c9338ee211d53f7b03c44a5c65e7a6c3ca7c6874e8e2a8aba4628d9dc19abd604cd01d7deb0c3ca109c1e8d67478d1b1976ad42a89b4782c2893152dda242ce2c2526ba2b7a58618bef33af5937a30d5631673bf3f85978e7beb47295b8a6ef9375d04c481d0479d9c1b6679543af6fd967a8b93918a8e07b62095fbda602aa3aa2e3811002492e19cfbed605a414d7f56daf5b619cfaaa8f1200579f76fd932af4c0528e35ffcc3a79d14702bf864fd04987f4ff0fc358f49182fa1ebfe84e68d2a2fc1a3f5ccee3d97035bab8eec105b7f7f4ee7037faadb6fc71eebd3243d442f81dd7d9cd65b82ffd19d8a6493e29958fe15b5090f5308f6e9de208238c40731eb2228eda1cf6e059460569d824eebc853f7471cc9a84a5e1cfcd2b81b107f0f6e261c72b1125c2c07e1482cf7e517d33715962ae8271d47bbfeb03d73748fffef6293430a1b0dc0f18815313ff128518d8790763e6056d58917fb8756a33d46d5299fd8517e8dfbe335fefba9066fb6f6dd9be57f7fbbed41679f7c4897e840c310652e1f35577b53d094a94c3b7b346d8eb978ea1b7500e478e7a6b610c63894dc3a4efa0b9cc0da4824948890b262d4cd178e91636094c67fd969d2fd3b41caf71b5e9e66da02de7a6aac1d7e2f39a094a4ebe3e18cde545b1f42d23054615a3c3f0f1e0424e669482145dabbe22527cd81c8e24c79b3db27b76cca91f6a5e8b1c82836700be318492b689933a6f9548f5cf0cfff2e51003475135710a5e068ee5b4d9ad801e213aad435ca8bded1ea35b8be60b39725b352cf90167c0e66798ddbaf476e6af54981696f3c807b60505cf0322e1401dd464fad8b0b0934b743af5cdff14234a131ef0fa24b112f95cbce0c4883f5e10b99a4c0ac5bf5d68d34e1d9c896794194c3b5e0712ddff2bc7b5cc4ed4a37c86c992df4c18c0e9de6e725243f91a90ea00687e3288c192749f7d451d1dd75e6d3ea25c2839dbffdb73766ad5f2c3d7ed70e1abad0676977c6e56c81a9664497700ea8ea955fb7ac675ab0b937dd80ed7a4eae9c5cb2290b5a27640be9b80f343a6050a80a887a07f75e0b1d7e9c99d98e3407202c69df2a65f5d9ae0db77f983b94f447a05f266dc6bb087519eefd8631acabb35123a280152f4ff1daf87637c8f0ff8e08631ebb50bf67c29f09e3a378c33db75382afc4fc8c2e86db02405544d37a03923343b25692793a92019c19a63d9cdd2fd9e6c188ae8abc26783ba041ae14a72ab2ca209dcbd830cd5ad021f8fce1d1b89173d90d92db1cc1ffa3c0fd9383e353e5bddfe21f0e9fdef85808c9f4be6f34b2b4502b6e879b62afe87e87c7f20f49cbb96ffc7397aca3505b71da19d9217b99fd76e494d34c1cded81ac03ead96f3685fba3ad75a8aa0debdcfeb40934226c0cafc19e60439a3434281c1e32655427d8861902661b305e554c01e7284f5309b3aecdcc46599bee20d2e900e1d70f3199510f56d01384c64818266b60fa0552e7e600e5b5ff468fb6bcbda8cbbee85818803ea516e5f0fdf2d5c9101124558c45533d31e3130a4db73a78ea07aaa71f57945adae5456cd4b1e337d8dfee2acd5da3d16d5ef79fa813fed19eaa2b024407fd73a7709d856fe7a1db3ec725a71a6919c1ac38496a170f205d54bcc81e824afda429b6e7a54205aa91a7efcf32fd4512e303f1f40cde30a255f0992496a3df76b93cabb578cb4d489b076c7a45a6afb5f2bba7fe030a941670b8eda857d61608abbd66e9be296106cee862f1ec4d36b1c25879c47d4e8a72a69193564de356ea1d33f1a33cb4c51f29849d64ed16b94d259747833807bdc38aa34351882f098f2243371c4b5ec60d43cbab8edd85c815c0651eeaaae90fbf1911f9094f00ccae5bacf1497c1f9e8e60a892918a0be9cd22b5e5d48171f1357bcf1b91ccdc2cc5c81ee3bbfdd3eb501db85c09704412fef3b775c520e4ce349c871d59f31c33390e81f5af958e8076189c59e03d3d6d095067a78d4c0cd36430eb36a7abd8051e24b7286139085147ac91303200487f9ac667112498c94859f7c84829f267386b7b0a979a14259fcb052ebd6c213410f701a2e86e1cfc8551627d51df267148b892b03fb3d4b00cb3a63ed509326e13a7e2d86e3208b86671df07279730472b34d3b24277b403ce1712f17786a2782858a105aca7cd3b3cad9ba9a59201a9acb9145e1212b83ebeda6428365a0a280778d86f78f8e938e072102ea41bc563816cc3350dc9f895c50e7323451c765cb08d4cbcef8b7eb048baac920ee6b8639103d088d01633d6bdf21ca41f6e9b808bf9910f787fa91da6d450fe8f6b3b0a962154c4cbf98c68fcf49ffd8122abdb02341fc4803c3f4c4b3e1fe35b423956beabaf664d978b3fe29d75420f8b33f12b435008cb33aef142c931b33bd75158ddd975abac7ef949ac7f32d6b672f64f0b09d8d90236422823716ab059c0b12932839f71406dde049d618f2aa2f8f98f8b0a65cafaa9cbe3d06a076207f48c7c6cb8d099c013750e63f719cfd6599575590e38c4a74f55e5a62407ac150d2a81efe2944dbb25731b84d7b50823eb38b05e9e75bb5c151c4c552f9352d08d312130b2353f5936224b3faf5a721f9069fb1443c53df98b1783086b9f077993ffcc47cdc03e602c3f43cf713f4af7fbfc71b0b79a170c081ef199489660f5a89da40fad3dc82bc4de6f2ae9a0fb8c6df1041f568673af75e39b2815059906d02378895ee0100dfd5bdedaabe7b175e64e2224e161953bce097d745e6d90d3dc6860b6f46234c4c8079a4160828dbdab1c6456d190ea70cd62c77d49064f30aa8f29891a8bce8997c5c39f3c0ec39097fe1e3382ea46ff8d7ab168ce4cc6d24dd0ffadb0c18d2b34b21c2a7dfb3895073d0b16321fe2bd59ddbd685ac061f8c9c1cee1d419cf5ebc74f5b0ab52c51937423a79f0857dbbd721f86ce75406e7495c8169f04fb46f31c62900fb6e695b02fc45c8128ba37261ef88bc1fb6810a50d79430e8f608b4ad8ee69a1a5d178e1b0c2825e8d36de62e677cf16b1ae5dcf8a4a92bc415ac29c446dccbfd70ccbbffd1a41ce81db6c115fdbfe23b17441752d07271e38c943ca70ba8aa9b384bb57d2dd305d61ad09b8caea399873ef5982d49df25f46a31ab6fa5c76f91028cfe6e5df45a4803dab36de5ad6e915e12f9f8b5b286ab965ce4fc355fbb1d468772dc86915da8de0c0ac9e31002be1f6906c9eebccae2e838de8acc5c4fde105c51063efc43feb88cc1da25f5e65c30370fe7601ae48bddcc60b6a28a3c9b3176d3ee19ccd7baae1b06a1e498661a5cac86ca6175bd1862c6ea99dcbf59fc11f7ffe1d9e88bcebb495d3a149693085e755de87f69fd99ab4cb7e770537fd5ee8ddb9fc631a268ac9d570992340aa1c77325b89dfc0bba358e925949eb54a6743ed014a80348a08072c146119c0c5f50415aec210256512776ede4603c6e3dae37d4804de5b636208620532b131349a2b2dfb54a74a1c6157afcdbcf7d14d8d135f0959ff996bf0b763ac9603f0f06f2f8359b126da297112f9e91dd10970f8deb7feafdd5090c1f45d1c7985e74c1b64d58955410f03eb8ec0a66a7bdbce96f945054ec129e2b772407e70741bbbc6ee439ba66f5f1a5327d55c874675569e9eee32c4bb7ec75764e99c37d20d342ea62216218a3e6638838b2cc6583d475deed4384e995f7a85e6153644b458da6c2e444d0e186984d5ce67d10573f138f40f37d9af3959c1d7c69a595a4d8ad3f36e6579c6da706bb380b5accfe43e05c67e0aa68f216ec9037f066b452b5d2a9ad5c872d9512f49754efa3876f11977ac8ab435732ea15e2f59ad8dd6c1c5b25bfb987ac147ecdad3fd433ae39c52e716131ceebdd6f5d7533fba86457c0e92fbdad2d953ecabdac6c353b81a62c3d80d3adf806402f55bf4ed2449b50c04cae53a43d505d6eb896a15ceddc7042f9ad0c6ccb856959e70a0f5478b8094045fadf07c299331106085d2393acae77d3be496c5296aec03df480e6ea3b76e3f8b47be3e798dfd16382d15a4acf22393e1aca5d3ea7f4764bc470930196dc6842f4dfe5b73140b477e0e03cec20c19b239e0214ea83cd248551da1dc1a3053e9b44c750dadeb5d82179eadd1f481fe073dfb60ad571694561b4d63fad3e65655e3d09edaa0cddb02e4f56218a4373acb1e4a0ac3d601521e0afe1b22ab81e031af6ef2593c2c12f83c12fad814830ecf24ab39a584edeb7e7794a97ddc6e34466f5e486e96be7e82a9204c655f14fac675d6d8dc2d699866a3d1f2e7b4d1db28b8dc12d9a190896807d363cb7a4d8bffdfae628248b3513a5d91cc1b018ef848c9c60ec2115fa0a1ffc850c2f48361e18162fd09c6192cad1127f97ecf3ebbe7ec5b67e08650351584e231e77c84c0df2869ffacee46ee9de82c8a222e32d97faf56822f292b7e4b404b17af9a8549951b1892f39a344dfe0ef05e724f4617c5891833bcf5179bec9b7ce2fe6360a5aa88533aa7c2695a24e97c783a09d68f2235e41d76ded144fa9e9ed890b12c23ada3d2a4c7194a1d5588db0aa86d688015274c8e47d1fe7ad6e3c965fc282f732935ae96dc087585d4d002ad4422621de2b29300b37c6f5e4732085a564dc0ac4a0cdd68feedc81d47961836b7aa7a7225514baf5ba58e88d1ebe2dc3b6ea5fb42d53380585cc031d7976170e1923c134e5bcb36ed5390a02c1e4ad5070eadd1ef5edcd2ed7fe85577f53f72d7087091f4dd6c45d65db2b50773e48ba18921f293e5172ae85489559", 0x1000}], 0x8, &(0x7f0000001fc0)}}, {{&(0x7f0000002000)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x1c, &(0x7f0000004200)=[{&(0x7f0000002040)="582a3202e9999330b94bc86db54be73d129894d26b343ba1fed5d17e11b6b2499db96a5c1a030f23681a435cf8f8241ff21253c2d6a70dedbb807f61635f141a7dee1fe87a042eba22e27eb24819b539c99cca4871aba05489b2684a436dff485a5803c7c193775aaac44b756079d637dd4a1d610794bde233067ca00c56994a5f32e3c9426801a9bb809bcc8caf23d0830eaeee535906f5c1f856d079c93dff71587bd4ee79ab1d78ccc846fc86dea82399574a0fb37e98570cbcb3f0f17c0c7c8b16", 0xc3}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="68a63eddf29c93ef5a3389", 0xb}, {&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000004180)="e6cc2cf4697517846d2c6a341e91164cf115905b547c6e1edb658063ccbc766f5d7b9045cd6d974b91449fef3f00e76dbc19a2ad6108e7400a5dd40019812bac06", 0x41}], 0x5, &(0x7f0000004280)=[@hoplimit={{0x14, 0x29, 0x34, 0x838}}, @rthdr={{0x58, 0x29, 0x39, {0x5c, 0x8, 0x2, 0x47, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}], 0x70}}], 0x4, 0x40000) 639.464561ms ago: executing program 3 (id=2239): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_rx_ntuple={0x35, {0x11, @hdata="2fa666c7e8b8bb4dba254caf5cce3bb8011cad53246897d63c4a6ef778b7e64f2ef51a0085027962ea41f657de3691898fe4f3c9cc8eeaf788ba2e47f3fb941c5aee5fbf8f5355d7", @tcp_ip4_spec={@multicast1, @multicast1, 0x3, 0x4e21, 0x7}, 0x2, 0x2, 0x1, 0x7f, 0xfffffffffffffffe}}}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) listen(r1, 0x4) 578.28538ms ago: executing program 0 (id=2240): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a03000000000a01010000000000000000070000000900010073797a310000000044000000090a010400000000000000000700000008000a40000000030900020073797a30000000000900010073797a300000000008000540000000020800bcff422194a7f3910714f8034000000111140000001000010000"], 0x8c}}, 0x8010805) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x4}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="00000000516100001c0012800b67726574617000000c000280060002002020000014000300e984f1044d96ea5c0000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) getsockname$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, r4, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000006c0)=0x6, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000000200"/20, @ANYRES32=0x0, @ANYBLOB="1b8b0200000000001c0012800b000280060005004e1f0000"], 0x3c}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r10) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r10) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x400c008) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r12) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x50, r11, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x2400c000) 418.749988ms ago: executing program 4 (id=2241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x1c}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}]}, 0x44}}, 0x24004000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {0xc, 0xf}, {0xe, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008854}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r1}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 350.866284ms ago: executing program 2 (id=2242): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000100)="2f183b4351", 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2caf103d", @ANYRES16=r0, @ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 323.664183ms ago: executing program 2 (id=2243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000ef0200000000000000000000000000000000000000000000000000000000000000004e2300000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005d07350002000000"], 0xc4}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000026923c0adf4e8bea0000000000e5fffffffffd800000000000000300000000000000000a0000002000"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000d309000000000000ffffffff000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000fdffffffb56b6e000000000000000000"], 0xb8}}, 0x0) 318.157585ms ago: executing program 3 (id=2244): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r3, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e21, 0x8000, 0x4e24, 0x9, 0xfcf8d278083eddec, 0xa0}, {0x5, 0x1000, 0x5, 0x8001, 0x7, 0x3, 0x98, 0x2}, {0x9, 0x0, 0x9, 0x73}, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xf701a192b5f05b74, 0x3, 0x40, 0x9, 0x10001, 0x2}}, 0xe8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="4b003300509c0600080211000001080211000001fffffffffffff3ff08004841940000000000000064000e0201000406b40a010006000602090072060303030303037107254c79370f04d0f208005700060018"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r10, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x74, 0x2, 0x1, 0x3, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x9, 0x1, 0x3, 0x800]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) 246.114721ms ago: executing program 0 (id=2245): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2416, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r6, 0x1}, 0x14}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000500)={0x1, 0x0, 0x1000, 0xe, &(0x7f0000000380)="6cefa03510188807bb513db1c099", 0x91, 0x0, &(0x7f0000000440)="182f1e1b67c500185bbafe9c089ccc8800053c24548a52fa58535c8faf3e56a1f6ba46c8ea6b2a5505b50be3e344310dd211675e05999f25b49ddce0ae77af100ab21052279319371b18165cfd945a58d6678ea7bb9a4ebd8b2cc8023abbd6c8faf872936e3f98c9361c184b0ba998066f0cea9e96c648a22a156ccf3ec262df3f12a19c403f40b7a53e6bd5ac219ff7d9"}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x84, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8810}, 0x44800) 232.678347ms ago: executing program 4 (id=2246): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x1, @local}, 0x5, {0x2, 0x4e21, @local}, 'veth0_to_bridge\x00'}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="100000000000200000000000e4ffffff"], 0x10}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="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", @ANYBLOB="08008d000007000008003f0008cce0b6806f988c02", @ANYRES32], 0x4c}}, 0x0) 193.244068ms ago: executing program 2 (id=2247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x142, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0x1}, @typed={0x8, 0x45, 0x0, 0x0, @u32=0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4004, 0x6230}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x44}}, 0x0) 66.701812ms ago: executing program 4 (id=2248): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x2, 0x1b]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 66.332991ms ago: executing program 2 (id=2249): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000400)=0xfd, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x140, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 'ip6tnl0\x00', {0x535}}}}, {{@ipv6={@loopback, @empty, [0xff000000, 0x0, 0xffffff00, 0xffffff00], [0x0, 0xff, 0xff], 'pim6reg1\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x84, 0xa3, 0x6, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x4, 0xe5a, 0xffff, 'netbios-ns\x00', 'syz1\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4580, 0x0) 45.692695ms ago: executing program 0 (id=2250): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000003c0)={0x8, 'syz_tun\x00', {'caif0\x00'}, 0x2}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000003c0)={0x8, 'syz_tun\x00', {'caif0\x00'}, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x78}, {0x0, 0x0, 0x0, 0x3fa8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x2, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r3, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) (async) getsockopt$sock_buf(r3, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r5, 0x0, 0x0, 0x800) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0xd8, 0x9, 0x250d, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0x10, 0x2, 0x1000}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0xd8, 0x9, 0x250d, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0x10, 0x2, 0x1000}}) sendmsg$nl_route(r7, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@bridge_dellink={0x3c, 0x11, 0x2, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x42521, 0x31a00}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe23}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe23}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @loopback}, 0x8, 0x0, 0x0, 0x0, 0xfe00, &(0x7f0000000040)='syzkaller1\x00', 0xf, 0x7f0, 0x5}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000a00)={0x16c, r13, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfcb}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdce0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xeb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}, @TIPC_NLA_NODE_ID={0x7c, 0x3, "00fa9de782efd53eae93c3d25a8d6e4c135eab18cac456de5ec0ed57f440c904784e8a3fd9f10a86178d9ab1021fe0d8ce28b6d00929261e507e9489c251d486682b7deae4ae308a7bda3d00b47a5428af84c55111cc40cbeafc5898417d748f39a01ff750b722d3ef81dac2d1d558b0e178c1afb4704c6a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "2be3e3fdc809a67a9127e5e9bfa0351e7796f184888ac11cb121b07192cbe9266b40cfebd1e883586cf27fe474c70cbde00ebaa70854681c9508cdeac542670c9dfd9801a155df5e329fe77d78c78f"}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x84804) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000300)=0x1000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x2cc, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x103, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_TABLE_USERDATA={0xc4, 0x6, "2e5272edc813e86135f474873005bef08122c404ac55766897493a53a3eb522bfb33da0ebca440c71a7fec576141c30b9e208d98d5ff016d437682a9a21ca92e243717dc1e2bd6d6ed46d7bc43ddb43cda2321d205c45182ccb05b5fdb28d28e8f5d9ac7f54ea7f35c69d9604cf5a3fe2a7f9bffa47e9216cbf94f10c8ab5a248baf561bf2940d3e3258eb98d23181220d263d277f8a22b09c696380580537e06ac6244c1696938730c62b7b928ad10b73c4feefc96f29b5a15de15eacb18b29"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "92f8e9b9ace3e4c8e5f1183bc6fb4572165df1bc85efd7f09c0ef3f88e5df97ff05d94d1ff51d50b25710ea4b948566998cab9aea1cb62186243ca4306be220e424851a9e7084dcc0f397b8d23b2fe2956426be05cf7dcff88c9536cf687ecec5ee5e8a0af0c1a117f11524167cc14935993c9286bff55c11a855b25aeaade8abebff22f97b1494b9aea236b4da0ffefa88beb66e3613906d3fabf34facc0bfb7a175a186aee545195b5d13acdbfe57a1ba6d840fefda5211c128877a58311f4c150f06d3aabcf20ff1b1ce69a8cf5ea795ae9e63db7f9"}]}], {0x14}}, 0x2f4}, 0x1, 0x0, 0x0, 0x80}, 0x8805) 0s ago: executing program 1 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) sendmsg$nfc_llcp(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x52, 0x52, "2f9f3e82ec95371740bc6413c00c39e1f03f14ee6f04f124cd3c24a5a013a57b97ac15f56473b40b774f85fba56008fdb7091fde770b4e9503097a97f1113c", 0x18}, 0x60, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ac0848c6682c2324efb0726a91242aba09dcf39b3ca9714586157e6269d8b30997e406e71641933036cdf173c805b306", 0x30}, {&(0x7f0000000580)="0a7301b0d866f0a998aa9135d1397d30d0e1a6bbde4442fbaea80f088c6c7858be43fd280134e33abe3bad9e4562d544da0ee5a2a2fa88495ed620bc855c51867b57db177d1b6eed6f47d4ac42be0ea4a19e3cea099d20460d014c97a93ff0dbb321b862c3962934649d245202af2a2680c96babf766c5e04e2f9eae63d5251cee2a5db096abc83b16e2466f01c33d7349637ca52ac48be088deff611a674a4474ffc0ab23c3d5efa4d7e859c4a6a4f043710efb2636886c25cfe84d29a1890444d0d6392a58d71fef1f60b6eacc7836ece11e0588b8bf847c5c5a581f7c0b1ce794fafd0b0d15c622bdc18dce414bf9586e91ed7c", 0xf5}, {&(0x7f0000000780)="27e39a08f9d072bf580cfbca031deb276356a6194cfd8ee852604c87e13ac4f842eb359e780a56e946b43f0ed599e86d1fdc8056db06d9d918e90a7b42fc09099511bb795b6f18b9abca151d27606f95958ac527e1c413f2e2d91c5d31e5ee83e020a2c930a3cd86c3b39c45e66ae4475612cd32ebe113876f47f7bb945c99227f1bf75f6bbe3cacb2fa0c517b2a435f78de1a19d12c76847de2b711453f06261c6b8765ef74afd0e9af6b2a1eb28a7af7af4ca04085505e24fb89ea1635dba6943fe3d76475b4c6f1c0e76c51c9b56fd171fef2ecf0a8d1ed37ddb2cde3f868a8427a5d4207", 0xe6}, {&(0x7f0000000300)="1b815c87744ef79bbd18bf6bdf8844fdd8d40eec7a1206ebeff9e6336f54f074f01ba7e3e03eacf19f3220039e317bbd10151ba97a2939bd675f20b13d0ecbf670820ef94df605f6f3a8654b80", 0x4d}], 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="58000000000000001301000006000000073b60b8f97416c15a5001587b6c736dc5c5103f7600cfec000053f452e25e9a3ecb1fa2b91d66e389f4c3218e862e72557402add39d67696f7b8a286592f0661a5a9f0000000000"], 0x58, 0x24000004}, 0x8004) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) (async) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) sendmsg$nfc_llcp(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x52, 0x52, "2f9f3e82ec95371740bc6413c00c39e1f03f14ee6f04f124cd3c24a5a013a57b97ac15f56473b40b774f85fba56008fdb7091fde770b4e9503097a97f1113c", 0x18}, 0x60, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ac0848c6682c2324efb0726a91242aba09dcf39b3ca9714586157e6269d8b30997e406e71641933036cdf173c805b306", 0x30}, {&(0x7f0000000580)="0a7301b0d866f0a998aa9135d1397d30d0e1a6bbde4442fbaea80f088c6c7858be43fd280134e33abe3bad9e4562d544da0ee5a2a2fa88495ed620bc855c51867b57db177d1b6eed6f47d4ac42be0ea4a19e3cea099d20460d014c97a93ff0dbb321b862c3962934649d245202af2a2680c96babf766c5e04e2f9eae63d5251cee2a5db096abc83b16e2466f01c33d7349637ca52ac48be088deff611a674a4474ffc0ab23c3d5efa4d7e859c4a6a4f043710efb2636886c25cfe84d29a1890444d0d6392a58d71fef1f60b6eacc7836ece11e0588b8bf847c5c5a581f7c0b1ce794fafd0b0d15c622bdc18dce414bf9586e91ed7c", 0xf5}, {&(0x7f0000000780)="27e39a08f9d072bf580cfbca031deb276356a6194cfd8ee852604c87e13ac4f842eb359e780a56e946b43f0ed599e86d1fdc8056db06d9d918e90a7b42fc09099511bb795b6f18b9abca151d27606f95958ac527e1c413f2e2d91c5d31e5ee83e020a2c930a3cd86c3b39c45e66ae4475612cd32ebe113876f47f7bb945c99227f1bf75f6bbe3cacb2fa0c517b2a435f78de1a19d12c76847de2b711453f06261c6b8765ef74afd0e9af6b2a1eb28a7af7af4ca04085505e24fb89ea1635dba6943fe3d76475b4c6f1c0e76c51c9b56fd171fef2ecf0a8d1ed37ddb2cde3f868a8427a5d4207", 0xe6}, {&(0x7f0000000300)="1b815c87744ef79bbd18bf6bdf8844fdd8d40eec7a1206ebeff9e6336f54f074f01ba7e3e03eacf19f3220039e317bbd10151ba97a2939bd675f20b13d0ecbf670820ef94df605f6f3a8654b80", 0x4d}], 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="58000000000000001301000006000000073b60b8f97416c15a5001587b6c736dc5c5103f7600cfec000053f452e25e9a3ecb1fa2b91d66e389f4c3218e862e72557402add39d67696f7b8a286592f0661a5a9f0000000000"], 0x58, 0x24000004}, 0x8004) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (async) kernel console output (not intermixed with test programs): ed blocking state [ 74.662114][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.669792][ T5864] bridge_slave_1: entered allmulticast mode [ 74.676707][ T5864] bridge_slave_1: entered promiscuous mode [ 74.744935][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.752474][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.760159][ T5882] bridge_slave_0: entered allmulticast mode [ 74.767083][ T5882] bridge_slave_0: entered promiscuous mode [ 74.812568][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.822180][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.829814][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.837054][ T5882] bridge_slave_1: entered allmulticast mode [ 74.844346][ T5882] bridge_slave_1: entered promiscuous mode [ 74.851095][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.858274][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.865790][ T5865] bridge_slave_0: entered allmulticast mode [ 74.873088][ T5865] bridge_slave_0: entered promiscuous mode [ 74.897710][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.904802][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.930867][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.944888][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.980888][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.988179][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.995738][ T5865] bridge_slave_1: entered allmulticast mode [ 75.002791][ T5865] bridge_slave_1: entered promiscuous mode [ 75.027513][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.034837][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.061700][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.116756][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.124019][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.131522][ T5876] bridge_slave_0: entered allmulticast mode [ 75.138705][ T5876] bridge_slave_0: entered promiscuous mode [ 75.156342][ T5864] team0: Port device team_slave_0 added [ 75.178737][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.203206][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.210442][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.217576][ T5876] bridge_slave_1: entered allmulticast mode [ 75.226063][ T5876] bridge_slave_1: entered promiscuous mode [ 75.234723][ T5864] team0: Port device team_slave_1 added [ 75.255910][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.267805][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.323963][ T5866] hsr_slave_0: entered promiscuous mode [ 75.332287][ T5866] hsr_slave_1: entered promiscuous mode [ 75.352408][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.381291][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.390904][ T5881] Bluetooth: hci1: command tx timeout [ 75.394093][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.399071][ T5881] Bluetooth: hci3: command tx timeout [ 75.421858][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.429204][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.455232][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.469009][ T5875] Bluetooth: hci0: command tx timeout [ 75.474766][ T5875] Bluetooth: hci2: command tx timeout [ 75.480639][ T5881] Bluetooth: hci4: command tx timeout [ 75.526941][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.533997][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.560485][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.573701][ T5882] team0: Port device team_slave_0 added [ 75.582348][ T5865] team0: Port device team_slave_0 added [ 75.590673][ T5865] team0: Port device team_slave_1 added [ 75.617646][ T5876] team0: Port device team_slave_0 added [ 75.635177][ T5882] team0: Port device team_slave_1 added [ 75.677299][ T5876] team0: Port device team_slave_1 added [ 75.726790][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.733990][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.760428][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.773612][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.780803][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.807253][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.864167][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.871414][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.898488][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.923275][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.930557][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.957628][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.970867][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.977820][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.003820][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.022222][ T5864] hsr_slave_0: entered promiscuous mode [ 76.029430][ T5864] hsr_slave_1: entered promiscuous mode [ 76.035639][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 76.041695][ T5864] Cannot create hsr debugfs directory [ 76.048015][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.055278][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.081819][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.215808][ T5865] hsr_slave_0: entered promiscuous mode [ 76.222667][ T5865] hsr_slave_1: entered promiscuous mode [ 76.229185][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 76.234940][ T5865] Cannot create hsr debugfs directory [ 76.263200][ T5882] hsr_slave_0: entered promiscuous mode [ 76.269537][ T5882] hsr_slave_1: entered promiscuous mode [ 76.275530][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 76.281347][ T5882] Cannot create hsr debugfs directory [ 76.339617][ T5876] hsr_slave_0: entered promiscuous mode [ 76.346750][ T5876] hsr_slave_1: entered promiscuous mode [ 76.353104][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 76.358944][ T5876] Cannot create hsr debugfs directory [ 76.751199][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.765289][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.805302][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.856281][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.924397][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.937386][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.948152][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.961671][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.048046][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.063478][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.074057][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.087503][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.197299][ T5882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.218186][ T5882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.241047][ T5882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.255119][ T5882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.358018][ T5876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.374175][ T5876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.391256][ T5876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.405262][ T5876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.465463][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.472765][ T5881] Bluetooth: hci3: command tx timeout [ 77.472774][ T5875] Bluetooth: hci1: command tx timeout [ 77.485890][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.549149][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.549527][ T5881] Bluetooth: hci2: command tx timeout [ 77.556806][ T5885] Bluetooth: hci4: command tx timeout [ 77.569444][ T5875] Bluetooth: hci0: command tx timeout [ 77.620833][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.628598][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.643813][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.652936][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.668232][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.675466][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.711798][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.718959][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.750457][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.762040][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.769236][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.815971][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.823160][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.854089][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.887709][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.907856][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.915065][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.950110][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.984541][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.000782][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.008056][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.047242][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.054752][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.068948][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.076105][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.136970][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.144176][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.340860][ T5882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.419135][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.453834][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.606365][ T5864] veth0_vlan: entered promiscuous mode [ 78.709083][ T5864] veth1_vlan: entered promiscuous mode [ 78.761730][ T5866] veth0_vlan: entered promiscuous mode [ 78.824173][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.858800][ T5866] veth1_vlan: entered promiscuous mode [ 78.887658][ T5864] veth0_macvtap: entered promiscuous mode [ 78.930315][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.950665][ T5864] veth1_macvtap: entered promiscuous mode [ 78.991267][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.038049][ T5865] veth0_vlan: entered promiscuous mode [ 79.085908][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.108195][ T5866] veth0_macvtap: entered promiscuous mode [ 79.117297][ T5865] veth1_vlan: entered promiscuous mode [ 79.131697][ T5866] veth1_macvtap: entered promiscuous mode [ 79.166607][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.192711][ T5882] veth0_vlan: entered promiscuous mode [ 79.208962][ T2962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.240985][ T2962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.253789][ T2962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.278015][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.292406][ T2962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.305408][ T5882] veth1_vlan: entered promiscuous mode [ 79.323542][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.382993][ T3013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.400769][ T3013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.411639][ T5865] veth0_macvtap: entered promiscuous mode [ 79.432444][ T3013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.462785][ T5865] veth1_macvtap: entered promiscuous mode [ 79.477091][ T3013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.550021][ T5885] Bluetooth: hci1: command tx timeout [ 79.555565][ T5875] Bluetooth: hci3: command tx timeout [ 79.586680][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.596694][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.623659][ T5882] veth0_macvtap: entered promiscuous mode [ 79.631957][ T5875] Bluetooth: hci0: command tx timeout [ 79.637022][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.637421][ T5875] Bluetooth: hci4: command tx timeout [ 79.646289][ T5885] Bluetooth: hci2: command tx timeout [ 79.660757][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.704379][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.734409][ T5882] veth1_macvtap: entered promiscuous mode [ 79.746470][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.786449][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.789316][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.796783][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.811318][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.821365][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.832096][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.851980][ T5876] veth0_vlan: entered promiscuous mode [ 79.872011][ T3013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.885344][ T3013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.917411][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.927631][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.981752][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.012890][ T5876] veth1_vlan: entered promiscuous mode [ 80.085562][ T3013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.105922][ T5982] Bluetooth: MGMT ver 1.23 [ 80.142663][ T3013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.176453][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 80.187771][ T3013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.199323][ T3013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.231967][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.257165][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.337614][ T5987] Zero length message leads to an empty skb [ 80.410440][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.413546][ T5876] veth0_macvtap: entered promiscuous mode [ 80.418280][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.495607][ T5876] veth1_macvtap: entered promiscuous mode [ 80.524206][ T5991] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.612577][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.651056][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.662059][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.683482][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 80.706985][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 80.731827][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.795594][ T5991] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 80.824762][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.871653][ T2962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.897006][ T2962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.944570][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 80.954608][ T2962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.964039][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.979556][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.136832][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.178624][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.354394][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.394107][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.518484][ T6015] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 81.541547][ T6023] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17'. [ 81.554963][ T6021] erspan0: entered promiscuous mode [ 81.562541][ T6021] vlan2: entered promiscuous mode [ 81.626570][ T6015] syzkaller1: entered promiscuous mode [ 81.632948][ T5885] Bluetooth: hci3: command tx timeout [ 81.635833][ T6028] netlink: 'syz.2.18': attribute type 18 has an invalid length. [ 81.638859][ T5881] Bluetooth: hci1: command tx timeout [ 81.651606][ T6015] syzkaller1: entered allmulticast mode [ 81.718626][ T5885] Bluetooth: hci4: command tx timeout [ 81.718635][ T5881] Bluetooth: hci2: command tx timeout [ 81.718669][ T5881] Bluetooth: hci0: command tx timeout [ 81.988808][ T6038] Bluetooth: MGMT ver 1.23 [ 82.278193][ T6049] tipc: Enabling of bearer rejected, failed to enable media [ 82.449858][ T6057] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 82.506076][ T6057] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 82.555279][ T6065] netlink: 64 bytes leftover after parsing attributes in process `syz.2.26'. [ 82.776790][ T6067] netlink: 516 bytes leftover after parsing attributes in process `syz.1.29'. [ 82.992975][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 83.012824][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.052166][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'. [ 83.092299][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'. [ 83.268655][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 83.331541][ T6098] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 83.363176][ T6098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.689578][ T6124] warning: `syz.0.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.885829][ T6133] trusted_key: syz.3.46 sent an empty control message without MSG_MORE. [ 84.211579][ T6154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.290506][ T6159] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 84.940133][ T6197] bridge_slave_1: left allmulticast mode [ 84.945819][ T6197] bridge_slave_1: left promiscuous mode [ 84.966683][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.025176][ T6198] netlink: 'syz.3.66': attribute type 2 has an invalid length. [ 85.063803][ T6197] bridge_slave_0: left allmulticast mode [ 85.074321][ T6197] bridge_slave_0: left promiscuous mode [ 85.083705][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.226176][ T6215] __nla_validate_parse: 11 callbacks suppressed [ 85.226194][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'. [ 85.456557][ T6225] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 85.482529][ T6225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.520590][ T6225] netlink: 'syz.3.73': attribute type 12 has an invalid length. [ 85.732581][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 85.877092][ T6244] IPv6: sit1: Disabled Multicast RS [ 85.900609][ T6244] sit1: entered allmulticast mode [ 86.007099][ T6249] netlink: 808 bytes leftover after parsing attributes in process `syz.3.78'. [ 86.202002][ T6260] netlink: 'syz.3.82': attribute type 21 has an invalid length. [ 86.214533][ T6260] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 86.831496][ T24] cfg80211: failed to load regulatory.db [ 87.010836][ T6295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.035402][ T6298] netlink: 'syz.3.91': attribute type 3 has an invalid length. [ 87.320579][ T6306] netlink: 'syz.3.95': attribute type 16 has an invalid length. [ 87.340402][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 87.453653][ T6306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.455398][ T6314] netlink: 300 bytes leftover after parsing attributes in process `syz.1.99'. [ 87.490934][ T6316] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 87.637302][ T6320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.101'. [ 87.685364][ T6324] netlink: 9 bytes leftover after parsing attributes in process `syz.4.102'. [ 87.807637][ T6324] gretap0: entered promiscuous mode [ 87.846807][ T6324] netlink: 36 bytes leftover after parsing attributes in process `syz.4.102'. [ 87.902472][ T5999] IPVS: starting estimator thread 0... [ 87.926286][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 88.023225][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 88.032404][ T6337] IPVS: using max 33 ests per chain, 79200 per kthread [ 88.145810][ T6349] netlink: 'syz.2.109': attribute type 5 has an invalid length. [ 88.539151][ T6375] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 88.619035][ T6374] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 88.626813][ T6374] netlink: 'syz.3.116': attribute type 4 has an invalid length. [ 89.091591][ T6407] netlink: 'syz.3.122': attribute type 3 has an invalid length. [ 89.215408][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.238673][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.445429][ T1166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.473184][ T3013] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.600953][ T3013] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.636822][ T6423] macvtap1: entered promiscuous mode [ 89.648578][ T6423] macvtap1: entered allmulticast mode [ 89.664903][ T6423] bond_slave_0: entered promiscuous mode [ 89.670821][ T6423] bond_slave_1: entered promiscuous mode [ 89.681416][ T6423] bond0: entered allmulticast mode [ 89.704149][ T6423] bond_slave_0: entered allmulticast mode [ 89.713830][ T6423] bond_slave_1: entered allmulticast mode [ 89.722370][ T6423] bond0: entered promiscuous mode [ 89.764352][ T6423] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 89.785180][ T6423] team0: Device macvtap1 failed to register rx_handler [ 89.807209][ T6423] bond0: left allmulticast mode [ 89.836082][ T6423] bond_slave_0: left allmulticast mode [ 89.848556][ T6423] bond_slave_1: left allmulticast mode [ 89.864438][ T6423] bond0: left promiscuous mode [ 89.871644][ T6423] bond_slave_0: left promiscuous mode [ 89.877122][ T6423] bond_slave_1: left promiscuous mode [ 89.949335][ T3013] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.313246][ T6456] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 90.631391][ T6479] netlink: 'syz.2.146': attribute type 10 has an invalid length. [ 90.649370][ T6487] __nla_validate_parse: 10 callbacks suppressed [ 90.649386][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 90.715068][ T6479] batman_adv: batadv0: Adding interface: team0 [ 90.742547][ T6479] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.789087][ T6479] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 90.941727][ T6504] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 90.963955][ T6504] !: renamed from dummy0 (while UP) [ 91.035337][ T6507] syzkaller0: entered promiscuous mode [ 91.042073][ T6507] syzkaller0: entered allmulticast mode [ 91.284725][ T6516] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.159'. [ 91.512551][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 91.723891][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 91.756961][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 91.795047][ T6544] vcan0: entered allmulticast mode [ 91.869412][ T6546] netlink: 40 bytes leftover after parsing attributes in process `syz.0.168'. [ 92.961917][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.187'. [ 93.142278][ T6623] netlink: 'syz.2.192': attribute type 2 has an invalid length. [ 93.156090][ T6623] netlink: 36 bytes leftover after parsing attributes in process `syz.2.192'. [ 93.340063][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 93.510751][ T6642] netlink: 'syz.3.199': attribute type 8 has an invalid length. [ 93.697880][ T6649] sctp: [Deprecated]: syz.3.200 (pid 6649) Use of int in max_burst socket option deprecated. [ 93.697880][ T6649] Use struct sctp_assoc_value instead [ 93.898041][ T6634] infiniband syz0: set active [ 93.903585][ T6634] infiniband syz0: added bond_slave_0 [ 93.922137][ T6652] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 93.949175][ T6652] netlink: 'syz.4.201': attribute type 2 has an invalid length. [ 94.074814][ T6634] RDS/IB: syz0: added [ 94.080941][ T6634] smc: adding ib device syz0 with port count 1 [ 94.087474][ T6634] smc: ib device syz0 port 1 has pnetid [ 94.394759][ T6669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.034878][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'. [ 95.137041][ T6698] gtp0: entered promiscuous mode [ 95.164084][ T6698] gtp0: entered allmulticast mode [ 95.325784][ T6705] syz.3.216 uses old SIOCAX25GETINFO [ 95.343713][ T6707] C: renamed from team_slave_0 (while UP) [ 95.390566][ T6707] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 95.428762][ T6707] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 95.656839][ T6712] geneve2: entered promiscuous mode [ 95.696304][ T6712] geneve2: entered allmulticast mode [ 95.722855][ T2962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 95.755001][ T2962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 95.795488][ T2962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 95.807830][ T2962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 96.332335][ T6744] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 96.596710][ T6756] netlink: 5036 bytes leftover after parsing attributes in process `syz.2.230'. [ 96.828151][ T6772] netlink: 'syz.4.235': attribute type 4 has an invalid length. [ 96.873883][ T6772] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 96.892799][ T6772] netlink: 224 bytes leftover after parsing attributes in process `syz.4.235'. [ 96.907506][ T6772] nbd: couldn't find device at index 1048576 [ 97.275618][ T6789] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 97.338742][ T6789] netlink: 'syz.0.240': attribute type 2 has an invalid length. [ 97.352437][ T6791] syzkaller0: entered promiscuous mode [ 97.359244][ T6789] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 97.368021][ T6791] syzkaller0: entered allmulticast mode [ 97.387081][ T6795] tipc: Started in network mode [ 97.393816][ T6795] tipc: Node identity , cluster identity 4711 [ 97.400592][ T6795] tipc: Failed to obtain node identity [ 97.406214][ T6795] tipc: Enabling of bearer rejected, failed to enable media [ 97.909446][ T6816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 97.926133][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 99.149998][ T6840] netlink: 80 bytes leftover after parsing attributes in process `syz.4.253'. [ 99.283738][ T6853] validate_nla: 1 callbacks suppressed [ 99.283754][ T6853] netlink: 'syz.1.257': attribute type 11 has an invalid length. [ 99.385052][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 99.450765][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 99.460697][ T6855] netlink: 80 bytes leftover after parsing attributes in process `syz.0.256'. [ 99.672600][ T1166] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.707119][ T1166] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.816146][ T3013] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.860662][ T3013] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.996854][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'. [ 100.031900][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'. [ 100.253552][ T6911] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 100.346516][ T6909] netlink: 'syz.1.269': attribute type 21 has an invalid length. [ 100.365664][ T6917] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 100.387368][ T6918] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 100.395581][ T6909] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.447016][ T6923] netlink: 'syz.2.273': attribute type 8 has an invalid length. [ 100.473965][ T6917] bond1: entered promiscuous mode [ 100.484790][ T6917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.947815][ T6949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 100.954540][ T6949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 101.324534][ T6969] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 101.334788][ T6969] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 101.496978][ T6967] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 101.505127][ T6974] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 101.510096][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.522097][ T6966] batman_adv: batadv0: Interface activated: team0 [ 101.540077][ T6966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.701061][ T6977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.753721][ T6977] __nla_validate_parse: 7 callbacks suppressed [ 101.753738][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 101.781608][ T6987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.806812][ T6977] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 101.834418][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.928051][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 102.153685][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 102.182379][ T7009] sock: sock_timestamping_bind_phc: sock not bind to device [ 102.240933][ T7006] veth0_macvtap: left promiscuous mode [ 102.400484][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.418555][ T7026] netlink: 'syz.3.306': attribute type 9 has an invalid length. [ 102.550979][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 102.550980][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 102.566384][ T7032] netlink: 56 bytes leftover after parsing attributes in process `syz.0.308'. [ 102.597487][ T7038] IPVS: persistence engine module ip_vs_pe_À not found [ 102.636938][ T7029] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 102.665631][ T7035] macvlan0: entered promiscuous mode [ 102.686587][ T7035] batadv_slave_0: entered promiscuous mode [ 123.615374][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 123.658543][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 123.983671][ T7082] netlink: 'syz.0.317': attribute type 23 has an invalid length. [ 124.336555][ T7107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.325'. [ 124.867923][ T7141] netlink: 'syz.3.335': attribute type 1 has an invalid length. [ 124.876254][ T7141] netlink: 224 bytes leftover after parsing attributes in process `syz.3.335'. [ 124.897155][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 124.935512][ T7140] tipc: Started in network mode [ 124.941658][ T7140] tipc: Node identity 1edee1faa1db, cluster identity 4711 [ 124.969312][ T7140] tipc: Enabled bearer , priority 0 [ 124.969887][ T7149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 124.985561][ T7140] syzkaller0: entered promiscuous mode [ 125.008010][ T7140] syzkaller0: entered allmulticast mode [ 125.110988][ T7140] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.156842][ T7140] veth1_to_hsr: mtu less than device minimum [ 125.190024][ T7138] tipc: Resetting bearer [ 125.220672][ T7138] tipc: Disabling bearer [ 125.675697][ T7190] syzkaller0: entered promiscuous mode [ 125.695533][ T7190] syzkaller0: entered allmulticast mode [ 125.718874][ T7187] tipc: Enabled bearer , priority 0 [ 125.758260][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 125.768068][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 125.847248][ T7187] tipc: Resetting bearer [ 125.957422][ T7187] tipc: Disabling bearer [ 126.014828][ T7202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.191402][ T7210] netlink: 'syz.4.358': attribute type 21 has an invalid length. [ 126.252111][ T7214] openvswitch: netlink: Tunnel attr 114 out of range max 16 [ 126.813787][ T7243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 126.843990][ T7243] tipc: Invalid UDP bearer configuration [ 126.844051][ T7243] tipc: Enabling of bearer rejected, failed to enable media [ 127.000720][ T7252] netlink: 'syz.1.374': attribute type 19 has an invalid length. [ 127.015369][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 127.066987][ T7252] netlink: 'syz.1.374': attribute type 19 has an invalid length. [ 127.097295][ T1166] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.124391][ T1166] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.242126][ T1166] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.276821][ T1166] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.479865][ T7284] tipc: Failed to remove unknown binding: 66,1,1/0:2371196613/2371196615 [ 127.521259][ T7284] tipc: Failed to remove unknown binding: 66,1,1/0:2371196613/2371196615 [ 128.831541][ T7364] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 128.879471][ T7364] __nla_validate_parse: 10 callbacks suppressed [ 128.879489][ T7364] netlink: 244 bytes leftover after parsing attributes in process `syz.3.407'. [ 129.241881][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 129.262863][ T7390] netlink: 'syz.0.414': attribute type 21 has an invalid length. [ 129.352763][ T7393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.416'. [ 129.392138][ T7388] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.550849][ T7401] syzkaller0: entered promiscuous mode [ 129.556379][ T7401] syzkaller0: entered allmulticast mode [ 129.624130][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'. [ 129.679317][ T7408] netlink: 'syz.3.419': attribute type 7 has an invalid length. [ 129.705699][ T7408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 129.749238][ T7415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.420'. [ 129.818213][ T7415] bridge2: entered promiscuous mode [ 129.888394][ T7415] bridge2: entered allmulticast mode [ 130.343312][ T7442] team_slave_0: mtu greater than device maximum [ 130.566347][ T7455] nbd: device at index 4 is going down [ 130.907482][ T7099] udevd[7099]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 131.223493][ T7487] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 131.255368][ T7487] netlink: 224 bytes leftover after parsing attributes in process `syz.4.444'. [ 131.314033][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 131.358527][ T7487] block nbd1: not configured, cannot reconfigure [ 131.388819][ T7496] netlink: 'syz.0.447': attribute type 21 has an invalid length. [ 131.796504][ T7515] netlink: 44 bytes leftover after parsing attributes in process `syz.4.453'. [ 131.882824][ T7517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.454'. [ 132.013800][ T7520] pim6reg1: entered promiscuous mode [ 132.044721][ T7520] pim6reg1: entered allmulticast mode [ 132.094138][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 132.113323][ T7527] netlink: 'syz.2.456': attribute type 30 has an invalid length. [ 132.145913][ T7527] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 132.174600][ T7527] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 132.892248][ T7558] syzkaller0: entered promiscuous mode [ 132.897766][ T7558] syzkaller0: entered allmulticast mode [ 132.924187][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.994337][ T7570] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 133.186248][ T7575] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 133.622833][ T7608] netlink: 'syz.0.483': attribute type 30 has an invalid length. [ 134.027824][ T7627] __nla_validate_parse: 8 callbacks suppressed [ 134.027842][ T7627] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.489'. [ 134.107020][ T7637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.207331][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 134.347216][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'. [ 134.572914][ T7661] lo: entered promiscuous mode [ 134.593447][ T7661] tunl0: entered promiscuous mode [ 134.610165][ T7661] gre0: entered promiscuous mode [ 134.638134][ T7661] gretap0: entered promiscuous mode [ 134.660111][ T7661] erspan0: entered promiscuous mode [ 134.693064][ T7669] netlink: 'syz.3.501': attribute type 10 has an invalid length. [ 134.700927][ T7661] ip_vti0: entered promiscuous mode [ 134.881523][ T7669] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.333725][ T7703] veth0: entered promiscuous mode [ 135.357450][ T7699] veth0: left promiscuous mode [ 135.373072][ T7707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.781525][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 135.888883][ T7737] Driver unsupported XDP return value 0 on prog (id 189) dev N/A, expect packet loss! [ 135.905429][ T7740] netlink: 'syz.2.523': attribute type 13 has an invalid length. [ 135.927902][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'. [ 136.058037][ T7740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.691473][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 136.741362][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 136.860074][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 137.015293][ T7791] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 137.087293][ T7801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.363835][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 137.451042][ T7814] gretap0: entered promiscuous mode [ 137.473640][ T7814] macvtap1: entered promiscuous mode [ 137.486490][ T7814] macvtap1: entered allmulticast mode [ 137.501235][ T7814] gretap0: entered allmulticast mode [ 137.825150][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 138.074302][ T7860] sctp: [Deprecated]: syz.0.555 (pid 7860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.074302][ T7860] Use struct sctp_sack_info instead [ 138.872978][ T7918] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 138.882442][ T7918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.895925][ T7911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.942673][ T7906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.956253][ T7916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.174789][ T7942] __nla_validate_parse: 9 callbacks suppressed [ 139.174807][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 139.541418][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 139.597834][ T7958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.583'. [ 139.642462][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 139.791478][ T7972] tipc: Enabling of bearer rejected, failed to enable media [ 140.250767][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 140.278668][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.400360][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.542672][ T8027] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 140.550613][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 140.594164][ T8029] pim6reg1: entered promiscuous mode [ 140.620914][ T8029] pim6reg1: entered allmulticast mode [ 140.710979][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.606'. [ 140.945058][ T8050] netlink: 72 bytes leftover after parsing attributes in process `syz.1.609'. [ 141.253505][ T8058] bond1: entered promiscuous mode [ 141.266916][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 141.269863][ T8058] bond1: entered allmulticast mode [ 141.289751][ T8058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.325357][ T8063] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 141.341927][ T8067] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 141.401810][ T8073] netlink: 10 bytes leftover after parsing attributes in process `syz.4.617'. [ 141.695119][ T8093] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.198000][ T8103] syzkaller0: entered promiscuous mode [ 142.226574][ T8103] syzkaller0: entered allmulticast mode [ 144.160516][ T8123] 8021q: VLANs not supported on sit0 [ 144.187099][ T8142] tipc: Enabled bearer , priority 0 [ 144.201433][ T8145] syzkaller0: entered promiscuous mode [ 144.210084][ T8145] syzkaller0: entered allmulticast mode [ 144.443475][ T8145] tipc: Resetting bearer [ 144.503067][ T8145] tipc: Disabling bearer [ 144.925009][ T8203] __nla_validate_parse: 6 callbacks suppressed [ 144.925028][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 145.055780][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 145.131870][ T8212] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 145.280699][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 145.431317][ T8233] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 145.450810][ T8233] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 145.547028][ T8238] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.566855][ T8233] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.752391][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 145.766722][ T8250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.035911][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 146.088940][ T8270] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 146.666982][ T8302] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 146.702946][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 146.716120][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 146.744245][ T8302] veth1_macvtap: left promiscuous mode [ 146.803440][ T2962] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.818154][ T2962] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.831665][ T2962] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.841630][ T2962] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.370853][ T8354] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 147.645781][ T8366] IPv6: Can't replace route, no match found [ 147.953037][ T8383] netlink: 'syz.4.694': attribute type 10 has an invalid length. [ 147.965817][ T8384] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 147.987710][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.025301][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.032697][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.070265][ T8383] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.106968][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 148.262190][ T8402] netlink: 'syz.4.698': attribute type 9 has an invalid length. [ 148.324306][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 148.357062][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 148.484655][ T8417] tipc: Started in network mode [ 148.489797][ T8417] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 148.500277][ T8417] tipc: Enabling of bearer rejected, failed to enable media [ 148.616920][ T8429] gretap0: left promiscuous mode [ 148.664823][ T8429] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 148.677969][ T8436] netlink: 'syz.4.706': attribute type 1 has an invalid length. [ 148.705198][ T8429] bond1: left promiscuous mode [ 148.706670][ T8437] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.711470][ T8436] nbd: couldn't find device at index 1048576 [ 148.731819][ T8429] bridge2: left promiscuous mode [ 149.119403][ T8464] tunl0: entered promiscuous mode [ 149.136738][ T8464] netlink: 'syz.4.717': attribute type 3 has an invalid length. [ 149.388974][ T8488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.734368][ T8519] openvswitch: netlink: IP tunnel dst address not specified [ 149.747548][ T8519] wg1 speed is unknown, defaulting to 1000 [ 149.755221][ T8519] wg1 speed is unknown, defaulting to 1000 [ 149.795953][ T8519] wg1 speed is unknown, defaulting to 1000 [ 149.815227][ T8519] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.845761][ T8524] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 149.891754][ T8519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.903089][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.924996][ T8524] bridge_slave_1: left allmulticast mode [ 149.935856][ T8524] bridge_slave_1: left promiscuous mode [ 149.945169][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.988874][ T8524] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 150.020967][ T8550] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 150.075366][ T8534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.086442][ T8519] wg1 speed is unknown, defaulting to 1000 [ 150.311414][ T8576] __nla_validate_parse: 4 callbacks suppressed [ 150.311431][ T8576] netlink: 108 bytes leftover after parsing attributes in process `syz.3.739'. [ 150.328988][ T8576] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 150.401494][ T8534] bond2 (unregistering): Released all slaves [ 150.436478][ T8519] wg1 speed is unknown, defaulting to 1000 [ 150.460587][ T8519] wg1 speed is unknown, defaulting to 1000 [ 150.478154][ T8519] wg1 speed is unknown, defaulting to 1000 [ 150.488807][ T8580] netlink: 52 bytes leftover after parsing attributes in process `syz.0.740'. [ 150.545223][ T8519] wg1 speed is unknown, defaulting to 1000 [ 150.551877][ T8582] netlink: 44 bytes leftover after parsing attributes in process `syz.4.742'. [ 150.583893][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.740'. [ 150.642805][ T8584] team0: Port device bridge2 added [ 150.915275][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 151.314026][ T8636] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 151.502421][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.763'. [ 151.519037][ T8657] netlink: 44 bytes leftover after parsing attributes in process `syz.3.762'. [ 151.568205][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 151.677187][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 151.754827][ T8660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.820833][ T8669] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.587286][ T8709] tipc: Enabled bearer , priority 0 [ 152.596439][ T8709] syzkaller0: entered promiscuous mode [ 152.602573][ T8687] wg1 speed is unknown, defaulting to 1000 [ 152.613041][ T8709] syzkaller0: entered allmulticast mode [ 152.648156][ T8717] netlink: 3 bytes leftover after parsing attributes in process `syz.3.778'. [ 152.685702][ T8717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.686315][ T8709] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 152.755309][ T8709] tipc: Resetting bearer [ 152.784916][ T8708] tipc: Resetting bearer [ 152.835067][ T8708] tipc: Disabling bearer [ 152.957928][ T8734] netlink: 'syz.2.783': attribute type 29 has an invalid length. [ 153.084305][ T8735] netlink: 'syz.2.783': attribute type 29 has an invalid length. [ 153.093771][ T8737] netlink: 'syz.2.783': attribute type 29 has an invalid length. [ 153.154458][ T8737] netlink: 'syz.2.783': attribute type 29 has an invalid length. [ 153.558974][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.797'. [ 153.571456][ T8775] lo: left promiscuous mode [ 153.576147][ T8775] tunl0: left promiscuous mode [ 153.581398][ T8775] gre0: left promiscuous mode [ 153.586840][ T8775] gretap0: left promiscuous mode [ 153.592224][ T8775] erspan0: left promiscuous mode [ 153.597244][ T8775] ip_vti0: left promiscuous mode [ 153.707521][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.855136][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.870780][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.097412][ T8557] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.134150][ T8557] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.164379][ T8557] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.187835][ T8557] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.251580][ T8783] IPVS: starting estimator thread 0... [ 154.351553][ T8814] IPVS: using max 28 ests per chain, 67200 per kthread [ 154.398940][ T8816] sctp: [Deprecated]: syz.1.802 (pid 8816) Use of int in maxseg socket option. [ 154.398940][ T8816] Use struct sctp_assoc_value instead [ 154.642431][ T8836] sctp: [Deprecated]: syz.3.812 (pid 8836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.642431][ T8836] Use struct sctp_sack_info instead [ 154.917433][ T8857] tipc: Started in network mode [ 154.927832][ T8857] tipc: Node identity 2687f59f34de, cluster identity 4711 [ 154.955882][ T8857] tipc: Enabled bearer , priority 0 [ 155.115315][ T8857] tipc: Disabling bearer [ 155.443605][ T8877] wg1 speed is unknown, defaulting to 1000 [ 155.541605][ T8903] __nla_validate_parse: 3 callbacks suppressed [ 155.541625][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 155.558034][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 155.783790][ T8911] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 155.799519][ T8912] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 155.807734][ T8910] delete_channel: no stack [ 155.825761][ T8911] netlink: 'syz.4.833': attribute type 2 has an invalid length. [ 155.841287][ T8910] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.832'. [ 155.856331][ T8910] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 155.888171][ T8912] netlink: 'syz.4.833': attribute type 2 has an invalid length. [ 155.918881][ T8911] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.833'. [ 155.954859][ T8912] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.833'. [ 156.045434][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 156.197917][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 156.227800][ T8939] netlink: 'syz.2.843': attribute type 12 has an invalid length. [ 156.459502][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 156.601466][ T8977] veth3: entered promiscuous mode [ 156.606628][ T8977] veth3: entered allmulticast mode [ 156.729809][ T8984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.813142][ T8982] syzkaller0: entered promiscuous mode [ 156.852889][ T8982] syzkaller0: entered allmulticast mode [ 157.124481][ T9004] pim6reg: entered allmulticast mode [ 157.277514][ T9017] syzkaller0: entered promiscuous mode [ 157.289155][ T9017] syzkaller0: entered allmulticast mode [ 157.297493][ T9013] netlink: 52 bytes leftover after parsing attributes in process `syz.2.858'. [ 157.320361][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 158.758484][ T9094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.832561][ T5930] IPVS: starting estimator thread 0... [ 158.958598][ T9106] IPVS: using max 27 ests per chain, 64800 per kthread [ 159.156371][ T8803] IPVS: starting estimator thread 0... [ 159.254345][ T9141] veth5: entered allmulticast mode [ 159.275313][ T9133] IPVS: using max 33 ests per chain, 79200 per kthread [ 159.302726][ T9127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.894698][ T9179] validate_nla: 8 callbacks suppressed [ 159.894718][ T9179] netlink: 'syz.0.905': attribute type 2 has an invalid length. [ 159.910338][ T9179] nbd: must specify a device to reconfigure [ 160.000721][ T9189] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 160.036208][ T9189] bond3: entered promiscuous mode [ 160.042148][ T9189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.078248][ T9189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.086489][ T9189] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 160.100296][ T9189] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 160.126179][ T9189] bond3: (slave wireguard0): making interface the new active one [ 160.136118][ T9189] wireguard0: entered promiscuous mode [ 160.144812][ T9189] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 160.188043][ T9194] tipc: Enabled bearer , priority 0 [ 160.207007][ T9192] syzkaller0: entered promiscuous mode [ 160.213869][ T9192] syzkaller0: entered allmulticast mode [ 160.296446][ T9187] tipc: Resetting bearer [ 160.326331][ T9186] tipc: Resetting bearer [ 160.357258][ T9186] tipc: Disabling bearer [ 160.373042][ T9201] netlink: 'syz.3.911': attribute type 42 has an invalid length. [ 160.597138][ T9222] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 160.608149][ T9222] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 160.817992][ T9234] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.042770][ T9260] sctp: [Deprecated]: syz.4.931 (pid 9260) Use of int in maxseg socket option. [ 161.042770][ T9260] Use struct sctp_assoc_value instead [ 161.059528][ T9258] openvswitch: netlink: IPv4 tun info is not correct [ 161.066478][ T9258] openvswitch: netlink: IPv4 tun info is not correct [ 161.077833][ T9258] openvswitch: netlink: IPv4 tun info is not correct [ 161.096252][ T9258] openvswitch: netlink: IPv4 tun info is not correct [ 161.112416][ T9258] openvswitch: netlink: IPv4 tun info is not correct [ 161.131213][ T9264] __nla_validate_parse: 12 callbacks suppressed [ 161.131232][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.931'. [ 161.164710][ T9265] netlink: 'syz.2.932': attribute type 4 has an invalid length. [ 161.942444][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 162.278767][ T9333] netlink: 124 bytes leftover after parsing attributes in process `syz.3.951'. [ 162.474129][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 162.632315][ T9353] batadv_slave_0: entered promiscuous mode [ 162.660632][ T9352] batadv_slave_0: left promiscuous mode [ 162.773019][ T9362] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 162.803722][ T9358] syzkaller0: entered promiscuous mode [ 162.812480][ T9358] syzkaller0: entered allmulticast mode [ 162.837261][ T9370] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.964'. [ 164.465904][ T9401] netlink: 'syz.3.972': attribute type 2 has an invalid length. [ 164.493770][ T9395] syzkaller0: entered promiscuous mode [ 164.499498][ T9395] syzkaller0: entered allmulticast mode [ 164.549584][ T9406] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 166.118048][ T9434] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 166.142018][ T9434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.978'. [ 166.252730][ T9434] team0: Port device geneve0 added [ 166.596578][ T9464] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 166.641554][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.987'. [ 166.812424][ T9472] can: request_module (can-proto-0) failed. [ 166.947350][ T9447] wg1 speed is unknown, defaulting to 1000 [ 167.345739][ T9493] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.994'. [ 167.447265][ T9503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.994'. [ 168.048205][ T9528] tipc: Enabled bearer , priority 0 [ 168.069474][ T9528] syzkaller0: entered promiscuous mode [ 168.079430][ T9528] syzkaller0: entered allmulticast mode [ 168.178766][ T9528] tipc: Resetting bearer [ 168.189528][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 168.260406][ T9549] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 168.278125][ T9547] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 168.289915][ T9547] bond1: (slave vcan0): Error -95 calling set_mac_address [ 168.320735][ T9548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1009'. [ 168.330681][ T9550] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1009'. [ 168.342805][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 168.357639][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 168.384802][ T9549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.393580][ T9527] tipc: Resetting bearer [ 168.411464][ T9549] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 168.420815][ T9527] tipc: Disabling bearer [ 168.594335][ T9556] bond2 (unregistering): Released all slaves [ 168.610721][ T9571] netlink: 'syz.0.1014': attribute type 21 has an invalid length. [ 168.680024][ T9573] netlink: 'syz.2.1016': attribute type 8 has an invalid length. [ 168.733638][ T9562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.743320][ T9562] bond2: (slave bond3): making interface the new active one [ 168.751555][ T9562] bond2: (slave bond3): Enslaving as an active interface with an up link [ 168.766435][ T9568] bridge0: Device is already in use. [ 168.815960][ T9583] vxcan1: tx address claim with different name [ 168.840566][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 169.308464][ T9616] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 169.407830][ T9626] veth0: entered promiscuous mode [ 169.476913][ T9628] veth0: left promiscuous mode [ 169.926246][ T9661] tipc: Started in network mode [ 169.953070][ T9661] tipc: Node identity 9a2c7e78674b, cluster identity 4711 [ 169.984508][ T9661] tipc: Enabled bearer , priority 0 [ 170.002612][ T9665] syzkaller0: entered promiscuous mode [ 170.008597][ T9665] syzkaller0: entered allmulticast mode [ 170.052983][ T9672] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 170.076293][ T9661] tipc: Resetting bearer [ 170.228993][ T5881] block nbd0: Receive control failed (result -32) [ 170.247235][ T9681] tipc: Resetting bearer [ 170.264091][ T9681] tipc: Disabling bearer [ 170.347962][ T8958] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 171.251451][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 171.282492][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 171.297310][ T9743] __nla_validate_parse: 8 callbacks suppressed [ 171.297327][ T9743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1064'. [ 171.332073][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 171.378513][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 171.485861][ T9756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.675341][ T9772] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 171.720570][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 171.741275][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1075'. [ 171.775988][ T9782] netlink: 'syz.1.1076': attribute type 30 has an invalid length. [ 171.841781][ T9777] tipc: Enabled bearer , priority 0 [ 171.849459][ T9777] syzkaller0: entered promiscuous mode [ 171.854945][ T9777] syzkaller0: entered allmulticast mode [ 171.908942][ T9777] tipc: Resetting bearer [ 171.977856][ T9777] tipc: Resetting bearer [ 172.002999][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 172.023822][ T9777] tipc: Disabling bearer [ 172.096165][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 172.108777][ T9793] netlink: 'syz.1.1080': attribute type 3 has an invalid length. [ 172.117250][ T9795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1081'. [ 172.203130][ T9806] only policy match revision 0 supported [ 172.203150][ T9806] unable to load match [ 172.343037][ T9819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.420361][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 172.479675][ T30] audit: type=1800 audit(1758633206.816:2): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1090" name="memory.events" dev="tmpfs" ino=1141 res=0 errno=0 [ 172.681901][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1094'. [ 172.701254][ T9841] netlink: 'syz.4.1094': attribute type 2 has an invalid length. [ 172.719407][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1094'. [ 172.809796][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1094'. [ 172.953382][ T9861] netlink: 'syz.1.1099': attribute type 11 has an invalid length. [ 172.965044][ T8805] wg1 speed is unknown, defaulting to 1000 [ 173.001203][ T9863] IPv6: sit1: Disabled Multicast RS [ 173.007729][ T9863] sit1: entered allmulticast mode [ 173.196851][ T9871] tipc: Started in network mode [ 173.207477][ T9871] tipc: Node identity 7ab3dadc9e02, cluster identity 4711 [ 173.223121][ T9871] tipc: Enabled bearer , priority 0 [ 173.256870][ T9871] syzkaller0: entered promiscuous mode [ 173.267638][ T9871] syzkaller0: entered allmulticast mode [ 173.295860][ T9871] tipc: Resetting bearer [ 173.304593][ T9876] netlink: 'syz.0.1106': attribute type 83 has an invalid length. [ 173.330828][ T9879] pimreg: entered allmulticast mode [ 173.342400][ T9870] tipc: Resetting bearer [ 173.376436][ T9870] tipc: Disabling bearer [ 173.913168][ T9910] xt_HMARK: proto mask must be zero with L3 mode [ 173.954371][ T9911] xt_HMARK: proto mask must be zero with L3 mode [ 173.994299][ T9921] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 174.002663][ T9921] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 174.531727][ T9956] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 174.626888][ T9956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.784258][ T9973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 174.901244][ T9976] tipc: Enabled bearer , priority 0 [ 174.945366][ T9983] syzkaller0: entered promiscuous mode [ 174.968039][ T9983] syzkaller0: entered allmulticast mode [ 174.997970][ T9990] netem: incorrect gi model size [ 175.022297][ T9990] netem: change failed [ 175.077312][ T9983] tipc: Resetting bearer [ 175.158995][ T9983] tipc: Disabling bearer [ 175.190367][T10002] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 175.546018][T10028] nbd: socks must be embedded in a SOCK_ITEM attr [ 175.600033][T10025] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 175.809760][T10045] netlink: set zone limit has 8 unknown bytes [ 175.979197][T10055] gretap0: entered promiscuous mode [ 176.391385][T10082] nbd: must specify a device to reconfigure [ 176.403236][T10085] __nla_validate_parse: 99 callbacks suppressed [ 176.403254][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 176.480673][T10089] tipc: Enabling of bearer rejected, failed to enable media [ 176.507675][T10101] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1170'. [ 176.890336][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 177.167854][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 177.167951][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 177.196140][T10141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.198293][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1183'. [ 177.221738][T10146] geneve3: entered promiscuous mode [ 177.227072][T10146] geneve3: entered allmulticast mode [ 177.239232][T10146] sch_fq: defrate 0 ignored. [ 177.264898][ T60] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.303446][ T60] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.312789][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 177.335735][ T60] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.349965][ T60] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.446445][T10169] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1190'. [ 177.645140][T10169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.655635][T10169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.665875][T10169] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 177.677314][T10169] bond0 (unregistering): Released all slaves [ 177.722521][T10186] x_tables: ip_tables: udp match: only valid for protocol 17 [ 177.881561][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1196'. [ 177.893590][T10193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1196'. [ 178.551446][T10189] validate_nla: 2 callbacks suppressed [ 178.551465][T10189] netlink: 'syz.0.1195': attribute type 10 has an invalid length. [ 178.745620][T10233] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 178.753647][T10233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1206'. [ 179.263862][T10271] sctp: [Deprecated]: syz.4.1212 (pid 10271) Use of int in max_burst socket option deprecated. [ 179.263862][T10271] Use struct sctp_assoc_value instead [ 179.347913][T10278] netlink: 'syz.1.1213': attribute type 2 has an invalid length. [ 179.361956][T10284] netlink: 'syz.1.1213': attribute type 2 has an invalid length. [ 180.522895][T10354] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 180.875181][T10389] netlink: 'syz.4.1243': attribute type 27 has an invalid length. [ 181.443639][T10436] xt_bpf: check failed: parse error [ 181.516150][T10440] __nla_validate_parse: 18 callbacks suppressed [ 181.516177][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 181.624652][T10446] siw: device registration error -23 [ 181.678016][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'. [ 181.687551][T10454] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1264'. [ 181.687588][T10453] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1263'. [ 181.753654][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 181.900990][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'. [ 181.979113][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 181.990326][T10474] netlink: 'syz.3.1269': attribute type 3 has an invalid length. [ 181.998298][T10474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1269'. [ 182.007433][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 182.745990][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 183.138549][T10548] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 183.296721][T10562] IPv6: sit1: Disabled Multicast RS [ 183.310768][T10562] sit1: entered allmulticast mode [ 183.442204][T10569] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 183.525033][T10570] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address [ 183.537288][T10570] bond27: (slave vxcan1): Error -95 calling set_mac_address [ 184.185353][T10614] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 184.287631][T10614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.308728][T10623] netlink: 'syz.0.1318': attribute type 32 has an invalid length. [ 184.316997][T10623] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 184.472100][T10625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.479905][T10625] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 184.496196][T10625] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 184.795324][T10651] wireguard0: entered promiscuous mode [ 184.893755][T10668] wireguard1: entered promiscuous mode [ 185.131599][T10690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.204863][T10690] vlan2: entered allmulticast mode [ 185.210678][T10690] bond2: entered allmulticast mode [ 185.331714][T10701] bridge0: port 3(vlan4) entered blocking state [ 185.339827][T10701] bridge0: port 3(vlan4) entered disabled state [ 185.346323][T10701] vlan4: entered allmulticast mode [ 185.365508][T10701] bridge0: entered allmulticast mode [ 185.376526][T10701] vlan4: left allmulticast mode [ 185.381998][T10701] bridge0: left allmulticast mode [ 185.595425][T10712] GUP no longer grows the stack in syz.0.1340 (10712): 200000006000-200000008000 (200000005000) [ 185.599219][T10710] geneve3: entered promiscuous mode [ 185.607026][T10712] CPU: 0 UID: 0 PID: 10712 Comm: syz.0.1340 Not tainted syzkaller #0 PREEMPT(full) [ 185.607055][T10712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.607072][T10712] Call Trace: [ 185.607080][T10712] [ 185.607088][T10712] dump_stack_lvl+0x189/0x250 [ 185.607118][T10712] ? irqentry_exit+0x74/0x90 [ 185.607138][T10712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.607176][T10712] __get_user_pages+0x24d0/0x2ce0 [ 185.607194][T10712] ? __lock_acquire+0xab9/0xd20 [ 185.607243][T10712] ? __gup_longterm_locked+0xc68/0x1660 [ 185.607270][T10712] __gup_longterm_locked+0xde9/0x1660 [ 185.607303][T10712] ? sanity_check_pinned_pages+0x123a/0x1300 [ 185.607332][T10712] gup_fast_fallback+0x1e6a/0x2010 [ 185.607385][T10712] ? __pfx_gup_fast_fallback+0x10/0x10 [ 185.607409][T10712] ? __lock_acquire+0xab9/0xd20 [ 185.607437][T10712] ? pin_user_pages_fast+0x4d/0xb0 [ 185.607459][T10712] iov_iter_extract_pages+0x35a/0x5e0 [ 185.607489][T10712] extract_iter_to_sg+0xe46/0x24e0 [ 185.607523][T10712] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 185.607542][T10712] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.607558][T10712] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.607576][T10712] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.607592][T10712] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 185.607614][T10712] ? __asan_memset+0x22/0x50 [ 185.607636][T10712] hash_sendmsg+0x4f4/0x11d0 [ 185.607681][T10712] ? __pfx_hash_sendmsg+0x10/0x10 [ 185.607703][T10712] __sock_sendmsg+0x219/0x270 [ 185.607730][T10712] ____sys_sendmsg+0x52d/0x830 [ 185.607756][T10712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.607784][T10712] ? import_iovec+0x74/0xa0 [ 185.607808][T10712] ___sys_sendmsg+0x21f/0x2a0 [ 185.607830][T10712] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.607888][T10712] ? __fget_files+0x2a/0x420 [ 185.607902][T10712] ? __fget_files+0x3a0/0x420 [ 185.607928][T10712] __sys_sendmmsg+0x227/0x430 [ 185.607953][T10712] ? __pfx___sys_sendmmsg+0x10/0x10 [ 185.607971][T10712] ? do_futex+0x395/0x420 [ 185.608000][T10712] ? fd_install+0x97/0x540 [ 185.608048][T10712] ? rcu_is_watching+0x15/0xb0 [ 185.608072][T10712] __x64_sys_sendmmsg+0xa0/0xc0 [ 185.608094][T10712] do_syscall_64+0xfa/0x3b0 [ 185.608111][T10712] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.608126][T10712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.608142][T10712] ? clear_bhb_loop+0x60/0xb0 [ 185.608162][T10712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.608178][T10712] RIP: 0033:0x7f0c1438eec9 [ 185.608201][T10712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.608214][T10712] RSP: 002b:00007f0c1515e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 185.608235][T10712] RAX: ffffffffffffffda RBX: 00007f0c145e5fa0 RCX: 00007f0c1438eec9 [ 185.608247][T10712] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000006 [ 185.608257][T10712] RBP: 00007f0c14411f91 R08: 0000000000000000 R09: 0000000000000000 [ 185.608267][T10712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.608276][T10712] R13: 00007f0c145e6038 R14: 00007f0c145e5fa0 R15: 00007fffd6d5c4d8 [ 185.608306][T10712] [ 185.923884][T10710] geneve3: entered allmulticast mode [ 185.930686][ T8961] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.943614][ T8961] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.999981][T10676] wg1 speed is unknown, defaulting to 1000 [ 186.003746][ T8961] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.072994][ T8958] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.205388][T10732] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 186.424514][T10750] netlink: 'syz.2.1351': attribute type 6 has an invalid length. [ 186.453398][T10750] netlink: 'syz.2.1351': attribute type 6 has an invalid length. [ 186.527206][T10750] macsec2: entered promiscuous mode [ 186.541875][T10750] macsec2: entered allmulticast mode [ 186.729288][T10767] __nla_validate_parse: 17 callbacks suppressed [ 186.729307][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1355'. [ 186.884364][T10780] syzkaller0: entered promiscuous mode [ 186.893900][T10780] syzkaller0: entered allmulticast mode [ 187.352954][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 187.623246][T10796] nbd3: detected capacity change from 0 to 63 [ 187.653924][ T5881] block nbd3: Receive control failed (result -32) [ 187.793340][T10818] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 187.802299][T10819] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 187.878991][T10818] netlink: 'syz.3.1371': attribute type 3 has an invalid length. [ 187.948920][T10825] syzkaller1: entered promiscuous mode [ 187.965293][T10825] syzkaller1: entered allmulticast mode [ 188.107595][T10832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1374'. [ 188.363512][T10850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1378'. [ 188.488859][T10860] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1384'. [ 188.671900][T10858] syz.0.1382 (10858) used greatest stack depth: 17128 bytes left [ 188.718026][T10874] netlink: 'syz.1.1389': attribute type 8 has an invalid length. [ 188.729582][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 188.797023][T10867] syzkaller0: entered promiscuous mode [ 188.819120][T10867] syzkaller0: entered allmulticast mode [ 188.880482][T10867] tipc: Enabled bearer , priority 0 [ 188.916578][T10864] tipc: Resetting bearer [ 189.911287][ T5930] tipc: Node number set to 4251418232 [ 190.307294][T10864] tipc: Disabling bearer [ 190.315910][T10898] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 190.328770][T10902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1397'. [ 190.465486][T10911] netlink: 'syz.0.1398': attribute type 15 has an invalid length. [ 190.483556][T10905] netlink: 'syz.0.1398': attribute type 15 has an invalid length. [ 190.544473][T10915] xt_socket: unknown flags 0xe4 [ 190.648752][T10921] netlink: 'syz.1.1405': attribute type 1 has an invalid length. [ 190.693568][T10921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.705618][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 190.708577][T10927] sctp: [Deprecated]: syz.3.1406 (pid 10927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.708577][T10927] Use struct sctp_sack_info instead [ 190.765828][T10927] sctp: [Deprecated]: syz.3.1406 (pid 10927) Use of int in maxseg socket option. [ 190.765828][T10927] Use struct sctp_assoc_value instead [ 190.842311][T10939] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1410'. [ 190.997116][T10954] netlink: 'syz.3.1414': attribute type 10 has an invalid length. [ 191.095194][T10957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 191.511983][T10977] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 192.284150][T11041] __nla_validate_parse: 5 callbacks suppressed [ 192.284174][T11041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1441'. [ 192.344200][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'. [ 192.348697][T11047] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1444'. [ 192.649673][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 192.796865][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1453'. [ 192.811712][T11077] netlink: 'syz.2.1453': attribute type 21 has an invalid length. [ 192.815934][T11079] 8021q: VLANs not supported on lo [ 192.825701][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'. [ 192.864200][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 192.897897][T11084] team0: Device wireguard2 is of different type [ 193.386371][T11059] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 193.459664][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 193.477399][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 193.490654][T11097] veth1_macvtap: left promiscuous mode [ 193.506691][T11096] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1460'. [ 193.612979][T11102] tipc: Enabled bearer , priority 0 [ 193.624960][T11102] syzkaller0: entered promiscuous mode [ 193.635353][T11102] syzkaller0: entered allmulticast mode [ 193.667205][T11102] tipc: Resetting bearer [ 193.676261][T11101] tipc: Resetting bearer [ 193.695045][T11101] tipc: Disabling bearer [ 193.802147][T11108] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 194.369713][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.668632][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 195.179624][T11208] tipc: Enabled bearer , priority 0 [ 195.187714][T11208] syzkaller0: entered promiscuous mode [ 195.193517][T11208] syzkaller0: entered allmulticast mode [ 195.224256][T11208] tipc: Resetting bearer [ 195.257696][T11207] tipc: Resetting bearer [ 195.278263][T11207] tipc: Disabling bearer [ 195.617548][T11232] netlink: 'syz.4.1504': attribute type 1 has an invalid length. [ 195.694581][T11229] bridge4: port 1(gretap1) entered blocking state [ 195.701619][T11229] bridge4: port 1(gretap1) entered disabled state [ 195.709043][T11229] gretap1: entered allmulticast mode [ 195.731890][T11229] gretap1: entered promiscuous mode [ 196.107909][T11242] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 196.136063][T11244] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 196.262159][T11249] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 196.322254][T11251] netlink: 'syz.1.1513': attribute type 142 has an invalid length. [ 196.359397][T11256] openvswitch: netlink: Multiple metadata blocks provided [ 196.431607][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 196.431666][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.437690][ T5879] Bluetooth: hci0: command 0x0406 tx timeout [ 196.748825][ T5881] Bluetooth: hci2: command 0x0401 tx timeout [ 196.810587][T11285] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 196.964480][T11290] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 197.201597][T11302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.623698][T11328] vlan5: entered promiscuous mode [ 197.629103][T11328] vlan5: entered allmulticast mode [ 197.634231][T11328] hsr_slave_1: entered allmulticast mode [ 197.762617][T11336] lo: entered allmulticast mode [ 197.779240][T11336] lo: left allmulticast mode [ 197.964158][T11345] __nla_validate_parse: 21 callbacks suppressed [ 197.964174][T11345] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1542'. [ 197.967250][T11350] netlink: 'syz.2.1544': attribute type 21 has an invalid length. [ 197.989728][T11350] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.997651][T11350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.004895][T11350] IPv6: NLM_F_CREATE should be set when creating new route [ 198.012272][T11350] IPv6: NLM_F_CREATE should be set when creating new route [ 198.019534][T11350] IPv6: NLM_F_CREATE should be set when creating new route [ 198.117385][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 198.127303][T11364] openvswitch: netlink: Unknown nsh attribute 0 [ 198.134026][T11364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.257504][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 198.344215][T11377] Bluetooth: MGMT ver 1.23 [ 198.354593][T11377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1553'. [ 198.378975][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 198.801426][T11389] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 198.833750][T11389] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 198.922564][T11401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'. [ 199.047185][T11396] syzkaller1: entered promiscuous mode [ 199.088990][T11396] syzkaller1: entered allmulticast mode [ 199.161211][T11410] tipc: Enabled bearer , priority 0 [ 199.359518][T11427] xt_l2tp: unknown flags: 10 [ 199.497238][T11433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1567'. [ 199.811501][T11402] tipc: Disabling bearer [ 199.851926][T11428] wg1 speed is unknown, defaulting to 1000 [ 199.887374][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1573'. [ 200.066290][T11466] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1574'. [ 200.078786][T11466] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1574'. [ 200.557337][T11482] netlink: 'syz.1.1579': attribute type 14 has an invalid length. [ 200.916784][T11501] tipc: Enabling of bearer rejected, failed to enable media [ 200.998688][T11503] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.059737][T11473] wg1 speed is unknown, defaulting to 1000 [ 201.171209][T11515] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 201.188587][T11514] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 201.666149][T11546] tipc: Enabled bearer , priority 0 [ 201.693124][T11546] syzkaller0: entered promiscuous mode [ 201.710036][T11546] syzkaller0: entered allmulticast mode [ 201.767796][T11546] tipc: Resetting bearer [ 201.794866][T11543] tipc: Resetting bearer [ 201.802440][T11551] sctp: [Deprecated]: syz.1.1603 (pid 11551) Use of int in max_burst socket option deprecated. [ 201.802440][T11551] Use struct sctp_assoc_value instead [ 201.849401][T11543] tipc: Disabling bearer [ 202.497144][T11601] vcan0 (unregistering): left allmulticast mode [ 202.858983][T11626] sctp: [Deprecated]: syz.1.1629 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.858983][T11626] Use struct sctp_sack_info instead [ 202.877969][T11632] atomic_op ffff888079a98198 conn xmit_atomic 0000000000000000 [ 203.069877][ T5885] Bluetooth: hci4: command 0x0405 tx timeout [ 203.114933][T11645] netlink: 'syz.2.1633': attribute type 4 has an invalid length. [ 203.196266][T11650] __nla_validate_parse: 12 callbacks suppressed [ 203.196282][T11650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1636'. [ 203.287957][T11656] netlink: 'syz.2.1638': attribute type 4 has an invalid length. [ 203.304152][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 203.324943][T11662] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 203.341110][T11663] netlink: 'syz.2.1638': attribute type 4 has an invalid length. [ 203.403130][T11656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.442592][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1643'. [ 203.466504][T11662] gretap1: entered promiscuous mode [ 203.491814][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 203.515064][T11665] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 203.610782][T11673] netlink: 'syz.1.1644': attribute type 14 has an invalid length. [ 203.631187][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 203.659994][T11673] netlink: 'syz.1.1644': attribute type 14 has an invalid length. [ 203.672198][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 203.881790][T11697] pimreg3: entered allmulticast mode [ 203.942296][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 203.962263][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 203.973711][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 203.985823][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 204.536240][T11736] IPv6: addrconf: prefix option has invalid lifetime [ 204.952522][T11760] tipc: Enabling of bearer rejected, failed to enable media [ 204.983903][T11761] batman_adv: batadv0: Interface deactivated: team0 [ 204.999672][T11761] batman_adv: batadv0: Removing interface: team0 [ 205.029428][T11761] bond0: (slave bond_slave_0): Releasing backup interface [ 205.081672][T11761] bond0: (slave bond_slave_1): Releasing backup interface [ 205.110689][T11761] team0: Port device team_slave_0 removed [ 205.122790][T11761] team0: Port device team_slave_1 removed [ 205.148849][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 205.157535][T11761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.172692][T11761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.765161][T11810] syzkaller1: entered promiscuous mode [ 205.788096][T11810] syzkaller1: entered allmulticast mode [ 205.951711][T11821] tap0: tun_chr_ioctl cmd 1074025677 [ 205.957615][T11821] tap0: linktype set to 65534 [ 206.062027][T11829] tipc: Enabled bearer , priority 0 [ 206.074557][T11829] syzkaller0: entered promiscuous mode [ 206.080552][T11829] syzkaller0: entered allmulticast mode [ 206.098882][T11825] tipc: Resetting bearer [ 206.116354][T11825] tipc: Disabling bearer [ 206.205118][T11835] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 206.502597][T11859] openvswitch: netlink: Flow key attr not present in new flow. [ 207.199716][T11912] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 207.230937][T11912] bond29: entered promiscuous mode [ 207.236464][T11912] 8021q: adding VLAN 0 to HW filter on device bond29 [ 207.434018][T11932] netlink: 'syz.1.1725': attribute type 12 has an invalid length. [ 207.478137][T11934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.483359][T11932] netlink: 'syz.1.1725': attribute type 29 has an invalid length. [ 207.511015][T11931] netlink: 'syz.1.1725': attribute type 12 has an invalid length. [ 207.519497][T11931] netlink: 'syz.1.1725': attribute type 29 has an invalid length. [ 207.535045][T11934] netlink: 'syz.3.1726': attribute type 7 has an invalid length. [ 207.547345][T11934] netlink: 'syz.3.1726': attribute type 8 has an invalid length. [ 207.628031][T11946] tipc: Enabling of bearer rejected, failed to enable media [ 207.867656][T11972] batadv2: entered allmulticast mode [ 207.934981][T11980] netlink: 'syz.2.1737': attribute type 10 has an invalid length. [ 207.950351][T11980] team0: Device hsr_slave_0 failed to register rx_handler [ 207.976441][T11983] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 208.199207][T11995] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 208.206969][T11995] __nla_validate_parse: 18 callbacks suppressed [ 208.206984][T11995] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1744'. [ 208.273744][T11999] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1745'. [ 208.355774][T12007] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1747'. [ 208.630215][T12027] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1751'. [ 208.630448][T12028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1751'. [ 208.684108][T12030] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1751'. [ 208.693670][T12027] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1751'. [ 208.779882][T12035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1755'. [ 208.801895][T12035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1755'. [ 208.836969][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 208.856268][T12039] netlink: zone id is out of range [ 208.866468][T12039] netlink: zone id is out of range [ 208.878779][T12039] netlink: set zone limit has 8 unknown bytes [ 209.514819][T12068] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 209.879894][T12054] wg1 speed is unknown, defaulting to 1000 [ 210.348792][ T5885] Bluetooth: hci4: command 0x0405 tx timeout [ 210.781633][T12132] IPVS: set_ctl: invalid protocol: 14 100.1.1.1:20002 [ 210.826889][T12132] raw_sendmsg: syz.0.1788 forgot to set AF_INET. Fix it! [ 210.828648][T12133] IPVS: set_ctl: invalid protocol: 14 100.1.1.1:20002 [ 211.633646][T12185] tipc: Enabled bearer , priority 0 [ 211.654420][T12185] syzkaller0: entered promiscuous mode [ 211.672475][T12185] syzkaller0: entered allmulticast mode [ 211.695981][T12188] syzkaller0: entered promiscuous mode [ 211.709566][T12188] syzkaller0: entered allmulticast mode [ 211.719533][T12196] validate_nla: 5 callbacks suppressed [ 211.719552][T12196] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 211.764833][T12185] tipc: Resetting bearer [ 211.785152][T12184] tipc: Resetting bearer [ 211.807197][T12184] tipc: Disabling bearer [ 211.882884][T12203] netlink: 'syz.2.1810': attribute type 30 has an invalid length. [ 211.901845][T12203] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 211.922913][T12203] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 211.994392][T12209] netlink: 'syz.4.1812': attribute type 19 has an invalid length. [ 212.031740][ T8955] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.031857][T12209] netlink: 'syz.4.1812': attribute type 19 has an invalid length. [ 212.072220][ T8955] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.081588][ T8958] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.097250][ T8958] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.432217][T12240] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 212.762235][T12269] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 212.775841][T12272] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 212.889092][T12283] netlink: 'syz.3.1835': attribute type 3 has an invalid length. [ 212.930829][T12283] macvlan0: entered promiscuous mode [ 212.938101][T12283] batadv_slave_0: entered promiscuous mode [ 212.946882][T12283] debugfs: 'hsr1' already exists in 'hsr' [ 212.953115][T12283] Cannot create hsr debugfs directory [ 212.964744][T12285] netlink: 'syz.4.1833': attribute type 9 has an invalid length. [ 214.196815][T12348] __nla_validate_parse: 16 callbacks suppressed [ 214.196835][T12348] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1852'. [ 214.318507][ T30] audit: type=1800 audit(1758633248.646:3): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1847" name="memory.events" dev="tmpfs" ino=1801 res=0 errno=0 [ 214.998636][T12379] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 215.108270][T12387] xt_bpf: check failed: parse error [ 215.343621][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 215.460598][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 215.610245][T12421] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1876'. [ 215.628906][T12424] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1876'. [ 215.633718][T12412] bond0: entered allmulticast mode [ 215.644706][T12412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.651976][T12412] bridge0: port 2(bond0) entered blocking state [ 215.658580][T12412] bridge0: port 2(bond0) entered disabled state [ 215.666697][T12412] bond0: entered promiscuous mode [ 215.674011][T12410] bridge_slave_1: left allmulticast mode [ 215.680060][T12410] bridge_slave_1: left promiscuous mode [ 215.685937][T12410] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.696279][T12410] bridge_slave_0: left allmulticast mode [ 215.702872][T12410] bridge_slave_0: left promiscuous mode [ 215.711597][T12410] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.763667][T12430] netlink: 'syz.4.1878': attribute type 1 has an invalid length. [ 215.775743][T12430] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1878'. [ 215.970544][T12441] netlink: 'syz.0.1880': attribute type 3 has an invalid length. [ 216.008726][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 216.043835][T12442] syzkaller0: entered promiscuous mode [ 216.060000][T12442] syzkaller0: entered allmulticast mode [ 216.105913][T12450] syzkaller1: entered promiscuous mode [ 216.137517][T12450] syzkaller1: entered allmulticast mode [ 216.351500][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 216.364135][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1887'. [ 216.567686][T12476] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 217.079514][T12504] validate_nla: 1 callbacks suppressed [ 217.079531][T12504] netlink: 'syz.0.1901': attribute type 1 has an invalid length. [ 217.115015][T12504] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 217.975892][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 218.138794][T12542] nbd1: detected capacity change from 0 to 127 [ 218.161164][ T5881] block nbd1: Receive control failed (result -32) [ 218.251555][T12562] netlink: 'syz.0.1920': attribute type 4 has an invalid length. [ 218.268621][T12548] dvmrp0: entered allmulticast mode [ 218.537744][T12576] tipc: Enabled bearer , priority 0 [ 218.546628][T12576] syzkaller0: entered promiscuous mode [ 218.557196][T12576] syzkaller0: entered allmulticast mode [ 218.592618][T12582] netlink: 'syz.3.1927': attribute type 29 has an invalid length. [ 218.606893][T12580] tipc: Enabled bearer , priority 0 [ 218.615971][T12576] tipc: Resetting bearer [ 218.638929][T12582] netlink: 'syz.3.1927': attribute type 29 has an invalid length. [ 218.648085][T12580] syzkaller0: entered promiscuous mode [ 218.657368][T12580] syzkaller0: entered allmulticast mode [ 218.705289][T12576] tipc: Resetting bearer [ 218.765195][T12576] tipc: Disabling bearer [ 218.801712][T12579] tipc: Resetting bearer [ 218.840215][T12579] tipc: Disabling bearer [ 219.069752][T12608] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 219.241258][T12618] syzkaller1: left promiscuous mode [ 219.246513][T12618] syzkaller1: left allmulticast mode [ 219.504971][T12641] __nla_validate_parse: 8 callbacks suppressed [ 219.504989][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 219.523630][T12642] netlink: 'syz.3.1946': attribute type 2 has an invalid length. [ 219.532007][T12642] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 219.553579][T12642] netlink: 'syz.3.1946': attribute type 2 has an invalid length. [ 219.578480][T12642] netlink: 'syz.3.1946': attribute type 2 has an invalid length. [ 219.693588][T12655] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 219.850483][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1951'. [ 219.883911][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 220.142355][T12680] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1957'. [ 220.151810][T12680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1957'. [ 220.487854][T12698] netlink: 'syz.0.1962': attribute type 10 has an invalid length. [ 220.553126][T12703] netlink: 191192 bytes leftover after parsing attributes in process `syz.0.1963'. [ 220.624544][T12706] bond5: entered promiscuous mode [ 220.633035][T12706] bond5: entered allmulticast mode [ 220.639462][T12706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.720554][T12710] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 220.899566][T12726] team_slave_0: entered allmulticast mode [ 221.093903][T12733] tipc: Enabled bearer , priority 0 [ 221.094225][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 221.106865][T12732] syzkaller0: entered promiscuous mode [ 221.116115][T12732] syzkaller0: entered allmulticast mode [ 221.118572][T12735] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1972'. [ 221.163484][T12732] tipc: Resetting bearer [ 221.178045][T12731] tipc: Resetting bearer [ 221.205519][T12731] tipc: Disabling bearer [ 221.538201][T12769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1978'. [ 221.657034][T12773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.824017][T12782] smc: net device erspan0 applied user defined pnetid SYZ0 [ 221.882082][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'. [ 222.526078][T12813] syzkaller1: entered promiscuous mode [ 222.534693][T12813] syzkaller1: entered allmulticast mode [ 222.623019][T12830] team0: Device vti0 is of different type [ 222.857279][T12845] validate_nla: 1 callbacks suppressed [ 222.857295][T12845] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 222.897595][T12849] sctp: [Deprecated]: syz.0.2007 (pid 12849) Use of int in max_burst socket option deprecated. [ 222.897595][T12849] Use struct sctp_assoc_value instead [ 222.949910][T12853] IPVS: length: 63 != 8 [ 223.204315][T12871] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 223.459073][T12885] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 223.491082][T12886] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 223.874546][T12914] macvlan0: entered promiscuous mode [ 223.881837][T12914] batadv0: entered promiscuous mode [ 223.888026][T12914] debugfs: 'hsr1' already exists in 'hsr' [ 223.894384][T12914] Cannot create hsr debugfs directory [ 223.900489][T12914] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 223.911147][T12914] hsr1: entered allmulticast mode [ 223.916220][T12914] macvlan0: entered allmulticast mode [ 223.921871][T12914] batadv0: entered allmulticast mode [ 223.934603][T12914] macvlan0: left promiscuous mode [ 223.940970][T12914] batadv0: left promiscuous mode [ 223.974133][T12915] netlink: 'syz.0.2028': attribute type 83 has an invalid length. [ 224.155288][T12928] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 224.297583][T12936] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 224.327757][T12939] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 224.503395][T12953] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 224.613573][T12959] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 [ 224.700522][T12967] __nla_validate_parse: 14 callbacks suppressed [ 224.700540][T12967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2047'. [ 225.002287][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2053'. [ 225.029195][T12982] netlink: 'syz.3.2053': attribute type 7 has an invalid length. [ 225.036952][T12982] netlink: 'syz.3.2053': attribute type 8 has an invalid length. [ 225.057346][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 225.095550][T12982] veth1_to_team: entered promiscuous mode [ 225.103896][T12982] batadv_slave_1: entered promiscuous mode [ 225.110937][T12982] veth1_to_team: left promiscuous mode [ 225.123874][T12982] batadv_slave_1: left promiscuous mode [ 225.134245][T12988] netlink: 'syz.4.2055': attribute type 29 has an invalid length. [ 225.146330][T12992] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 225.154669][T12992] netlink: 'syz.4.2055': attribute type 2 has an invalid length. [ 225.160825][T12983] syzkaller1: entered promiscuous mode [ 225.168006][T12983] syzkaller1: entered allmulticast mode [ 225.390310][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 225.578964][T13012] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2062'. [ 225.618612][T13012] tipc: Can't bind to reserved service type 2 [ 225.701696][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 225.871561][T13021] bridge6: port 1(veth7) entered blocking state [ 225.888980][T13021] bridge6: port 1(veth7) entered disabled state [ 225.895502][T13021] veth7: entered allmulticast mode [ 225.930592][T13021] veth7: entered promiscuous mode [ 226.033825][T13028] bridge6: port 2(veth9) entered blocking state [ 226.058854][T13028] bridge6: port 2(veth9) entered disabled state [ 226.070826][T13028] veth9: entered allmulticast mode [ 226.099055][T13028] veth9: entered promiscuous mode [ 226.236354][T13052] tap0: tun_chr_ioctl cmd 1074025677 [ 226.255689][T13052] tap0: linktype set to 65534 [ 226.431690][T13064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2073'. [ 226.457418][T13062] IPv6: sit2: Disabled Multicast RS [ 226.465474][T13062] sit2: entered allmulticast mode [ 226.693354][T13081] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2079'. [ 226.711531][T13085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2081'. [ 226.810291][T13090] tc_dump_action: action bad kind [ 227.003816][T13103] syz.3.2085: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 227.054928][T13103] CPU: 1 UID: 0 PID: 13103 Comm: syz.3.2085 Not tainted syzkaller #0 PREEMPT(full) [ 227.054955][T13103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.054967][T13103] Call Trace: [ 227.054974][T13103] [ 227.054983][T13103] dump_stack_lvl+0x189/0x250 [ 227.055015][T13103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.055035][T13103] ? __pfx__printk+0x10/0x10 [ 227.055058][T13103] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 227.055078][T13103] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 227.055099][T13103] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 227.055122][T13103] warn_alloc+0x214/0x310 [ 227.055146][T13103] ? stack_depot_save_flags+0x40/0x860 [ 227.055172][T13103] ? __pfx_warn_alloc+0x10/0x10 [ 227.055199][T13103] ? kasan_save_track+0x4f/0x80 [ 227.055220][T13103] ? xskq_create+0x56/0x170 [ 227.055235][T13103] ? xsk_init_queue+0xb0/0x110 [ 227.055248][T13103] ? xsk_setsockopt+0x4dc/0x8d0 [ 227.055270][T13103] ? do_sock_setsockopt+0x17c/0x1b0 [ 227.055288][T13103] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 227.055305][T13103] ? do_syscall_64+0xfa/0x3b0 [ 227.055322][T13103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.055347][T13103] __vmalloc_node_range_noprof+0x125/0x12f0 [ 227.055399][T13103] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 227.055427][T13103] ? __kasan_kmalloc+0x93/0xb0 [ 227.055452][T13103] vmalloc_user_noprof+0xad/0xf0 [ 227.055475][T13103] ? xskq_create+0xbf/0x170 [ 227.055493][T13103] xskq_create+0xbf/0x170 [ 227.055512][T13103] xsk_init_queue+0xb0/0x110 [ 227.055531][T13103] xsk_setsockopt+0x4dc/0x8d0 [ 227.055556][T13103] ? __pfx_xsk_setsockopt+0x10/0x10 [ 227.055580][T13103] ? __pfx_aa_sk_perm+0x10/0x10 [ 227.055607][T13103] ? aa_sock_opt_perm+0xff/0x1b0 [ 227.055626][T13103] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 227.055643][T13103] ? __pfx_xsk_setsockopt+0x10/0x10 [ 227.055666][T13103] do_sock_setsockopt+0x17c/0x1b0 [ 227.055688][T13103] __x64_sys_setsockopt+0x13f/0x1b0 [ 227.055714][T13103] do_syscall_64+0xfa/0x3b0 [ 227.055729][T13103] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.055746][T13103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.055762][T13103] ? clear_bhb_loop+0x60/0xb0 [ 227.055783][T13103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.055799][T13103] RIP: 0033:0x7f703d78eec9 [ 227.055814][T13103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.055827][T13103] RSP: 002b:00007f703e6bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 227.055855][T13103] RAX: ffffffffffffffda RBX: 00007f703d9e5fa0 RCX: 00007f703d78eec9 [ 227.055867][T13103] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 227.055876][T13103] RBP: 00007f703d811f91 R08: 0000000000000004 R09: 0000000000000000 [ 227.055885][T13103] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.055895][T13103] R13: 00007f703d9e6038 R14: 00007f703d9e5fa0 R15: 00007ffc3130ed48 [ 227.055924][T13103] [ 227.055943][T13103] Mem-Info: [ 227.105183][T13104] tipc: Enabled bearer , priority 0 [ 227.354750][T13103] active_anon:3922 inactive_anon:0 isolated_anon:0 [ 227.354750][T13103] active_file:3141 inactive_file:39929 isolated_file:0 [ 227.354750][T13103] unevictable:768 dirty:91 writeback:0 [ 227.354750][T13103] slab_reclaimable:12596 slab_unreclaimable:179058 [ 227.354750][T13103] mapped:28927 shmem:1358 pagetables:947 [ 227.354750][T13103] sec_pagetables:0 bounce:0 [ 227.354750][T13103] kernel_misc_reclaimable:0 [ 227.354750][T13103] free:1243133 free_pcp:13424 free_cma:0 [ 227.422964][T13103] Node 0 active_anon:15688kB inactive_anon:0kB active_file:12564kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115708kB dirty:360kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14108kB pagetables:3632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 227.456096][T13108] syzkaller0: entered allmulticast mode [ 227.476135][T13103] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 227.524171][T13103] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.561711][T13102] tipc: Disabling bearer [ 227.625724][T13103] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 227.644855][T13109] tipc: Enabled bearer , priority 0 [ 227.659283][T13103] Node 0 DMA32 free:1067600kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15740kB inactive_anon:0kB active_file:12564kB inactive_file:157940kB unevictable:1536kB writepending:360kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:36144kB local_pcp:18200kB free_cma:0kB [ 227.701994][T13109] syzkaller0: entered promiscuous mode [ 227.707623][T13109] syzkaller0: entered allmulticast mode [ 227.719008][T13103] lowmem_reserve[]: 0 0 1 1 1 [ 227.724632][T13103] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 227.802602][T13103] lowmem_reserve[]: 0 0 0 0 0 [ 227.807367][T13103] Node 1 Normal free:3889816kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17888kB local_pcp:10304kB free_cma:0kB [ 227.846212][T13109] tipc: Resetting bearer [ 227.864681][T13107] tipc: Resetting bearer [ 227.876980][T13103] lowmem_reserve[]: 0 0 0 0 0 [ 227.882613][T13103] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 227.904027][T13103] Node 0 DMA32: 326*4kB (UME) 891*8kB (UM) 159*16kB (UM) 158*32kB (UME) 53*64kB (UM) 43*128kB (UME) 31*256kB (UME) 21*512kB (UM) 12*1024kB (UM) 8*2048kB (UME) 243*4096kB (UM) = 1067616kB [ 227.926871][T13107] tipc: Disabling bearer [ 227.958753][T13103] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 227.978830][T13126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.989159][T13103] Node 1 [ 228.009383][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'. [ 228.014034][T13103] Normal: 220*4kB (UE) 51*8kB (UME) 53*16kB (UME) 112*32kB (UME) 37*64kB (UME) 6*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3889816kB [ 228.092780][T13103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.116068][T13103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.135390][T13103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.172478][T13103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.208467][T13103] 46395 total pagecache pages [ 228.213283][T13103] 0 pages in swap cache [ 228.219445][T13103] Free swap = 124996kB [ 228.228755][T13103] Total swap = 124996kB [ 228.232941][T13103] 2097051 pages RAM [ 228.246102][T13103] 0 pages HighMem/MovableOnly [ 228.265376][T13103] 425672 pages reserved [ 228.315395][T13103] 0 pages cma reserved [ 228.639788][T13150] team0: entered promiscuous mode [ 228.645813][T13150] C: entered promiscuous mode [ 228.655877][T13150] team_slave_1: entered promiscuous mode [ 228.664207][T13150] syz_tun: entered promiscuous mode [ 228.675154][T13150] debugfs: 'hsr1' already exists in 'hsr' [ 228.682256][T13150] Cannot create hsr debugfs directory [ 228.687909][T13150] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 228.798988][T13150] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 229.758222][T13190] __nla_validate_parse: 7 callbacks suppressed [ 229.758239][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2113'. [ 230.330242][T13235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.341786][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'. [ 230.365659][T13237] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 230.376080][T13237] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 230.897926][T13285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2141'. [ 230.917925][T13278] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.966531][T13281] syzkaller0: entered promiscuous mode [ 230.979649][T13281] syzkaller0: entered allmulticast mode [ 230.996897][T13281] tipc: Enabled bearer , priority 0 [ 231.033079][T13277] tipc: Resetting bearer [ 231.215873][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 232.021958][ T8787] tipc: Node number set to 307885471 [ 232.526892][T13277] tipc: Disabling bearer [ 232.607442][T13309] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 232.809225][T13324] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2149'. [ 232.837541][T13325] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20001 [ 232.884595][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 232.915417][T13328] pim6reg1: entered promiscuous mode [ 232.933568][T13328] pim6reg1: entered allmulticast mode [ 233.059623][T13337] validate_nla: 4 callbacks suppressed [ 233.059642][T13337] netlink: 'syz.3.2157': attribute type 3 has an invalid length. [ 233.068083][T13337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2157'. [ 233.243317][T13353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2162'. [ 233.335219][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 233.382011][T13362] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 233.400935][T13361] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 233.451890][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 233.609428][T13376] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 233.724195][T13386] nbd: must specify at least one socket [ 234.169944][T13430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.866151][T13481] netlink: 'syz.1.2204': attribute type 9 has an invalid length. [ 234.987301][T13485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.063100][T13485] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 235.332045][T13517] __nla_validate_parse: 5 callbacks suppressed [ 235.332064][T13517] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2212'. [ 235.348261][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 235.362953][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2214'. [ 235.392046][T13520] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.408063][T13521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.014195][T13568] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2228'. [ 236.021464][T13570] sctp: [Deprecated]: syz.2.2229 (pid 13570) Use of int in maxseg socket option. [ 236.021464][T13570] Use struct sctp_assoc_value instead [ 236.137210][T13574] netlink: 'syz.4.2230': attribute type 1 has an invalid length. [ 236.217623][T13574] veth5: entered promiscuous mode [ 236.313371][T13586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2236'. [ 236.336771][T13589] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 236.345152][T13586] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2236'. [ 236.438262][T13594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2238'. [ 236.491013][T13601] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 236.866565][T13618] xt_policy: too many policy elements [ 236.885172][T13618] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2243'. [ 236.923443][T13620] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 236.936294][T13620] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2244'. [ 236.981290][T13624] netlink: 'syz.4.2246': attribute type 75 has an invalid length. [ 237.182128][ C1] ------------[ cut here ]------------ [ 237.187913][ C1] WARNING: CPU: 1 PID: 13633 at net/mptcp/subflow.c:1520 subflow_data_ready+0x4b8/0x7e0 [ 237.197709][ C1] Modules linked in: [ 237.201944][ C1] CPU: 1 UID: 0 PID: 13633 Comm: syz.2.2249 Not tainted syzkaller #0 PREEMPT(full) [ 237.211370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.221476][ C1] RIP: 0010:subflow_data_ready+0x4b8/0x7e0 [ 237.227328][ C1] Code: 0f 0b 90 90 e9 bc fc ff ff e8 04 3f 59 f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 0e 00 00 e8 e9 3e 59 f6 90 <0f> 0b 90 e9 e5 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1 [ 237.247017][ C1] RSP: 0018:ffffc90000a08140 EFLAGS: 00010246 [ 237.253153][ C1] RAX: ffffffff8b666ea7 RBX: ffff888021393fc0 RCX: ffff8880254d9e00 [ 237.261187][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.269221][ C1] RBP: 0000000000000000 R08: ffff88805574b92f R09: 1ffff1100aae9725 [ 237.277219][ C1] R10: dffffc0000000000 R11: ffffed100aae9726 R12: 0000000000000000 [ 237.285248][ C1] R13: dffffc0000000000 R14: ffff88805574b000 R15: 0000000000000000 [ 237.293275][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 237.302267][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.308900][ C1] CR2: 00007fb109974860 CR3: 000000000df36000 CR4: 00000000003526f0 [ 237.316918][ C1] Call Trace: [ 237.320253][ C1] [ 237.323129][ C1] tcp_data_queue+0x54b/0x6380 [ 237.327946][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 237.333210][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 237.337844][ C1] tcp_rcv_state_process+0x2767/0x4140 [ 237.343379][ C1] ? __lock_acquire+0xab9/0xd20 [ 237.348273][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 237.354145][ C1] ? do_raw_spin_lock+0x121/0x290 [ 237.359235][ C1] tcp_v4_do_rcv+0x3f2/0xce0 [ 237.363860][ C1] tcp_v4_rcv+0x26a6/0x2f40 [ 237.368416][ C1] ? tcp_v4_rcv+0x10c1/0x2f40 [ 237.373166][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 237.378069][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 237.382996][ C1] ip_protocol_deliver_rcu+0x221/0x440 [ 237.388528][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 237.394187][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 237.399712][ C1] NF_HOOK+0x309/0x3a0 [ 237.403813][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 237.409842][ C1] ? NF_HOOK+0x9a/0x3a0 [ 237.414019][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 237.418654][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 237.423961][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 237.430001][ C1] ? skb_dst+0x4f/0xd0 [ 237.434101][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 237.439182][ C1] NF_HOOK+0x309/0x3a0 [ 237.443265][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 237.448423][ C1] ? NF_HOOK+0x9a/0x3a0 [ 237.452620][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 237.457227][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 237.461870][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 237.467008][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 237.471566][ C1] __netif_receive_skb+0x143/0x380 [ 237.476735][ C1] ? process_backlog+0x2d5/0x14f0 [ 237.481834][ C1] process_backlog+0x60e/0x14f0 [ 237.486723][ C1] ? __pfx_process_backlog+0x10/0x10 [ 237.492076][ C1] __napi_poll+0xc7/0x360 [ 237.496429][ C1] ? net_rx_action+0x46d/0xe30 [ 237.501259][ C1] net_rx_action+0x707/0xe30 [ 237.505898][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 237.511090][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 237.516415][ C1] handle_softirqs+0x283/0x870 [ 237.521236][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 237.526026][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 237.531376][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 237.536606][ C1] __irq_exit_rcu+0xca/0x1f0 [ 237.541245][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 237.546491][ C1] irq_exit_rcu+0x9/0x30 [ 237.550777][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 237.556425][ C1] [ 237.559391][ C1] [ 237.562336][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.568357][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 237.573666][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 81 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 237.593322][ C1] RSP: 0018:ffffc9001b9af2b0 EFLAGS: 00000206 [ 237.599439][ C1] RAX: 91ca59582e713b00 RBX: 0000000000000000 RCX: 91ca59582e713b00 [ 237.607441][ C1] RDX: 0000000000000000 RSI: ffffffff8dba9961 RDI: ffffffff8be33f00 [ 237.615476][ C1] RBP: ffffffff822e57e7 R08: 0000000000000000 R09: ffffffff822e57e7 [ 237.623593][ C1] R10: dffffc0000000000 R11: fffff94000346441 R12: 0000000000000002 [ 237.631618][ C1] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000246 [ 237.639732][ C1] ? page_table_check_clear+0x187/0x700 [ 237.645315][ C1] ? page_table_check_clear+0x187/0x700 [ 237.650945][ C1] ? pfn_valid+0xba/0x490 [ 237.655306][ C1] ? pfn_valid+0xba/0x490 [ 237.659700][ C1] ? page_table_check_clear+0x187/0x700 [ 237.665281][ C1] page_table_check_clear+0x1a4/0x700 [ 237.670717][ C1] ? page_table_check_clear+0x187/0x700 [ 237.676296][ C1] ? vm_normal_page+0xb7/0x210 [ 237.681117][ C1] unmap_page_range+0x3445/0x4370 [ 237.686210][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 237.691638][ C1] ? mas_find+0xb0e/0xd30 [ 237.695991][ C1] ? unmap_vmas+0x144/0x580 [ 237.700543][ C1] unmap_vmas+0x399/0x580 [ 237.704901][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 237.709837][ C1] exit_mmap+0x248/0xb50 [ 237.714111][ C1] ? uprobe_clear_state+0x20f/0x290 [ 237.719365][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 237.724153][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 237.729855][ C1] ? __pfx_exit_aio+0x10/0x10 [ 237.734574][ C1] ? uprobe_clear_state+0x274/0x290 [ 237.739855][ C1] __mmput+0x118/0x430 [ 237.743954][ C1] exit_mm+0x1da/0x2c0 [ 237.748070][ C1] ? __pfx_exit_mm+0x10/0x10 [ 237.752736][ C1] ? rcu_is_watching+0x15/0xb0 [ 237.757534][ C1] do_exit+0x648/0x2300 [ 237.761770][ C1] ? cgroup_freezing+0x20/0x350 [ 237.766646][ C1] ? __pfx_do_exit+0x10/0x10 [ 237.771299][ C1] ? cgroup_freezing+0x20/0x350 [ 237.776175][ C1] ? cgroup_freezing+0x20/0x350 [ 237.781100][ C1] do_group_exit+0x21c/0x2d0 [ 237.785733][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.790991][ C1] get_signal+0x1286/0x1340 [ 237.795539][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 237.801143][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.807345][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 237.812867][ C1] exit_to_user_mode_loop+0x75/0x110 [ 237.818186][ C1] do_syscall_64+0x2bd/0x3b0 [ 237.822833][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.828054][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.834173][ C1] ? clear_bhb_loop+0x60/0xb0 [ 237.838904][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.844816][ C1] RIP: 0033:0x7f98d818eec9 [ 237.849288][ C1] Code: Unable to access opcode bytes at 0x7f98d818ee9f. [ 237.856319][ C1] RSP: 002b:00007f98d90880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 237.864803][ C1] RAX: fffffffffffffe00 RBX: 00007f98d83e5fa8 RCX: 00007f98d818eec9 [ 237.872832][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f98d83e5fa8 [ 237.880549][T13666] tipc: Enabled bearer , priority 0 [ 237.880839][ C1] RBP: 00007f98d83e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 237.892451][T13666] syzkaller0: entered promiscuous mode [ 237.895369][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.903948][T13666] syzkaller0: entered allmulticast mode [ 237.908907][ C1] R13: 00007f98d83e6038 R14: 00007ffe0e9ac710 R15: 00007ffe0e9ac7f8 [ 237.908945][ C1] [ 237.908967][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 237.908982][ C1] CPU: 1 UID: 0 PID: 13633 Comm: syz.2.2249 Not tainted syzkaller #0 PREEMPT(full) [ 237.909004][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.909016][ C1] Call Trace: [ 237.909025][ C1] [ 237.909033][ C1] dump_stack_lvl+0x99/0x250 [ 237.909063][ C1] ? __asan_memcpy+0x40/0x70 [ 237.909087][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.909108][ C1] ? __pfx__printk+0x10/0x10 [ 237.909148][ C1] vpanic+0x281/0x750 [ 237.909169][ C1] ? __pfx__printk+0x10/0x10 [ 237.909191][ C1] ? __pfx_vpanic+0x10/0x10 [ 237.909211][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 237.909251][ C1] panic+0xb9/0xc0 [ 237.909272][ C1] ? __pfx_panic+0x10/0x10 [ 237.909307][ C1] __warn+0x31b/0x4b0 [ 237.909327][ C1] ? subflow_data_ready+0x4b8/0x7e0 [ 237.909355][ C1] ? subflow_data_ready+0x4b8/0x7e0 [ 237.909380][ C1] report_bug+0x2be/0x4f0 [ 237.909398][ C1] ? subflow_data_ready+0x4b8/0x7e0 [ 237.909424][ C1] ? subflow_data_ready+0x4b8/0x7e0 [ 237.909449][ C1] ? subflow_data_ready+0x4ba/0x7e0 [ 237.909472][ C1] handle_bug+0x84/0x160 [ 237.909496][ C1] exc_invalid_op+0x1a/0x50 [ 237.909519][ C1] asm_exc_invalid_op+0x1a/0x20 [ 237.909537][ C1] RIP: 0010:subflow_data_ready+0x4b8/0x7e0 [ 237.909563][ C1] Code: 0f 0b 90 90 e9 bc fc ff ff e8 04 3f 59 f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 0e 00 00 e8 e9 3e 59 f6 90 <0f> 0b 90 e9 e5 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1 [ 237.909580][ C1] RSP: 0018:ffffc90000a08140 EFLAGS: 00010246 [ 237.909599][ C1] RAX: ffffffff8b666ea7 RBX: ffff888021393fc0 RCX: ffff8880254d9e00 [ 237.909614][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.909625][ C1] RBP: 0000000000000000 R08: ffff88805574b92f R09: 1ffff1100aae9725 [ 237.909639][ C1] R10: dffffc0000000000 R11: ffffed100aae9726 R12: 0000000000000000 [ 237.909652][ C1] R13: dffffc0000000000 R14: ffff88805574b000 R15: 0000000000000000 [ 237.909673][ C1] ? subflow_data_ready+0x4b7/0x7e0 [ 237.909711][ C1] tcp_data_queue+0x54b/0x6380 [ 237.909769][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 237.909796][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 237.909833][ C1] tcp_rcv_state_process+0x2767/0x4140 [ 237.909871][ C1] ? __lock_acquire+0xab9/0xd20 [ 237.909899][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 237.909934][ C1] ? do_raw_spin_lock+0x121/0x290 [ 237.909964][ C1] tcp_v4_do_rcv+0x3f2/0xce0 [ 237.909992][ C1] tcp_v4_rcv+0x26a6/0x2f40 [ 237.910014][ C1] ? tcp_v4_rcv+0x10c1/0x2f40 [ 237.910070][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 237.910100][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 237.910122][ C1] ip_protocol_deliver_rcu+0x221/0x440 [ 237.910144][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 237.910166][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 237.910194][ C1] NF_HOOK+0x309/0x3a0 [ 237.910216][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 237.910235][ C1] ? NF_HOOK+0x9a/0x3a0 [ 237.910253][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 237.910269][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 237.910293][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 237.910314][ C1] ? skb_dst+0x4f/0xd0 [ 237.910335][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 237.910357][ C1] NF_HOOK+0x309/0x3a0 [ 237.910378][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 237.910397][ C1] ? NF_HOOK+0x9a/0x3a0 [ 237.910415][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 237.910432][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 237.910452][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 237.910481][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 237.910499][ C1] __netif_receive_skb+0x143/0x380 [ 237.910531][ C1] ? process_backlog+0x2d5/0x14f0 [ 237.910553][ C1] process_backlog+0x60e/0x14f0 [ 237.910590][ C1] ? __pfx_process_backlog+0x10/0x10 [ 237.910620][ C1] __napi_poll+0xc7/0x360 [ 237.910636][ C1] ? net_rx_action+0x46d/0xe30 [ 237.910658][ C1] net_rx_action+0x707/0xe30 [ 237.910698][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 237.910738][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 237.910774][ C1] handle_softirqs+0x283/0x870 [ 237.910798][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 237.910823][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 237.910852][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 237.910878][ C1] __irq_exit_rcu+0xca/0x1f0 [ 237.910897][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 237.910925][ C1] irq_exit_rcu+0x9/0x30 [ 237.910942][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 237.910961][ C1] [ 237.910968][ C1] [ 237.910976][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.910996][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 237.911027][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 81 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 237.911043][ C1] RSP: 0018:ffffc9001b9af2b0 EFLAGS: 00000206 [ 237.911060][ C1] RAX: 91ca59582e713b00 RBX: 0000000000000000 RCX: 91ca59582e713b00 [ 237.911073][ C1] RDX: 0000000000000000 RSI: ffffffff8dba9961 RDI: ffffffff8be33f00 [ 237.911087][ C1] RBP: ffffffff822e57e7 R08: 0000000000000000 R09: ffffffff822e57e7 [ 237.911100][ C1] R10: dffffc0000000000 R11: fffff94000346441 R12: 0000000000000002 [ 237.911113][ C1] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000246 [ 237.911129][ C1] ? page_table_check_clear+0x187/0x700 [ 237.911156][ C1] ? page_table_check_clear+0x187/0x700 [ 237.911191][ C1] ? pfn_valid+0xba/0x490 [ 237.911218][ C1] ? pfn_valid+0xba/0x490 [ 237.911243][ C1] ? page_table_check_clear+0x187/0x700 [ 237.911270][ C1] page_table_check_clear+0x1a4/0x700 [ 237.911294][ C1] ? page_table_check_clear+0x187/0x700 [ 237.911319][ C1] ? vm_normal_page+0xb7/0x210 [ 237.911340][ C1] unmap_page_range+0x3445/0x4370 [ 237.911412][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 237.911439][ C1] ? mas_find+0xb0e/0xd30 [ 237.911458][ C1] ? unmap_vmas+0x144/0x580 [ 237.911479][ C1] unmap_vmas+0x399/0x580 [ 237.911508][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 237.911554][ C1] exit_mmap+0x248/0xb50 [ 237.911581][ C1] ? uprobe_clear_state+0x20f/0x290 [ 237.911606][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 237.911629][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 237.911668][ C1] ? __pfx_exit_aio+0x10/0x10 [ 237.911707][ C1] ? uprobe_clear_state+0x274/0x290 [ 237.911740][ C1] __mmput+0x118/0x430 [ 237.911762][ C1] exit_mm+0x1da/0x2c0 [ 237.911788][ C1] ? __pfx_exit_mm+0x10/0x10 [ 237.911816][ C1] ? rcu_is_watching+0x15/0xb0 [ 237.911839][ C1] do_exit+0x648/0x2300 [ 237.911871][ C1] ? cgroup_freezing+0x20/0x350 [ 237.911897][ C1] ? __pfx_do_exit+0x10/0x10 [ 237.911924][ C1] ? cgroup_freezing+0x20/0x350 [ 237.911944][ C1] ? cgroup_freezing+0x20/0x350 [ 237.911977][ C1] do_group_exit+0x21c/0x2d0 [ 237.912002][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.912024][ C1] get_signal+0x1286/0x1340 [ 237.912065][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 237.912100][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.912144][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 237.912175][ C1] exit_to_user_mode_loop+0x75/0x110 [ 237.912202][ C1] do_syscall_64+0x2bd/0x3b0 [ 237.912221][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.912241][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.912260][ C1] ? clear_bhb_loop+0x60/0xb0 [ 237.912286][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.912304][ C1] RIP: 0033:0x7f98d818eec9 [ 237.912319][ C1] Code: Unable to access opcode bytes at 0x7f98d818ee9f. [ 237.912330][ C1] RSP: 002b:00007f98d90880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 237.912348][ C1] RAX: fffffffffffffe00 RBX: 00007f98d83e5fa8 RCX: 00007f98d818eec9 [ 237.912362][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f98d83e5fa8 [ 237.912373][ C1] RBP: 00007f98d83e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 237.912385][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.912397][ C1] R13: 00007f98d83e6038 R14: 00007ffe0e9ac710 R15: 00007ffe0e9ac7f8 [ 237.912427][ C1] [ 237.915078][ C1] Kernel Offset: disabled