last executing test programs: 11.564591228s ago: executing program 3 (id=14222): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x22020400) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x9, 0x0, 0x1, 0x10000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), 0x9, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), 0x9, r2}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd77, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x1, 0x0, 0x0, "6191440132bb112240fcbcc3fa9d0431575f8614db538ce09c50eecf6ac579e8e83b944b666113f3afed71231e6653a1e899f17b33515bb07c9a1ed652a2159b"}}, 0x80}}, 0x4004044) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd77, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x1, 0x0, 0x0, "6191440132bb112240fcbcc3fa9d0431575f8614db538ce09c50eecf6ac579e8e83b944b666113f3afed71231e6653a1e899f17b33515bb07c9a1ed652a2159b"}}, 0x80}}, 0x4004044) r5 = socket$inet(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000381af5363340c21648eee2e716e000003400400cd9b1d4aa1df8742"], 0x54}, 0x1, 0x0, 0x0, 0x4004004}, 0x1000c045) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x101}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/uts\x00') (async) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/uts\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r11, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) 8.735163639s ago: executing program 3 (id=14227): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002009400000008000340000000d50800044000000001080006400000000208000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000) socket$nl_crypto(0x10, 0x3, 0x15) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) (async) close(0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002009400000008000340000000d50800044000000001080006400000000208000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000) (async) 8.308656984s ago: executing program 3 (id=14233): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.249136466s ago: executing program 3 (id=14236): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 6.475612613s ago: executing program 0 (id=14252): pipe(0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000240)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @from_mac, {0x3, 0x7}, @value=@ver_80211n={0x0, 0xa, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x36, @val={0x8c, 0x18, {0x33f, "6c3c6bf237fc", @long="fa532817a59b21cace9868dc3f69cf01"}}}, 0x38) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000380012800e00010069703665727370616e000000240002801401050000000000000000000000ffff7f0400010400120005001600fe00f1edb6ef5d3ab68b5491f42aed29a43bf492daf597b697c1ef6bf9af57f35800bbd25e3d20ef2e3a15e0f44b78ace81e828dc6f80d97847ffd82a6231ae2f66dc70fddd090a1512a01a72fd91e5e5249c5d61c3dfce54b"], 0x58}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x71, 0x0, &(0x7f0000000380)="3d6ee2e04b884e77d8bc83c7a8e719c4a527e3ff7f817386a7c1d41bd27c7ef03d14db47f34eae1b1df8c2eadbd9a3d5054874e915fdb9257a6e19bd360cda42bc0e34e11af77d05045c06a563a42a50ae7adec1b7fdadf0fd56ecf23e676574c0165a792bd110630b7cfe837dd1878438", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xa00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.536010702s ago: executing program 0 (id=14264): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)={0x4}, &(0x7f0000000340)=0xb) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16=r0], 0x48) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket(0x1d, 0x2, 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x5813f000) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x10, 0x803, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$netlink(0x10, 0x3, 0x8000000004) 4.362296278s ago: executing program 0 (id=14267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x2c00, 0x0, @void}, 0x10) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbf9, 0x1000000}, 0xfffffffffffffe98) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="03c9fa15764b130d252a"], 0x4) (async) socketpair(0x23, 0x80000, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 4.062049758s ago: executing program 0 (id=14269): socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x18}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x10001}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000885}, 0x4054) 4.061092645s ago: executing program 4 (id=14270): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ff", 0x32}, {&(0x7f0000000380)="2e366579122caa", 0x7}], 0x2, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000000), 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007e3"], 0x28}}, 0x4000800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000100001000000000000000000f600000a20000000000a01080000000000000000070000000900010073791559896b377c46a8f44865ad7a30000000004c0000000907010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00500000000c0a07000000000000000000070000020900020073797a31000000185e00010073797a300000000024000380200000800800034000000002100002800c00028008000180fffffffb040006401400000010000100"], 0xe4}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x11, 0x148, 0x340, 0x0, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r10}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'erspan0\x00', {0xff}, 0x4, 0x1e}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) 3.857754232s ago: executing program 4 (id=14273): syz_emit_ethernet(0x216a, &(0x7f0000002ac0)={@local, @dev, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7438dd", 0x2130, 0x3a, 0x1, @remote, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x7, '\x00', {0x8, 0x6, "7fa7a4", 0x2, 0x3a, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x84, 0x0, 0x5, 0x0, 0x0, 0x6, 0x64}, @fragment={0x2, 0x0, 0xf9, 0x0, 0x0, 0x1b, 0x67}, @hopopts={0x32, 0x20b, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x1, 0x20, "b593c159cffb263df7fa621bd20c1247b1d00b2aa82bb85ab91289c815c4cb64"}, @ra={0x5, 0x2, 0x804}, @generic={0x3, 0x1000, "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"}, @hao={0xc9, 0x10, @mcast1}, @enc_lim, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0xdb}]}, @fragment={0x11, 0x0, 0x2f, 0x0, 0x0, 0x4, 0x68}, @dstopts={0x0, 0x207, '\x00', [@generic={0x4, 0x1000, "f9a4e20d22ca9cd8ef146c9f1e010ffec374207fb554474c20d24fe82758c2cfac9f44862febb7e4d94329ed036aecbc93dcb92faee7c478f4356c1d20cfbe7d7875d5411df1ba4002029e9a18a97117b0114e087e9c29b7c7cfe3c77b684965d341e4db8006d6567b71fcc77ff2fe64b3a14f6b9c3ac3b42e115a962da82e5b4b6cd3de9755e50fba55f954287feefb954230a1ebe52e0a2078e484ca0c575ae2d41025cbacc083ca809d4f836cb783340f7df22a8404a4c44e435efdb6b1fca8dc5e51de1fc20695336c883246e66c0b7662f4d235d2861050faaf2432e4881ef93019492b2b6ba72d62a6d0f2152fad8cbb039fce33b0abff8b413696060dd0248a153a9f7bcbb81db6f5372e01f16ebaafe57c0571f6cb4bc424db1951faa96e9eae73e9e75cedfb7ab9c902e5d78bdbf1cb5de22ac393c25dfa702ed3a8c3cdfa74edcc36dad8f7e205a2956535f3fd62b6b680fec2f0978aaf09d3f73b58691b5ae7f8e0737ba708104d962fe6b886fe68739093759c2a9d600f757ecbd88903a7b5b801d5b6e9154c850e5114cbb1682094578f0e8367d18564bf5e70d163a06f0feb24fb51f8568ba4e7c07d470ccff3147a3eb6805c8623c48ed3dd783ace020036d51f482b904ba935cd05ccf4a196e2b180dca0fb2b76abf98b23c4a597df03e203223a0cbdbefcdce4171e60e99634978488f63c136de998974ca4691dae72c240816b15f6c4760f89385cce0d1ef523a1e6547283c8fe1cb0b46897420031d0e40bfa1e7b53fc3c9d11dfcb3c80914b03122006bbcae7774c6a53a84e9fbee9d71c335579eacff4ee770f2308f963509aa912f884b7b51da05fd9d50a85815358edd75c37a8b118d2bbaf79e9d0af2e450045ca902f680f66db85fc0d2e542b746db9c517a1cafc3112a791b8b18e7a31f50a2207351b448bca89a1f285124f9892112201e92fd5d60e811f6c1e0b38a3ebcb34bfd2f4ee4c93bf2be750faebd1ba287d240516c3f3867fc7a56a3dc4ea0430a2c1bdf4d7901972a0d338ebc8c03b329a4f54f69af42165f54683c432ec249a1f9088ca5337c7ec2f85b443f41b4f09938c97daa01bcb5c225c4732766705d0ae73f47a270c3215bb1fec3db8293619c1fbb60ee589bb2bcb8c14360456f55cf4cea085e0c4bc0b0fe585acbdb7aa4082ad8bbcfda7f9f60eacee6ef199831cbf96b081d602bf9b99384299df1c52c7c9edbce5b60f0e1989ba878af24a24399b8112c202127b2a4e275cb9968a32fbc08359314de6f1b777c86a117eee082f16c087cf9ea4f5dfa205a57ec5540aeded28a9ca81797ec7eb58a9061011882a9bd20abd26112e789c7a5317ecab1e93d3440c6823d40519bd945be08d606de4c5de347a948ecb10826e5b233e99a1ed45ee47cb46ec5ccadac1688f7bd644a2031fb413540ac5850664556ee92e3d1cf0aa356f8bd17ed3bc239a2f81aa9cac8fb75126ad7e93052a245c7e0895af3060fa1d29472dd827b651019dbe95ca324537a6af9a084d60c2aa90f7392691021ab2ca7d6af8e31df4a5191d3145ade754f0972454494b6314bd1eb1af73049813830cc00a0f5f8da8b72e663ac570c54b91ecd9956b78a65b89eb576ffe4542b4ef7d4f6014f24766cfb8a7bda9aa39b78a6bd17db73a9a05178653e89b225da900907cbe15b318e89b69f6186e670272a4dec76ae05354d271d9fd5ffee9e5614483238fe2c1a8616d29825decf1e92402ad1ccefe5a0227ece98655fb1a33fb67a831aba7355dc834fdd55534a4c4f57b0a8b571075fdbd5fd3b7280ee767a3ec4f8ae9638ce5f125708e12d5f972dcc29e23bc1f91aabb0c1d86003bd319d095cd141934fe5bab956220680cc652f21deef5ba609f78faef3dc95df9c76582992e40a3bb6e43a7466fc2e35ec0b093a27d1eb431e412a2a8e80d38804f4074ebca373f1fa66dbf5bef9418b443b30c07fd33cc3d241aac94f5e79071df32c0019fd1625196433370c0f0ae655b391155755e141c1f012cec7b765f68ea2de74247687877ae4846f48678ed6cb7e1f35a81667f7db14d502b3548126b3530f02f8a94d679f9dc0e59fccc4883378466730786360a0c0fcfbe26c00d8fe8b16d7d34fb03c0b5d2ca91fd67755d2a30f3833647d5a086d7626eb3c2295f2291ec9f468b05d6d761566766e3c9b0388339aea9769b18db295f443c5c3a3069ccb7e92bc1f8c1394e3f16edabe76e2098f7050f62a2e54481ca06b8a1ba09fa0c4139e934e1172b793a627eb8a0a29cca8436ad834a694074a7fdb558f0217ab15ac81109f03304a1353dd86ab8d42cdef7c51278b6d325d1921cd9f82ac8e4a4ad29314560a564db6cae31b37c5ba3256a66b03ad9b0b159eec367f9163f6875ecdbd2df56f73913a7450aadbc0c4f3f1e7e669bb2c3dac30565a535ebf204cb64ff1b8c76de0b59047f926f0e823180c1dc081fff4e205566fab16ccb8dc6ec74e4c3679a285273de8866e46ab8c99f3cd84eb2b23d5bbbe951e5e60297bad4318400f55d89b96f73cc64cc3090619435cb66b16c592aaad22f65c5e1b2969ac7bdd138585dc03d9689c799492b198dcf6405fac052c3603b289c43a601a11cffa036bb09d8420db6c7db0ed55eceef874bc541455614e9d90d19a6c788093fb6d4c196e6d64f3199178cc72ee9945774f9ebcd2881dec0ad52c3d9a68beefd73c5da2badb52fd066f43d4205f11ad6c19c1eeba5ff1e5ecaa9788fad43c025bf98a754f548f3599f5d864b57d7effb186afa86103b09dcbc9053432d0b4dc42be9b6a6bb5831991ef5fabee92ea511d26233e7c99af9b7eefa6722e1eeb4f18161ad6a71969253c526eb60d126c7d741e942d783b9297e5f5afec54c55e5b1e28341c62a6185a2af6fc9d352ba79ae2eb3ea7f720ed6099aa814763866c051c3c05f3c2b65353903cffbad481937fd0ece440743646c90fbbd4ad42932dd870a045f08bb75248df2389011a0d131959f36e70c5c90b0a57b698a046df8efba8ecdd7cb171cb86b513ff1e257ff0b42ee5f4a5dafc2ffaf76d674c6f797b64b409fbbe38f62d01dd69bfdaa48c624e60383277c11f236f9d61f96f74cfffd5b10abd1ff03d17958c149621831490d455c6c1bf1bd36bc9a5654b6766cd2884ac32974eaba15dc3e1a94fb0c1859ea448a3d616d7ae029c3b5f8ed2486cdd2533a03a7938d2e7666661faee37d85131e58329b871b23ef81162d1f019f3a9cb4b313c899cebdcdd1c46907bad19c94032f491ff48a04248b0855a4b4c55785ddad4a3f605e7e68db892c1823f969e6822dcce05f8b4bbb9b34b53bc73a0e05abe1d135de2f95d74b1861a1b58cf3d2195f58b6124517300eded71e93a95ba56219a02b459515ff2471e036ba95ce8c2585f47e432441c68a9ab604d395ed99d300bf98a2ba700095383e70bdf2112485af459a7b3652c20b4672dea4abe9e32486393e315554ffecc1b12d6b561aee85a7d6ec165618bb5265daf029a03b89c4191e0301c80d6856b2e21ce460012afc44aff79d6c98d58a91dd6ea19806575d0a64690f22a9b090b8f23bf216a1a494ef59ef4d93ab8c410fdeaf5c273eabd2b7ff8691cf0e7c8edf9d7877d88f35b41ead9ad9d4d79a896118ad35c51e60bfece5f0db4dbb9e438002148de36b68583fe13109fb583556d5f04ffa11ae5b68e4db3751f61e9f80c11f150ded01e5479524a8b998591437a51727ed0a72a4b49da11fe074cbbae07da8aa714d2209d415041f9e536b1f9acc86576e20561f50e5e531aaa9597bca5996634deccceaa7a144c7dc072701fb5383129aefcf982e8a0e4d56f05bdfb443d6847f75dd7f825b6e459bc105f97b564bb69a6346d57d537fa104320e830d9256bd4829ab7e7724637bb3c4c8bcdf2d26a9147b164c6a9cff9386ff3cb6ab258f88b668bdec5ae131e07a0158a387b04eea87f213fcb540c158f21e0c034d8a72f6e1a53583083ed2f044c78ba9d2e39513e54a61daf9de939854eeb116b41e5c24c58faf63eafc4e536bbb777f543c6e279a5bb5bea25be775bf3772be9b7683d4cd7f25cdb39a7f625274e59fb6aee120b5478ab6995a5dbd7677652ad8a1add1f8899e76d4febc96aae59857c236225c70c8d300b71e55657e1cbb46a8c6e5a950d807d84d1dc645bdf565f5af80955d9e5bf278cc78d723f672df72195df4399f8ec1e8f8874020936d2169be8c626a2ddb1b3f982287b3dbb0c1296b5c8c064b69f06b5b72d2c3c645f9991dc3972a5235c37f7e37bd063623c45ef41d9de49b25a09cfbaf377ac9d8c247fc1e043333a04be17393206236ce00446439ddba40a2e199a48b2dd7ae0ada5f69287b9c971c2ff99d2642d4b95130e25bb5007a74e6745d1ea8d53004ecc43ba8928cfebccbe60d6d4e655d75146c07374778613d3c004aaefc4b34086ac4b3ce7a25dffc0b2bf784b221113160f0747e532659f9457c3ed446f536924e11ef8cf04ee29617e95e63baee98e36584dcd8c44ab03fdb302b4099505e60d652111b9915e0bbff3370bc2854173bdb94e5b7cf96a24ba0413a0df12191bc508716183184e243123376869aa721945f2702e66637d3b84fe5f0559d42260746cf5bf6f1b3fb26a189415141a47c6c20c1c4f3b427e4171e206b20c3fe990d5d25c0b1783038d36bbece2609fd8d6b25b8778bd3a284a91020ce3de2d9bb243bc87c9aafef781e86775eec232d310abd8de7f1c0e5c3c5439aa71e01a2f598810d0f0f815e14f68b32dffa1e3c5b2f41a26f61381a43677ab840ef9f2fdf5fcdb8f4b78631ff545138b58a6f543e52156e113e40700785318e333657a366d8bd09c35714660ca45a20761c67df49254365c60de9151372467ad45ab10d59535ae4d81946ebe50bf599d387270e0f96d395ee889f6ee35fe0cce70a3c8ba78b217a4a9498ef4ce9d656da956aaf9809227a5fb8c5027d6be2880774433051072db6e93809c3a79b8b509d0fab02c143c28d7822dc9b04d32e7ad65f17866171d21570448812c6400996ede4f8e6f50cecd03f1da5b1d0c79553b656672a91fa8d8e7703ee3dd05fc550b9f1c495b56ce56433d827b53ae20ef2d3d1bee6f4760356abaa88ea37f989c219dedb07d8195ddf022dad65f93996282e8e31990634f1899f8e666b4ee4b25b2bd40f0265ae5f121d2d954072a235eadd41b74703492c75d839b9dd0724b52b2b59792c5db809a06578578fdbf219b83f1ff298e435e97f0e589ae7d2df5854e822bf0f826ec0611c2091a829210c4048cfd35b177a5a866368ad7f6bee8ad851992c4dbc087c95f99dbaf2e99266142b218aa141e61a11075006a899955540ebc262db13b68b0a8eae83b90383ccb790365f0a639895d4a81238bc5603079e37ffb32fc23c06b7cd40db2a5d668144a4de058aa2459303e870a287f5e2fa0bda51fd89bef0229075de3bc1f62045b5a65634ea9cfb3c415b248b22dcdc6b504414753a531438c8495fd26c01561af4e3dcdc7515363e1d907b5de63964f8654e378cbf042bed68147331ea155f0481980daecb26a077dcadcc1c0e5ef91a94d6006ee851c0d71466981f7ca24abe5c4a2dfc6ec5dec518b0e7d66b856625f8b25d5b4ec725d859e04673dd4e4c97994387519f6f5026b419a25291fc7a5ac1cab82412ae2de96cc4a4d9b5049d7dbe0fa93d92267a113fec0d04c79643b2dc319301d3c7854ce11ef0661a1bdf10299a9dcfbc2e6d9b6424"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0xd, [0x80000000, 0xbc]}}, @ra={0x5, 0x2, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @fragment={0x2c, 0x0, 0x8, 0x1, 0x0, 0x5, 0x66}], "34d9f3324efde893e0e9026a88b9651108e581b3772887504c53df9a03532f8fd76183bfe422cde2e3d7192bc419c04f2eae49847b1d72ae"}}}}}}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @remote, 0x5}], 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2808400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) listen(r0, 0xfff) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x800) 3.796728983s ago: executing program 0 (id=14274): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_DATA={0x30, 0x1f, "51c4e4717f816a319348367870a1e9cb93d27ce5cac8cd1b8359a177830224b15d9d07cf8bc7ea926c124a59"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x4048000) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x13, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x36, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c}, 0x21) 2.921238757s ago: executing program 4 (id=14281): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='htcp', 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000040)='htcp', 0x800, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x6]}, {0x1, 0x10, 0x6, 0xfffffffffffffff8}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xcf0a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000001c0), 0x9) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x2, 0xd, 0x80000000, 0x1]}, &(0x7f0000000300)=0x78) shutdown(r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000a200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_mptcp(0x2, 0x1, 0x106) (async) listen(r0, 0x20) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='htcp', 0x4) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000040)='htcp', 0x800, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x6]}, {0x1, 0x10, 0x6, 0xfffffffffffffff8}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xcf0a}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) (async) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) write$cgroup_type(r1, &(0x7f00000001c0), 0x9) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x2, 0xd, 0x80000000, 0x1]}, &(0x7f0000000300)=0x78) (async) shutdown(r0, 0x0) (async) pipe(&(0x7f0000000140)) (async) write(r5, &(0x7f0000000340), 0x11000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000a200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) 2.842320746s ago: executing program 0 (id=14283): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110b9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, &(0x7f00000007c0)) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0, @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x48081}, 0x20004080) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) 2.728500247s ago: executing program 1 (id=14285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x700, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x46, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback}}}}) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004100)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c0322b57e9ea91", 0xd0}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}], 0x3) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x74, 0x1, 0x1, 0x0, 0x0, 0x0, {0x2}, [@CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1062}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x401}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0), 0x8) shutdown(0xffffffffffffffff, 0x1) write(0xffffffffffffffff, 0x0, 0x3d) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.556642972s ago: executing program 4 (id=14286): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111ac0000000000850000008c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001280)={0x14, r1, 0x211, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4020) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x2c, &(0x7f00000001c0)=0x400, 0x4) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}, 0x1}}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000800)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x24, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0x5, "f42f7f"}, @exp_fastopen={0xfe, 0xb, 0xf989, "23c486d4219ab9"}]}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', r4, 0x2f, 0x25, 0xd, 0x5, 0x18, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x4, 0x7}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x218, 0x15, 0x0, 0x70bd2c, 0x25dfdbfd, {0x11, 0xf0}, [@INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "d21457d2a56b6379c207f4d2ee46772c2b1b2121b34efa7a7b328a1bb99243aab62ae6182ed0a54de2938962c8fcf4ca7cc63c516f2d78c7ad5fb520011a6ece50c23698bbbced4d0f814e33ed3ef1a57bffd55c3afbd5aa9b838afc0d1fdd90ab58eb215be83151f81535073ac27161351ca3d99452bb6e294915e6aa22f2dd4d58213358fec7d7260268176dac81c05e08bb6d3d5c99d749ed695222af3e8390d2fec7db3e17d4a055bd6e03ef87da3f"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "343794589f1a8732594017a87668ce30d963286d68c23596e45477b7f011b4752512ddeca8b35f240ce2d20bff495e5ffa29b599ddc63b0d7e8f3ad5146ee9a11be14f5afd7cfa3cc8de84020e61c4cf11c4ae70ae596ec965be32b0f749a932eab77d3fd4ca0fdd700670d05c6f42a6fff494b90cb50631f9a7e0918cf9afc3307fa730cd4947ed06db77806da9696a0165e9ee63b71a3bed79a8b7f8218248534c5cb7ff265ba0c2850611457ad345a5fa68"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "a6b7ad4af8b902a93534e6f66d0e356bab98d558d0a34ef95f865f412be9f719f81a1ca954c9deccf57267e8a748c3f53ffcb435549bd8f12ae5edd1f339eafd16275718592ce2e5c4dc75315770f42d1e847dea35d7c8bd"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "b153a78f4154741c9142c1a0ba807c03a63e74eae4543f90c657967d5f713fccd124dbe61698aa9ed78bd947d28bf825bf45fb"}]}, 0x218}}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000080)=""/128, &(0x7f0000000100)=0x80) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) socket$inet6_sctp(0xa, 0x6b7a090bc40883e7, 0x84) 2.505674545s ago: executing program 1 (id=14288): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r1, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000140)=0xe9cf, 0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="014b00004000000000f70100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.340700789s ago: executing program 1 (id=14289): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xc, [@enum64={0xf, 0x3, 0x0, 0x13, 0x0, 0x4, [{0xb, 0x7fff, 0x9}, {0x6, 0x3, 0xffffffff}, {0xc, 0x87, 0x79}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @struct={0xf, 0x5, 0x0, 0x4, 0x0, 0xf6f6, [{0x9, 0x5, 0x8000}, {0xf, 0x2, 0x101}, {0x4, 0x5}, {0x5, 0x5, 0x5}, {0x5, 0x4, 0x9}]}, @typedef={0xd}]}, {0x0, [0x0, 0x5f, 0x2e, 0x5f, 0x30, 0x5f, 0x30, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000380)=""/41, 0xb4, 0x29, 0x1, 0x2}, 0x28) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x7cc7a15b1bc22b31, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x58000, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2080}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xf9, &(0x7f0000000180)=""/249, 0x41000, 0x13, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000400)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xa, 0x9, 0xc00}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r3], &(0x7f0000000540)=[{0x5, 0x3, 0x3, 0x1}, {0x0, 0x4, 0xc, 0x6}, {0x4, 0x2, 0x3, 0xe}, {0x1, 0x5, 0xa, 0x8}, {0x2, 0x3, 0xd}, {0x5, 0x5, 0xf, 0xc}, {0x1, 0x3, 0xb, 0xa}, {0x3, 0x2, 0x5, 0x6}], 0x10, 0x200}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000006c0)="abdc299f3c7b17eab0a7a3c69367b03287fed13de55b", 0x16}, {&(0x7f0000000700)="31c5c81c963c122a1860896c7417b5aa086b4b2ab5695bdb268676b5586a71683cd0ef558cec7a5e63b5e1b1784aba627f47c1f859bfe7f7525f2425cb295b2a6a00fa23361f9137fc35aa494d13f77cb763751dec88ff45627eb4bedbd1045bb30af2ab8b9e8eb9", 0x68}, {&(0x7f0000000780)="35087dca79e13cd447a762b4434319aeff3404ab88f7aa1b407041165ef6caba287147ede26850f2464e40c9e4fcf2bdeed6fabaa33501c7d08668111b0521065f", 0x41}, {&(0x7f0000000800)="e51ee8e37283c00dd50710070032e49e0abc051ee5fade57f312436730da0ae2325be91bdceed0295dc6cd0574e286bdecfab0186a0461ed49ef37a4c35cd0ede108242f796c9d56b455280f44e0e2eb93ec7f981fcf065e485f10f89fb39ccff7bb8a4d5d8cba6bfc5133f9230d9c5656eb0d45315d95caa9a390e1659aaab4ada8de9d2199514c45eda28b326c9a63bd32501540a288389ec89a045b85eccea44846160291a84147b1253236ca103e32f60046b5b04772c2", 0xb9}], 0x4) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000900)={0xffff, 0x101}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%+9llu \x00'}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a00)={r4}) ppoll(&(0x7f0000000a40)=[{r2, 0x8000}, {r3, 0x8}, {r5, 0x4240}, {r6, 0x1085}, {r3, 0x8008}, {r0, 0x200}, {r7, 0x201}, {r3, 0xa000}, {r2}, {r2, 0x8003}], 0xa, &(0x7f0000000ac0)={0x0, 0x989680}, &(0x7f0000000b00)={[0x40]}, 0x8) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000b40)=0xec56, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004011}, 0x40004804) connect$phonet_pipe(r7, &(0x7f0000000d00)={0x23, 0x2, 0x99, 0x6}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r9, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x6, 0x8}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x48080) socket$can_bcm(0x1d, 0x2, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r11, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x58, r9, 0x405, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x22, 0x4c}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f44a58d220c7325bd4c9d3b68966e6b9"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dd055ae946108c69d178f8ef8942fb9c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x100}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c000}, 0x6008001) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x70, 0x464, 0x100, 0x70bd28, 0x25dfdbfd, "1b67c28e0a40b19c3d9eea7239f61ba34c4daf5edb1b1024811de17d6d715cbf1e0a78e63c99b89cf076dead8cf1c7f699d4fa2f8b969831d1d9304fc76194b1efe879fc1d9d05f07bb8c4c6fc901f8e503c707039fec70c003daa59a3", ["", ""]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0x20020000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000010c0)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x4}, &(0x7f0000001180)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000011c0)=@assoc_value={r12, 0xa33}, 0x8) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001200)={0xffffffffffffffff, 0x2e96adb1e142cc82, 0x7f, r1, 0xe}, 0xc) r13 = socket$can_bcm(0x1d, 0x2, 0x2) pread64(r13, &(0x7f0000001240)=""/105, 0x69, 0x10000) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f00000012c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001300)="fdaa600e5f3f09f6bd9ba621e840c997f9678521524d87bca0f4435ad3ee4156afb25648b71e0d5d9127742bf015fb1d8df3bc8d73aee727cfc2b471041a4c0515c19f67e77babee350d00d84cf37d47e8541c6f2cf3004905be9c87289e8b7edf", 0x61}], 0x1, &(0x7f00000013c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x2a, 0x0, 0x7, [0x5, 0x7, 0x2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x50}}, {{&(0x7f0000001440)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001480)="e6db5ca0a84249f15370c7533c9c9ac03e521b183841a285891a28470d0f7ef1abfe87e374ccf430cb82e6557390a25f4b43ba5beca4577bc9867545e504682b082e2a6cb30eee4525ff109b7233c5968ff7754097f61cd461d7581b8c7f8c9b9893df929ff35a37c84ab014c0dab80594fd44cfc3b8861d349651b5177561ce18e669c4a18915db92fd519081f8be607b4cca56a395677ce879a14cf648d192698eeab2da98ec9424c1875ea4e8e2c7d9f7ddb8393ce1ab3785cd3ed2b27c4344a87d060b57a5ef1ee60aae173fed64880ffe67bc30b4f053ed8d64103c20afc859", 0xe2}, {&(0x7f0000001580)="7a3fd41f30cf28494bf8037c5f40be89a2a82a98b8cde0d6653c51fdfd4436bd0e95b002ffc6f269c2244b7669c8721bc9ffcd845756b436c841071e4b425ef5cab8f6b592543196fe2451ae361e299ea77e2eebeac396419dbfe782f56051fe3520b43036549ff1b85ddab630de7c2d6167c2150cb94c7bc182e758a2dfd96a3d9d5dc0ee42bcbc3ea2ed4ef22c73ba0360f79110edae244b7be43ca7c3c664499e75188837d7f3c3806ca524e26de427ae7e57f634c10ac0e410bfad964f8c39636c58", 0xc4}], 0x2, &(0x7f00000016c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0xd8}}], 0x2, 0x81) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.1967287s ago: executing program 4 (id=14290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000500010000000900010073797a30000000000900030073797a320000130050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000340000000160900010073797a30"], 0xc4}}, 0x0) 2.195878743s ago: executing program 1 (id=14291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000010c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="1400000010000100000000005a0000000100000a28000000000a01040000000000000000010000030900010073797a300000000008000240000000002c000000030a010100000000000000000100fffc0900010073797a30000000000900030073797a3200000000b0000000060a010400000000000000000100000008000b400000000088000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000500001800c0001006269747769736500400002800800034000000002080001400000001408000240000000121c0007805be66820bb3f27819cc613dcbf91dc167dfa2dee9000000008000640000000020900010073797a30"], 0x12c}}, 0x10) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x1, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0xfff9, 0x9, 0xfffffbff, 'snmp_trap\x00', 'syz1\x00', {0x7}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x24}, 0xff, 0xffffffff, 'team0\x00', 'team_slave_0\x00', {}, {}, 0x84, 0x3, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) (async, rerun: 32) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) (rerun: 32) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.137132075s ago: executing program 4 (id=14292): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x12}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d00"], 0x38}}, 0x0) unshare(0x42000200) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f0000000000)=0x9, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080)=0x2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.065024721s ago: executing program 1 (id=14293): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}], 0x3) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.787794322s ago: executing program 1 (id=14294): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000040)}, 0x10) unshare(0x64000600) (async) unshare(0x64000600) r1 = socket$inet6(0xa, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x998b, 0x7, 0xa, 0xb8f}, {0xfa4f, 0x9, 0x9, 0x7}, {0xa3, 0x7, 0x8, 0x10001}, {0xe, 0x80, 0x5, 0x5}, {0x7, 0xff, 0x9, 0x5f5}]}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) 1.456612169s ago: executing program 2 (id=14297): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) syz_emit_ethernet(0x92, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5c, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x18}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x2}]}], "bd33a7ae"}}}}}}}, 0x0) epoll_create1(0x0) 1.339464434s ago: executing program 2 (id=14298): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x6a040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = accept4$ax25(r1, &(0x7f0000000280)={{0x3, @null}, [@remote, @netrom, @null, @null, @null, @bcast, @rose, @default]}, &(0x7f0000000200)=0x48, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40) (async) close(r3) 1.235931548s ago: executing program 2 (id=14299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 541.567501ms ago: executing program 3 (id=14300): socket$kcm(0x29, 0x2, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) 259.596158ms ago: executing program 3 (id=14301): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="fb00040003010052b200000000000e00f1ff030000000045a6f505a97ac59c43379914c8e2eecd38db5aaba3f1a44c80ba460fd1d3f90fdb30a2123dca195854d1a62c714e63cc74c6daf7532a12cae1a55b98a5c9a8dd4988d54ab5d8cc873996fd8fc6c74714b77ecb11a9e384cb533e0537205a81ddda3da38f9ac9cb4058918580c7653f8cd1a4a5d8c4bf38fcc47c3e6b197c16a362c378358b3b51fa8d2d71130293cca6db1247f75de38ed7db0c5b498ae3cbd0f98ccb22d9bfb87f1d1c67f83dd7e6e491b4bbcd950bd9622429ce536a48b7f6e22bbc10d963f7cf2ecee9b21debbda7995b6a7ee9aa57e7"], 0x30}}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xf0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7800, 0x40, 0xffffffff, 0x90d, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x4f, 0x3, 0x8}, @generic={0x83, 0x9, "790e8aa8815b67"}, @timestamp={0x44, 0x8, 0x30, 0x0, 0xd, [0x8]}, @end, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x6, 0x2}, {0x5, 0x9, "702786da1eba1f"}]}, @generic={0x82, 0x2}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x7, 0x44, [@multicast2]}, @noop]}}}}}) sendmsg$kcm(r2, &(0x7f0000003780)={&(0x7f0000000100)=@xdp={0x2c, 0xc, r5, 0x12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="6377a017f3b6392846b5179482a3f2642858bd277a84197b4c4c5701aee39d1177beb5074dc7ab44565896f97a52eda676e230188aa1ebfa624f197cdf2a7ee211ee3ae05b9c9c04185b76f4867cdbd4709bb7cea428d2f34cdecbf42b85831271890d920464f9a5cd8ad026d1941686d8a5bcd4747c3c8e04853a593b22309327686c0cdb580fa3e0e9d5e87afc1a5d3088bcb722b23823f486cc", 0x9b}, {&(0x7f0000000240)="5f5a200c7f1cafacd0b26c6a02838cb7ba3170e277a2ea0d697b619e3d899decaf76cb", 0x23}, {&(0x7f0000000280)="708cd419713746f5c688bb192134", 0xe}, {0x0}, {&(0x7f0000000440)="5ca6b2ea8c355d86a9e2b1a29add55f2ecce1bf89811fcbc06285d935b03b7b9701549b13e4790d38d52d321a7a88d1b97a8df7d56aa4f4761d522a052e3ab87cb772e46ceb8763fcd9c89e46cea0bc979c48b37a477687dcfb5e5c1020da4fae288f5f29a187b487ae63311cf221a2e1225", 0x72}], 0x5, &(0x7f0000005880)=ANY=[@ANYBLOB="900f0000000000000a01000008000000ffaa7143898da995ce263b6212e86d70785b9a4007d820eae12bbdb9d4f413b6568032a625b8225a7dc677488e854dcc83297f06461681e9745e7a1ef1af7bf7447345bd19e0d6d8836fb86a04fb09c8ac663e93859da301470cd39da2ae784be90f935c10ec25a99af646e9c6cd89bf4c0fd91790b7b7a6fc10e664c7687b579f43a2fa64e8359bd6b23bb9030605cb4906732c8a90490ad202e670b628d53791151c624261051ed71515cb3d7d30ec31b58b727939faffb386c575c7a87481fcd59b26ed7d54109d40e4fd82fa72ef2ba47b23fff93b2379c35a544315ddcd826b63d2f4b20516a6076ca19437cefae9fba48782000aa55061ec1e790795aad64733593d5f7016b5faf5e8e259fe056f3d73f0cce8bb895d1f9ba66290ca4076efde1a0ddb01b207549f58e86e5eecdb8802a538c6e2e221aa3ca61d8efd99a8fcf8f92e694df7aad783461af05c62c248d3fd9992db8bb00854d82834bbb46dcc712f3b42ce1ff0bbac56f6bfba3572e9d1d4de547635e6bb3e161efecf0f4dee2d98db51b291079fb44989bcfe0bff4be5c41b361edda8fc60df2cd2381a1c36142e9e744db4f1744244d08531b94b0b131a4d0ba05fc7bcc387df0843c3ea75d5a7725292e21324004f252b1c329fe4c9fa4df74fa253b1765f322872e44cd15666af3456c1cd5b74fdee216bd0b951865c6a06afc21cce6400fd98ef876afe4556c5ca91de32a3350ec52294b0427f27b1b0e8afb8788b1c953ac60586d0e66bbabf845ffa57f9a97f134d9b93b93a7a16bf85447f81bc3a615af61259cf647ef53f51422a5d08de4e753fa92bacceeaa5921039390f25c6019a9d7c5b0c348c5d8b4328aab2eb6a66c095a5330f070d79085c2daf4aad74804a0a7511b6a58ff68c00aef4fb5d04cd9b6ccb5339ccf574ae5d3a27f082bea5f905b4427e4409fea5f10fa14c616664db359ae5815bca99cb427594c0c411e4f248d01ac8df68240672b43b560ea68a5568c890d2c48d655f29f88ef2fa89c7b8a183bb7642de2ee2839225558e6a796638f3bceabffde1f6f83e29c3b4cc2a25c358fce5d6b3c9be702587d7329aa27d2d84203cf670bf90bfca4564f719fdb63aa49186dda5152e04f94df85c889e90adb6302a4b096ab3faa8d9beb14eed95f01b1efe1d0d6fc8c49cea86ed5ecf9929f0fb5474eb01f64af7938c4a2658550ae97f73e02828050327ef33040da95b98a2eb998024584646cd85ca4e92cdf68bd61b22ee221b55090e3404ea055defa8f75199b84bc8bd6fe3d09f3803215c9806744f31c624defc54e5fe73c9d9955668768b5242a291817dc0aaa0398e9996ea07b1f28b06dc996165506c1a08a4ad7e430499b346797ca79bf79524c5892477167f005c68b712bb002da7441384b6ad82075b06f96401603b21b56d964c9e5210f3ffed9c5543ac309e05f89cb0577da407f9f001d55fcfed439bb979abc1f06f96129ee21122a2dd6965473f28d26c44764fd8f30c7da74cfe6fbcbbc60391020180b1b99f09bc753432ae3c0e00c1d46f857a78757787b9b8ebed5b6788b15bfa9acab0cc88282937c258eb7aeabb2cfe9b91d811b5bba07b4f9a486f601e72d1043ae4dda541247f73cea51b921e8f569d04e1a0998890f03e4b60540101c6b518ae8b19009a40d87d86796105c4b24239d759351835640ac575637612b175aa17afcee5b92b2fac1507fa243ecaf90fbf6b93630a49ac13c5ed65121abe34e994903f472871a3f9fc63bf315477b0e275750bc5f239ab82ec4c3e1839f92cc7105aaceb74a3ac9c881a48cce684d36cbd99b9decbd86df5afeaebe5807245836f1ef6748a9a26fbea250fe17451c3332377fd0c09b095d8f22d00e1ab8ee286547dba779fa2fcda68e922f4babf7cc1ff62a8b1de337f29015dd40066fca6ab234f38e89bff5feb528d6b89eba9ee526a595b7096cd8d2150bf0f261e7c410aa4b0bfdd0a02b3fc03ee2af5259149bedb6feddf857fffd5cd60639536b01dad630ccca63d840f7e4f0ee58a44fd563aa11aa4d61093278afed5db844b8438936b62dd5c5c086868186ed0fc18fe4af5cf70f514b23ef57d3ee3fe85fa5aede731dac09c713e4e961923dc0e096c58ed355d4daf2bf810dbfd1ebf5837c9c6e2a99953071ad7371f4bc5e29480b0847e0ab3eb2d68344d4dd517b4dfb6ee36c6f7c47653403129d910b88f9963c476df36b697731c2592bb1fafae34588ad1c3908c2f0fc80ade3c1c05b1b68e2e963e8d4ee2bbd7dac4b248ff35c147cbb27bae9cb7eb5e0fd185229d0d2b7e0b049f9b252497b88842faa5cc392c7a5b3f00f04d6a7d127436f2698fe8e29363f291e298bd3d84560123b9bfb52d872893ca70940ff79bfbb332840a6f64560b20a227db82442df63dfa6baa756d3ba0f7f00551e62dfe3acae9e3ea50c63f7783d32444739217fc83b80261dd311a8bd04f30b44d9b56d7be694ce3ff90a38ab08aeb127b5a25022f8de27977de10d022709bc0774d496cd18d61767fc41cea0c00b902ce6b3c7ee2fc94af3cf545f65a9c2dd898a45997e06354cf3bf3a9b0fdf5318a27809ded44eec775caa95798ae0b7076febfe4bf1f8f1edee103ab096d46389b522149738ccb895a1eeab0bbf6a6983939565f83764ccc91cc1b451a377015677b83c4cc0481700e838e9ec48e74be9299af32de832d1fb4adad7e3d8f6377ee59742ea84c291f6971947176e9460f9d0f5ce081316a0cdcb370ed03ea932c1846ed2b1b25b58f590bd661fdb644f260c41d438ce29088d734611629f2624a60c17dfa8c5c1ba8f2106f4281822784e4217d95cbf987a62d5703c2644aabbf1e94d31a56ad8bcaaf793541c0371497b8b9b8de34807e9bc703bcdc670ac38a409687e170f6cf633dfbca49547d7763965f2b74a4e7fb6b64ab54f390ec2a0c23ec4be34f151f475254364d96982fcff22799beeb835e12a483d416af85e368bd2529b7f59a1caddd3719cc72eb16df8ca26df98193d8906bee9f9a353a00598366a18bacd14c638170820a7ce12f348bbbbcb4eda6143900a7e65315a3c42a5506b5d5c599a2dccde906374f011fefa7fd217e0de4682fd120ffc207b47695f159e636a4337969429dfa3b9f7f992fe404a5fcfca148529c8489e1659d526917f77ca58686875cc104afbc5629e2afb4ded4f1317ec5aa91d5a4d2341364c04122a6d497eeb3475b5bdf2c562eba3fce162fcfce8831963914d04162635eef1afde6af1b2fec2910343f5cd4571014716d95c2ac5adabab3033a42cd28a2bbd6297628f75dea5d4996c6e0c3df1cdf5abe4323a1b8620246e3f8c0fd2184424a4d4c9bee7966d8898294a5382021a4df0b6e958882fc932da25403d973a519aef7dfebdc7e2787cc603495f5d168d8f228c0396c10251c9f741a33087113b95c0b58a9f9dc6d8904aafe7f0120133a2915ea75f454b781bed09510a49539ba42c847950bd86dc34ebbd0bbb8ae4cafce48b86aadf1000a355de315730f9501aa67c871007d1156d62b234d6fda5be403c62a5a29b3a63c096f83ed4bb9a1d009290c7c3d5b9d2f1c25461abb7b2202cf9e02280501fb8ffacc48e316e95ad286bc424bf483188aa10f75cdf8a656beb437417391abb7c35e724b684e36a270d6ee68211fc703cdcb2345bcc5f4ac87dd54bf42217f0318b54d592a2a6e9e3b732dd999d02d82127c7c24b9f812b93dfb032b811b6c142edc455efbb0fbab623b67eddf8c58e6398ef8eca98150d63c78d96c84d3d7e98c322154c48120de8bc53e0b0f4f8c577871d6c1b0cb384105e1f5ca432d57ee110dd9c0ae05e589d15f52ccdf0f110195b9d79d07fbbb75c55dafc2c829e369d9b2ed5606f5b908d01670d4653bf955817bb8685ff6a24420bc661cb51715b711febc7e38f13305b0ebb99beff3cc90732510a6d2ee6ba948ce2ba71a61a68b6e501be74dce3210135bb6d5a75b7f6b3d2df507e863af183fd62bb83eec3dd6b50f2bf0db6a4b106db630ddc8f9190878c80d2ea19130e6574eabdf9aa0e57294a26ff57acf2ab5eda984285630d5c65f739479af58e5ae6d52a3fda72201c3bb264cbd871d5702d33ae2b247b0079625631ba23253c0101dd0d02a993967139a3cc93bb9d1240cad65ef0163e1bd353223f80217a39e0038490961acc7b18e9d5b6997bfd24f7a8c532d91b8bc932f7894a17ef9cf278969ddcde855620ba42f380ddb767ba1d423bd3d9b9e46516b363ae6834cd75d91faf8d6a940756116f5f595ec70d00a5ca02c14101591859fbbbcfc3c7f59056e2ec5d52e9043ab4d4f44ba204b682826eb1115c1b3f2cf69d92a21d7a0fb1be1de5c132182985c89a19b100b7bf7f8b0c3a79f9cb9bcfe93ace0327860b5c62f1434e08a077c9f5511e74bfa7a5b3300f0805b281df53e148eb9e88ab1f5f12c848babac2d572c64c12bbc778f98b3b7342994eef12b3a8c65cb9c1ab62e7316b60a7c5544f367cbf497ae83f069f531e70b38f249613c34debd828600ae7dabea02253123e3e5d5ea7f7c232c8642da736623a231d949c30b1980238fd18b8d768f7fafad25d1c10bbef29c2ef47a89c4d1caac74ae4945332724b65cc752dd4dfc29c16e752fde9e588eab046db5e9573903e5f9cccdd987cbb746b7a812103d96f7573d6c8096ad947cab4164e2d7cd8192b53ea145400626e2c21c07dded839bd3ddea965ca81bc68127cd5a03ebf84e30785c7ceedd05590370011e3b196c2ac355b4cf731091695e6b6a94ba771acdd0cf7dd30d137b228e1de9e5047bcf1b287589c380ad64aaa13658e30505873b605208acc26992b633a4db3fb1f38e5fe2d3da2e02ef9b90bc7785013ee1cce6e8444f5dfbe09302c6501520504c7f92ebd2932fd3d0d74eb3fc552a636b546e2a7b62f8a944497ef92b7b1235af2c1663cac5339d05ea58d70740e7d35ec85842c65fb5bbf624266025efee05975995fb64e6dcc2e381fc62de8880d4ff433cfe8da32bab6201975aa54fa26dee33609bb0adab5b6b34f062761907239e636b27b014d19cf82b4e13757a68ee4cb49b69e8184a4574791401593ebddc00abc13671233b0292e30249cefe2aecfee3cff871edbe92e3d39a4574410b7adc46803ad8e7396e2ecc8ea5ddc46f02e93cf0fb601328215c583642da86110bf08de4dddb68592c59d78581423273c5e3619a5ce3eb64366304a2c1af9bd3ef759a2efc9c8fd9c2aed0ce091c2d4b315215ad70efc0efb20dc8defc40ab482140ccdbba08c8d1436289bfd864f14756e8f7001b58d38e5d6a7005f689c42fca69d8c10455f600bf02d186728d35b3fd896944ae86bac780b08ed3aa508ee51feca3928845c52210a0a10483628c052cbe02686e2270880095e17eba872c917de1545603cd8af76e6785b413f248a494992ee21ad4d5e592a7b61deb416af5f1b31d7f48de97628f789b9dca5e20909a29fdd582a4e75319a0eb71ad4e3bb4144338e6b4f13ebb9719ae8be1fd1d531cb7723dd8784567d01bc3483ae742a646d06acfa63901586927823bf95ee163ffe00f0000000000000f01000000010000d98cf071802d2ce3d01b19cd4914daa936996141a9f7b820c90027fc59bf5cbc53d91b035cf270a97a8991dcb7ce1643db30708c4b4819e42eba59451175fe7c52dff490dd66fc6226cf92b51b374517fdf1a9a347a4d397619c9a26cc0a1101fa0540f17f2299eeed49e160fb6ad6beb44f31f3fb6cd3b8bf8347cde23c8494371bbd64ab50c1d2e5037457e54b6a28ac798834428c2a030077f2bc15d7037d54cf47b333dddb376ae9d932b6e3be0cfee2b3d1ff3c1b469116e3295b64723182f732a152d539d0b99ef8a2562e8e6d28a50ddaae787f3b3e883cfafc92e35345a5b8ecbc87c55624b847a7c02a9baa2c43c0c7aa78df4249ec96c470f3af95cf08921ffd7b3a962decb8fb7ba7c7b8f220e3d868814885b65e78843d4f0b636e6563ca196bfc0d17c9c029cee031eaf107d7a56da1a0f663410a426a8a7866d2c0505d30ded15faa50cbfae615f86008580bb39245d41ed3aed0289799f1cd438e6e8af79da7a021580b01ab811d044a9f99da1f613c6ec4d2dc891619561829aa41e4107ab5b2502112c0698006e3b4c7b6e76280d365ba391d154256f9b864608ecb6c29411c41bb0f0c6ba0b8009aa7ebfe2671b5537cd2baf5f5ff1da54fa429843bcfe35447e97f0bac965ed012e6f7c12cb39701437ea041c2afdbdd095e04cb0d408b389c18ca78b705a6a7201d92148c1b0a76c227a29bbfee640f5b15050ce790f5cd0516efc5f3c7f095bc7fcc837bf3cc7f62756b6108a69df900e96dc1fcc1d46c8a4c5568a6e2f9dd2ce588bc94d4ffdc910fb91cbc5bde2979659da114c0299eda19e91ff5beae37d7b0f2f0dcbe43ecd44343b2e93a15d1edf9ca8ce0bf29a539ed7b1a3c71432867a4d01882b0be70a1485564c1073d71dd65a2f6cc900ab6f856ae93572d5c324899368d2d295ee46ca967233567fc59c3a958934e5ee3f9354cee384c886df6aa0d04d57040c0a3b9dce2db167da2b305da996b21bf5fa29c5e32b660ccbdd2f5809824f00f87a3d88eb76247312b95ebd04aa212ee857c04b8d6858c2dd887579192465838448bb08ed4e04fbb82fa7767d1c5f1675275609c59587e7dfb62f20fe6054902d786e3e9404b2a65f9738dee201e58b5c3861d5a17c1909714c59e0dc41c397cfc12f5c64652fb89353f82e4d14543592b2495d8b67a4658060b6c3a2c4719f402728b71dd5a12a4537d406ad0f06b175570d98d3fbf5ab1f307f2d1d1320d2944e003b272b96947d5b28dca6fea837ebdd53a61722444f2f22f79b40a10976d876ef80398181ecf932ef299f6676bfe88093538a44d382ec805b2ce5cead9237db6a8067485d13e56b1851898fc7217e1e1fcc4dd8d5d3481ec529fb4b9cc5d2e237579e748cfb6e4e67c3664a89fa5c2d8c4eb4e20e24e15df5da1b8ac22e6543fb521cd19dc86e53ce8e55dff7099558547bf9a408007bb1ca16366f736a7bbce471a914f579b234a071b9322d42d571e7063f5ede288360c5984b04dd1efb60705be9cda716b741d24a2d9d15dc4b5992abf3efe57a130555c14f95d604ed0ee4b37747568ab676220724613d80fc107897b36d122023a10fd0cee4be33896b7e645ee4866f7abf4f06092cef3e196cf2c591b189b63240197158703be835b4fe4f37e2e80231c6c9416561fd0c10c6188e2228dd7cc076bdfe489d325aeeb5d4c78ea8e884e00b5fe7c5a3caa02c8b6a42420b1f71567bd5555311aac3188822a52299e959ba65f52f5968149d7142779240c3f752ce82d7fb3c391d2fe8a2f812b0e8487dea8d889b535060b06e08a8ca45a1aa14a7d9049ecbbcd40313d0e62299ab1be23bbc1f63bce87b7964a582d79d0f21c156e18ca9f4084325cd02fad27c53c1f0d1d22dda426c23c576cbabfdb44290749f3ccafb6e9310aa1506527ff9f8eb9d99ca8bd2ddaeac5b2c3308aa590f3f3640d597107778f16af96a5f0cac660371b75c8fe1e2b4600a6bfb412fe067fdf7abd4902b47dcb4af0f48b9573ab17a1d0a2a7e6695acb5deaa7f0289b6ec487862f89a6c15e7014d23497d3663d35322b4a47d6afd4f5ea7a1fc4ea8c37443f7c56f387cfaf6865eee2cb6916dd8af9ccc7f488c43fb5996907c2e49c766e9187ca20145d062eefd0450d2a113c2a0e095bdbc7761a2f905b07bf67257947b34fe35ba6e5a00e2988bc889001292c59f8fb02a9e1e82ee521123ad340b7f8e540100d61abf49ae5e5b9bfd115c1a0a801fbea4e2f47df29f434951afc48a78b34ed7bc3955149a9909722dc8cf420afed85dcb10db65acb5f279824c240209675f63e0b2425119280810a4b1cf5e88f16ae1475042a4cbd6dce0709e5b7a9e96d28cf4dae6bfd36b6aec472aed878eb5497e1ecdb86da90ff891e4ad47203b9d226ffbcdfc7bb192dd8f3289d10d670eee84ffcedd5377fd5dabd1209375f376d3b4754c4fbb82d80320509d9d59d3ceb704753199ea349fbbd0f25842e79ee1ece5f0a0fc8fe38f4b9ecb662cbf692aef45f366a7dd6effb32cdef4d9f14f716753ac050493fdd7bb8543752b40296b305e1d801224a11f13f60acb1b22141c0b55058dafc945f6ea43d8cfcdf4c938c9f6303f72c3e72fa0d32e3dd5437cc912f7b9d12c01addb324b6c02981cf86340c7630f99b5c4f891b23c636a7966a2c7dcfc86cdbf78b086d89c2be74fe445137ec79d9acdca7dcd9ae831b0e11fdfd2e78b4b5885ca98d9d7c2fce22d6b6068f05737471a855a3716d9fb6d7e0c1de204798d60c907be164b11eea632cdd557be42d96ca8c6ddd5e6299b890043b7d485a56747debe7157bcb87d96a6f7bad353965800bfc5eec3544031058b418f93472fbd0e5e8943e875383d09bd04a90c5b4c865db26e8e0e5e2872427537dc1389a2095da91a9239206342c82d23f415e4cea954633bafc3fa2e06f96f47eeca78cb1886a8839f3bda8768a3cacee08b53d15978f95fe663089da036b70d45dacb4c109251c0eb808384420086241276cf6f1b7425075e4738bdc3a71341f6a90b35cd108c5e50c12ab25f062008e652f26b1b19ac1199d4240c979b75a3f555f98986d7492c2609caac345bcb612f9e77da7fc94b251dd22b7787776ae0ba381539ac4bd1a39ecc54dfa94d686ce47bad2544f30d7efa27988745f0bf9a1d393860852a75c0deee8a97e8ea11f1ae992bd5e81c03a58b51d84b03f8353dda37c82e8d17e42b30cb1a7f2dc884308b0db204e82ab76e81e5dd228f6d454a3718f81938f20f454c1d30d7f98fb974166103487f6cd5a6783e1a50f6c8cba3f7a89b211e54d74b4ec02497bb60dd3dfef33fba64f2cb484f703e22ca5032acabc67bf4dde95c88ab853e7eca5fafd1fc8bce31e3edf15174185f785e4340079b6622c473af720cb2d38aadd903c07e8244b69b57e1b19b6246dbe5cd811a3c044b68701ad46fa2fbedbcf3da8c64ae6dfb86290c5ace68ccf937f88177d884742758490681672667694e3e0f946fce3171ab24d36210da454108c83a12a41b34b16833f2f46bbe05d2b3c47e85e4f4ad9c00c60b52e4f39e69d6bc58d9f9e1c49624673e7dd69c7f5314c53d316395a6da9f0f6597ad3e6247a505ecabc4a2129f773f75a1226574ccf7bbc8c22b1a91e55bd175e1c8ed2b2246cc60f9c36158ac067a804e1b470e24f697f7adb086774b4ef331ce2ac60e9310559d36a25cd13612fcc8b38c0f20b4b86b3c8754eba9071302528047ea86f9ada0b14f977bf5763dd78f9d08938a947ba2408b67342d7024dc28d6eb11c0bd0191a7484baf38fb0fdf11f07540d74cce4499884ffac7681cc1e904345616047b5d2a9199aa892937a6bb6e1ba9f9408d89f907abeb0b438663bd2b98b57d901701d522e666674cb768355fb061ab6ff357ce5a1b9a7e272c835d9f05f59229ef4b6fe429da4a971587ad447f1afd59060b18143b29803c70942079a2f47eaadaac3c98221dddcc043b4b474b3c0ab7174e535518b92dcfb4bc3273202c8d1d544dac785c4843da45e0fbfba2a7dba5ba3fb672eb71fa7481fe8693f3a6a8d6700a802cdb9abe4f79cc0b15f95b9129024e1e21773d5a834b0b1770120de4fdd737c871c18bf4a1105c0461d58407c7d197207ac3bddd08cebd34653370d1a4f5726b1c2f5eecb8a13330f01229e1f554bcf274763a9278a574c1dd48c4c1056f8894dc24ebc1436cfaab458cefdb447345bcca638636575b2b84bcbf8fc258c8dbcd491f47513e17fa132f285b98f84df015a59178ab2dd81f59f6eb22a87755c0d8e8862fd5d6a74767bd4201d34f2dc9d7c49297c5d0c011e26bbd3c0435419782e0a8bf50d885772587a00a5dccd8ea40ac66538f78e0e79d5c11807d038f5150f7604d7a9603a7b09e21360f40d1d2d3817d09d454904133d0ef3111a2621309b064b0182eebb06c6d306309cd9bad3be3b272654d5eef63a8545b93363eeee9e2d399dcc1c2b0bc49d596caecb9aff9e38c63615072963dcd5f00a64e943290f3dc1c59e3734f0b5fac41a5c83ced102b92a6aa3babe3015bb620bcf24ae1f3a4c14770b5656e284dec697979609c0fe9b7dde2d445bf8ae33013d988e534854446590c642eeac88d403a244dfb1967248d3cb7860a30d0fe40f9089a99e5386154da63bafcfa1fdf37b26f76bbef5918e35d97f298804b9c0358065eac485b617f1bc0fd777b8ffe15a68c91cf4a9f2edbb402d74c4292be4d1daa74debe0d2702cda046e116375dbdccf0706b5dab7c91de7497195146c693c36fee9c41b70d6bc7a0e9dc4d95a2ebec9a27bd7a2744e9f4ec88b30c3a0f61bf1de469c8356df1904e79889a26bee45f12ba748243f29bf159818df533dc7662a42f2a6628563bd03db7317e91e0652aa6607e4ab58c75d690dbd209d2fef6551815c2bd19fbb650f62407b6f90aa74749cf3069136ae21bdacbb08cee4a5bd16750b1391dd175bc8f03304a21607737dbab1015af58f22361cb1163400c0e11ef29b05625868369e568b93b30e32832ee5d479c59be9be743192fced7589408c7ceff40cb8e04a490f4ed33d5d88beeac89a45912bef7a5631c290c383f8de7ff457d8c83be762ce21ad16f71bb09d615f864e453ae9fadfb78663b0d227066344631443631ac67a51bde710e88d867028da8640659952198610bceb952eef021dbbf306acff43acd71ffe893da19cf7be6ceba649bc181092f5125f6484f5162920bd589a43006876d394e93551275a385f20de795500034de08755f812176cd087377fb1a3c8df57c8c3e7713620012a3b30ea0dc7e1bae45036b6f5d563a8d78be2a5be6f4beedad7c7cc6b3d126be1100ab2c9a34e70d01996e1770612d767fedb1098b654c06d51a1cb2fc4da3ea1c16d071b83d3da5914bca86e713d525394f4b412af61cacb887581cb3c21d72386b0f3a836bf788e6b4782705fc556781be39ad5917f4099206e1997879a225ea6ed4b100eb2da2ec5ba26db2b41260afdd9d45a8790368e862760a44e4efdce0359a6d198f345a4dac2a1d11e0dec5aec5f3c57565562f1fdc8bbccef97b81e1265e6f3674071209b49296d0e7c4344a94dbd1776961d7ea459873b4053fc1ddefb7421b82b4ad90be7015272872643fd7b90b535cf0fa011b9e283b6dbb9e7a82aabce50f2916b888b64de8c27fe48c7bf86c926cbc8526ef3101000000000000000000000040000008092351ad4844d52e3e5d94659262b62346d0d86d3565926885296e236178e0a03feafab920d5e8ae3dd80087a76d829f7c79bf2af556ed979a58dbe640845b447ac0966c178c9585e5927fb84c374be19fbc2c88a739ceae4dacaedc30f11861ce20294781820298f08d586a07e8b2bd2ad872481c14cb4ab6f8c0ff7dba0cd5536611e379265da0a6fdbc993ef87a711554da3e2552baf41a4986031225f8fe7337d08c11bd08ed9e2af01ca3de029074f561f5dfc4e1073b9f975dbafd7ab11fdc9b06911c8067a83e56b336e0942e2375ebd65cd57269a51f0b00d784a65d0e6fbb79ba36055bc2ca1b47e67ebe6158af40a6b3cfbc70036810017cb5bd7a0d6772b41766007dc964097cab69fd4a43a7686518a7922b68bbd6428ffe59aae2247e54da0c29738f434a7ede9e1325873cec9427485649cbb447fe38b0f8f7eb835ec947b8532b3b8464e2c6c24c98721051d226ae73a95b1acbcef38d5241fe4c74a3d0b3fd90bbcfd519eb7b7474694706edbfa887fefe581f1693a531dab1346a8939a58d34fcdce32fd42ecae802f6427d95d6e901c307ad9a367490e3848e3d4ca43fa79fd3f739bb9d7f4f8822cd758cb62edef9cc63d9c600695377e6a4053e818c93ea72cd70bdac1a33feb821e65f9937ed782bec88fb8f1857fd8ffb60216ec08987a976ecfab829902901ac0069e9df5d2dde2709e300e1c21b5252b05c34dc0b2a2ba1e2a2ac299abc93142ffb6a654ec2edadf07565180c6a06c8de479f32fb4ea46dbdd134ace6320922a0010523594ff8c52bd197dff69d98256b6ccf75c4f15159a9028176305afe035c4db65371a480f5213e0392fa45bbd3cdaa16fbdcb206ff806e21a9b09912c6b9aa19731c72ca29e34682cc1ba46f63f037c39856c5c6fedfb6841644be54705f5fd0173d278dc8b323a43f7335a8996269fa2b5cde9442bfe9c1825630afa106e47672ddf54c82c36aacb5e10da85c04f70eb8b7cf7714cde1aec3267e4068fc21434cc74ae333ccee77a8ff8754da055f75e6e89475e885b7f409997d426a29857429c4a3c12f79ff20a1181350d2382226f2bcfb58ce33adc113824710b448802125e346b9c2ff9d9016eaba993e2ab107fadcf7014451275609462fdfe2af2b2d11ac906daf6e9555daf9e4a1b49c6a471a8f1c1a141d124056315f4cd8cc2f2c8be5c859715b15b83ee04dc260c773b3c6d13b088a71dca800ed3dfd2438d651b927357ddd32105c7b5492cd812b83b632e6abb61498b1d4a5f1a2d15bf8277019e2128a0efd08777d0e2031b349a718334278abf2ab89e5e0c7e5560a6b89087dd4a7e96001b37723d4547d2454e7a8640399b521acbed6213a4a44bf39c4af96a7a617963b6186d0ade7a2aae225c6d081c427c663911d3280f28da747ab266ef8bb9c1372bc2c84ed1dfb8fa6ddc51bc9a89afaeb177e60393ad0d66eee40f5ec795f32844417148b78eb25f2da1cb51066043a809bb7c405a2dc7f9dc3f8f57308d38a3fe04fadf6d62b30041dfbb69956074aaa16bee6040b90b22e8639a4485d3313f71e04027193a20d3500fb27a6016a3c14074f52fb8351e25c21e8f289bed8f8ffe6f4a46ae406cb7bc8094d07cb933bae76bd42bd5dc57d9220b70f82ef60e1e62091db3389c84cb8c79d351b336c23017e8ea7d7fc338e01000a89d7c37ddd20af1cd03673c923a48284d52fdba769de236d27cce72b26ce6e5ac4e6ddb398683f7af1d5a9ae44e70d6cf65c7ea4f75cbf87db8f0258020ab24d04081f8ceaea07d09078399be00141d6733d9cfe5c0d444e82c59cbf02742d40a311062b6e6597dd5f6de196e5dd6d9708c5639e2d1433174d92dbd1d7474626e40ff3a9d128f834a75b6a7ce1cf03bae199e8e1593223e9d92b493054c58847b05a5a858149dac7c70964edc8d45578f69fa12b76c1b82186498257fa8d5636de6e5fd459d9b41e3a0d84c18ca3642cb5e98af33a2055e03ad43ac6a5f698d9b5ed657b01c10451a7275f1261d7e93b461b9cf37df42686c32a8052946be553730d64b4c748c9bd6ee59a6cfb01b4c6dbb4d04defb9d8bffa1e23a7f1f9f64bbc1a9db8d98a3aaeb1ca8a7846ba84a14160ace24c4a4cd57ca4a6f5a67c57174f18e68d920fc43c85fbb0b5a1b922e58f8ca4022864dfe89885de34077919cfab2b16fcf00f746812e732b103ea1c91543cc627c81d4bb917a9b290d0ba8cf44ebeecf9d98eab13b5253576b40d1e26a8a827ba0d72462ab5a9e901c48ce572a39d25fc64055eb8d6e716d8e7229aa40158e55560a8c83b0101da3b4ca7255b656feed3bfcae8dcacff24a84ac4aa1b4734729a54f5817823dcd9f45f409c69afbebd15332a7003d7010f6adac3e24f730be4b025187ffa55b2b81130e8118d73a35eb0ea9c0838f866cc8d8795670cf98467a0c8ce982cb8f2477cc92cfab7509a9dd94dc6ae8d1ade14ff13ca03435387bdc96750377d6c1f90081a6771943420d18ec87cec1818f66cf3be7e098c328285099f108e7c04823f4ec6a1b3accd42fa8132d771b02f1c4ef1e88a0dfeef86c280db237cac250a02698f7244d17831f05e9ff7983d8eb1580777de178350bd53d456990676a2c78d4781764a122eb82502a40542d6a2ef35d903165368a0308b81f9a853e17e73a6194d04733db5178443bb087627a8e298c018aa4e2e10c90e0bf7e2d2366f78d10bff90eb9e1b4ade43b34d2a28d39e59cbc3630b7df388a016476704492f20315430530ba2a9dd817609ffe046f3ba9070e58661081d14ced582a2bd9e728abeb71aedcc357b5958c17a7cecc22a3dc3d4103d59a090eb8dd80993b6d95145a4bae5bca3b920c8f2bf9a6ba1eea4cb21f1dff3a2b7bfc1144f82fef3af429958f16f93c18c89a7374c5258ddfd61aeff2a507b689f61ad90ea3b0b876bce42b430ebeed5ca198d4fac1b05d22e66bf7249141413964215143ca8dcdd04d235b70e73cee5669c374af5d42ac59c72637d2ef0a46bc9aed2ca5d6783fddb5c71233d522cd60e83c73d8b917e1066c8b134aa035995d76a7b3f5c60f6b18dc16b73698a95ae9cdcfdc2d79aa2f6976ba4ff85090db794364304dbc5f967efc2bc902e58b8d5af1b2975042ba61feb3035f91886cb071cfb8f22f21ec23ae148ddf5dd280ae1c6780bf88e906b8f5a9da733098bb4f91379ede3adb70bf510af04321324bca6f96f5df0c0f279979dda60b07f8ec80c16c5158927d80a5607915cdc62d9f171266b0e820eeb8b27fc160f16e096c6a0cb00f148000afa7586ffa91bb8574b22b93a0f76deb0d988a249d341d80aff222941c756a6fc42833e3df6c79ca085a857b713a3ecb984f4e5fb4f39658c8d5b27e91140da166296da1ea1b233d0b451291ca963fd34e9441cf79b630bc7502bb595565818af0e1a4560db1ab42c583b1e095ad9df43f934404f2972eb479218ff4a30c219609129a95ee8ec810b532fe65c6b55a8e108d01acef895a334ac1175ef96bb7ebc7f979e5ed65f362cf9f8bc248fd2ddfa94e9d3c3e19e0e777638f29f8617f0617291eed36eb3229a7743145e4831a6fae124d8af08c00576203a9a720f64382806c2c6be1bb4e0d28a6aa5e4568b8317c84159c221ddc1f94b099e3b39e404b19919aa76c4c621ce62fc1c1469c2c28cf7ccafc4b37d3be5a0fbc3a4b7d7806267b2e9e7ee9e2784aea842f24486e112ae3127f96ff89780534d5818db6326dbbd34377f544099094e09e4cf205da332f45ff8791ddc02bf3943c2c6ad839f08cc55126fabdc5eea9d1a3542d4f2631e713c8104e3143ec84fee7d332d9772ac20fe0685f627f6ba3d08b5369536a634362d9c0cdc17dd35672ccec916c8bd3cdee42c8be235e7c00abaa54d1d224cecccd6505f8380629fc2c1633763dc33d4bc22bb3f475b18a4260305f0525da293680a0d83d2f3cc20520b89575323f7a062c0f7853f2718be5bcf45c3f7139fde37e1f30ca7343bbbd9a766350748aa5542a99a27b7ff05dcdb11719a33b8747030f3a741a9ce51e6b776660a081789ce82086ba406c691e88c9a5b219578da0a09f59d4aa86e2cef90b57d687b6c6eeb68a5c274d5c2d2990179a866aaea4eb203a94a469634d75faa090ae60730689db88b4fa184c6235de1f27dc24d8c4478816e9ef5a173e74e0cc66c0c998beea5a1bf6a87cc7fc4c470979590d70a5107a106f955bf5ba4741554f1d6776f4d08db004c4dbf1fe881868039682d13fda670fbdbc7fefdfd47ebc04ffb9525c14b0702372b7a47acbadad0dace0133203d090c61d4b23292bacd155d46c27bce43bd0168e67053ff1f404867e4ad0c0500707d9ff01ae26bc4cfd1beec7f75c00f65d640c96bdd6135b495cbe617e5433f4f267d7bb5c6767c05cdb0f7b22429f7122fc715f4cc68c929dbc4be4baf026af35ab774740c4cc213271c6a95cd90d0ccd0b3a90f9930b75a3699c3f40e84273cb277f45297bc1d929fb4d24abf9bd7dbae201f1cb7f34a5bc62d74a8d9bd605a584ff32eb0abc449a59735a9cdfebc2b6b468d83c90885f65fb8a0837a9e8cd6c9b8da7064001811c8b070f3fde60e4bd8864d965854f28e0a1412341a923168c3795a19c1cf21d55946e6fbbc1cb9fb835b77a44dd89a62210324edf844427798072a4fa91fec995803f86583ef413b1f82580ca8fccfb3724be27d68bff471591e350e4d89563c0f018ebd6a38d3e49cf9822602b2668f651ecc0ebc629cd5c635d449ce7d23f717dd2fc25bb9ff620a65b4d6de7a9c7f1bbe035564c781f11fa3aa09c0fccad4b32327d2434f653beaefe69b9ccaa88158eb137e25abd8c2bfdd5aed4b451a5ec07ba10c9e63d6c0d6ea2fe35874873f1439e89acf3fdccb82ffc9ed6e9ebab0c1d0258c32a83f68c60c56c9c0a9386ea4c73cbe73c7f8b1b8b5eeebb0b8993b63b8340cf2660732a94e9e9d42fd0181ba3f5b5b32bff9b7862f1c827da80f0b98f01b429ca84acca8750e203d1fa124531b84633034ae188a88fcfb8b9be550ce2d9ca0ccade601e21fc39a046d80743ee8daf2b69b8058246541b3b12d0214a548c341ba719b04bd96cd44e6df1fd675773ea2ab00b9cfb054e870134a9e36cf50a3f1d007699f1cf1a02bf67947f4c1e5ee62f288c30bc3ef17f7699937b1cc52808f13a884936a0623fdf8d04d133ca7d023d743bfd2dbdb0ad8f7618a7a40456a893e2511bf138939384e70f9b01ab683864fdda2fd4e529ff669d47a54e00bfc1cb4b651fc9298f4964627c88685701bd48ead9b9a103a80631682bc5f8b0f6cfa5f4494d96561b5882c6812dfd527bc329119a2c9aa9d912659608fa1369c7a1ae70a8b97e7953bd475b803c5290d98f5000d02a30cab93cecc016956cb88c55251ec50196f080cc604018245196eb1173f5984bfbabc90379a1c7f5924afdcd8e8c4d768de71fb9a08b3ab1c28c78cdde3fbda5e8e17b08f1418a4792d5c62fabf64fc4d2b37f93658adaccf39f44eac46128ef1a63731493bd302a008ba4b624233b3d28e1bfbc0e4294cba0daecfe94f1819dda19f0461874f1c4c24cb554a6cbb385ccc5df10d8b6de0ff891c5416ebdb0ae7e4e7d2f7b57278118d4a78df404f3fbd5303297e6106439612f36150d436b771a03c92b593110c8bb9bd425f13e3e9767a06d61d2dbf14154a9e8d82a6381754a6b05f00cd46b6d34b86345a9667ea79a3da80f99ae09f93eb2f27494ab3d60e87b1829a7d00000000000000001000000010000005c8bf6375546804700e2df847392a5a9e18cf5df3cd8e9d4cf60d4d7ba37d369c2dfe5959d3249bae3988800b1f88d28c5d87faf4794217bf340c441a29863eb882d38c37ed9ec53cf784a1cf932f6d7d86c6283374c24e0e6aecd6950b5a3c24611179d145b6cc574188e3bd01fdd29be837dfcfacedf63df202c0f08a6ada1cd7746ee3fb30a72581c3536e004b268af8b1b4de14482994b0503d0e242e557a27d98513c970fd6749f77bbd6b68034af39c7afa8307a8c8000000000000000a8000000000000001100000008000000068977c47c8c24bb6fe35b123187928d986033fc68bd72463fb1d8af2967dbf23f38a84d62025917d221db9801cbd2ff036cb8f8fa343b44ce4d6029af21a146a63f2b3cf7a3145dce831a5392a2688d1c53e675b03fef82c08805a04218f8f76ec9ed2fe3786548317d9adfdc464deebef2da1a16b6236258bf165bc95d6c54b6a5a3379d850990266c98f9ed48635389aef20000000000ed20a37ad4fbe7c553429d86a73dc25470c983c064a91f6049e85efdb519756199d904bb751a5e17598ecec9924a35b785ac7c6c45eb0839dcbb704d66b73cab5aceb8ae6a23ab4dfd43594efb903a7aa9f7cfa8aa3a11b4"], 0x30f8}, 0x40080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000001900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r7, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2000, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002", @ANYRES8=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000385000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) write(0xffffffffffffffff, &(0x7f00000000c0)="2600000022024780e8ff06006d00000078cc6f920a97c99f494e83cf3b21f84fcf47e2af0bf9", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4) 255.086836ms ago: executing program 2 (id=14302): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) (async) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200c009900001000003e000000"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x6}}, 0x0, 0xfff8, 0xffffff9a, 0x4, 0x0, 0xfffffff7, 0x4}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000001f00000071caef00000000009500000000000004c2edfab715dcad7e628e44fb5b57469b9f140a90952d035ba9c0f5516294b07d2d851430a566a9e32d000021c6c4cceead64ae1794ae48907e8c457dbf8c34b394edab4c3bc4f99a7e6f"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000001f00000071caef00000000009500000000000004c2edfab715dcad7e628e44fb5b57469b9f140a90952d035ba9c0f5516294b07d2d851430a566a9e32d000021c6c4cceead64ae1794ae48907e8c457dbf8c34b394edab4c3bc4f99a7e6f"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 159.156026ms ago: executing program 2 (id=14303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe80, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xffffff01, 0x3, 0x4, 0x1000, 0x1ff}, 0x8, 0x5}, [{0x0, 0x6, 0x8, 0x5, 0x3, 0xa}, {0x2326, 0x800, 0x2, 0x1, 0x2, 0xfffffffb}, {0x0, 0x4, 0x1, 0x0, 0xaa13, 0x2}, {0x1, 0x1, 0x6, 0x2, 0x6}, {0x8, 0x8001, 0x6ba, 0xfffffffd, 0x4, 0x9}, {0x8, 0xffff0001, 0x400, 0x9, 0x3}, {0x6, 0x3, 0x6, 0x2, 0x8, 0x8}, {0xfffffffa, 0x0, 0x356, 0x1000, 0x3, 0x8}, {0x8, 0x0, 0x3, 0x3, 0x8001, 0xe1}, {0x2, 0x3, 0x47, 0x5, 0x4, 0x5}, {0x232, 0x2000000, 0x200, 0x5, 0x8, 0x200}, {0x7ff, 0xffff8001, 0x4, 0x1, 0xccb, 0xc4}, {0xffffffff, 0x123, 0x9, 0x0, 0x0, 0x9}, {0x7, 0xea, 0x2, 0xdf, 0x8, 0x7}, {0x1, 0x4432, 0x5, 0x5, 0x40, 0x9}, {0x6, 0x4, 0x10000, 0x2, 0x2, 0x5f}, {0xfffffffa, 0x8001, 0x7, 0x0, 0x6, 0x1}, {0x1, 0x4, 0x5, 0x5, 0x0, 0x3}, {0x5d, 0xe1, 0xff, 0x0, 0x8000, 0x8001}, {0x1, 0x238f, 0x0, 0x5, 0x7, 0x81}, {0xa2f3449, 0x1, 0x676d, 0x81, 0x9, 0x1}, {0xffff, 0x2f5, 0x8, 0xfffff800, 0x5, 0x5}, {0x4, 0x2, 0x2, 0x5, 0x30000, 0x2}, {0x5, 0x4, 0x7, 0x5, 0x4, 0x5}, {0x8, 0x65753335, 0xfffffffe, 0x90c, 0x6, 0x1}, {0x5, 0x7000000, 0x4, 0x6, 0xff, 0x1}, {0x0, 0x8, 0x2, 0x9, 0x1000, 0xff}, {0x200, 0xffffffff, 0xb6c, 0x8, 0x1, 0x5}, {0x1, 0x2, 0x7, 0x3, 0x3, 0x153b}, {0xffff, 0x7, 0x1, 0x1, 0xfffffff8, 0x401}, {0x9, 0x16, 0x4, 0x0, 0x4, 0x7}, {0x4, 0x381, 0x3cb7, 0x80000001, 0x9}, {0x9, 0x5, 0xc09, 0xa, 0xe, 0x8001}, {0x4509, 0x7, 0x2, 0x4, 0xffffffff, 0x1000}, {0x7, 0x6, 0x9, 0xff, 0x9, 0x6448}, {0x1, 0x4, 0x9, 0xff}, {0x0, 0x2, 0x961, 0x98d, 0x5, 0x22800}, {0x3, 0x3, 0x3ff, 0x80, 0x0, 0x200}, {0x1fdb, 0x80000000, 0x10001, 0x8, 0x3ff, 0x2}, {0x0, 0x3f, 0xb7ca, 0x5, 0x787, 0x4}, {0x0, 0x9, 0x7, 0x1, 0x7f, 0x7}, {0x3, 0x4, 0xb, 0x80, 0x2, 0x9}, {0x2, 0x12000, 0x3, 0xc, 0x6, 0xfffffffe}, {0x2, 0x9, 0x6, 0x10002, 0xfffffffb, 0x8}, {0x8001, 0x28b4, 0x8, 0xf, 0x7fff, 0x1}, {0x2, 0x100, 0xe, 0x80000001, 0x9, 0x7}, {0x7, 0x8, 0x5, 0x2, 0x4, 0x1cc}, {0xffff0953, 0xd4d, 0x0, 0x100, 0x8, 0x5}, {0x8, 0x2, 0x2, 0xfffffa20, 0x7, 0x5}, {0x9, 0x80000001, 0x7f, 0x6, 0x4, 0x7eb0}, {0x3c, 0xfff, 0xd9, 0x3d, 0x5, 0x2}, {0x0, 0xffffff80, 0x40, 0xc, 0x0, 0x8}, {0x3, 0xbe, 0x800, 0x4, 0x8, 0x3}, {0x0, 0x7fffffff, 0x9, 0x1cf29f59, 0x4043ac47, 0x9}, {0x1ff, 0x7, 0x2, 0x10, 0x5, 0x7}, {0x9, 0x9, 0x2, 0x6, 0x80, 0xa}, {0x575bb467, 0xc44, 0xfffffffe, 0xfffffffa, 0x5, 0x200}, {0x0, 0x5, 0x7f, 0x0, 0x1, 0x5}, {0x5, 0x8, 0x6, 0x2ad, 0x4, 0x81}, {0x2, 0x6, 0x7d0c, 0x1, 0x1, 0x40}, {0x7fff, 0x5, 0x10001, 0x7, 0x0, 0xffffffff}, {0x27, 0x3, 0x100, 0x6, 0x6, 0x4}, {0x15dc, 0x4, 0x800, 0x7, 0x5, 0x8}, {0x52, 0xfffffff0, 0x4, 0x10001, 0x800, 0x1ff}, {0x101, 0x1ec29171, 0x0, 0x9, 0x1, 0x1}, {0x1fffc0, 0x4092, 0x8000, 0x5, 0x8, 0x1000}, {0xc85, 0x1, 0x3, 0xe4, 0x95, 0xd}, {0x1ff, 0x1, 0x9, 0xfa1, 0x7, 0x1}, {0x2, 0x5, 0xdb85, 0x3201, 0x0, 0xc1}, {0x1, 0x62, 0x9, 0x8, 0x1, 0x5}, {0x1ff, 0xff, 0x478, 0x40, 0x8001, 0x7}, {0x1, 0x8d, 0x6, 0xd0, 0x8, 0x10}, {0x8, 0x2, 0x0, 0xc7bb, 0x0, 0x2}, {0x8, 0x3, 0xa, 0x8, 0x5, 0x4}, {0x7f, 0x6, 0x80, 0xfffffffc, 0x3, 0x8000}, {0x80000001, 0x6, 0x400, 0x0, 0xd, 0x80000001}, {0x3, 0x1, 0x5, 0x0, 0x100, 0xc4d}, {0x8, 0xc, 0x3, 0x7, 0x8, 0x3}, {0x2, 0x7, 0x8, 0xf1b1, 0x80, 0x5}, {0x1, 0x5, 0xb, 0x9d4, 0x0, 0x9b8}, {0x1, 0x3, 0x10, 0x4, 0x8, 0x6}, {0xfffffef3, 0x6, 0x7ff, 0x53, 0x1, 0x8}, {0xf1f, 0x5, 0x3, 0x5, 0x200, 0x2e}, {0x7, 0x8, 0x5, 0xfff, 0x3, 0xc40d}, {0x80000001, 0x79e, 0x6, 0x7, 0x4, 0xc}, {0x2, 0xbd, 0x5, 0x5, 0xfffffff9, 0x6}, {0x2, 0x5f4b, 0x5, 0x7, 0x10, 0x3ff}, {0x6, 0x53, 0x9, 0x3, 0x80000000, 0x8}, {0xb565, 0x2, 0x5a, 0x9, 0x0, 0x2}, {0x0, 0x9, 0x1, 0x1, 0xa859, 0x81}, {0x1ff, 0x100, 0x2, 0x1, 0xfff, 0x2}, {0x3, 0x7, 0x6, 0x8, 0x2, 0xffff}, {0xe, 0x401, 0x4, 0x4, 0x2, 0xabda}, {0xd, 0xfffffffd, 0x2, 0x1, 0x40, 0x4}, {0x200, 0x80, 0x0, 0x2, 0x4, 0x8}, {0x80000001, 0xe51, 0x3, 0x4800000, 0x1, 0x18}, {0x7, 0x1336, 0x9, 0xffff, 0x2, 0x4}, {0x0, 0x7, 0x7, 0x401, 0x2, 0x81}, {0xe, 0x6, 0xfff, 0x8, 0x1, 0x1}, {0x8, 0x200, 0x8, 0x5, 0xfff, 0x1}, {0x9, 0x5, 0x2, 0x10000, 0x0, 0x1}, {0x2f, 0xfff, 0x2, 0x5, 0x0, 0x7}, {0x0, 0x6, 0xfffffff9, 0x1, 0x58, 0x4}, {0x3, 0x3, 0x4, 0x40, 0x1, 0x800}, {0x9, 0x9d2, 0x3, 0x8, 0x0, 0x6}, {0xee, 0x2, 0x0, 0x400, 0x9, 0x5}, {0x8, 0x4c328fa4, 0x8, 0xd03, 0x9, 0x9}, {0x2, 0x3, 0xc, 0x0, 0xfffffff1, 0x1}, {0x9, 0x1, 0x6, 0x6, 0x2, 0x5}, {0x8, 0x4000000, 0x4d2, 0x800, 0x0, 0xc0000000}, {0xa20a, 0xffff7fff, 0x7, 0xb3e6, 0x6, 0x401}, {0x8, 0x9, 0x4, 0x6, 0x4, 0x9}, {0x3, 0x2, 0x30c00, 0x3, 0x7aed, 0x80000000}, {0x1, 0x8, 0xae, 0x1, 0x4, 0x8}, {0x5e84, 0x8, 0xe9, 0x7ff, 0x0, 0x1e}, {0x800, 0x4, 0x7f, 0x1, 0xacd6, 0x9}, {0x80, 0x6, 0x5, 0x4, 0x3, 0x2}, {0x3, 0x7ff, 0xd8a3, 0x1, 0x9, 0xe}, {0x2, 0x6, 0x7, 0x4, 0x6, 0x983}, {0xfffffffe, 0x40, 0x0, 0x6, 0x0, 0x6}, {0x9, 0x2, 0x9, 0x2, 0x6, 0x2}, {0x10, 0xff, 0x8, 0x7fff, 0x9, 0x5}, {0x2, 0x7, 0x2, 0x800, 0xdf, 0x9}, {0x9, 0x7, 0x3ff, 0xd, 0x1}, {0xfffffffd, 0xfffff800, 0xfffffbff, 0x6d56, 0x4, 0x4f}, {0x8000, 0x2, 0x7fffffff, 0xb, 0x3, 0x8}, {0x6, 0x9, 0x7, 0x4, 0x7, 0x7f}, {0x3, 0x5, 0x81, 0x6, 0x7, 0x2}], [{}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0xbda889148d3516ca, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x4, 0xc414a147ffab8019}, {0x5}, {0x2}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x600}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x4}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x8d44615b4bc1de35, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2c546355231011a3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x2372577df6cad8bb}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0xb1186faa505bbc0e}, {0x2, 0x1}, {0x2}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 0s ago: executing program 2 (id=14304): r0 = socket$netlink(0x10, 0x3, 0x9) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xc, 0xffff, 0x4, 0x0, 0xffffffffffffffff, 0x352}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000001440), 0x0}, 0x20) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400c65c", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300)=0x80de, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0xc21, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffe01}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000000)={0xff, 0x3}, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x400) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000280)={r11, 0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, 0x0, 0x4) kernel console output (not intermixed with test programs): on, please check. [ 1543.098828][T21386] team0: Mode changed to "loadbalance" [ 1543.726829][T21403] syzkaller0: entered promiscuous mode [ 1543.739672][T21403] syzkaller0: entered allmulticast mode [ 1543.748221][T21412] tipc: Invalid UDP bearer configuration [ 1543.748276][T21412] tipc: Enabling of bearer rejected, failed to enable media [ 1543.818142][T21419] netlink: 'syz.0.12466': attribute type 2 has an invalid length. [ 1544.088617][T21437] netlink: 'syz.1.12472': attribute type 1 has an invalid length. [ 1544.351439][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a54e000: rx timeout, send abort [ 1544.851564][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a54d000: rx timeout, send abort [ 1544.861003][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a54e000: abort rx timeout. Force session deactivation [ 1545.361810][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a54d000: abort rx timeout. Force session deactivation [ 1546.067441][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1547.558177][T21460] IPVS: length: 76 != 1776 [ 1547.675732][T21464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1547.685249][T21468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1547.950025][T21482] __nla_validate_parse: 7 callbacks suppressed [ 1547.950047][T21482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12485'. [ 1548.003240][T21484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12485'. [ 1548.038466][T21486] netlink: 'syz.1.12486': attribute type 1 has an invalid length. [ 1548.053117][T21486] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12486'. [ 1548.064350][T21486] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12486'. [ 1548.125539][ T2716] Bluetooth: hci3: command 0x0406 tx timeout [ 1548.199544][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12489'. [ 1548.259299][T21494] geneve2: entered promiscuous mode [ 1548.297758][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12489'. [ 1548.298666][T21227] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1548.320991][T21227] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1548.331803][T21227] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1548.355185][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12491'. [ 1548.368230][T21227] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1548.425012][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12491'. [ 1548.586465][T21511] sctp: [Deprecated]: syz.3.12496 (pid 21511) Use of int in max_burst socket option. [ 1548.586465][T21511] Use struct sctp_assoc_value instead [ 1548.950389][T21529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12500'. [ 1548.962299][T21529] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12500'. [ 1549.136212][T21539] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1549.159439][T21539] batadv0: entered promiscuous mode [ 1549.166742][T21539] debugfs: 'hsr1' already exists in 'hsr' [ 1549.173105][T21539] Cannot create hsr debugfs directory [ 1549.302657][T21544] veth3: entered promiscuous mode [ 1550.784723][T21605] lo speed is unknown, defaulting to 1000 [ 1550.810106][T21605] lo speed is unknown, defaulting to 1000 [ 1550.917099][T21612] geneve2: entered promiscuous mode [ 1551.083870][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.092008][ C1] lec:lec_tx_timeout: lec0 [ 1551.131384][T21616] netlink: 'syz.2.12525': attribute type 13 has an invalid length. [ 1551.141665][T21616] netlink: 'syz.2.12525': attribute type 12 has an invalid length. [ 1551.637841][T21605] wlan1 speed is unknown, defaulting to 1000 [ 1554.037226][T21618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1554.569925][T21701] __nla_validate_parse: 6 callbacks suppressed [ 1554.569946][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12549'. [ 1554.608257][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12550'. [ 1554.658859][T21708] xt_hashlimit: size too large, truncated to 1048576 [ 1554.704739][T21701] netlink: 5 bytes leftover after parsing attributes in process `syz.0.12549'. [ 1554.714779][T21701] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 1554.736612][T21701] ..0ªî{X¹¦: entered allmulticast mode [ 1554.742878][T21701] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1554.767568][T21708] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1554.797372][T21712] netlink: 'syz.3.12553': attribute type 9 has an invalid length. [ 1554.991435][T21711] tipc: Enabled bearer , priority 0 [ 1555.000690][T21709] syzkaller0: entered promiscuous mode [ 1555.019643][T21709] syzkaller0: entered allmulticast mode [ 1555.035864][T21723] netlink: 'syz.0.12555': attribute type 1 has an invalid length. [ 1555.098062][T21725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12555'. [ 1555.268002][T21723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1555.313360][T21725] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1555.349792][T21725] bond1: (slave batadv1): making interface the new active one [ 1555.360764][T21725] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1555.372253][T21708] tipc: Resetting bearer [ 1555.387884][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12557'. [ 1555.447929][T21707] tipc: Resetting bearer [ 1555.552750][T21707] tipc: Disabling bearer [ 1555.689170][T21752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.702172][T21749] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12559'. [ 1555.742585][T21752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.775508][T21752] bridge_slave_0: entered allmulticast mode [ 1555.783173][T21757] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.12563'. [ 1555.804969][T21752] bridge_slave_0: entered promiscuous mode [ 1555.811677][T21752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.819022][T21752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1555.828060][T21757] openvswitch: netlink: EtherType 0 is less than min 600 [ 1555.962855][T21755] veth4: entered allmulticast mode [ 1555.985641][T21763] x_tables: duplicate underflow at hook 2 [ 1556.277831][T21778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12569'. [ 1556.394933][T21781] netlink: 'syz.4.12572': attribute type 33 has an invalid length. [ 1556.402917][T21781] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12572'. [ 1556.437664][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12573'. [ 1556.474873][T21781] `: renamed from team0 (while UP) [ 1557.165107][T21818] netlink: 'syz.4.12582': attribute type 1 has an invalid length. [ 1557.546290][T21830] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.556556][T21830] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.677868][T21830] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.692822][T21830] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.789706][T21830] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1557.837480][T21830] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.009994][T21830] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1558.026431][T21830] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.249824][T21235] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.259340][T21235] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.316311][T21235] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.325488][T21235] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.379887][T21235] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.391058][T21235] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.401694][T21868] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 1558.498136][T21235] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.516050][T21235] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.638629][T21875] netlink: 'syz.0.12597': attribute type 10 has an invalid length. [ 1558.690701][T21881] netlink: 'syz.0.12597': attribute type 10 has an invalid length. [ 1558.730639][T21875] team0: Port device dummy0 added [ 1558.853651][T21881] team0: Port device dummy0 removed [ 1558.908531][T21881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1558.912944][T21893] Bluetooth: MGMT ver 1.23 [ 1559.647331][T21925] netlink: 'syz.3.12610': attribute type 13 has an invalid length. [ 1559.706760][T21925] netlink: 'syz.3.12610': attribute type 13 has an invalid length. [ 1559.996623][T21943] bond0: (slave dummy0): Releasing backup interface [ 1560.114974][T21943] bridge_slave_0: left promiscuous mode [ 1560.126032][T21956] SET target dimension over the limit! [ 1560.136301][T21943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.153364][T21956] SET target dimension over the limit! [ 1560.184801][T21956] SET target dimension over the limit! [ 1560.190500][T21956] SET target dimension over the limit! [ 1560.219528][T21943] bridge_slave_1: left allmulticast mode [ 1560.226649][T21943] bridge_slave_1: left promiscuous mode [ 1560.235728][T21943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.255373][T21956] SET target dimension over the limit! [ 1560.261063][T21956] SET target dimension over the limit! [ 1560.280288][T21943] bond0: (slave bond_slave_0): Releasing backup interface [ 1560.305177][T21956] SET target dimension over the limit! [ 1560.310894][T21956] SET target dimension over the limit! [ 1560.330298][T21943] bond0: (slave bond_slave_1): Releasing backup interface [ 1560.349065][T21956] SET target dimension over the limit! [ 1560.375635][T21956] SET target dimension over the limit! [ 1560.389270][T21943] team0: Port device team_slave_0 removed [ 1560.426063][T21943] team0: Port device team_slave_1 removed [ 1560.433803][T21943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1560.448687][T21943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.477070][T21943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1560.535111][T21943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1560.543871][T21962] netlink: 'syz.3.12619': attribute type 1 has an invalid length. [ 1560.599497][T21951] __nla_validate_parse: 15 callbacks suppressed [ 1560.599519][T21951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12615'. [ 1560.651095][T21962] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1560.672742][T21943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1560.722899][T21943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1560.963870][T21978] netlink: 'syz.0.12623': attribute type 10 has an invalid length. [ 1561.049150][T21978] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1561.114938][T21990] syzkaller1: entered promiscuous mode [ 1561.120926][T21990] syzkaller1: entered allmulticast mode [ 1561.656869][T22010] netlink: 'syz.0.12632': attribute type 21 has an invalid length. [ 1561.687610][T22010] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12632'. [ 1561.719403][T22010] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12632'. [ 1561.911234][T22013] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1561.943086][T22013] bond2: (slave lo): Enslaving as an active interface with an up link [ 1562.018607][T22013] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1562.122006][T22023] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12636'. [ 1562.152222][T22022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12636'. [ 1562.167894][T22022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12636'. [ 1562.195244][T22023] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12636'. [ 1562.245904][T22026] netlink: 180 bytes leftover after parsing attributes in process `syz.2.12637'. [ 1562.256803][T22026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12637'. [ 1562.271676][T22026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12637'. [ 1562.730433][T22039] syzkaller0: entered promiscuous mode [ 1562.756712][T22039] syzkaller0: entered allmulticast mode [ 1565.847962][ T30] audit: type=1800 audit(1772276230.603:81): pid=22087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12651" name="memory.events" dev="tmpfs" ino=242 res=0 errno=0 [ 1565.902231][ T30] audit: type=1804 audit(1772276230.603:82): pid=22087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.12651" name="/newroot/44/memory.events" dev="tmpfs" ino=242 res=1 errno=0 [ 1566.215363][T22112] netlink: 'syz.1.12660': attribute type 1 has an invalid length. [ 1566.223392][T22112] netlink: 'syz.1.12660': attribute type 4 has an invalid length. [ 1566.239471][ T30] audit: type=1804 audit(1772276231.003:83): pid=22113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12659" name="/newroot/85/memory.events" dev="tmpfs" ino=444 res=1 errno=0 [ 1566.242884][T22112] __nla_validate_parse: 2 callbacks suppressed [ 1566.242952][T22112] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.12660'. [ 1566.270031][ T30] audit: type=1800 audit(1772276231.003:84): pid=22113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12659" name="memory.events" dev="tmpfs" ino=444 res=0 errno=0 [ 1566.310020][T22115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1566.538579][T21231] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.558860][T21231] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.570732][T21231] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.582694][T21231] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.623167][T22109] lo speed is unknown, defaulting to 1000 [ 1566.636756][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12661'. [ 1566.681975][T22109] lo speed is unknown, defaulting to 1000 [ 1566.819602][T22130] xt_hashlimit: size too large, truncated to 1048576 [ 1566.928186][T22140] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1566.975016][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12664'. [ 1567.058267][T22133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.137251][T22133] bridge_slave_0 (unregistering): left allmulticast mode [ 1567.152953][T22141] netlink: 'syz.0.12662': attribute type 4 has an invalid length. [ 1567.179547][T22133] bridge_slave_0 (unregistering): left promiscuous mode [ 1567.187841][T22133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.370273][T22109] wlan1 speed is unknown, defaulting to 1000 [ 1567.674034][T22162] netlink: 'syz.2.12671': attribute type 11 has an invalid length. [ 1567.718987][T22162] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.12671'. [ 1567.835090][T22162] vlan2: entered allmulticast mode [ 1567.853458][T22162] team0: entered allmulticast mode [ 1568.102168][T22174] gretap1: entered promiscuous mode [ 1568.175995][T22174] batman_adv: batadv0: Adding interface: gretap1 [ 1568.192719][T22174] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.272213][T22174] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1568.428802][T22181] netlink: 'syz.0.12674': attribute type 1 has an invalid length. [ 1568.551666][T22187] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12678'. [ 1568.624911][T22187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1568.715974][T22189] siw: device registration error -23 [ 1568.730604][T22189] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 1568.737366][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12681'. [ 1568.772708][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12681'. [ 1569.002910][T22191] hsr_slave_0: left promiscuous mode [ 1569.015903][T22191] hsr_slave_1: left promiscuous mode [ 1569.069096][T22196] SET target dimension over the limit! [ 1569.077370][T22197] SET target dimension over the limit! [ 1569.258382][T22197] lo speed is unknown, defaulting to 1000 [ 1569.289310][T22197] lo speed is unknown, defaulting to 1000 [ 1569.448774][T22212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12689'. [ 1569.486530][T22212] sctp: [Deprecated]: syz.4.12689 (pid 22212) Use of int in maxseg socket option. [ 1569.486530][T22212] Use struct sctp_assoc_value instead [ 1569.652674][T22219] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12690'. [ 1569.677755][T22220] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12691'. [ 1569.876282][T22223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.915893][T22223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.970257][T22197] wlan1 speed is unknown, defaulting to 1000 [ 1570.041253][T22223] syzkaller0: entered promiscuous mode [ 1570.055627][T22223] syzkaller0: entered allmulticast mode [ 1570.722599][T22243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1570.849241][T22242] lo speed is unknown, defaulting to 1000 [ 1570.864846][T22242] lo speed is unknown, defaulting to 1000 [ 1571.161867][T22242] wlan1 speed is unknown, defaulting to 1000 [ 1571.339242][T22254] __nla_validate_parse: 2 callbacks suppressed [ 1571.339265][T22254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12702'. [ 1571.407552][T22254] ip6gre1: entered promiscuous mode [ 1571.437479][T22254] ip6gre1: entered allmulticast mode [ 1571.473414][T22254] netlink: 'syz.0.12702': attribute type 6 has an invalid length. [ 1571.483161][T22254] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12702'. [ 1571.539598][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12702'. [ 1571.558225][T22262] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12704'. [ 1571.604584][T22263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12703'. [ 1571.844508][T22272] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 1572.145085][T22281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12710'. [ 1572.348130][T22283] veth0: Caught tx_queue_len zero misconfig [ 1572.370110][T22287] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1572.412263][T22287] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.610547][T22287] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1572.624021][T22287] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.796864][T22287] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1572.814737][T22287] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.889366][T22287] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1572.905974][T22287] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.007326][T22302] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12716'. [ 1573.026145][T22302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12716'. [ 1573.185425][T22304] syzkaller0: entered promiscuous mode [ 1573.235388][T22304] syzkaller0: entered allmulticast mode [ 1573.318026][T13377] lec:lec_start_xmit: lec0:No lecd attached [ 1573.349609][T22306] lo speed is unknown, defaulting to 1000 [ 1573.402941][T22307] lo speed is unknown, defaulting to 1000 [ 1573.407961][T22306] lo speed is unknown, defaulting to 1000 [ 1573.649713][T22334] tunl0: Caught tx_queue_len zero misconfig [ 1573.659910][T22330] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12725'. [ 1573.718515][T22306] wlan1 speed is unknown, defaulting to 1000 [ 1573.718689][T22307] lo speed is unknown, defaulting to 1000 [ 1573.871535][T22339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 1576.577245][T22307] wlan1 speed is unknown, defaulting to 1000 [ 1576.617864][T22337] lo speed is unknown, defaulting to 1000 [ 1576.746203][T22337] lo speed is unknown, defaulting to 1000 [ 1576.993148][T22368] bond0: option arp_validate: invalid value (55553) [ 1577.018217][T22370] can: request_module (can-proto-0) failed. [ 1577.018799][T22372] can: request_module (can-proto-0) failed. [ 1577.081840][T22375] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.245763][T22375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.336721][T22337] wlan1 speed is unknown, defaulting to 1000 [ 1577.521893][T22375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.696210][T22375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.100143][T21248] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.125534][T21248] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.160246][T21248] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.226642][T21235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.367561][T22400] 8021q: VLANs not supported on syzkaller1 [ 1578.627713][T22415] netlink: 'syz.1.12746': attribute type 4 has an invalid length. [ 1578.642340][T22415] netlink: 'syz.1.12746': attribute type 1 has an invalid length. [ 1578.652605][T22415] netlink: 228 bytes leftover after parsing attributes in process `syz.1.12746'. [ 1578.784210][T22408] gretap2: entered allmulticast mode [ 1578.826005][T22424] netlink: 240 bytes leftover after parsing attributes in process `syz.4.12749'. [ 1578.923537][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 1578.931655][ C1] lec:lec_tx_timeout: lec0 [ 1579.079575][T22437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12752'. [ 1579.125414][T22434] ip6erspan0: entered promiscuous mode [ 1579.172842][T22427] lo speed is unknown, defaulting to 1000 [ 1579.196471][T22427] lo speed is unknown, defaulting to 1000 [ 1579.249354][T22443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12754'. [ 1579.260035][T22443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12754'. [ 1579.411850][T22449] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1579.424339][T22449] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1579.780259][T22427] wlan1 speed is unknown, defaulting to 1000 [ 1580.300738][T22498] lo speed is unknown, defaulting to 1000 [ 1580.358136][T22494] dummy0: entered promiscuous mode [ 1580.365713][T22494] macsec0: entered promiscuous mode [ 1580.376499][T22494] macsec0: entered allmulticast mode [ 1580.400327][T22494] dummy0: entered allmulticast mode [ 1580.531000][T22494] dummy0: left allmulticast mode [ 1580.545826][T22494] dummy0: left promiscuous mode [ 1580.640345][T22498] lo speed is unknown, defaulting to 1000 [ 1580.871154][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12773'. [ 1580.891765][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12773'. [ 1581.247597][T22498] wlan1 speed is unknown, defaulting to 1000 [ 1581.604180][T22537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1582.311392][T22551] lo speed is unknown, defaulting to 1000 [ 1582.326725][T22551] lo speed is unknown, defaulting to 1000 [ 1582.632708][T22571] netlink: 'syz.2.12788': attribute type 1 has an invalid length. [ 1582.705177][T22571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12788'. [ 1582.858208][T22586] xt_nfacct: accounting object `syz0' does not exist [ 1583.139244][T22551] wlan1 speed is unknown, defaulting to 1000 [ 1583.220626][T22599] IPv6: NLM_F_CREATE should be specified when creating new route [ 1583.233316][T22599] netlink: 'syz.4.12792': attribute type 1 has an invalid length. [ 1583.366448][T22607] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12796'. [ 1583.380451][T22597] pim6reg1: entered promiscuous mode [ 1583.394582][T22597] pim6reg1: entered allmulticast mode [ 1583.414326][T22607] veth2: entered allmulticast mode [ 1583.596105][T22614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12794'. [ 1583.644436][T22614] bond2: (slave lo): Releasing backup interface [ 1583.668585][T22614] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1583.715184][T22621] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12800'. [ 1583.787531][T22614] bridge_slave_0: left allmulticast mode [ 1583.825177][T22614] bridge_slave_0: left promiscuous mode [ 1583.842902][T22610] netlink: 'syz.4.12794': attribute type 10 has an invalid length. [ 1583.859045][T22627] netlink: 'syz.3.12801': attribute type 10 has an invalid length. [ 1583.868543][T22614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.896361][T22614] bridge_slave_1: left allmulticast mode [ 1583.902533][T22614] bridge_slave_1: left promiscuous mode [ 1583.913155][T22614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.945478][T22614] bond0: (slave bond_slave_0): Releasing backup interface [ 1583.960367][T22614] bond0: (slave bond_slave_1): Releasing backup interface [ 1583.982895][T22614] `: Port device team_slave_0 removed [ 1584.006386][T22614] `: Port device team_slave_1 removed [ 1584.015865][T22614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.023303][T22614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.097906][T22610] veth0_vlan: left promiscuous mode [ 1584.109234][T22610] veth0_vlan: entered promiscuous mode [ 1584.125483][T22610] `: Device veth0_vlan failed to register rx_handler [ 1584.161677][T22630] syzkaller1: entered promiscuous mode [ 1584.168978][T22630] syzkaller1: entered allmulticast mode [ 1584.271545][T22636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12803'. [ 1584.366200][T22640] netlink: zone id is out of range [ 1584.393741][T22640] netlink: zone id is out of range [ 1584.414844][T22640] netlink: zone id is out of range [ 1584.421544][T22640] netlink: zone id is out of range [ 1584.480532][T22640] netlink: zone id is out of range [ 1584.489221][T22640] netlink: zone id is out of range [ 1584.496166][T22640] netlink: zone id is out of range [ 1584.501547][T22640] netlink: zone id is out of range [ 1584.515345][T22640] netlink: zone id is out of range [ 1584.597892][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12804'. [ 1584.687855][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12808'. [ 1584.698574][T22656] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12808'. [ 1584.751559][T22656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12808'. [ 1584.771666][T22656] netlink: 'syz.1.12808': attribute type 1 has an invalid length. [ 1584.897923][T22656] gretap1: left promiscuous mode [ 1584.975060][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12811'. [ 1585.002734][T22672] FAULT_INJECTION: forcing a failure. [ 1585.002734][T22672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1585.039705][T22671] lo speed is unknown, defaulting to 1000 [ 1585.067250][T22674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12810'. [ 1585.077053][T22672] CPU: 1 UID: 0 PID: 22672 Comm: syz.0.12813 Not tainted syzkaller #0 PREEMPT(full) [ 1585.077084][T22672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1585.077099][T22672] Call Trace: [ 1585.077109][T22672] [ 1585.077119][T22672] dump_stack_lvl+0xe8/0x150 [ 1585.077157][T22672] should_fail_ex+0x412/0x560 [ 1585.077189][T22672] _copy_to_user+0x31/0xb0 [ 1585.077224][T22672] simple_read_from_buffer+0xe1/0x170 [ 1585.077260][T22672] proc_fail_nth_read+0x1bb/0x230 [ 1585.077294][T22672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1585.077327][T22672] ? rw_verify_area+0x2a6/0x4d0 [ 1585.077349][T22672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1585.077380][T22672] vfs_read+0x20c/0xa70 [ 1585.077400][T22672] ? fdget_pos+0x246/0x320 [ 1585.077436][T22672] ? __pfx___mutex_lock+0x10/0x10 [ 1585.077467][T22672] ? __pfx_vfs_read+0x10/0x10 [ 1585.077491][T22672] ? __fget_files+0x2a/0x420 [ 1585.077526][T22672] ? __fget_files+0x3a0/0x420 [ 1585.077555][T22672] ? __fget_files+0x2a/0x420 [ 1585.077603][T22672] ksys_read+0x150/0x270 [ 1585.077628][T22672] ? __pfx_ksys_read+0x10/0x10 [ 1585.077663][T22672] do_syscall_64+0x14d/0xf80 [ 1585.077691][T22672] ? trace_irq_disable+0x3b/0x150 [ 1585.077720][T22672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.077743][T22672] ? clear_bhb_loop+0x40/0x90 [ 1585.077851][T22672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.077933][T22672] RIP: 0033:0x7f92c395cfce [ 1585.077996][T22672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1585.078049][T22672] RSP: 002b:00007f92c480bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1585.078120][T22672] RAX: ffffffffffffffda RBX: 00007f92c480c6c0 RCX: 00007f92c395cfce [ 1585.078163][T22672] RDX: 000000000000000f RSI: 00007f92c480c0a0 RDI: 0000000000000004 [ 1585.078195][T22672] RBP: 00007f92c480c090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.078229][T22672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.078269][T22672] R13: 00007f92c3c16038 R14: 00007f92c3c15fa0 R15: 00007ffd1cebff88 [ 1585.078362][T22672] [ 1585.139703][T22671] lo speed is unknown, defaulting to 1000 [ 1585.500030][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12816'. [ 1585.521895][T22684] hsr_slave_0: left promiscuous mode [ 1585.531053][T22684] hsr_slave_1: left promiscuous mode [ 1586.139566][T22671] wlan1 speed is unknown, defaulting to 1000 [ 1586.365205][T22704] lo speed is unknown, defaulting to 1000 [ 1586.431016][T22704] lo speed is unknown, defaulting to 1000 [ 1586.962011][T22704] wlan1 speed is unknown, defaulting to 1000 [ 1587.111078][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12824'. [ 1587.317122][T22732] bond3: entered promiscuous mode [ 1587.322651][T22732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1587.643736][T22736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1587.651168][T22736] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 1587.666564][T22736] bond3: (slave sit1): Error -95 calling set_mac_address [ 1588.317588][T22773] netlink: 'syz.0.12834': attribute type 9 has an invalid length. [ 1588.326857][T22773] netlink: 'syz.0.12834': attribute type 11 has an invalid length. [ 1588.358416][T22773] netlink: 'syz.0.12834': attribute type 12 has an invalid length. [ 1588.667760][T22789] netlink: 'syz.0.12839': attribute type 1 has an invalid length. [ 1588.768648][T22789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1588.933424][T22805] __nla_validate_parse: 7 callbacks suppressed [ 1588.933447][T22805] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.12842'. [ 1589.067915][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12844'. [ 1589.077084][T22804] syzkaller1: entered promiscuous mode [ 1589.105459][T22804] syzkaller1: entered allmulticast mode [ 1589.522140][T11576] IPVS: starting estimator thread 0... [ 1589.614411][T22838] IPVS: using max 24 ests per chain, 57600 per kthread [ 1589.673132][T22842] net_ratelimit: 45 callbacks suppressed [ 1589.673157][T22842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1589.710028][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12853'. [ 1589.969287][T22858] netlink: 'syz.3.12859': attribute type 13 has an invalid length. [ 1589.994603][T22861] netlink: 'syz.3.12859': attribute type 13 has an invalid length. [ 1590.701285][T22892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12871'. [ 1590.748488][T22892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1590.779871][T22897] netlink: 'syz.3.12872': attribute type 49 has an invalid length. [ 1590.878408][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12873'. [ 1590.965435][T22901] : entered promiscuous mode [ 1591.001609][T22907] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1591.052853][T22907] tipc: Started in network mode [ 1591.062949][T22907] tipc: Node identity 9ebc2a071ed5, cluster identity 4711 [ 1591.102512][T22907] tipc: Enabled bearer , priority 0 [ 1591.120959][T22912] syzkaller0: entered promiscuous mode [ 1591.134256][T22912] syzkaller0: entered allmulticast mode [ 1591.158753][T22907] tipc: Resetting bearer [ 1591.208422][T22900] tipc: Resetting bearer [ 1591.286175][T22900] tipc: Disabling bearer [ 1591.367254][T22922] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12879'. [ 1591.415979][T22915] batman_adv: batadv0: Adding interface: macvtap1 [ 1591.452820][T22915] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.575235][T22915] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1591.812614][T22938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12885'. [ 1591.890927][T22942] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1592.638679][T22976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12894'. [ 1592.755343][T11579] IPVS: starting estimator thread 0... [ 1592.841669][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12896'. [ 1592.854264][T22979] IPVS: using max 27 ests per chain, 64800 per kthread [ 1593.055351][T22998] netlink: 'syz.2.12899': attribute type 4 has an invalid length. [ 1593.064730][T22999] openvswitch: netlink: Message has -2 unknown bytes. [ 1593.085262][T22999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1593.145406][T23005] netlink: 'syz.4.12901': attribute type 10 has an invalid length. [ 1593.153392][T23005] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12901'. [ 1593.202213][T22998] lo speed is unknown, defaulting to 1000 [ 1593.215288][T23006] netlink: 'syz.4.12901': attribute type 10 has an invalid length. [ 1593.268200][T22998] lo speed is unknown, defaulting to 1000 [ 1593.498213][T23013] tipc: Enabled bearer , priority 0 [ 1593.509577][T23013] syzkaller0: entered promiscuous mode [ 1593.515951][T23013] syzkaller0: entered allmulticast mode [ 1593.619254][T23012] tipc: Resetting bearer [ 1593.725834][T23012] tipc: Disabling bearer [ 1593.826087][T22998] wlan1 speed is unknown, defaulting to 1000 [ 1594.102825][T23022] __nla_validate_parse: 2 callbacks suppressed [ 1594.102847][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12905'. [ 1594.150331][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12905'. [ 1594.214650][T23022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12905'. [ 1594.395882][T23027] lo speed is unknown, defaulting to 1000 [ 1594.428614][T23027] lo speed is unknown, defaulting to 1000 [ 1594.791754][T23036] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12907'. [ 1594.825687][T23034] tipc: Enabled bearer , priority 0 [ 1594.841568][T23035] tipc: Resetting bearer [ 1595.289581][T23047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12912'. [ 1595.341545][T23027] wlan1 speed is unknown, defaulting to 1000 [ 1595.598584][T23057] netlink: 'syz.0.12916': attribute type 3 has an invalid length. [ 1595.820884][T23061] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1595.849028][T11576] tipc: Node number set to 2154375687 [ 1595.929276][T23064] netlink: 'syz.4.12918': attribute type 21 has an invalid length. [ 1595.947258][T23064] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12918'. [ 1596.139123][T23066] siw: device registration error -23 [ 1596.196108][T23066] netlink: 'syz.0.12919': attribute type 1 has an invalid length. [ 1596.570425][T23078] lo speed is unknown, defaulting to 1000 [ 1596.635585][T23078] lo speed is unknown, defaulting to 1000 [ 1597.523392][T23120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12937'. [ 1597.640983][T23120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12937'. [ 1597.733994][T23078] wlan1 speed is unknown, defaulting to 1000 [ 1597.761818][T23126] xt_recent: Unsupported userspace flags (000000b1) [ 1597.852983][T23134] netlink: 'syz.0.12941': attribute type 5 has an invalid length. [ 1598.270603][T23140] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1598.965736][T23167] netlink: 'syz.0.12945': attribute type 23 has an invalid length. [ 1598.989582][T23168] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12948'. [ 1599.057931][T23174] xt_HMARK: spi-set and port-set can't be combined [ 1599.138408][T23164] Bluetooth: MGMT ver 1.23 [ 1599.334576][T23178] IPVS: Scheduler module ip_vs_sip not found [ 1599.437649][T23186] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1599.443958][T23186] syzkaller1: linktype set to 778 [ 1599.451695][T23186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1599.678315][T23190] lo speed is unknown, defaulting to 1000 [ 1599.697906][T23190] lo speed is unknown, defaulting to 1000 [ 1599.705626][T23198] netlink: 'syz.1.12954': attribute type 10 has an invalid length. [ 1599.786394][T23198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.826658][T23198] team0: Port device bond0 added [ 1599.992674][T23190] wlan1 speed is unknown, defaulting to 1000 [ 1600.080300][T23213] netlink: 'syz.2.12956': attribute type 6 has an invalid length. [ 1600.092013][T23210] lo speed is unknown, defaulting to 1000 [ 1600.103246][T23210] lo speed is unknown, defaulting to 1000 [ 1600.156863][T23203] lo speed is unknown, defaulting to 1000 [ 1600.515564][T23210] wlan1 speed is unknown, defaulting to 1000 [ 1600.515565][T23203] lo speed is unknown, defaulting to 1000 [ 1601.157051][T21248] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.172280][T21248] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.181887][T23231] netlink: 'syz.2.12962': attribute type 1 has an invalid length. [ 1601.241194][T21248] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.316331][T23203] wlan1 speed is unknown, defaulting to 1000 [ 1601.316974][T21248] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.347611][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12962'. [ 1601.558114][T23244] netlink: 165 bytes leftover after parsing attributes in process `syz.1.12963'. [ 1601.592130][T23246] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12965'. [ 1601.947463][T23253] netlink: 'syz.0.12968': attribute type 1 has an invalid length. [ 1604.454071][ T2716] Bluetooth: hci2: command 0x0406 tx timeout [ 1605.406692][T23253] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1605.407372][T23257] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12969'. [ 1605.578843][T23263] lo speed is unknown, defaulting to 1000 [ 1605.588289][T23263] lo speed is unknown, defaulting to 1000 [ 1605.937222][T23289] netlink: 'syz.2.12973': attribute type 1 has an invalid length. [ 1605.951121][T23289] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12973'. [ 1605.962513][T23289] netlink: 'syz.2.12973': attribute type 1 has an invalid length. [ 1605.973167][T23289] netlink: 'syz.2.12973': attribute type 8 has an invalid length. [ 1606.008607][T23289] netlink: 606 bytes leftover after parsing attributes in process `syz.2.12973'. [ 1606.050830][T23289] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12973'. [ 1606.301496][T23297] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.12977'. [ 1606.440861][T23300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12976'. [ 1606.522367][T23307] netlink: 'syz.1.12976': attribute type 15 has an invalid length. [ 1606.643427][T23263] wlan1 speed is unknown, defaulting to 1000 [ 1607.136833][T23323] netlink: 'syz.0.12985': attribute type 2 has an invalid length. [ 1607.157489][T23323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12985'. [ 1607.251062][T23323] hsr_slave_1 (unregistering): left promiscuous mode [ 1607.286068][T23330] netlink: 'syz.0.12985': attribute type 1 has an invalid length. [ 1607.494840][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1607.525313][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12989'. [ 1607.815483][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12993'. [ 1607.941603][T23351] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1608.201405][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12999'. [ 1608.243229][T23372] netlink: 'syz.0.13000': attribute type 1 has an invalid length. [ 1608.640669][T23391] lo speed is unknown, defaulting to 1000 [ 1608.649954][T23391] lo speed is unknown, defaulting to 1000 [ 1608.762873][T23401] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13007'. [ 1608.904846][T23406] tipc: Started in network mode [ 1608.932839][T23406] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 1608.963299][T23406] tipc: Enabling of bearer rejected, failed to enable media [ 1609.027377][T23408] netlink: 'syz.4.13009': attribute type 1 has an invalid length. [ 1609.067665][T23408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1609.169757][T21238] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1609.200178][T21238] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1609.223856][T21238] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1609.272620][T21238] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1609.297962][T21238] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1609.325444][T21238] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1609.354913][T21238] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1609.377299][T21238] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1609.435309][T21238] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1609.471283][T23429] netlink: 'syz.0.13012': attribute type 10 has an invalid length. [ 1609.477199][T21238] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1609.526394][T21238] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1609.558429][T21238] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1609.602140][T23424] lo speed is unknown, defaulting to 1000 [ 1609.609680][T23391] wlan1 speed is unknown, defaulting to 1000 [ 1609.710625][T23424] lo speed is unknown, defaulting to 1000 [ 1609.929093][T23452] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13010'. [ 1610.468387][T23457] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13019'. [ 1610.680143][T23424] wlan1 speed is unknown, defaulting to 1000 [ 1611.081900][T23474] openvswitch: netlink: Key type 148 is out of range max 32 [ 1611.246744][T23467] lo speed is unknown, defaulting to 1000 [ 1611.261581][T23467] lo speed is unknown, defaulting to 1000 [ 1612.066296][T23505] lo speed is unknown, defaulting to 1000 [ 1612.123771][T23506] lo speed is unknown, defaulting to 1000 [ 1612.136101][T23467] wlan1 speed is unknown, defaulting to 1000 [ 1612.142420][T23505] lo speed is unknown, defaulting to 1000 [ 1612.293363][T23514] netlink: 'syz.3.13034': attribute type 26 has an invalid length. [ 1612.422960][T23515] tipc: Enabling not permitted [ 1612.432404][T23515] tipc: Enabling of bearer rejected, failed to enable media [ 1612.527111][T23514] macsec2: entered promiscuous mode [ 1612.534079][T23514] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1612.812729][T23520] netlink: 'syz.3.13036': attribute type 3 has an invalid length. [ 1612.923597][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1612.931671][ C1] lec:lec_tx_timeout: lec0 [ 1612.942557][T23506] lo speed is unknown, defaulting to 1000 [ 1613.386324][T23506] wlan1 speed is unknown, defaulting to 1000 [ 1613.413010][T23505] wlan1 speed is unknown, defaulting to 1000 [ 1613.413143][T23537] lo speed is unknown, defaulting to 1000 [ 1613.490885][T23537] lo speed is unknown, defaulting to 1000 [ 1613.831909][T23537] wlan1 speed is unknown, defaulting to 1000 [ 1614.322801][ T8567] IPVS: starting estimator thread 0... [ 1614.332729][T23551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13047'. [ 1614.411843][T23554] syzkaller1: entered promiscuous mode [ 1614.417532][T23554] syzkaller1: entered allmulticast mode [ 1614.425101][T23553] IPVS: using max 26 ests per chain, 62400 per kthread [ 1615.100309][T23567] netlink: 'syz.1.13051': attribute type 142 has an invalid length. [ 1615.271621][T23571] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.13053'. [ 1615.550869][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13052'. [ 1615.687492][T23572] lo speed is unknown, defaulting to 1000 [ 1615.711027][T23582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13055'. [ 1615.736258][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13055'. [ 1615.748964][T23572] lo speed is unknown, defaulting to 1000 [ 1615.797688][T23584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13057'. [ 1616.302974][T23599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1616.602400][T23572] wlan1 speed is unknown, defaulting to 1000 [ 1616.647867][T23613] netlink: 'syz.3.13066': attribute type 2 has an invalid length. [ 1616.656477][T23613] netlink: 'syz.3.13066': attribute type 1 has an invalid length. [ 1616.788465][T23617] netem: change failed [ 1617.781750][T23643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13075'. [ 1617.834812][T23643] nbd: must specify a size in bytes for the device [ 1617.899287][T23645] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1618.167031][T23657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13080'. [ 1618.196666][T23657] netlink: 'syz.4.13080': attribute type 1 has an invalid length. [ 1618.225420][T23657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13080'. [ 1618.246908][T23657] netlink: 228 bytes leftover after parsing attributes in process `syz.4.13080'. [ 1618.408787][T23667] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1619.077891][T21248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.146436][T21248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.168736][T21248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.262615][T21248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.281564][T23714] IPv6: sit3: Disabled Multicast RS [ 1619.290278][T23714] sit3: entered allmulticast mode [ 1619.596152][T23722] lo speed is unknown, defaulting to 1000 [ 1619.615527][T23722] lo speed is unknown, defaulting to 1000 [ 1619.952948][T23733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.226375][T23722] wlan1 speed is unknown, defaulting to 1000 [ 1620.384789][T23752] __nla_validate_parse: 4 callbacks suppressed [ 1620.384810][T23752] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13108'. [ 1620.408741][T23733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.455365][T23754] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13108'. [ 1620.549567][T23733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.577699][T23758] netlink: 'syz.1.13109': attribute type 2 has an invalid length. [ 1620.593951][T23754] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13108'. [ 1620.623018][T23758] !: entered promiscuous mode [ 1620.647203][T23758] netlink: 'syz.1.13109': attribute type 2 has an invalid length. [ 1620.732433][T23733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.776345][T23758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13109'. [ 1620.797063][T23722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13097'. [ 1620.810456][T23762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13110'. [ 1621.069014][T23777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13114'. [ 1621.087826][T23777] netlink: 'syz.1.13114': attribute type 1 has an invalid length. [ 1621.211118][T21235] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.261312][T18168] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.319804][T18168] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.359854][T18168] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.889673][T23815] sch_tbf: peakrate 8 is lower than or equals to rate 5972522490990529882 ! [ 1622.043366][ T30] audit: type=1800 audit(1772276286.803:85): pid=23830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13125" name="memory.events" dev="tmpfs" ino=1008 res=0 errno=0 [ 1622.068317][T23825] netlink: 'syz.1.13130': attribute type 1 has an invalid length. [ 1623.091064][T23825] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1623.116529][T21235] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.197344][T21235] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.237757][T21235] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.266408][T21235] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.459757][T23855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13137'. [ 1623.516905][T23846] bond3: entered promiscuous mode [ 1623.547217][T23846] bond3: entered allmulticast mode [ 1623.553189][T23846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1623.714745][T23870] netlink: 'syz.2.13140': attribute type 13 has an invalid length. [ 1624.093080][T23885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1624.119502][T23887] IPv6: sit1: Disabled Multicast RS [ 1624.293226][T23901] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1624.824451][T23930] syzkaller0: entered promiscuous mode [ 1624.830174][T23930] syzkaller0: entered allmulticast mode [ 1624.899607][T23930] netlink: 'syz.2.13156': attribute type 1 has an invalid length. [ 1625.105302][T23943] netlink: 'syz.3.13161': attribute type 13 has an invalid length. [ 1625.113289][T23943] netlink: 'syz.3.13161': attribute type 17 has an invalid length. [ 1625.181892][T23943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1625.198340][T23945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13162'. [ 1625.209611][T23945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13162'. [ 1625.521502][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13166'. [ 1625.901127][T23982] : entered promiscuous mode [ 1625.956639][T23990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13176'. [ 1626.077813][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13177'. [ 1626.133113][T24002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1626.140470][T24002] IPv6: NLM_F_CREATE should be set when creating new route [ 1626.175888][T23998] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 1626.187044][T23994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1626.194400][T23994] IPv6: NLM_F_CREATE should be set when creating new route [ 1626.400737][T24006] syzkaller0: entered promiscuous mode [ 1626.438749][T24006] syzkaller0: entered allmulticast mode [ 1626.459974][T24013] x_tables: duplicate underflow at hook 3 [ 1627.195338][T24021] netlink: 388 bytes leftover after parsing attributes in process `syz.4.13185'. [ 1628.167854][T24051] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13191'. [ 1628.816121][T24057] netlink: 'syz.0.13192': attribute type 1 has an invalid length. [ 1630.054879][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 1630.468712][T24057] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1630.510497][T24032] lo speed is unknown, defaulting to 1000 [ 1630.565462][T24032] lo speed is unknown, defaulting to 1000 [ 1630.639078][T24065] IPVS: persistence engine module ip_vs_pe_ not found [ 1630.936610][T24075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13197'. [ 1631.080762][T24082] netlink: 'syz.1.13200': attribute type 1 has an invalid length. [ 1631.170952][T24032] wlan1 speed is unknown, defaulting to 1000 [ 1631.231405][T24091] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1631.547496][T24095] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13204'. [ 1631.640381][T24095] bond4 (unregistering): Released all slaves [ 1631.716469][T24110] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13207'. [ 1631.751333][T24105] tipc: Enabled bearer , priority 14 [ 1631.771216][T24110] 0ªX¹¦À: renamed from caif0 [ 1631.787917][T24110] tipc: Disabling bearer [ 1631.928395][T24110] 0ªX¹¦À: entered allmulticast mode [ 1631.940482][T24110] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1631.961977][T24115] netlink: 'syz.3.13210': attribute type 1 has an invalid length. [ 1632.040471][T24114] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1632.076941][T24119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1632.084274][T24119] IPv6: NLM_F_CREATE should be set when creating new route [ 1632.091565][T24119] IPv6: NLM_F_CREATE should be set when creating new route [ 1632.098901][T24119] IPv6: NLM_F_CREATE should be set when creating new route [ 1632.124175][T24119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1632.177785][T24126] openvswitch: netlink: IP tunnel dst address not specified [ 1632.252204][T24131] 8021q: VLANs not supported on sit0 [ 1632.437970][T24138] vlan2: entered allmulticast mode [ 1632.453875][T24138] bond0: entered allmulticast mode [ 1632.467477][T24148] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13218'. [ 1632.471834][T24141] ip6erspan1: entered promiscuous mode [ 1632.537124][T24148] team0: Port device bond0 removed [ 1632.562851][T24148] bond0 (unregistering): Released all slaves [ 1632.613227][T24145] syzkaller0: entered promiscuous mode [ 1632.641934][T24145] syzkaller0: entered allmulticast mode [ 1632.883138][T24164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13224'. [ 1633.127591][T24182] 8021q: VLANs not supported on syzkaller1 [ 1633.186157][T24186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1633.255733][T24186] team_slave_1: Caught tx_queue_len zero misconfig [ 1633.301482][T24190] netlink: 'syz.2.13231': attribute type 11 has an invalid length. [ 1633.310078][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13231'. [ 1633.362661][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13229'. [ 1633.376938][T24197] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13229'. [ 1633.564400][T24206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13235'. [ 1633.598250][T24206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13235'. [ 1634.216471][T21234] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.240843][T21234] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.259609][T21234] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.273966][T24243] netlink: 'syz.1.13245': attribute type 6 has an invalid length. [ 1634.295989][T21234] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.306231][T24243] block nbd0: not configured, cannot reconfigure [ 1634.338249][T24240] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1634.345890][T24240] syzkaller1: Linktype set failed because interface is up [ 1634.366820][ T5893] syzkaller1: tun_net_xmit 90 [ 1634.935921][T24281] openvswitch: netlink: Flow key attr not present in new flow. [ 1635.340716][T24301] netlink: 'syz.2.13261': attribute type 5 has an invalid length. [ 1636.035486][T24336] __nla_validate_parse: 9 callbacks suppressed [ 1636.035509][T24336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13277'. [ 1636.078969][T24339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13279'. [ 1636.348642][T24353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13286'. [ 1636.587600][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13292'. [ 1636.724867][T24377] bridge2: entered allmulticast mode [ 1636.776923][T24384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13297'. [ 1636.915452][T24392] pim6reg: entered allmulticast mode [ 1636.924897][T21234] wlan1: Trigger new scan to find an IBSS to join [ 1637.978591][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13330'. [ 1638.151726][T13377] lec:lec_start_xmit: lec0:No lecd attached [ 1638.190225][T24461] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13335'. [ 1638.214895][T24461] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13335'. [ 1638.943257][T24499] delete_channel: no stack [ 1638.979699][T24500] netlink: 'syz.4.13352': attribute type 3 has an invalid length. [ 1639.024852][T24500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13352'. [ 1639.140770][T24510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13357'. [ 1639.300267][T24509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.371845][T24509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1639.964182][T21235] wlan1: Trigger new scan to find an IBSS to join [ 1640.078380][T24556] Cannot find add_set index 1 as target [ 1640.438229][T24574] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1641.269932][T24599] netlink: 'syz.1.13383': attribute type 1 has an invalid length. [ 1641.281730][T24599] netlink: 'syz.1.13383': attribute type 2 has an invalid length. [ 1641.291173][T24599] netlink: 'syz.1.13383': attribute type 1 has an invalid length. [ 1641.300949][T24599] __nla_validate_parse: 135 callbacks suppressed [ 1641.300966][T24599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13383'. [ 1641.431367][T24605] bond0: entered promiscuous mode [ 1641.441294][T24605] batadv0: entered promiscuous mode [ 1641.448080][T24605] debugfs: 'hsr0' already exists in 'hsr' [ 1641.454853][T24605] Cannot create hsr debugfs directory [ 1641.460779][T24605] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1641.472717][T24605] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1641.489265][T24605] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1641.500989][T24605] bond0: left promiscuous mode [ 1641.507412][T24605] batadv0: left promiscuous mode [ 1641.617561][T24589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1642.066211][T24628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13392'. [ 1642.244914][T24628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1642.332520][T24631] macvlan2: entered allmulticast mode [ 1642.360178][T24631] veth0_to_bond: entered allmulticast mode [ 1642.395985][T24631] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1642.562535][T24645] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1642.574013][ T5893] IPVS: starting estimator thread 0... [ 1642.693943][T24647] IPVS: using max 25 ests per chain, 60000 per kthread [ 1642.831738][T24656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13401'. [ 1642.842760][T24657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13401'. [ 1642.936347][T21235] wlan1: Trigger new scan to find an IBSS to join [ 1642.993085][T24665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13404'. [ 1643.142227][T24674] x_tables: duplicate underflow at hook 1 [ 1643.600441][T24702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13417'. [ 1643.694359][T24704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13416'. [ 1643.832067][T24715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13420'. [ 1643.869697][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13421'. [ 1643.879608][T21238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.963597][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 1643.971672][ C1] lec:lec_tx_timeout: lec0 [ 1644.025341][T24718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1644.386192][T24718] macsec3: entered promiscuous mode [ 1644.391494][T24718] bond2: entered promiscuous mode [ 1644.422028][T24718] bond2: left promiscuous mode [ 1644.521544][T24737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13426'. [ 1644.638318][T24742] netlink: 'syz.4.13428': attribute type 1 has an invalid length. [ 1644.707840][T24740] lo speed is unknown, defaulting to 1000 [ 1644.720651][T24740] lo speed is unknown, defaulting to 1000 [ 1644.757307][T24744] netlink: 'syz.0.13427': attribute type 30 has an invalid length. [ 1644.953401][T24752] lo speed is unknown, defaulting to 1000 [ 1645.137323][T24740] wlan1 speed is unknown, defaulting to 1000 [ 1645.276414][T24752] lo speed is unknown, defaulting to 1000 [ 1645.626640][T24752] wlan1 speed is unknown, defaulting to 1000 [ 1646.437669][T24810] __nla_validate_parse: 3 callbacks suppressed [ 1646.437691][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13446'. [ 1646.465147][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13446'. [ 1646.505469][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13446'. [ 1646.762876][T24823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13449'. [ 1646.876877][T24826] netlink: 'syz.1.13451': attribute type 11 has an invalid length. [ 1647.099026][T24840] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 1647.187740][T24844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13457'. [ 1647.531114][T24849] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1647.776066][T24621] udevd[24621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1647.813624][T24868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13460'. [ 1647.961947][T24872] lo speed is unknown, defaulting to 1000 [ 1648.022328][T24872] lo speed is unknown, defaulting to 1000 [ 1648.034908][T24882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13463'. [ 1648.059238][T24883] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1648.086333][T24883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13464'. [ 1648.098850][T24882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13463'. [ 1648.391702][T24891] bond2 (unregistering): Released all slaves [ 1648.555944][T24872] wlan1 speed is unknown, defaulting to 1000 [ 1649.111087][T24916] lo speed is unknown, defaulting to 1000 [ 1649.119108][T24916] lo speed is unknown, defaulting to 1000 [ 1649.189652][T24919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13472'. [ 1649.363391][T24922] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 1649.602250][T24931] lo speed is unknown, defaulting to 1000 [ 1649.757275][T24931] lo speed is unknown, defaulting to 1000 [ 1649.767628][T24937] netlink: 'syz.4.13479': attribute type 9 has an invalid length. [ 1649.777755][T24937] netlink: 'syz.4.13479': attribute type 11 has an invalid length. [ 1649.787424][T24937] netlink: 'syz.4.13479': attribute type 12 has an invalid length. [ 1649.796393][T24916] wlan1 speed is unknown, defaulting to 1000 [ 1650.105654][T24945] netlink: 'syz.4.13481': attribute type 28 has an invalid length. [ 1650.179153][T24956] tipc: Enabled bearer , priority 0 [ 1650.188669][T24956] syzkaller0: entered promiscuous mode [ 1650.196009][T24956] syzkaller0: entered allmulticast mode [ 1650.243111][T24956] tipc: Resetting bearer [ 1650.276058][T24955] tipc: Resetting bearer [ 1650.325799][T24955] tipc: Disabling bearer [ 1650.384050][T24931] wlan1 speed is unknown, defaulting to 1000 [ 1650.861314][T24974] lo speed is unknown, defaulting to 1000 [ 1650.916581][T24974] lo speed is unknown, defaulting to 1000 [ 1651.287487][T24991] netlink: 'syz.2.13494': attribute type 4 has an invalid length. [ 1651.416381][T24974] wlan1 speed is unknown, defaulting to 1000 [ 1651.578438][T25002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.607154][T25005] netlink: 'syz.2.13499': attribute type 1 has an invalid length. [ 1651.615441][T25005] __nla_validate_parse: 5 callbacks suppressed [ 1651.615461][T25005] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13499'. [ 1651.632140][T25005] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13499'. [ 1651.641788][T25005] netlink: 'syz.2.13499': attribute type 1 has an invalid length. [ 1651.654372][T25005] netlink: 'syz.2.13499': attribute type 8 has an invalid length. [ 1651.665559][T25005] netlink: 606 bytes leftover after parsing attributes in process `syz.2.13499'. [ 1651.696069][T25006] netlink: 'syz.2.13499': attribute type 17 has an invalid length. [ 1651.851343][T25012] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1652.509755][T25045] lo speed is unknown, defaulting to 1000 [ 1652.519700][T25045] lo speed is unknown, defaulting to 1000 [ 1652.612526][T25053] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13513'. [ 1652.908484][T25045] wlan1 speed is unknown, defaulting to 1000 [ 1653.661579][T25096] netlink: 'syz.3.13529': attribute type 4 has an invalid length. [ 1653.688415][T25098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13530'. [ 1653.798405][T25104] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 1654.294867][T25096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.302580][T25096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.983362][T25096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1655.052724][T25096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1655.765595][T25096] hsr0: left allmulticast mode [ 1655.770822][T25096] hsr_slave_0: left allmulticast mode [ 1655.778082][T25096] hsr_slave_1: left allmulticast mode [ 1655.810422][T25096] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1655.839795][T25107] tc_dump_action: action bad kind [ 1655.855621][T25116] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1655.856048][T25114] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1656.146130][T25155] lo speed is unknown, defaulting to 1000 [ 1656.212028][T25155] lo speed is unknown, defaulting to 1000 [ 1656.521397][T25180] "syz.2.13552" (25180) uses obsolete ecb(arc4) skcipher [ 1656.606694][T25155] wlan1 speed is unknown, defaulting to 1000 [ 1656.911790][T25197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13555'. [ 1657.555231][T25227] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1657.580324][T25227] bond0: (slave lo): Enslaving as an active interface with an up link [ 1657.763835][T25238] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13571'. [ 1657.876165][T25244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13572'. [ 1658.041690][T25254] netlink: 'syz.3.13576': attribute type 1 has an invalid length. [ 1658.050203][T25254] netlink: 'syz.3.13576': attribute type 2 has an invalid length. [ 1658.230244][T25268] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1659.715967][T25291] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13588'. [ 1662.105443][T25310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13595'. [ 1662.139300][T25310] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13595'. [ 1662.569938][T25342] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13603'. [ 1662.596380][T25342] netlink: 'syz.0.13603': attribute type 1 has an invalid length. [ 1662.614555][T25342] netlink: 'syz.0.13603': attribute type 2 has an invalid length. [ 1662.649021][T25345] netlink: 'syz.0.13603': attribute type 1 has an invalid length. [ 1662.667298][T25345] netlink: 'syz.0.13603': attribute type 2 has an invalid length. [ 1662.679025][T25339] netlink: 'syz.0.13603': attribute type 3 has an invalid length. [ 1663.755820][T25368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13613'. [ 1663.787290][T25368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13613'. [ 1663.837630][T25375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13613'. [ 1663.867307][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13613'. [ 1663.899159][T25375] netlink: 'syz.1.13613': attribute type 15 has an invalid length. [ 1663.935386][T25375] netlink: 'syz.1.13613': attribute type 18 has an invalid length. [ 1664.348965][T25403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13614'. [ 1664.663636][T18163] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1664.672361][T18163] mac80211_hwsim hwsim164 wlan1: left promiscuous mode [ 1664.685798][T18163] bond0 (unregistering): Released all slaves [ 1664.700446][T18163] bond1 (unregistering): Released all slaves [ 1664.719776][T18163] bond2 (unregistering): Released all slaves [ 1664.738679][T18163] bond3 (unregistering): Released all slaves [ 1664.772587][T25374] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1664.812089][T25387] : entered promiscuous mode [ 1664.847851][T25385] syzkaller0: entered promiscuous mode [ 1664.864497][T25385] syzkaller0: entered allmulticast mode [ 1664.880084][T25389] tipc: Enabled bearer , priority 0 [ 1664.917221][T18163] : left promiscuous mode [ 1664.960224][T25408] netlink: 'syz.0.13622': attribute type 13 has an invalid length. [ 1665.044748][T25411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13622'. [ 1665.082294][T18163] tipc: Left network mode [ 1665.087433][T25410] netlink: 'syz.1.13623': attribute type 1 has an invalid length. [ 1665.128368][T25403] tipc: Resetting bearer [ 1665.139321][T18163] IPVS: stopping backup sync thread 14688 ... [ 1665.213168][T25403] tipc: Disabling bearer [ 1665.360144][T25408] mac80211_hwsim hwsim189 syzkaller0: Caught tx_queue_len zero misconfig [ 1665.433117][T25413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13622'. [ 1665.784760][T25440] syzkaller0: entered promiscuous mode [ 1665.792377][T25440] syzkaller0: entered allmulticast mode [ 1668.930897][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1669.114053][T25481] netlink: 'syz.0.13642': attribute type 2 has an invalid length. [ 1669.148930][T25481] : entered promiscuous mode [ 1669.346875][T25491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13646'. [ 1669.545736][T25501] FAULT_INJECTION: forcing a failure. [ 1669.545736][T25501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.562556][T25494] veth0_to_bond: left allmulticast mode [ 1669.589382][T25501] CPU: 0 UID: 0 PID: 25501 Comm: syz.3.13650 Not tainted syzkaller #0 PREEMPT(full) [ 1669.589414][T25501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1669.589429][T25501] Call Trace: [ 1669.589438][T25501] [ 1669.589449][T25501] dump_stack_lvl+0xe8/0x150 [ 1669.589488][T25501] should_fail_ex+0x412/0x560 [ 1669.589522][T25501] _copy_to_user+0x31/0xb0 [ 1669.589558][T25501] simple_read_from_buffer+0xe1/0x170 [ 1669.589595][T25501] proc_fail_nth_read+0x1bb/0x230 [ 1669.589629][T25501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1669.589663][T25501] ? rw_verify_area+0x2a6/0x4d0 [ 1669.589685][T25501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1669.589718][T25501] vfs_read+0x20c/0xa70 [ 1669.589738][T25501] ? fdget_pos+0x246/0x320 [ 1669.589776][T25501] ? __pfx___mutex_lock+0x10/0x10 [ 1669.589810][T25501] ? __pfx_vfs_read+0x10/0x10 [ 1669.589835][T25501] ? __fget_files+0x2a/0x420 [ 1669.589872][T25501] ? __fget_files+0x3a0/0x420 [ 1669.589902][T25501] ? __fget_files+0x2a/0x420 [ 1669.589944][T25501] ksys_read+0x150/0x270 [ 1669.589970][T25501] ? __pfx_ksys_read+0x10/0x10 [ 1669.589990][T25501] ? fput+0xa0/0xd0 [ 1669.590034][T25501] do_syscall_64+0x14d/0xf80 [ 1669.590064][T25501] ? trace_irq_disable+0x3b/0x150 [ 1669.590096][T25501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.590120][T25501] ? clear_bhb_loop+0x40/0x90 [ 1669.590148][T25501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.590171][T25501] RIP: 0033:0x7f84f4f5cfce [ 1669.590194][T25501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1669.590214][T25501] RSP: 002b:00007f84f5e00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1669.590246][T25501] RAX: ffffffffffffffda RBX: 00007f84f5e016c0 RCX: 00007f84f4f5cfce [ 1669.590263][T25501] RDX: 000000000000000f RSI: 00007f84f5e010a0 RDI: 0000000000000004 [ 1669.590277][T25501] RBP: 00007f84f5e01090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.590291][T25501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.590304][T25501] R13: 00007f84f5216038 R14: 00007f84f5215fa0 R15: 00007fffed47b2b8 [ 1669.590341][T25501] [ 1669.936538][T25510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13652'. [ 1670.103282][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13653'. [ 1670.412779][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13654'. [ 1670.425009][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13654'. [ 1670.535762][T25527] ip6tnl5: entered promiscuous mode [ 1670.556210][T25527] ip6tnl5: entered allmulticast mode [ 1670.768399][T25541] netlink: 'syz.2.13660': attribute type 1 has an invalid length. [ 1670.795940][T25540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13658'. [ 1670.953758][T25549] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1670.974673][T25549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1671.121678][T25559] mac80211_hwsim hwsim189 syzkaller0: entered promiscuous mode [ 1671.235579][T25558] mac80211_hwsim hwsim189 syzkaller0: left promiscuous mode [ 1671.251184][T25566] sctp: [Deprecated]: syz.1.13666 (pid 25566) Use of int in max_burst socket option. [ 1671.251184][T25566] Use struct sctp_assoc_value instead [ 1671.450138][T18163] IPVS: stop unused estimator thread 0... [ 1671.775544][T25607] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13678'. [ 1671.856052][T25612] FAULT_INJECTION: forcing a failure. [ 1671.856052][T25612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.936913][T25612] CPU: 1 UID: 0 PID: 25612 Comm: syz.2.13682 Not tainted syzkaller #0 PREEMPT(full) [ 1671.936945][T25612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1671.936959][T25612] Call Trace: [ 1671.936968][T25612] [ 1671.936979][T25612] dump_stack_lvl+0xe8/0x150 [ 1671.937015][T25612] should_fail_ex+0x412/0x560 [ 1671.937057][T25612] _copy_from_user+0x2d/0xb0 [ 1671.937090][T25612] __sys_bpf+0x229/0x950 [ 1671.937127][T25612] ? __pfx___sys_bpf+0x10/0x10 [ 1671.937177][T25612] ? ksys_write+0x242/0x270 [ 1671.937203][T25612] ? __pfx_ksys_write+0x10/0x10 [ 1671.937235][T25612] __x64_sys_bpf+0x7c/0x90 [ 1671.937266][T25612] do_syscall_64+0x14d/0xf80 [ 1671.937296][T25612] ? trace_irq_disable+0x3b/0x150 [ 1671.937328][T25612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.937351][T25612] ? clear_bhb_loop+0x40/0x90 [ 1671.937378][T25612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.937401][T25612] RIP: 0033:0x7fdaa8f9c799 [ 1671.937422][T25612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.937442][T25612] RSP: 002b:00007fdaa9f1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1671.937467][T25612] RAX: ffffffffffffffda RBX: 00007fdaa9215fa0 RCX: 00007fdaa8f9c799 [ 1671.937484][T25612] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 1671.937499][T25612] RBP: 00007fdaa9f1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.937513][T25612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.937527][T25612] R13: 00007fdaa9216038 R14: 00007fdaa9215fa0 R15: 00007ffe81ea9d48 [ 1671.937563][T25612] [ 1672.305772][T25624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13685'. [ 1672.846876][T25648] lo speed is unknown, defaulting to 1000 [ 1672.909523][T25648] lo speed is unknown, defaulting to 1000 [ 1673.338577][T25669] lo speed is unknown, defaulting to 1000 [ 1673.467156][T25648] wlan1 speed is unknown, defaulting to 1000 [ 1673.467165][T25669] lo speed is unknown, defaulting to 1000 [ 1673.718681][T25690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13710'. [ 1673.746922][T25690] tipc: New replicast peer: 255.255.255.255 [ 1673.757043][T25690] tipc: Enabled bearer , priority 26 [ 1673.897831][T25669] wlan1 speed is unknown, defaulting to 1000 [ 1673.963531][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1673.971617][ C1] lec:lec_tx_timeout: lec0 [ 1674.071019][T25697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13711'. [ 1674.946463][T25724] __nla_validate_parse: 1 callbacks suppressed [ 1674.946488][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13718'. [ 1675.011785][T25724] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1675.181107][T25741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13720'. [ 1675.527733][T25759] syzkaller0: entered promiscuous mode [ 1675.533258][T25759] syzkaller0: entered allmulticast mode [ 1675.970553][T18163] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1676.145686][T25784] lo speed is unknown, defaulting to 1000 [ 1676.176165][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13732'. [ 1676.185779][T25784] lo speed is unknown, defaulting to 1000 [ 1676.318891][T25794] netlink: 211088 bytes leftover after parsing attributes in process `syz.1.13735'. [ 1676.483008][T25798] netlink: 'syz.3.13738': attribute type 2 has an invalid length. [ 1676.524277][T25798] netlink: 'syz.3.13738': attribute type 11 has an invalid length. [ 1676.540014][T25798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13738'. [ 1676.614933][T25801] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.13738'. [ 1677.081098][T25784] wlan1 speed is unknown, defaulting to 1000 [ 1677.903881][T25823] Cannot find del_set index 4 as target [ 1678.739722][T25856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1678.822276][T25859] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1679.288349][T25879] netlink: 'syz.4.13765': attribute type 1 has an invalid length. [ 1679.301521][T25879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1679.591427][T25899] netlink: 220 bytes leftover after parsing attributes in process `syz.4.13772'. [ 1679.754960][T25913] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13777'. [ 1679.912236][T25929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13780'. [ 1679.925047][T25919] lo speed is unknown, defaulting to 1000 [ 1679.932926][T25919] lo speed is unknown, defaulting to 1000 [ 1679.960089][T25931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13781'. [ 1679.980136][T25924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13780'. [ 1680.470657][T25953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13787'. [ 1680.647053][T25919] wlan1 speed is unknown, defaulting to 1000 [ 1680.740803][T25966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13790'. [ 1680.768055][T25966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13790'. [ 1681.046034][T25973] netlink: 7 bytes leftover after parsing attributes in process `syz.4.13790'. [ 1681.136089][T25919] dvmrp0: entered allmulticast mode [ 1681.528357][T25994] netlink: 'syz.2.13794': attribute type 2 has an invalid length. [ 1681.567221][T18168] dvmrp0 (unregistering): left allmulticast mode [ 1681.575664][T25994] netlink: 'syz.2.13794': attribute type 1 has an invalid length. [ 1681.586527][T25999] netlink: 'syz.2.13794': attribute type 2 has an invalid length. [ 1681.599983][T25999] netlink: 'syz.2.13794': attribute type 1 has an invalid length. [ 1681.609196][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13794'. [ 1681.652121][T25990] lo speed is unknown, defaulting to 1000 [ 1681.660732][T25990] lo speed is unknown, defaulting to 1000 [ 1681.745715][T26001] netlink: 'syz.0.13798': attribute type 89 has an invalid length. [ 1682.198075][T26016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13801'. [ 1682.372285][T26023] netlink: 'syz.4.13803': attribute type 10 has an invalid length. [ 1682.380368][T26023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13803'. [ 1682.391808][T25990] wlan1 speed is unknown, defaulting to 1000 [ 1682.414963][T26023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13803'. [ 1682.480474][T26023] bridge5: entered allmulticast mode [ 1682.902771][T26033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1683.476929][T26064] FAULT_INJECTION: forcing a failure. [ 1683.476929][T26064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1683.564596][T26064] CPU: 1 UID: 0 PID: 26064 Comm: syz.3.13816 Not tainted syzkaller #0 PREEMPT(full) [ 1683.564628][T26064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1683.564643][T26064] Call Trace: [ 1683.564652][T26064] [ 1683.564662][T26064] dump_stack_lvl+0xe8/0x150 [ 1683.564700][T26064] should_fail_ex+0x412/0x560 [ 1683.564732][T26064] _copy_from_user+0x2d/0xb0 [ 1683.564765][T26064] __copy_msghdr+0x3c5/0x5b0 [ 1683.564801][T26064] ___sys_sendmsg+0x213/0x360 [ 1683.564839][T26064] ? __pfx____sys_sendmsg+0x10/0x10 [ 1683.564909][T26064] ? __fget_files+0x2a/0x420 [ 1683.564946][T26064] ? __fget_files+0x3a0/0x420 [ 1683.564987][T26064] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1683.565023][T26064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1683.565065][T26064] ? __pfx_ksys_write+0x10/0x10 [ 1683.565100][T26064] do_syscall_64+0x14d/0xf80 [ 1683.565130][T26064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.565152][T26064] ? clear_bhb_loop+0x40/0x90 [ 1683.565179][T26064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.565202][T26064] RIP: 0033:0x7f84f4f9c799 [ 1683.565223][T26064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.565243][T26064] RSP: 002b:00007f84f5e01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1683.565266][T26064] RAX: ffffffffffffffda RBX: 00007f84f5215fa0 RCX: 00007f84f4f9c799 [ 1683.565282][T26064] RDX: 000000002400a008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1683.565297][T26064] RBP: 00007f84f5e01090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.565310][T26064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.565323][T26064] R13: 00007f84f5216038 R14: 00007f84f5215fa0 R15: 00007fffed47b2b8 [ 1683.565360][T26064] [ 1683.850182][T26070] bridge3: entered promiscuous mode [ 1683.872510][T26070] bridge3: entered allmulticast mode [ 1683.947462][T26070] team0: Port device bridge3 added [ 1684.174767][T26074] lo speed is unknown, defaulting to 1000 [ 1684.197361][T26074] lo speed is unknown, defaulting to 1000 [ 1684.432184][T26096] openvswitch: netlink: Flow key attr not present in new flow. [ 1685.190844][T26105] FAULT_INJECTION: forcing a failure. [ 1685.190844][T26105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1685.234040][T26105] CPU: 1 UID: 0 PID: 26105 Comm: syz.0.13830 Not tainted syzkaller #0 PREEMPT(full) [ 1685.234073][T26105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.234088][T26105] Call Trace: [ 1685.234097][T26105] [ 1685.234107][T26105] dump_stack_lvl+0xe8/0x150 [ 1685.234145][T26105] should_fail_ex+0x412/0x560 [ 1685.234178][T26105] _copy_to_user+0x31/0xb0 [ 1685.234213][T26105] simple_read_from_buffer+0xe1/0x170 [ 1685.234249][T26105] proc_fail_nth_read+0x1bb/0x230 [ 1685.234282][T26105] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1685.234315][T26105] ? rw_verify_area+0x2a6/0x4d0 [ 1685.234335][T26105] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1685.234367][T26105] vfs_read+0x20c/0xa70 [ 1685.234386][T26105] ? fdget_pos+0x246/0x320 [ 1685.234423][T26105] ? __pfx___mutex_lock+0x10/0x10 [ 1685.234455][T26105] ? __pfx_vfs_read+0x10/0x10 [ 1685.234478][T26105] ? __fget_files+0x2a/0x420 [ 1685.234513][T26105] ? __fget_files+0x3a0/0x420 [ 1685.234542][T26105] ? __fget_files+0x2a/0x420 [ 1685.234583][T26105] ksys_read+0x150/0x270 [ 1685.234608][T26105] ? __pfx_ksys_read+0x10/0x10 [ 1685.234643][T26105] do_syscall_64+0x14d/0xf80 [ 1685.234671][T26105] ? trace_irq_disable+0x3b/0x150 [ 1685.234701][T26105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.234724][T26105] ? clear_bhb_loop+0x40/0x90 [ 1685.234752][T26105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.234778][T26105] RIP: 0033:0x7f92c395cfce [ 1685.234799][T26105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1685.234826][T26105] RSP: 002b:00007f92c480bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1685.234850][T26105] RAX: ffffffffffffffda RBX: 00007f92c480c6c0 RCX: 00007f92c395cfce [ 1685.234867][T26105] RDX: 000000000000000f RSI: 00007f92c480c0a0 RDI: 0000000000000004 [ 1685.234881][T26105] RBP: 00007f92c480c090 R08: 0000000000000000 R09: 0000000000000000 [ 1685.234895][T26105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1685.234908][T26105] R13: 00007f92c3c16038 R14: 00007f92c3c15fa0 R15: 00007ffd1cebff88 [ 1685.234944][T26105] [ 1685.531337][T26108] __nla_validate_parse: 3 callbacks suppressed [ 1685.531362][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13829'. [ 1685.629420][T26074] wlan1 speed is unknown, defaulting to 1000 [ 1685.739361][ T24] IPVS: starting estimator thread 0... [ 1685.835955][T26119] IPVS: using max 24 ests per chain, 57600 per kthread [ 1685.879230][T26123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13832'. [ 1686.251013][T26135] lo speed is unknown, defaulting to 1000 [ 1686.299747][T26135] lo speed is unknown, defaulting to 1000 [ 1686.308550][T26142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13840'. [ 1686.561032][T26148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13844'. [ 1686.576571][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13843'. [ 1686.610455][T26148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13844'. [ 1686.634055][T26148] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13844'. [ 1686.800624][T26156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13846'. [ 1686.972924][T26135] wlan1 speed is unknown, defaulting to 1000 [ 1687.631499][T26194] lo speed is unknown, defaulting to 1000 [ 1687.652421][T26194] lo speed is unknown, defaulting to 1000 [ 1687.721980][T26199] FAULT_INJECTION: forcing a failure. [ 1687.721980][T26199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.767912][T26199] CPU: 1 UID: 0 PID: 26199 Comm: syz.1.13859 Not tainted syzkaller #0 PREEMPT(full) [ 1687.767944][T26199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1687.767959][T26199] Call Trace: [ 1687.767969][T26199] [ 1687.767979][T26199] dump_stack_lvl+0xe8/0x150 [ 1687.768016][T26199] should_fail_ex+0x412/0x560 [ 1687.768047][T26199] _copy_from_user+0x2d/0xb0 [ 1687.768081][T26199] ___sys_sendmsg+0x1c6/0x360 [ 1687.768120][T26199] ? __pfx____sys_sendmsg+0x10/0x10 [ 1687.768158][T26199] ? kstrtouint+0x6e/0xe0 [ 1687.768210][T26199] ? __fget_files+0x2a/0x420 [ 1687.768241][T26199] ? __fget_files+0x3a0/0x420 [ 1687.768283][T26199] __sys_sendmmsg+0x27c/0x4e0 [ 1687.768322][T26199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1687.768352][T26199] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1687.768414][T26199] ? ksys_write+0x242/0x270 [ 1687.768439][T26199] ? __pfx_ksys_write+0x10/0x10 [ 1687.768469][T26199] __x64_sys_sendmmsg+0xa0/0xc0 [ 1687.768504][T26199] do_syscall_64+0x14d/0xf80 [ 1687.768533][T26199] ? trace_irq_disable+0x3b/0x150 [ 1687.768563][T26199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.768586][T26199] ? clear_bhb_loop+0x40/0x90 [ 1687.768613][T26199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.768643][T26199] RIP: 0033:0x7f6c60b9c799 [ 1687.768664][T26199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.768684][T26199] RSP: 002b:00007f6c619fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1687.768710][T26199] RAX: ffffffffffffffda RBX: 00007f6c60e15fa0 RCX: 00007f6c60b9c799 [ 1687.768727][T26199] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 1687.768741][T26199] RBP: 00007f6c619fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.768756][T26199] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1687.768770][T26199] R13: 00007f6c60e16038 R14: 00007f6c60e15fa0 R15: 00007ffdfc2c9a48 [ 1687.768806][T26199] [ 1688.158129][T26194] wlan1 speed is unknown, defaulting to 1000 [ 1688.239766][T26197] lo speed is unknown, defaulting to 1000 [ 1688.338154][T26197] lo speed is unknown, defaulting to 1000 [ 1688.415582][T26224] xt_recent: Unsupported userspace flags (000000b1) [ 1689.077927][T26234] lo speed is unknown, defaulting to 1000 [ 1689.083936][T26239] lo: Caught tx_queue_len zero misconfig [ 1689.376366][T26234] lo speed is unknown, defaulting to 1000 [ 1689.387738][T26246] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1689.671428][T26259] xt_connbytes: Forcing CT accounting to be enabled [ 1689.826284][T26234] wlan1 speed is unknown, defaulting to 1000 [ 1689.932548][T26266] bridge0: entered allmulticast mode [ 1689.964503][T26197] wlan1 speed is unknown, defaulting to 1000 [ 1690.055343][T26270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13879'. [ 1690.356435][T26270] lo speed is unknown, defaulting to 1000 [ 1690.367868][T26270] lo speed is unknown, defaulting to 1000 [ 1690.788797][T26288] netlink: 192 bytes leftover after parsing attributes in process `syz.1.13882'. [ 1690.845971][T26288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.900427][T26292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13884'. [ 1691.113214][T26294] bridge8: entered promiscuous mode [ 1691.123588][T26294] bridge8: entered allmulticast mode [ 1691.143812][T26294] team0: Port device bridge8 added [ 1691.160811][T26270] wlan1 speed is unknown, defaulting to 1000 [ 1691.171667][T26295] bridge0: port 1(team0) entered blocking state [ 1691.179335][T26295] bridge0: port 1(team0) entered disabled state [ 1691.187889][T26285] lo speed is unknown, defaulting to 1000 [ 1691.255724][T26295] team0: entered promiscuous mode [ 1691.337505][T26285] lo speed is unknown, defaulting to 1000 [ 1691.719149][T26285] wlan1 speed is unknown, defaulting to 1000 [ 1691.800546][T26304] netlink: 'syz.0.13888': attribute type 1 has an invalid length. [ 1691.869898][T26308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13888'. [ 1691.982288][T26304] bond4: entered promiscuous mode [ 1691.995718][T26304] bond4: entered allmulticast mode [ 1692.011630][T26304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1692.589781][T26329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13893'. [ 1692.682109][T26329] syzkaller1: entered promiscuous mode [ 1692.690070][T26329] syzkaller1: entered allmulticast mode [ 1692.787957][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13895'. [ 1693.004702][T26349] netlink: 'syz.3.13899': attribute type 1 has an invalid length. [ 1693.021312][T26349] netlink: 'syz.3.13899': attribute type 2 has an invalid length. [ 1693.032868][T26349] netlink: 'syz.3.13899': attribute type 1 has an invalid length. [ 1693.065623][T26349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13899'. [ 1693.137020][T26356] FAULT_INJECTION: forcing a failure. [ 1693.137020][T26356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1693.161146][T26356] CPU: 1 UID: 0 PID: 26356 Comm: syz.1.13902 Not tainted syzkaller #0 PREEMPT(full) [ 1693.161179][T26356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1693.161194][T26356] Call Trace: [ 1693.161203][T26356] [ 1693.161213][T26356] dump_stack_lvl+0xe8/0x150 [ 1693.161251][T26356] should_fail_ex+0x412/0x560 [ 1693.161284][T26356] _copy_to_user+0x31/0xb0 [ 1693.161319][T26356] simple_read_from_buffer+0xe1/0x170 [ 1693.161354][T26356] proc_fail_nth_read+0x1bb/0x230 [ 1693.161387][T26356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1693.161421][T26356] ? rw_verify_area+0x2a6/0x4d0 [ 1693.161442][T26356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1693.161471][T26356] vfs_read+0x20c/0xa70 [ 1693.161491][T26356] ? fdget_pos+0x246/0x320 [ 1693.161527][T26356] ? __pfx___mutex_lock+0x10/0x10 [ 1693.161560][T26356] ? __pfx_vfs_read+0x10/0x10 [ 1693.161582][T26356] ? __fget_files+0x2a/0x420 [ 1693.161617][T26356] ? __fget_files+0x3a0/0x420 [ 1693.161648][T26356] ? __fget_files+0x2a/0x420 [ 1693.161688][T26356] ksys_read+0x150/0x270 [ 1693.161713][T26356] ? __pfx_ksys_read+0x10/0x10 [ 1693.161748][T26356] do_syscall_64+0x14d/0xf80 [ 1693.161778][T26356] ? trace_irq_disable+0x3b/0x150 [ 1693.161809][T26356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.161833][T26356] ? clear_bhb_loop+0x40/0x90 [ 1693.161862][T26356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.161884][T26356] RIP: 0033:0x7f6c60b5cfce [ 1693.161916][T26356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1693.161936][T26356] RSP: 002b:00007f6c619fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1693.161960][T26356] RAX: ffffffffffffffda RBX: 00007f6c619fb6c0 RCX: 00007f6c60b5cfce [ 1693.161977][T26356] RDX: 000000000000000f RSI: 00007f6c619fb0a0 RDI: 0000000000000004 [ 1693.161991][T26356] RBP: 00007f6c619fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.162005][T26356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.162018][T26356] R13: 00007f6c60e16038 R14: 00007f6c60e15fa0 R15: 00007ffdfc2c9a48 [ 1693.162054][T26356] [ 1693.194930][T26359] FAULT_INJECTION: forcing a failure. [ 1693.194930][T26359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1693.436423][T26359] CPU: 0 UID: 0 PID: 26359 Comm: syz.4.13903 Not tainted syzkaller #0 PREEMPT(full) [ 1693.436457][T26359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1693.436472][T26359] Call Trace: [ 1693.436481][T26359] [ 1693.436491][T26359] dump_stack_lvl+0xe8/0x150 [ 1693.436529][T26359] should_fail_ex+0x412/0x560 [ 1693.436560][T26359] _copy_from_user+0x2d/0xb0 [ 1693.436594][T26359] __copy_msghdr+0x3c5/0x5b0 [ 1693.436632][T26359] ___sys_sendmsg+0x213/0x360 [ 1693.436669][T26359] ? __pfx____sys_sendmsg+0x10/0x10 [ 1693.436737][T26359] ? __fget_files+0x2a/0x420 [ 1693.436768][T26359] ? __fget_files+0x3a0/0x420 [ 1693.436810][T26359] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1693.436845][T26359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1693.436895][T26359] ? __pfx_ksys_write+0x10/0x10 [ 1693.436930][T26359] do_syscall_64+0x14d/0xf80 [ 1693.436959][T26359] ? trace_irq_disable+0x3b/0x150 [ 1693.436991][T26359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.437013][T26359] ? clear_bhb_loop+0x40/0x90 [ 1693.437041][T26359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.437063][T26359] RIP: 0033:0x7f3ba679c799 [ 1693.437084][T26359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.437104][T26359] RSP: 002b:00007f3ba76b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1693.437128][T26359] RAX: ffffffffffffffda RBX: 00007f3ba6a15fa0 RCX: 00007f3ba679c799 [ 1693.437145][T26359] RDX: 0000000000008084 RSI: 0000200000000080 RDI: 0000000000000003 [ 1693.437160][T26359] RBP: 00007f3ba76b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.437173][T26359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.437187][T26359] R13: 00007f3ba6a16038 R14: 00007f3ba6a15fa0 R15: 00007ffd6d563d28 [ 1693.437222][T26359] [ 1693.762563][T26369] netlink: 'syz.4.13907': attribute type 1 has an invalid length. [ 1693.772286][T26369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13907'. [ 1693.946124][T26372] netlink: 'syz.1.13909': attribute type 83 has an invalid length. [ 1694.041402][T26379] netlink: 'syz.3.13911': attribute type 1 has an invalid length. [ 1694.178431][T26396] netlink: 'syz.4.13914': attribute type 2 has an invalid length. [ 1694.218695][T26391] bond3: Unable to set up delay as MII monitoring is disabled [ 1694.227651][T26396] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13914'. [ 1694.240276][T26391] bond3 (unregistering): Released all slaves [ 1694.309717][T26379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1694.366345][T26393] bond3: (slave ip6gretap2): making interface the new active one [ 1694.376453][T26393] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1694.419863][T26389] lo speed is unknown, defaulting to 1000 [ 1694.436349][T26404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13916'. [ 1694.545780][T26406] bond4: option updelay: invalid value (18446744072924056005) [ 1694.554672][T26406] bond4: option updelay: allowed values 0 - 2147483647 [ 1694.573270][T26406] bond4 (unregistering): Released all slaves [ 1694.597683][T26389] lo speed is unknown, defaulting to 1000 [ 1694.597710][T26404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13916'. [ 1695.058825][T26427] lo speed is unknown, defaulting to 1000 [ 1695.069754][T26389] wlan1 speed is unknown, defaulting to 1000 [ 1695.117555][T26427] lo speed is unknown, defaulting to 1000 [ 1695.242486][T26435] bond0: (slave gre0): Error: Device type is different from other slaves [ 1695.775728][T26432] IPVS: length: 132 != 8 [ 1695.967018][T26469] __nla_validate_parse: 3 callbacks suppressed [ 1695.967041][T26469] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13936'. [ 1696.014310][T26427] wlan1 speed is unknown, defaulting to 1000 [ 1696.396088][T26486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13939'. [ 1696.430572][T26476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13939'. [ 1696.629609][T26497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13943'. [ 1697.011420][T26510] netlink: 144 bytes leftover after parsing attributes in process `syz.4.13949'. [ 1697.020663][T26511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13950'. [ 1697.020704][T26511] netlink: 'syz.2.13950': attribute type 30 has an invalid length. [ 1697.020722][T26511] netlink: 'syz.2.13950': attribute type 3 has an invalid length. [ 1697.320580][T26522] syzkaller1: entered promiscuous mode [ 1697.334366][T26522] syzkaller1: entered allmulticast mode [ 1697.399585][T26524] lo speed is unknown, defaulting to 1000 [ 1697.462715][T26524] lo speed is unknown, defaulting to 1000 [ 1697.545515][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13955'. [ 1697.603078][T26531] xt_TCPMSS: Only works on TCP SYN packets [ 1697.794103][T26536] tipc: Enabling of bearer rejected, failed to enable media [ 1697.832824][T26535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13957'. [ 1697.850262][T26535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13957'. [ 1697.870751][T26538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13959'. [ 1698.100546][T26524] wlan1 speed is unknown, defaulting to 1000 [ 1698.177060][T26547] lo speed is unknown, defaulting to 1000 [ 1698.188968][T26547] lo speed is unknown, defaulting to 1000 [ 1698.358527][T26557] netlink: 'syz.0.13964': attribute type 7 has an invalid length. [ 1698.699143][T26547] wlan1 speed is unknown, defaulting to 1000 [ 1698.722584][T26569] netlink: 'syz.0.13967': attribute type 1 has an invalid length. [ 1699.608046][T26587] Cannot find set identified by id 3 to match [ 1699.622666][T26587] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1700.530080][T26615] bridge0: left allmulticast mode [ 1700.539464][T26615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.552365][T26615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.562057][T26615] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1701.539966][T26658] lo speed is unknown, defaulting to 1000 [ 1701.596726][T26658] lo speed is unknown, defaulting to 1000 [ 1701.796194][T26667] netlink: 'syz.3.13997': attribute type 1 has an invalid length. [ 1701.901531][T13377] lec:lec_start_xmit: lec0:No lecd attached [ 1701.992420][T26667] __nla_validate_parse: 5 callbacks suppressed [ 1701.992445][T26667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13997'. [ 1702.025379][T26667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1702.298403][T26687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14003'. [ 1702.416009][T26689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14004'. [ 1702.635861][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14007'. [ 1702.778918][T26658] wlan1 speed is unknown, defaulting to 1000 [ 1703.028111][T26723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1703.456606][T26737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14017'. [ 1703.509407][T26735] block nbd6: server does not support multiple connections per device. [ 1703.529456][T26735] block nbd6: shutting down sockets [ 1703.657013][T26743] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14020'. [ 1703.825058][T26751] lo speed is unknown, defaulting to 1000 [ 1703.838257][T26755] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1703.851252][T26751] lo speed is unknown, defaulting to 1000 [ 1703.859107][T26755] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.14021'. [ 1704.322721][T26751] wlan1 speed is unknown, defaulting to 1000 [ 1704.360895][T26766] lo speed is unknown, defaulting to 1000 [ 1704.380198][T26766] lo speed is unknown, defaulting to 1000 [ 1704.527601][T26774] netlink: 'syz.2.14026': attribute type 5 has an invalid length. [ 1704.933357][T26766] wlan1 speed is unknown, defaulting to 1000 [ 1705.254906][T26790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14029'. [ 1705.442304][T26795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14032'. [ 1705.467240][T26795] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1705.545528][T26797] syzkaller1: entered promiscuous mode [ 1705.551088][T26797] syzkaller1: entered allmulticast mode [ 1705.677833][T26800] Cannot find del_set index 4 as target [ 1705.772719][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14034'. [ 1705.801824][T26800] lo speed is unknown, defaulting to 1000 [ 1705.928883][T26800] lo speed is unknown, defaulting to 1000 [ 1706.300742][T26829] team1: entered promiscuous mode [ 1706.315078][T26829] team1: entered allmulticast mode [ 1706.322574][T26829] 8021q: adding VLAN 0 to HW filter on device team1 [ 1706.396831][T26835] netlink: 'syz.0.14040': attribute type 5 has an invalid length. [ 1706.447292][T26816] team2: entered promiscuous mode [ 1706.453822][T26816] team2: entered allmulticast mode [ 1706.467832][T26816] 8021q: adding VLAN 0 to HW filter on device team2 [ 1706.756594][T26845] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1706.776338][T26845] bond0 (unregistering): Released all slaves [ 1706.779833][T26847] netlink: 'syz.3.14044': attribute type 1 has an invalid length. [ 1706.792029][T26847] netlink: 'syz.3.14044': attribute type 2 has an invalid length. [ 1706.800861][T26847] netlink: 'syz.3.14044': attribute type 1 has an invalid length. [ 1706.822932][T26800] wlan1 speed is unknown, defaulting to 1000 [ 1706.888764][T26840] syzkaller0: entered promiscuous mode [ 1706.911676][T26840] syzkaller0: entered allmulticast mode [ 1706.923666][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1706.931747][ C1] lec:lec_tx_timeout: lec0 [ 1707.089830][T26857] __nla_validate_parse: 4 callbacks suppressed [ 1707.089851][T26857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14045'. [ 1707.126851][T26863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14045'. [ 1707.330555][T21238] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1707.525377][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1707.547859][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1707.560805][T26877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14050'. [ 1707.592676][T26877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14050'. [ 1707.618031][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14050'. [ 1707.722949][T26882] 8021q: VLANs not supported on bond0 [ 1707.771371][T26882] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1708.099623][T26905] openvswitch: netlink: Geneve option length err (len 338, max 255). [ 1708.108142][T26903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14055'. [ 1708.178784][T26909] batadv_slave_0: entered promiscuous mode [ 1708.205538][T26909] batadv_slave_0: entered allmulticast mode [ 1708.447941][T26918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14059'. [ 1708.588039][T26927] syzkaller0: entered promiscuous mode [ 1708.614878][T26927] syzkaller0: entered allmulticast mode [ 1708.622189][T26931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14062'. [ 1708.980391][T26949] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1709.194257][T26960] bridge_slave_0: entered promiscuous mode [ 1709.201691][T26960] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1709.474243][T26968] bridge_slave_0: left allmulticast mode [ 1709.479978][T26968] bridge_slave_0: left promiscuous mode [ 1709.507913][T26968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.539032][T26968] bridge_slave_1: left allmulticast mode [ 1709.553866][T26968] bridge_slave_1: left promiscuous mode [ 1709.563154][T26968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.598924][T26968] bond0: (slave bond_slave_0): Releasing backup interface [ 1709.621378][T26968] bond0: (slave bond_slave_1): Releasing backup interface [ 1709.642941][T26968] team0: Port device team_slave_0 removed [ 1709.652155][T26968] team0: Port device team_slave_1 removed [ 1709.659533][T26968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1709.668094][T26968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.677418][T26968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1709.696066][T26979] netlink: 'syz.2.14081': attribute type 13 has an invalid length. [ 1709.909216][T26996] netlink: 'syz.4.14087': attribute type 1 has an invalid length. [ 1710.431204][T27042] netlink: 'syz.4.14099': attribute type 6 has an invalid length. [ 1710.458609][T27042] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1710.792315][T27060] pim6reg99999999: entered allmulticast mode [ 1710.799762][T27059] tunl0: Caught tx_queue_len zero misconfig [ 1711.090310][T27074] netlink: 'syz.4.14110': attribute type 1 has an invalid length. [ 1711.158093][T27074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1711.220987][T27074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1711.257775][T27074] bond6: (slave geneve3): making interface the new active one [ 1711.282269][T27074] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1711.308851][T21228] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1711.321192][T21228] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1711.345284][T21228] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1711.376904][T21228] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1711.390400][T27081] netlink: 'syz.1.14111': attribute type 1 has an invalid length. [ 1711.501875][T27081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1711.552119][T27084] IPVS: Scheduler module ip_vs_sip not found [ 1711.594886][T27087] vlan2: entered promiscuous mode [ 1711.600170][T27087] bond3: entered promiscuous mode [ 1711.605489][T27087] vlan2: entered allmulticast mode [ 1711.610643][T27087] bond3: entered allmulticast mode [ 1711.678961][T27081] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1711.707146][T27081] bond3: (slave batadv1): making interface the new active one [ 1711.757008][T27081] batadv1: entered promiscuous mode [ 1711.774416][T27081] batadv1: entered allmulticast mode [ 1711.806397][T27081] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1712.016202][T27120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1712.219003][T27132] xt_ecn: cannot match TCP bits for non-tcp packets [ 1712.230800][T27132] __nla_validate_parse: 18 callbacks suppressed [ 1712.230824][T27132] netlink: 668 bytes leftover after parsing attributes in process `syz.1.14123'. [ 1712.249904][T27132] openvswitch: netlink: Flow key attr not present in new flow. [ 1712.268215][T27132] sctp: [Deprecated]: syz.1.14123 (pid 27132) Use of int in maxseg socket option. [ 1712.268215][T27132] Use struct sctp_assoc_value instead [ 1712.538523][T27140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14126'. [ 1712.568366][T27144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14127'. [ 1712.580035][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14127'. [ 1712.603304][T27146] netlink: 'syz.1.14127': attribute type 33 has an invalid length. [ 1712.627669][T27144] netlink: 'syz.1.14127': attribute type 33 has an invalid length. [ 1712.650857][T27146] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14127'. [ 1712.680229][T27144] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14127'. [ 1712.711100][T27146] `: renamed from team0 [ 1713.289801][T27172] lo speed is unknown, defaulting to 1000 [ 1713.327410][T27172] lo speed is unknown, defaulting to 1000 [ 1713.933752][T27172] wlan1 speed is unknown, defaulting to 1000 [ 1714.407110][T27196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14139'. [ 1714.662008][T27193] netlink: 'syz.4.14138': attribute type 4 has an invalid length. [ 1714.722614][T27197] netlink: 'syz.4.14138': attribute type 4 has an invalid length. [ 1715.132755][T27214] netlink: 'syz.1.14144': attribute type 1 has an invalid length. [ 1715.153311][T27213] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1715.169815][T27216] syzkaller0: entered promiscuous mode [ 1715.176140][T27216] syzkaller0: entered allmulticast mode [ 1715.252516][T27215] bond4: entered promiscuous mode [ 1715.270275][T27215] bond4: entered allmulticast mode [ 1715.285584][T27215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1715.314902][T27213] bond0: entered promiscuous mode [ 1715.321474][T27213] batadv0: entered promiscuous mode [ 1715.328610][T27213] debugfs: 'hsr1' already exists in 'hsr' [ 1715.335666][T27213] Cannot create hsr debugfs directory [ 1715.363035][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14144'. [ 1715.388194][T27215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14144'. [ 1715.476773][T27222] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.14145'. [ 1715.541233][T27222] gretap2: entered allmulticast mode [ 1715.646210][T27229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1716.095577][T27245] netlink: 'syz.1.14154': attribute type 1 has an invalid length. [ 1716.111713][T27245] gretap2: entered allmulticast mode [ 1716.908337][T27269] lo speed is unknown, defaulting to 1000 [ 1716.937216][T27269] lo speed is unknown, defaulting to 1000 [ 1717.175396][T27275] lo speed is unknown, defaulting to 1000 [ 1717.270946][T27278] __nla_validate_parse: 3 callbacks suppressed [ 1717.270973][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14161'. [ 1717.767514][T27275] lo speed is unknown, defaulting to 1000 [ 1717.773366][T27269] wlan1 speed is unknown, defaulting to 1000 [ 1717.812011][T27287] tun0: tun_chr_ioctl cmd 1074025675 [ 1717.817947][T27287] tun0: persist enabled [ 1717.894615][T27287] tun0: tun_chr_ioctl cmd 1074025675 [ 1717.899997][T27287] tun0: persist disabled [ 1718.086796][T27290] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1718.296319][T27275] wlan1 speed is unknown, defaulting to 1000 [ 1718.491583][T27306] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14169'. [ 1719.208812][T27330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14175'. [ 1719.403039][T27332] netlink: 'syz.4.14176': attribute type 178 has an invalid length. [ 1719.437866][T27332] only policy match revision 0 supported [ 1719.437888][T27332] unable to load match [ 1719.475267][T27335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1719.681180][T27352] batadv0: entered promiscuous mode [ 1719.713873][T27352] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1719.855442][T27355] netlink: 'syz.3.14184': attribute type 21 has an invalid length. [ 1719.896662][T27355] IPv6: NLM_F_CREATE should be specified when creating new route [ 1719.951633][T27355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1719.958997][T27355] IPv6: NLM_F_CREATE should be set when creating new route [ 1719.966363][T27355] IPv6: NLM_F_CREATE should be set when creating new route [ 1719.973670][T27355] IPv6: NLM_F_CREATE should be set when creating new route [ 1720.172583][T27384] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14190'. [ 1720.292616][T27388] bridge6: entered promiscuous mode [ 1720.318354][T27388] bridge6: entered allmulticast mode [ 1720.355671][T27388] team0: Port device bridge6 added [ 1720.606868][T27411] xt_recent: Unsupported userspace flags (000000b1) [ 1720.947615][T27419] bond2: option mode: unable to set because the bond device is up [ 1721.148404][T27422] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 1721.169945][T27422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14201'. [ 1721.181339][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14201'. [ 1721.290396][T27425] lo speed is unknown, defaulting to 1000 [ 1721.298237][T27425] lo speed is unknown, defaulting to 1000 [ 1721.858296][T27425] wlan1 speed is unknown, defaulting to 1000 [ 1721.990282][T27469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14209'. [ 1722.022725][T27470] team0: No ports can be present during mode change [ 1722.602157][T27489] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 1723.006724][T27505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14218'. [ 1723.181807][T27509] syzkaller0: entered promiscuous mode [ 1723.202728][T27509] syzkaller0: entered allmulticast mode [ 1723.397908][T27530] netlink: 'syz.2.14223': attribute type 2 has an invalid length. [ 1723.435960][T27530] netlink: 'syz.2.14223': attribute type 1 has an invalid length. [ 1723.463081][T27530] netlink: 'syz.2.14223': attribute type 1 has an invalid length. [ 1723.472793][T27531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14222'. [ 1723.482529][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14222'. [ 1723.509216][T27530] netlink: 'syz.2.14223': attribute type 1 has an invalid length. [ 1723.605389][T27537] netlink: 'syz.4.14225': attribute type 1 has an invalid length. [ 1723.615724][T27537] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14225'. [ 1723.644580][ T2716] Bluetooth: hci4: command tx timeout [ 1723.733107][T27537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14225'. [ 1723.742796][T27537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14225'. [ 1726.031069][T27538] batadv_slave_0: entered promiscuous mode [ 1726.067394][T27543] batadv_slave_0: left promiscuous mode [ 1726.806278][T27586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14238'. [ 1726.892411][T27554] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1727.167343][T27592] bond5 (unregistering): Released all slaves [ 1727.199085][T27579] infiniband !yz!: set down [ 1727.212927][T27579] infiniband !yz!: added team_slave_0 [ 1727.317343][T27579] RDS/IB: !yz!: added [ 1727.321459][T27579] smc: adding ib device !yz! with port count 1 [ 1727.348237][T27579] smc: ib device !yz! port 1 has no pnetid [ 1727.675707][T27624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1727.745758][T27626] xt_hashlimit: size too large, truncated to 1048576 [ 1728.550876][T27662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.642522][T27662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14252'. [ 1728.778561][T27669] lo speed is unknown, defaulting to 1000 [ 1728.797926][T27667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1728.818767][T27669] lo speed is unknown, defaulting to 1000 [ 1728.861654][T27667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14254'. [ 1728.904280][T27667] ip_vti0: Master is either lo or non-ether device [ 1729.115229][T27678] openvswitch: netlink: IP tunnel dst address not specified [ 1729.136389][T27676] tipc: Enabled bearer , priority 0 [ 1729.154679][T27676] syzkaller0: entered promiscuous mode [ 1729.168903][T27676] syzkaller0: entered allmulticast mode [ 1729.186299][T27669] wlan1 speed is unknown, defaulting to 1000 [ 1729.206437][T27676] tipc: Resetting bearer [ 1729.241077][T27675] tipc: Resetting bearer [ 1729.335510][T27675] tipc: Disabling bearer [ 1730.037335][T27696] netlink: 'syz.4.14262': attribute type 4 has an invalid length. [ 1730.046994][T27696] netlink: 'syz.4.14262': attribute type 8 has an invalid length. [ 1730.055477][T27696] netlink: 208 bytes leftover after parsing attributes in process `syz.4.14262'. [ 1730.246421][T27701] netlink: 'syz.2.14263': attribute type 4 has an invalid length. [ 1730.380756][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1730.473053][T27709] ip6erspan0: entered allmulticast mode [ 1730.714714][T27719] netlink: 'syz.2.14268': attribute type 15 has an invalid length. [ 1730.754348][T27719] openvswitch: netlink: Key type 16365 is out of range max 32 [ 1730.865379][T27724] xt_hashlimit: max too large, truncated to 1048576 [ 1730.999491][T27719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14268'. [ 1731.525719][T27746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14278'. [ 1731.535362][T27746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14278'. [ 1731.687405][T27750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14279'. [ 1731.698893][T27750] netlink: 'syz.2.14279': attribute type 1 has an invalid length. [ 1731.772767][T27750] vlan2: entered allmulticast mode [ 1731.808912][T27750] bond7: entered allmulticast mode [ 1732.349653][T27776] netlink: 'syz.2.14287': attribute type 1 has an invalid length. [ 1732.369235][T27776] netlink: 'syz.2.14287': attribute type 1 has an invalid length. [ 1732.412296][T27780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14286'. [ 1732.445099][T27780] 8021q: VLANs not supported on ip6_vti0 [ 1732.679552][T27789] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1732.799353][T27794] netlink: 'syz.4.14292': attribute type 13 has an invalid length. [ 1732.920982][T27794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14292'. [ 1734.235836][T27794] lo speed is unknown, defaulting to 1000 [ 1734.245071][T27804] lo speed is unknown, defaulting to 1000 [ 1734.245176][T27794] lo speed is unknown, defaulting to 1000 [ 1734.280447][T27803] lo speed is unknown, defaulting to 1000 [ 1734.310962][T27767] lo speed is unknown, defaulting to 1000 [ 1734.380422][T27828] netlink: 'syz.3.14300': attribute type 4 has an invalid length. [ 1734.415373][T27828] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14300'. [ 1735.131676][T27804] lo speed is unknown, defaulting to 1000 [ 1735.145741][T27794] wlan1 speed is unknown, defaulting to 1000 [ 1735.467174][T27803] lo speed is unknown, defaulting to 1000 [ 1735.483830][ C1] ================================================================== [ 1735.491971][ C1] BUG: KASAN: slab-use-after-free in lec_arp_clear_vccs+0x6c/0x380 [ 1735.499924][ C1] Read of size 8 at addr ffff888025f046d0 by task syz.3.14301/27834 [ 1735.507936][ C1] [ 1735.510290][ C1] CPU: 1 UID: 0 PID: 27834 Comm: syz.3.14301 Not tainted syzkaller #0 PREEMPT(full) [ 1735.510311][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1735.510324][ C1] Call Trace: [ 1735.510332][ C1] [ 1735.510340][ C1] dump_stack_lvl+0xe8/0x150 [ 1735.510368][ C1] print_report+0xba/0x230 [ 1735.510390][ C1] ? lec_arp_clear_vccs+0x6c/0x380 [ 1735.510411][ C1] kasan_report+0x117/0x150 [ 1735.510432][ C1] ? lec_arp_clear_vccs+0x6c/0x380 [ 1735.510457][ C1] lec_arp_clear_vccs+0x6c/0x380 [ 1735.510481][ C1] lec_arp_expire_vcc+0x17d/0x370 [ 1735.510506][ C1] call_timer_fn+0x192/0x640 [ 1735.510527][ C1] ? __pfx_lec_arp_expire_vcc+0x10/0x10 [ 1735.510549][ C1] ? call_timer_fn+0xd4/0x640 [ 1735.510569][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1735.510595][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1735.510616][ C1] ? __pfx_lec_arp_expire_vcc+0x10/0x10 [ 1735.510638][ C1] __run_timer_base+0x652/0x8b0 [ 1735.510657][ C1] ? ktime_get+0x45/0x200 [ 1735.510678][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1735.510700][ C1] ? sched_clock_cpu+0x74/0x440 [ 1735.510726][ C1] run_timer_softirq+0xb7/0x170 [ 1735.510746][ C1] handle_softirqs+0x22a/0x870 [ 1735.510769][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1735.510795][ C1] __irq_exit_rcu+0x5f/0x150 [ 1735.510815][ C1] irq_exit_rcu+0x9/0x30 [ 1735.510836][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1735.510858][ C1] [ 1735.510864][ C1] [ 1735.510872][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1735.510892][ C1] RIP: 0010:__rcu_read_unlock+0x32/0xe0 [ 1735.510912][ C1] Code: 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d b9 37 70 11 48 8d 9f 84 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c <84> c0 75 4f ff 0b 75 1d 4c 8d b7 88 04 00 00 4c 89 f0 48 c1 e8 03 [ 1735.510929][ C1] RSP: 0018:ffffc90005dcf468 EFLAGS: 00000a03 [ 1735.510946][ C1] RAX: 0000000000000000 RBX: ffff888060a9a2c4 RCX: 0000000000000046 [ 1735.510959][ C1] RDX: 0000000000000001 RSI: ffffffff8e161bea RDI: ffff888060a99e40 [ 1735.510972][ C1] RBP: dffffc0000000000 R08: ffffc90005dcfd70 R09: 0000000000000000 [ 1735.510984][ C1] R10: ffffc90005dcf5b8 R11: fffff52000bb9eb9 R12: 1ffff1100c153458 [ 1735.510999][ C1] R13: ffffc90005dc8000 R14: ffffc90005dcf568 R15: dffffc0000000000 [ 1735.511023][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1735.511049][ C1] unwind_next_frame+0x1aaf/0x23c0 [ 1735.511084][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1735.511109][ C1] ? get_signal+0x11eb/0x1330 [ 1735.511132][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1735.511151][ C1] arch_stack_walk+0x11b/0x150 [ 1735.511181][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 1735.511203][ C1] stack_trace_save+0xa9/0x100 [ 1735.511221][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1735.511244][ C1] save_stack+0x122/0x230 [ 1735.511262][ C1] ? __pfx_save_stack+0x10/0x10 [ 1735.511278][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 1735.511295][ C1] ? __folio_put+0x414/0x4f0 [ 1735.511313][ C1] ? af_alg_pull_tsgl+0x34c/0x700 [ 1735.511335][ C1] ? skcipher_sock_destruct+0xb3/0x220 [ 1735.511357][ C1] ? __sk_destruct+0x85/0x880 [ 1735.511380][ C1] ? af_alg_release+0x83/0xf0 [ 1735.511397][ C1] ? sock_close+0xc3/0x240 [ 1735.511412][ C1] ? __fput+0x44f/0xa70 [ 1735.511434][ C1] ? task_work_run+0x1d9/0x270 [ 1735.511451][ C1] ? get_signal+0x11eb/0x1330 [ 1735.511475][ C1] ? page_ext_put+0x97/0xc0 [ 1735.511493][ C1] __reset_page_owner+0x71/0x1f0 [ 1735.511511][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 1735.511533][ C1] __folio_put+0x414/0x4f0 [ 1735.511552][ C1] ? __pfx___folio_put+0x10/0x10 [ 1735.511570][ C1] ? kasan_save_stack+0x4d/0x60 [ 1735.511585][ C1] ? kasan_save_stack+0x3e/0x60 [ 1735.511601][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1735.511623][ C1] ? __fput_deferred+0x143/0x380 [ 1735.511649][ C1] af_alg_pull_tsgl+0x34c/0x700 [ 1735.511677][ C1] skcipher_sock_destruct+0xb3/0x220 [ 1735.511700][ C1] ? __pfx_skcipher_sock_destruct+0x10/0x10 [ 1735.511724][ C1] __sk_destruct+0x85/0x880 [ 1735.511748][ C1] ? __sk_free+0x2da/0x3f0 [ 1735.511772][ C1] af_alg_release+0x83/0xf0 [ 1735.511792][ C1] sock_close+0xc3/0x240 [ 1735.511809][ C1] ? __pfx_sock_close+0x10/0x10 [ 1735.511826][ C1] __fput+0x44f/0xa70 [ 1735.511854][ C1] task_work_run+0x1d9/0x270 [ 1735.511872][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1735.511889][ C1] ? __fput_deferred+0x216/0x380 [ 1735.511911][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 1735.511938][ C1] get_signal+0x11eb/0x1330 [ 1735.511963][ C1] ? do_futex+0x395/0x420 [ 1735.511988][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1735.512009][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1735.512038][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1735.512058][ C1] ? rcu_is_watching+0x15/0xb0 [ 1735.512088][ C1] do_syscall_64+0x32d/0xf80 [ 1735.512110][ C1] ? trace_irq_disable+0x3b/0x150 [ 1735.512136][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.512153][ C1] ? clear_bhb_loop+0x40/0x90 [ 1735.512172][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.512189][ C1] RIP: 0033:0x7f84f4f9c799 [ 1735.512205][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.512220][ C1] RSP: 002b:00007f84f5e01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1735.512237][ C1] RAX: 0000000000000001 RBX: 00007f84f5215fa0 RCX: 00007f84f4f9c799 [ 1735.512250][ C1] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000005 [ 1735.512262][ C1] RBP: 00007f84f5032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1735.512273][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1735.512284][ C1] R13: 00007f84f5216038 R14: 00007f84f5215fa0 R15: 00007fffed47b2b8 [ 1735.512305][ C1] [ 1735.512311][ C1] [ 1736.078699][ C1] Allocated by task 27330: [ 1736.083134][ C1] kasan_save_track+0x3e/0x80 [ 1736.087838][ C1] __kasan_kmalloc+0x93/0xb0 [ 1736.092454][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 1736.097847][ C1] rtnl_newlink+0x136/0x1be0 [ 1736.102472][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1736.107433][ C1] netlink_rcv_skb+0x232/0x4b0 [ 1736.112229][ C1] netlink_unicast+0x80f/0x9b0 [ 1736.117014][ C1] netlink_sendmsg+0x813/0xb40 [ 1736.121814][ C1] ____sys_sendmsg+0xa68/0xad0 [ 1736.126616][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1736.131331][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1736.136304][ C1] do_syscall_64+0x14d/0xf80 [ 1736.140978][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.146902][ C1] [ 1736.149244][ C1] Freed by task 27330: [ 1736.153327][ C1] kasan_save_track+0x3e/0x80 [ 1736.158039][ C1] kasan_save_free_info+0x46/0x50 [ 1736.163093][ C1] __kasan_slab_free+0x5c/0x80 [ 1736.167881][ C1] kfree+0x1c1/0x630 [ 1736.171806][ C1] rtnl_newlink+0x1749/0x1be0 [ 1736.176502][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1736.181471][ C1] netlink_rcv_skb+0x232/0x4b0 [ 1736.186265][ C1] netlink_unicast+0x80f/0x9b0 [ 1736.191062][ C1] netlink_sendmsg+0x813/0xb40 [ 1736.195850][ C1] ____sys_sendmsg+0xa68/0xad0 [ 1736.200659][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1736.205371][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1736.210393][ C1] do_syscall_64+0x14d/0xf80 [ 1736.215010][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.221113][ C1] [ 1736.223457][ C1] The buggy address belongs to the object at ffff888025f04000 [ 1736.223457][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 1736.237551][ C1] The buggy address is located 1744 bytes inside of [ 1736.237551][ C1] freed 2048-byte region [ffff888025f04000, ffff888025f04800) [ 1736.251552][ C1] [ 1736.253904][ C1] The buggy address belongs to the physical page: [ 1736.260353][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25f00 [ 1736.269169][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1736.277693][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1736.285264][ C1] page_type: f5(slab) [ 1736.289277][ C1] raw: 00fff00000000040 ffff88813fea9000 dead000000000100 dead000000000122 [ 1736.297888][ C1] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1736.306512][ C1] head: 00fff00000000040 ffff88813fea9000 dead000000000100 dead000000000122 [ 1736.315222][ C1] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1736.323927][ C1] head: 00fff00000000003 ffffea000097c001 00000000ffffffff 00000000ffffffff [ 1736.332636][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1736.341332][ C1] page dumped because: kasan: bad access detected [ 1736.347776][ C1] page_owner tracks the page as allocated [ 1736.353512][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5982706828, free_ts 0 [ 1736.373173][ C1] post_alloc_hook+0x231/0x280 [ 1736.377976][ C1] get_page_from_freelist+0x24dc/0x2580 [ 1736.383642][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1736.389490][ C1] allocate_slab+0x77/0x660 [ 1736.394027][ C1] refill_objects+0x331/0x3c0 [ 1736.398743][ C1] __pcs_replace_empty_main+0x2b9/0x620 [ 1736.404434][ C1] __kmalloc_noprof+0x474/0x760 [ 1736.409328][ C1] __tty_alloc_driver+0x2d5/0x410 [ 1736.414394][ C1] gsm_init+0x2f/0x2e0 [ 1736.418492][ C1] do_one_initcall+0x250/0x8d0 [ 1736.423286][ C1] do_initcall_level+0x104/0x190 [ 1736.428253][ C1] do_initcalls+0x59/0xa0 [ 1736.432611][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 1736.437842][ C1] kernel_init+0x1d/0x1d0 [ 1736.442197][ C1] ret_from_fork+0x51e/0xb90 [ 1736.446859][ C1] ret_from_fork_asm+0x1a/0x30 [ 1736.451670][ C1] page_owner free stack trace missing [ 1736.457058][ C1] [ 1736.459404][ C1] Memory state around the buggy address: [ 1736.465055][ C1] ffff888025f04580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1736.473148][ C1] ffff888025f04600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1736.481235][ C1] >ffff888025f04680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1736.489316][ C1] ^ [ 1736.496074][ C1] ffff888025f04700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1736.504167][ C1] ffff888025f04780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1736.512260][ C1] ================================================================== [ 1736.520468][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1736.527747][ C1] CPU: 1 UID: 0 PID: 27834 Comm: syz.3.14301 Not tainted syzkaller #0 PREEMPT(full) [ 1736.537337][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1736.547529][ C1] Call Trace: [ 1736.550860][ C1] [ 1736.553747][ C1] vpanic+0x56c/0xa60 [ 1736.557791][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1736.563122][ C1] ? __pfx_vpanic+0x10/0x10 [ 1736.567675][ C1] panic+0xc5/0xd0 [ 1736.571448][ C1] ? __pfx_panic+0x10/0x10 [ 1736.575908][ C1] ? lec_arp_clear_vccs+0x6c/0x380 [ 1736.581071][ C1] ? lec_arp_clear_vccs+0x6c/0x380 [ 1736.586235][ C1] check_panic_on_warn+0x89/0xb0 [ 1736.591220][ C1] ? lec_arp_clear_vccs+0x6c/0x380 [ 1736.596377][ C1] end_report+0x73/0x180 [ 1736.600662][ C1] ? lec_arp_clear_vccs+0x6c/0x380 [ 1736.605814][ C1] kasan_report+0x128/0x150 [ 1736.610386][ C1] ? lec_arp_clear_vccs+0x6c/0x380 [ 1736.615553][ C1] lec_arp_clear_vccs+0x6c/0x380 [ 1736.620549][ C1] lec_arp_expire_vcc+0x17d/0x370 [ 1736.625628][ C1] call_timer_fn+0x192/0x640 [ 1736.630287][ C1] ? __pfx_lec_arp_expire_vcc+0x10/0x10 [ 1736.635899][ C1] ? call_timer_fn+0xd4/0x640 [ 1736.640663][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1736.645865][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1736.651130][ C1] ? __pfx_lec_arp_expire_vcc+0x10/0x10 [ 1736.656721][ C1] __run_timer_base+0x652/0x8b0 [ 1736.661609][ C1] ? ktime_get+0x45/0x200 [ 1736.665978][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1736.671398][ C1] ? sched_clock_cpu+0x74/0x440 [ 1736.676286][ C1] run_timer_softirq+0xb7/0x170 [ 1736.681175][ C1] handle_softirqs+0x22a/0x870 [ 1736.685975][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1736.690778][ C1] __irq_exit_rcu+0x5f/0x150 [ 1736.695402][ C1] irq_exit_rcu+0x9/0x30 [ 1736.699680][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1736.705345][ C1] [ 1736.708306][ C1] [ 1736.711255][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1736.717274][ C1] RIP: 0010:__rcu_read_unlock+0x32/0xe0 [ 1736.722853][ C1] Code: 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d b9 37 70 11 48 8d 9f 84 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c <84> c0 75 4f ff 0b 75 1d 4c 8d b7 88 04 00 00 4c 89 f0 48 c1 e8 03 [ 1736.742511][ C1] RSP: 0018:ffffc90005dcf468 EFLAGS: 00000a03 [ 1736.748618][ C1] RAX: 0000000000000000 RBX: ffff888060a9a2c4 RCX: 0000000000000046 [ 1736.756619][ C1] RDX: 0000000000000001 RSI: ffffffff8e161bea RDI: ffff888060a99e40 [ 1736.764623][ C1] RBP: dffffc0000000000 R08: ffffc90005dcfd70 R09: 0000000000000000 [ 1736.772632][ C1] R10: ffffc90005dcf5b8 R11: fffff52000bb9eb9 R12: 1ffff1100c153458 [ 1736.780637][ C1] R13: ffffc90005dc8000 R14: ffffc90005dcf568 R15: dffffc0000000000 [ 1736.788659][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1736.793808][ C1] unwind_next_frame+0x1aaf/0x23c0 [ 1736.798974][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1736.804214][ C1] ? get_signal+0x11eb/0x1330 [ 1736.808937][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1736.815119][ C1] arch_stack_walk+0x11b/0x150 [ 1736.819954][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 1736.825721][ C1] stack_trace_save+0xa9/0x100 [ 1736.830512][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1736.835917][ C1] save_stack+0x122/0x230 [ 1736.840288][ C1] ? __pfx_save_stack+0x10/0x10 [ 1736.845160][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 1736.850482][ C1] ? __folio_put+0x414/0x4f0 [ 1736.855187][ C1] ? af_alg_pull_tsgl+0x34c/0x700 [ 1736.860237][ C1] ? skcipher_sock_destruct+0xb3/0x220 [ 1736.865721][ C1] ? __sk_destruct+0x85/0x880 [ 1736.870442][ C1] ? af_alg_release+0x83/0xf0 [ 1736.875146][ C1] ? sock_close+0xc3/0x240 [ 1736.879591][ C1] ? __fput+0x44f/0xa70 [ 1736.883777][ C1] ? task_work_run+0x1d9/0x270 [ 1736.888577][ C1] ? get_signal+0x11eb/0x1330 [ 1736.893288][ C1] ? page_ext_put+0x97/0xc0 [ 1736.897820][ C1] __reset_page_owner+0x71/0x1f0 [ 1736.902783][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 1736.907924][ C1] __folio_put+0x414/0x4f0 [ 1736.912363][ C1] ? __pfx___folio_put+0x10/0x10 [ 1736.917323][ C1] ? kasan_save_stack+0x4d/0x60 [ 1736.922206][ C1] ? kasan_save_stack+0x3e/0x60 [ 1736.927078][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1736.932491][ C1] ? __fput_deferred+0x143/0x380 [ 1736.937476][ C1] af_alg_pull_tsgl+0x34c/0x700 [ 1736.942393][ C1] skcipher_sock_destruct+0xb3/0x220 [ 1736.947766][ C1] ? __pfx_skcipher_sock_destruct+0x10/0x10 [ 1736.953701][ C1] __sk_destruct+0x85/0x880 [ 1736.958247][ C1] ? __sk_free+0x2da/0x3f0 [ 1736.962694][ C1] af_alg_release+0x83/0xf0 [ 1736.967236][ C1] sock_close+0xc3/0x240 [ 1736.971508][ C1] ? __pfx_sock_close+0x10/0x10 [ 1736.976379][ C1] __fput+0x44f/0xa70 [ 1736.980412][ C1] task_work_run+0x1d9/0x270 [ 1736.985033][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1736.990177][ C1] ? __fput_deferred+0x216/0x380 [ 1736.995165][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 1737.000495][ C1] get_signal+0x11eb/0x1330 [ 1737.005046][ C1] ? do_futex+0x395/0x420 [ 1737.009422][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1737.015005][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1737.021216][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1737.026542][ C1] ? rcu_is_watching+0x15/0xb0 [ 1737.031340][ C1] do_syscall_64+0x32d/0xf80 [ 1737.035966][ C1] ? trace_irq_disable+0x3b/0x150 [ 1737.041035][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.047142][ C1] ? clear_bhb_loop+0x40/0x90 [ 1737.051862][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.057783][ C1] RIP: 0033:0x7f84f4f9c799 [ 1737.062228][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.081873][ C1] RSP: 002b:00007f84f5e01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1737.090326][ C1] RAX: 0000000000000001 RBX: 00007f84f5215fa0 RCX: 00007f84f4f9c799 [ 1737.098333][ C1] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000005 [ 1737.106334][ C1] RBP: 00007f84f5032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1737.114337][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1737.122343][ C1] R13: 00007f84f5216038 R14: 00007f84f5215fa0 R15: 00007fffed47b2b8 [ 1737.130357][ C1] [ 1737.134038][ C1] Kernel Offset: disabled [ 1737.138370][ C1] Rebooting in 86400 seconds..