last executing test programs: 2.557707085s ago: executing program 0 (id=2857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000008500f447da6f56d12ca1aae6c34419af"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r1}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[], 0x32600) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000109080)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000109280)={0x0, 0x0, "9a4f4fb18579ee167a3e263526b3dd57246dd5e2f3beb16c95464b8ce7a7effaff4270f236e444c2d6b20f8f7c38412e3705e0060bdc129f8da6843f2a9473fd6e4712ff5dc7d1bbbf83fa0d3d96d0f3f99a2b73347665e7aaa56a98b1eec6d63a51b4791a415343c11b7ff706886a3aace89647990089f7dae2cfdcd423e0723885a47b920b737ee53eb9f6f012aae67b050b88d01ce839274a1dad0cadf4ae8b08e7def27d9bddc5e9a66c4c6a06c18116641e603ce29526da237522dbd796c441dbd7db4c07314553e6ecf896c2775bae8247b6dbb13f35c19056b445473f54fdeebd094b769824cb364a13d6f9b340490786505eab734159eb9660b2aee8", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000010a280)={0x4, [{}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x42, "bc5da7ae739ce5"}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f000010b280)={{0x0, 0xffff, 0x9, 0xfffffffffffff37c, 0x10, 0x80, 0x81, 0x32, 0x7fffffff, 0x0, 0x10000, 0x4, 0x6, 0x7, 0xffffffff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010c280)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xcf, "0c025d0d56b0b6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000010d280)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "ee108f8368f8d6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010e280)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "98c4845fa7ebec"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000010f280)={{0x0, 0x6, 0x9, 0x1, 0x20000000000000, 0x3, 0xb, 0xfffffffe, 0x1, 0x0, 0x6, 0x3, 0x9, 0x400, 0x2f0}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010f340)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "90241c50c70f33"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000110340)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5b, "798035680e6196"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000111340)={{0x0, 0x22, 0x1, 0x9, 0x40, 0x100000000, 0x2, 0x33, 0xf, 0xea, 0xaa0, 0x5, 0x0, 0x6, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000111400)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "e40bd05ab20b39"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000112400)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000112600)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "37672e0375685e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000113600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000114600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000115600)={0x0, 0x0, "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", "ac36f1743b1f63f1b69cdb8b08d31d87537528a1335da6738b6a2367d17bc716cfc16db8d4c6ac6c71748541097920e4c2c6a36c12a44163fa9b15aa2cb525e11310794b1f04570365d9848ed881ead2ad3dd744fe3170874cc1c5d4d4c79d63fa3a7a2dc0e6cbb71a6b452a87da888670fda30c7ddb7745482082c41afc982a6bc080e250167a0f0262bf85178a2bdbb3721d41c4ef7a04d992a0323599af4340f29b59c894179b254dddce6a5a5a8aa9ae64c8785771df90237812fc7549438a04e3a167eea13afddc3bd3727bcb2395477a7f8345116ff6ea7a0b68fcbfe0d40a0f41d940e0f49cc0f9a4c69247fdbb242e3198d6ec5d8409d528defb11842177e263a60e336969427aeb1d11bc3c60c6089638dbe479ee629f74a5ebfd64938cb483b911a2bbe3f2cbf803d97ee804424be988e2870410b27079eeb7787bdd34b6fcb2b1f0229e34905f1b3b8896f50dfad2d1006c1c874c4df5ed215bbddd9e20183e4f799f04aa143b6be78a58190118cbb3f3133ffbeaeaad332b2d8e6c2c348fc6dd1d4eae763c1c4384867cf60673dd623715afc7f034e61eded4661db21adc22d49459e90099cdf0e5da9da31f8b3102b2717ff50797934afcf996a3693121e872e6ef0860f17fb5a07978ad69e87069420c05aad7bf1c9bd321685f71a694783106df8a91615cd4374bda2a1fe4d1126128323769bfe2b3918aa9a4339c038f31e7d5ed9e708d0ba47c4766fbb8897e2bcc575352660724709b42c0c7dcd2beda4f7b5e294282fc3c4be43d5184c0265af9f5bc900710b1973ece5d8abcc75851575620943196d2441557e705d49c1a7636118c7b0782fb82e835cde78236f234f123b863d855c90aa9af33063f5476e4c204092811e6b633fe591987b9ec91605f85b4812bf327530ff0550f994734074017eac32168d16965998c6f5193e2ba3a7b884c7f0c6708b082a3f5f7180e925be01aafd56d958d48d4d81d4d4c18ce698beb3a311f6dd38269934675aefd60b72f108b250b7b4dcbe4382e4c3887e3520e676a5cd7a7c7afd5db7cb26a83f235df712ac496f5847b8cccc678ac662afc4e7f15382a3d0e1c335808fb145a001077f966b06c0355e8074c4a9d20772065ca338f25d883ef9431893b475f17cf494565d934ab7ebc1d1fef4d925e00074e95b5b534cda2f895f9f28bbc549d45afdb5ff6bd1091e4c836cfca697bab4ddfa05407672494b8bf49fbd57eba12d6aedf8557d87d41c76f3d3be78af96518a0a6f6d52115bf341b029b657041cf1964703824fa1aaa9fceed240c0c4bf9242adf4b7a233da45aff5ba7874122934ed6c2c7d5416c2ec3c58e21c30e356887315f8a2feb40551fe562d5f0e9003f2c0d6476d5e8644a9b61ef96c8d53b8c1aae65a64ca8688f02c9c1eaac0bae6f9d9319ff9c507bb57c2dcc88f559d53e184c1fe00af8b47bd0211eab58f77b5ed8aaf15617a8832636a5bf9c892ae48741f019d7eae5650d7ccd957034bb0663832610a2f3acc1aca458f3a230cfbf911eaed3d6c63508e3ca96483fd31ea5bf293986ff7598e85f2ca2392d8e8f4b86841a9d79d084c8b50e2c2f328853e7a777a533f3ba0e8c952ffa8011d8a73c9461510c09c8dad4ba8cacad8ec0a7b0535e0e5c37fee5d2acfd03788c582cc8932770850569bacd5ec0f7b6f3f9a826c22f35b75a53fd1fbf8d8fcc4329be345785728f269f2b0b77d773f9946117841a2b8b3b889c16a1735479ffe98fdd7a619fb1c2e5a1c80fb85a8bb6ff2f100943cd329829c8b47ad2f59c56303c40ed69aa191b657ea8b88466ffd1c27f0e68679af867cfb5788e41c4a4fa3bf8a4104ac764952b87361656a9a03805123828453e7101a5fdf561b3d86105c3bd6d43eab5928e7bfeca53895b7a3370559b52b2c7fe20fe9a5d2b8c5e56620eb87f85cfbc77b99b37a0d5f77b60fb4228a3ea4c97fb13032a3c871d9d157879cfa9cb080d42d9c21893917c296184bb5838bf0cdea6b7e63d745890d8ac9bfa201ea8b7a2f3c3116ccc88ca42f7f50449acc90d4202d07bc2794cb127f7c7815c755374a2d08abec27791d77ed68ba1c2e4d00a0565f8e6fe1d6cd3e614aee01f5b7d9dbad18210a9b1d5d68e56156459d1ad94c610e9e6dfbc73af8747afc20c7b092e6eac7d134c0559d4d15043de725ed43c3f6de0f1a7ebd67c4af42094d0b476ef99fa8396baf5ceae27267aeb25f9e43c572cda6b13ec81b1b7993601db4dc443f3a4174d4d6684637d994bb2cf6cdde07dce922acc7a80d0b7280229ca2ad96bfee7de2af74fd9fbae7c02bb0634de5d7aadcdd044bac60c9c3afd856d0d2a2c3db0d3fee8904a04eb3386ad35d60c4f2e1ee4cd6eda3f36d41d03b58a17caddbab27d7e1c4657232720eb6e19c5ded1f028f238a9542bb46d7b24849494334e28df7ca0ff8b2e5add572950d4441ccb1ad5c344cd4e0dc1d2fee76449ff79325c126ec0c1d3d8f97f93a36f88cfaedcab160881f67b5ed3da07e36d902265d4044b1553a1ad1b34a73d3aa96b323e39642507d0116cc5e6649d946d9ca6b659afcf93801cb362aeef438982ac54cea27bd5821fad5c69222727100ac89f5a83ee1a127c3423a4dc3c6e986612e59192758ccddf02c7387a00d3ca88f2bdd587f9993410d284fee6cf88ea81373292746365b693a385909ea0a8b8fb5f167ea6c110d955075a1070add53f0fbd9552699d3e56d0f34a432365f1f7431b78c0c2e1bd99e397c2639bb0088d5950ddca91dbdbb118db47d3b57a892fa3ee9e959a48a9c42ad87f4ba61568bd4d277ee1ca4a3ce3a7dd87a8cc7056d1f9faa04c2a0df398dcd75eca372257b9409d080b57d814f8ac351a64b0a51a8dc38d308651d06e28744d7e46a1cbd00b2c1a5a30a7d7d4c7d7ccee5e432b6fbe971ebea7e009eee4c948a24343bcef3f57516db1bbbfa7b6929e898648c39e24a8dd2af18974fde62bd18233f7793d8c6adb76342093d800f238a7d32b23ec31a4e11b13003ef3a01ae55b9c09cb43b23de6c7fa15f5da8adcfba90148dbf01dba36ae212b6ee7fc71897133b8c51a94ddf54353d6d39b7bed42890cc709e3d71b5d82d8460db48ca33678aec0bdb1a3c6b0f8583e9173e7655d17921ac3b23258832a48c879b905a867b54282327c4435d7cdfc1047167a08e49f8ce8e113ed2b5a52aa1e7b1e3acc37278b94fff70406cf06ef7b48f2c007b617959f54260d435867e5c60a569214f38c3d8bd19189a7896b02777ac2a7d1c97833b31cef54a0c14ea858875374c762fb493c9a55bf93db3b89c1b6cc32b11856641642a4538856ca9f0ecd2d687765768305db660dac788c069d9f7c7edca630560dff5caa1d8c404a386ca92ba29f53dc7a695e959cd71f54772545c4b186aa4200a65fb04ee49c20a9e4885aa78f5e58f08c6572c90f05509d01f007a9cdf2945be0d5245c7d4fc742f0e517af11e6654936a249e900ef144ed2db938e6b6ff2ae9488399684858052d7c584baea5cfe62a2ae34698a169eac2e2f4ca92ef853e22bea78a44c5673bd20216b8262f51039bd2122abc0acbb485cd1ef2e167b4bf085f63b1f7e90c8d038e1d558ca19b245a8e2805d2122f9c0a1bb6f6e5cc642b815003477461f054a203eed8051151f491bda3d7c1ea218f3956bfa524e0bc8b9936b4eb933286597b54fa80a0fe38d876dfce4f19161227822c6da9d91ca262820692a9bddfeddd60bc7f1cc5bedd121dd0b89c577bce8210d3380f890fd9708e928f5b45b7e005d65090f0c54caeefeefe6b602bc9658df519a1af83016a61c8fb00e4ff4018ec49be71bd82c00ea0d986c3fffd2b1705b1af1d75057e412893567472b0413ef534173f678ea0778bef246c51f5d7e9b752c61a28063eba5d952bf686a18ac410c932ba0d61a62b118fdbfc76de7a02c46589b0ead0c6fbc1a1d943c802e99f2c9fce97526a7c43b08a128bdeb18d7ce5944204633705d3476f8da3a048769ea727aa764d7239f4874355a360c44422f4d619b46d120defd005c090597cfc9c19411cf37327ad99fc7b097721ec022a3ad8976575e21a482e1ad7a403c5877282ccfb5dacd29cf56f8baa911b306df755799b399bb448ea0ee1132ab4b132015707581fae3f4d93a315da9bbd1efe440b72a97ba2763b9e030a3436e0dcd5ba4260db912806fb41c82839c5d86dbfa9e2d411ac3c209820ee96a4389cc401de9dd04469377a4335e7ce8cb031e4a588b159805257d232c071f1da295aabc7e2880fe870831debcdc313fc4897870684942fd9ad56ec8aebd91ed221c44bdafe21c2c704b1f9471b8f3bc677d3c7042e7c5a49078e0959a72d090dabe41719929a51fc8da318f6ebfd6242d44c41a261519a2c75092d07781745eadfe8362b8ff4f6ecd1ea9c63017bb227fb5c6448a121e6500fe4dadc5ca25beecb7f0ae89f3dc8e5fcf2178d4ea2bc42ed8615f5138c9e83e2336946c876bf8ef2157d30c2a96958634ebd064d7bcc84eafcaee2c13aadb70d449efbc93cd9dac62eff9547cf606d2a2ca0af0404e2d8834006fefd4c6ece856a34b96dd3cecad383a85b9d1aaf533e61fafdba4ecf4f4090189283ff611853f24753b3b48a4de7f5e9d4bb6f01ea8127947112bf705d4a55140155e791a1980394885d86be14d147d79fe2de42a1973026fb2bc56fd2d22eef62e0afd0d04c0a203a7fbed5a039281505f9529399b0962e80d58641756fa1cc00c0f5606c1483e1c354812968d985c705c33a945429d6af4818f7f33261be5238eff58eb7d7b2a18834b354f5effe35f37530e07da26a512e9cd6c4d7bd7cfc87ce337fcd5933f7fac4ae306fe3260cb4ac4b2704d1647d5dde0bcc52ffb6699025a8c32dc5854c9ce6433c6cee67e94afc0257a12a24e238f8444650fcb23129d01066d5d31c36f8dd2eec96dc58d77971ca37bc7b68073a18e97e6fd613e1afa106b5d8fee2aad50c9b51ea03f1c219e98b4780c6934feaf6c99f160af6e43de02e088d9cf75322842cf3b74e272ade53b6b332d9aefee64075b083fd3ef78172c6efeeedc7d857d9c269987f9620cdf0b0e44a17b65d66224e3b95e22dddadb742e2f5e182c8ff02c7607ac00b79ae88c0ddd0ff327faf96687d61f0508c5ba9f30441ab16519b2137da14f6ad89506ab2bc9369d109bd076089ccd9b6f2647fdf89f7fbbbb3f85b95d460cbd4869f12103ffd70723ad3f836e104ac34c86e1636679c1e0e6be57513f69c3b25e1e9851c95950851f85e18986b27b942b08a6ce262578605013edb442301d0079ac057990663c7faa975ab9961ca2ce24dfaf6105e29ffe4aecfa0c87860854344b4591a6f1917abf8e850d9204cd6a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000116600)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x34, "d07722da23fde8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000117600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {r7}, {r9, r12}, {r13, r14}, {r15, r16}, {0x0, r17}, {r18, r19}, {r20, r21}, {r22, r23}, {r24}, {r25}], 0x4, "c5de768d49e4c9"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000e400000000000000f2ffffffb70800d06b0720ddfd4800000000007b8af8ff00000000070000007b8af0ff00000000bfa1000000000000070100000000000000a400000000000007040000f0ffffffb70200000800000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000182b0000", @ANYRES32=r3, @ANYBLOB="00000000ff00000085100000ffffffff85200000030000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x2, 0x8, 0x1d}, 0x10, 0x0, r4, 0x2, 0x0, &(0x7f0000000280)=[{0x0, 0x2, 0xa}, {0x2, 0x5, 0x6}], 0x10, 0x898e}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) 2.399455106s ago: executing program 0 (id=2863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x580, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x550, 0x2, [@TCA_ROUTE4_ACT={0x54c, 0x6, [@m_police={0x548, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x64a9, 0x10, 0xfffffffe, 0x7fffffff, 0x8, 0x3, 0x1, 0xfffff45b, 0xf3, 0x2, 0x9, 0xa, 0x8, 0x9, 0x1a3b, 0x4, 0x464, 0x800, 0x7fff, 0x9, 0x8, 0x4, 0x0, 0x3, 0x605, 0x9, 0xc, 0x2, 0x13, 0x8001, 0x10000, 0x8, 0x8, 0xdb7, 0x51b, 0x5, 0x8472, 0x240, 0xffff8001, 0x2, 0xb54, 0xfc7, 0x7, 0x9, 0x8000, 0x3, 0x6e, 0x5, 0x4, 0xa45, 0x3, 0xd7b9, 0xde, 0x1, 0x40, 0x6c, 0x6, 0x6f81636b, 0x0, 0x8bda, 0xb020, 0xaae, 0x1, 0xffffffef, 0x4, 0x1, 0x3, 0x8, 0x9, 0x5, 0x6, 0x1, 0x401, 0x7, 0x5, 0x6, 0x3, 0x5, 0x2, 0x3, 0x7, 0x200, 0xffffffff, 0x80000001, 0x3, 0xd, 0x58b, 0x3, 0x100, 0xe59, 0xfa, 0x80000000, 0x3a6, 0x1, 0x9, 0x3, 0x6, 0x1, 0x8, 0x3, 0xa00, 0x0, 0x5, 0x0, 0x8, 0xea1, 0xb57, 0x9, 0x6, 0x5, 0x24, 0x9, 0x5, 0x4, 0x6, 0x9a, 0x1, 0x9, 0x5, 0x0, 0x7fffffff, 0xb641, 0x2, 0x3, 0xffffffc2, 0x8, 0xfffffff5, 0x31a0, 0x18000000, 0x6, 0x80000000, 0xd, 0x1, 0x7, 0x2, 0x9, 0x4, 0xa4, 0x0, 0x1, 0x9, 0x4bc6, 0x1000, 0x8, 0x40, 0x6, 0x1, 0x1, 0x0, 0x3, 0x2, 0x8000, 0xfffffff9, 0x101, 0x602, 0x8000, 0x5, 0x4, 0x4, 0xffff0001, 0x93af, 0x53b8, 0x1, 0x419, 0x9, 0x9, 0x3, 0x4, 0x7000, 0x4, 0xb, 0x6, 0x97, 0x3, 0x0, 0x401, 0x0, 0x7, 0xffff3bc8, 0x2, 0xffff0001, 0x6, 0x643, 0xf, 0x1000, 0x6, 0x7, 0xfffff9ad, 0x6, 0x7ff, 0x60, 0x1, 0x7, 0x0, 0x3, 0x8, 0x2, 0x3, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x4, 0xfffffff8, 0xd4ba, 0x1, 0x658, 0xa47, 0x32, 0xfffffffe, 0x9, 0x3, 0x4, 0x2, 0x8, 0x4, 0x0, 0x0, 0x9, 0x3, 0x4, 0x3, 0xc191, 0x7, 0x8000, 0x6, 0x1ff, 0x9, 0xfffff800, 0x2c800000, 0x1, 0xe, 0x50, 0x8, 0x100, 0x6b, 0x7, 0xa, 0x80000000, 0x65, 0x79, 0x10, 0x7, 0x13f, 0x2, 0x0, 0x3, 0x4c, 0x9, 0xfffffff9, 0x0, 0x19a8, 0x10001, 0x9]}]]}, {0x115, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x800}, 0x20844) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000c80)={{r2, &(0x7f0000000040)='devlink\x00', 0x80, &(0x7f0000000140)={@align=0x80, {0x2, 0x8000, 0x0, 0x6}}, 0xda, &(0x7f0000000180), &(0x7f00000001c0)=0x536}, 0x3, &(0x7f0000000c00)=[{0x2, 0x2, &(0x7f0000000200)='route\x00', &(0x7f00000003c0)="99678119de7adcb08f815553294b39cbfe24d4571cca80241440d0133466b464db9d429fa0f4a3880d0a4c8cc876aa9e60b9ba23fb80934333b108419426bfb5a0433f53057870918cbd3a1ca35ffef5062b658e367e178cf9d7e21827a4338227f17672273bf27942d97a30f97ad2e9a25a7dabf83ad6efa14ce3b406975aee29b6547ca5dad2c192d57b4d657956bbe97307ea47d0e5d96e476a69b34d37ed49c37d75de4ede62c89d72fabe22a72399ba11cab83e1c858fba426b89cb2bb4b403e94a6a940130b4", 0xc9, 0x12}, {0x3, 0x7, &(0x7f0000000280)='}#$&\x00', &(0x7f00000004c0)="a546f514b9e8e45d249e5e76e3293632ea172589ea87bef4868ea3a2ce63ce6b820dc0d0c2a62c2bfbefe7d81f5e9576ec5dd5bbec3669efed7f89c8b66fedd69ae2bb60a6650b120e2ea78f1b5eab82259fde39297f873cdf08b4ce147fa6b433460ae74b8c4090318edaec40d25e508ca23a339a2c60f1145dffcb4ca80dc0c38dfcc6b03ca9ee299c913bdf9a5bde146f03107f998fe1619c34c6272c018206ef2b62f59a362c1a8d4b683781eaa5663f9121648e1b91f7a4338932f44ae315c9f840032dd71bd6af005b88e3f00505838c49568414caa5fef90dc74158dc5fd79e8e1c2ea3d1beb4726e8808e8", 0xef, 0x11}, {0x2, 0x7, &(0x7f00000005c0)='!:].%{)\x00', &(0x7f0000000600)="d793961a09231bb70c8fc53e6410989c95b8d0c48a6e830227d4", 0x1a}]}) write$tun(r3, &(0x7f0000000d80)={@val={0x0, 0x200}, @void, @llc={@snap={0x0, 0xab, "e0", "1fd2d2", 0x88e7, "cf2ca0ad45b00dd68797571ef5a2bc32067ec7bd3856332a6c0d97e7a8330649a9f2450c77f8149cd2e39ec402b725a57f9dbf88dc3dbd086609c6719469e0a399df0fb90cb148fc32d798b378caba5bd5554c7942797b7a86f15da22f4267dded8958e6ecc77025c7fda7f25ff46e982b7bb21f4bfe015326b068f8d247da6a"}}}, 0x8c) 2.376473093s ago: executing program 1 (id=2865): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0x3}, &(0x7f00000000c0)=0x8) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 2.211218844s ago: executing program 1 (id=2870): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r1, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xea, &(0x7f0000000fc0)=""/234}, 0x94) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)={0x114, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x4c, 0x64, 0x0, 0x1, [@nested={0x45, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f5", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9"]}]}, 0x114}], 0x1}, 0x0) 2.06277623s ago: executing program 1 (id=2875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x4, {{0x29, 0x0, 0x8000000, @empty, 0x2}}}, 0x88) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @remote, @null, @remote, @bcast]}, &(0x7f0000000100)=0x40, 0x80800) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) 2.003477284s ago: executing program 1 (id=2876): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000002c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=r3, @ANYBLOB="0000000000620000280012800b00010065727370616e00001800028004001200060010004e23000006000f00ef2100006d78465ff9ac0ae886ed30d4cd58a703705491a8fed789bd16a31d96c1944816bbccf8084185402d4ca36df5ded20234d6eb66f7953ae31a071e37dbe9757b686f09a4d38184e9d1762588242ab690b1b534f52d25ed582dea71643e563c16ba5a008760d683652f755ee2bb6adfafc9dab399cb73eafe5ed5cc6f64c3f1a634a0e6d0ee9eadb8dfe7608287c7cff91a6f2e80772bb980"], 0x48}, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = accept4$x25(0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000001500)=0x12, 0x800) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000001540)) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x7, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x100000, 0x1000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffbfe, {0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) write$tun(r5, &(0x7f0000000080)=ANY=[], 0xfb5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115200000000008510000002000000850000000500000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r7, 0x4, 0x40, 0x100}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000001980)=[@in6={0xa, 0x4e21, 0x1, @mcast1, 0x7fffffff}, @in6={0xa, 0x4e22, 0xfffffffc, @mcast1}], 0x38) recvmmsg(r10, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001840)={0x2, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x0, 0x2, 0x2, 0x0, 0x18, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001580)='GPL\x00', 0x6, 0x9c, &(0x7f0000001780)=""/156, 0x41000, 0x0, '\x00', r3, 0x1b, r9, 0x8, &(0x7f00000015c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0x6, 0x0, 0x3}, 0x10, r12, 0x0, 0x0, &(0x7f0000001880)=[r9, r9], 0x0, 0x10, 0xd}, 0x94) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.883216905s ago: executing program 3 (id=2881): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc04c065}, 0x40000) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000040)='!$$(@\x00', 0x220801, &(0x7f0000000100)={@_ha_fsid={[0x2, 0x7fff]}, {0x1, 0x4, 0x10, 0x1}}, 0x3, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x3}, {[0x0, 0x200, 0x10, 0x1ffe0000]}, 0x6, 0x1000, &(0x7f0000000700)=""/4096}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r4, 0x5) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r3, 0x5) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000000)={0x1, 0x5, 0x166f, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xfffffff9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r7, 0x800}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x0) 1.742303367s ago: executing program 3 (id=2883): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1}, 0x100) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) poll(&(0x7f0000000200)=[{r2, 0x2094}, {r0, 0x50}, {r2}, {r2, 0x308}, {r0, 0x2281}, {r0, 0x80}, {0xffffffffffffffff, 0x200}, {r0}], 0x8, 0x81) r3 = accept4(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000100)=0x80, 0x800) getsockopt$inet6_tcp_int(r3, 0x6, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) 1.714748449s ago: executing program 3 (id=2884): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe18, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001600)=ANY=[@ANYRES32=r1, @ANYRES8=r2, @ANYBLOB="2f000006127ff50004"], 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket(0x14, 0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x12, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x1d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "5e53ec79d078f640", "a4d69b27cb6cebcb938d22b1808f1d17", '\x00', "fec596897c64202d"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd, 0x0, 0xffffffff}]}) write$ppp(r5, &(0x7f0000000140)="1e08", 0x2) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) connect$llc(r3, 0x0, 0x0) 1.511711168s ago: executing program 2 (id=2886): syz_emit_ethernet(0x4a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaafaaaaaaaaaabb86dd608a37f200142cfefe8000000000567f305871000000000000000000bb0000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e00000080600"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x3, 0x1, 0x4, 0x7, 0x50, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x7, &(0x7f00000003c0)=""/7, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)=[0xffffffffffffffff, r1, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x2, 0x3, 0x0, 0x3}, {0x3, 0x2, 0x5}, {0x4, 0x5, 0x5, 0x4}, {0x4, 0x4, 0xc}, {0x1, 0x4, 0xc, 0xb}, {0x3, 0x3, 0x0, 0x5}, {0x2, 0x1, 0x10}, {0x4, 0x5, 0xf, 0x3}], 0x10, 0x3ac8}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x200000000000011, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0xffffffffffffffff}], 0x1, 0x0, 0x12a0}}], 0x1, 0x20008044) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x14, 0x0, 0x9, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@tcx={@void, @value=r9, @void, @void, r10}}, 0x1c) (async) preadv(r3, &(0x7f0000000800)=[{&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000700)=""/236, 0xec}], 0x2, 0x80000001, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000064010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c001040000000000000000310010980480002801c000180080001"], 0x254}}, 0x10) 1.511310589s ago: executing program 0 (id=2887): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x37db, 0x56aa, 0x2, 0x7}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5cf3d2fa268f72f56e19a05f000000000000005d14969a806d48270d4017e295cd2fc3c5d53f55d0e66c09342b4090739ea3c696df004e82a19566c3ccd30d9bab7f609ba366771343b64f2daa80739836d65489f4f4fe979ce89c5e4104ebe074a9e5abce2b22b81af51a1ee88e5c0cbd8eb87ef7116cf41373479157806b3a69ee63b445dbf7a9e500b3a76e9ea6f92a8f80b17aa3d848a4a66b27fd790d51a67268b0c272024ad11ef19db32181f1058d0a66736cc946bf74e13db7050d8f84b6c71439181b392e544567c6f330871f593cc06f3d423c3cc3881a06198c74dc69f87767443c9c10d4", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x1c, 0x7fff, 0x4, 0x1, 0x9, 0x2, 0x8}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r0, 0x3, 0x8}) 1.410162281s ago: executing program 4 (id=2888): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4040000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0xfff5, 'H8-', 0x1f, 0x80}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'nicvf0\x00', {0xb5}, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) listen(r4, 0x6) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 1.394718372s ago: executing program 0 (id=2889): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002000940e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.275718678s ago: executing program 2 (id=2890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000000f0000008500000041ad00020000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr=0x64010101, @local, r3}, 0xc) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.114204513s ago: executing program 4 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000240)={0x0, 0x12, 0x8, 0x2, 0x8}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) r6 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x8000) 1.054277905s ago: executing program 2 (id=2892): ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'sit0\x00'}) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x2b, 0x0, 0x800, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0}, 0x40) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0xd5a, 0x90, &(0x7f0000000340)=""/144, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xc, 0x80000000, 0x76a}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback=r2, r0, 0x25, 0x1a, 0xffffffffffffffff, @void, @value=r4, @void, @void, r1}, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @mcast1, 0x6}, {0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x60}, 0xfffffff9}, 0x1, {[0x8, 0x44, 0x4, 0x3, 0x8, 0xbbe, 0x80000000, 0x3]}}, 0x5c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2, 0xf, 0xb, 0x7, 0x6, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}]}, 0x30}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000006c0)) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000700)=0x3, 0x4) r6 = accept4$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14, 0x40000) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000007c0)={0x1, 0x8000}, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r6, &(0x7f0000000800)=0x8000000000000001, r8, &(0x7f0000000840)=0xf, 0xff, 0x8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000880)={r7, 0x1, 0x6, @local}, 0x10) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000008c0)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0xb1bc0000) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000a00)={r0, &(0x7f0000000900)='\"\x00', 0x400001, &(0x7f0000000940)={@_ha_fsid={[0xf, 0xf]}, {0x800, 0x8a, 0x5, 0x7}}, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x3}) sendto$l2tp6(r10, &(0x7f0000000a40)="dc797a693ee898d608", 0x9, 0x1, &(0x7f0000000a80)={0xa, 0x0, 0xc, @loopback, 0xffffffff, 0x3}, 0x20) syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), r0) close(r10) clock_gettime(0x0, &(0x7f00000045c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000043c0)=[{{&(0x7f0000000b00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b80)=""/70, 0x46}, {&(0x7f0000000c00)=""/251, 0xfb}, {&(0x7f0000000d00)=""/103, 0x67}, {&(0x7f0000000d80)=""/223, 0xdf}, {&(0x7f0000000e80)=""/62, 0x3e}, {&(0x7f0000000ec0)=""/250, 0xfa}], 0x6, &(0x7f0000001040)=""/180, 0xb4}}, {{&(0x7f0000001100)=@generic, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001180)=""/92, 0x5c}, {&(0x7f0000001200)=""/64, 0x40}, {&(0x7f0000001240)=""/245, 0xf5}, {&(0x7f0000001340)}, {&(0x7f0000001380)=""/16, 0x10}, {&(0x7f00000013c0)=""/189, 0xbd}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/28, 0x1c}], 0x8, &(0x7f0000002540)=""/93, 0x5d}, 0x10}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000025c0)=""/212, 0xd4}], 0x1}, 0x2}, {{&(0x7f0000002700)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/177, 0xb1}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/207, 0xcf}], 0x2}, 0x16b32c06}, {{&(0x7f00000039c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003a40)=""/249, 0xf9}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/195, 0xc3}, {&(0x7f0000003d40)=""/110, 0x6e}], 0x4, &(0x7f0000003e00)=""/60, 0x3c}, 0x1ac60e12}, {{&(0x7f0000003e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004100)=[{&(0x7f0000003ec0)=""/253, 0xfd}, {&(0x7f0000003fc0)=""/34, 0x22}, {&(0x7f0000004000)=""/252, 0xfc}], 0x3}, 0x2900eaf9}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004140)=""/77, 0x4d}, {&(0x7f00000041c0)=""/129, 0x81}, {&(0x7f0000004280)=""/125, 0x7d}], 0x3, &(0x7f0000004340)=""/99, 0x63}, 0x200}], 0x8, 0x40000060, &(0x7f0000004600)={r11, r12+60000000}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000004640)={@rand_addr=' \x01\x00', r7}, 0x14) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000004680)={'filter\x00', 0x4}, 0x68) ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000004700)=0x9) getsockopt$bt_BT_SNDMTU(r13, 0x112, 0xc, &(0x7f0000004740)=0xfa, &(0x7f0000004780)=0x2) 927.23939ms ago: executing program 2 (id=2893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x1d, 0x3, 0x1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x0, @multicast2}}) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x10, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0xaf) (async, rerun: 32) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 926.961139ms ago: executing program 1 (id=2894): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2008000) 859.128563ms ago: executing program 1 (id=2895): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x20000400) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x2}, 0x20004001) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000040)=0x2) socket$netlink(0x10, 0x3, 0x0) 858.943497ms ago: executing program 3 (id=2896): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) pread64(r1, &(0x7f00000000c0)=""/244, 0xf4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000030000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x100, 0xfffffffffffffd86}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x1201, 0x40}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_EVENT={0x8, 0x2c, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x48000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGDEBUG(r7, 0x80047441, &(0x7f0000000680)) 642.708728ms ago: executing program 4 (id=2897): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x2, 0x6}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r1}) 531.327088ms ago: executing program 4 (id=2898): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0xffffffffffffff0c}, 0x1, 0x0, 0x0, 0x40010850}, 0x20004080) r0 = socket$kcm(0x2a, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8918, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf83, 0x3}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d1000/0xb000)=nil, 0xb000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x5431000) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffc, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 506.905295ms ago: executing program 0 (id=2899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x43, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b}, 0x94) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x85, "cde3946f0d71b8aba7b927a288e7e661b5707222162db72e79e4526fa184d14f85741dacd5b07a76d2e1070e66a2d03d3b4d3cb797dd4fd13b33ff5af59fe1d4dc010c88dae5cda22e850e815879c58692848b20035b5335292fba50d12c094a3c563b6b8559dbe8a013fbfa38669b954a570d38e619df2eb1237329e2d84ce020b9b201a7"}, &(0x7f00000001c0)=0x8d) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x200}, &(0x7f0000000440)=0x8) 506.185065ms ago: executing program 3 (id=2900): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="110048ca1700010327bd7002fadbdf2501000000"], 0x14}}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004080) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000a000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8fbffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) (async) setsockopt$inet6_opts(r10, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40dbdf2500000000", @ANYRES32=r9, @ANYBLOB="00000000006d616373a8980000100002800c000100070091ed00"/40], 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 483.182839ms ago: executing program 2 (id=2901): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x400008a0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r4, &(0x7f0000000000), 0x0, 0x22, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x8}, {0xfff3}}}, 0x24}}, 0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x3254963bfb129782}) 306.964736ms ago: executing program 4 (id=2902): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='GPL\x00', 0x80000, 0x0, 0x0, 0x41100, 0x11}, 0x94) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 305.481787ms ago: executing program 0 (id=2903): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) listen(r0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000035c0)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x88010) accept4(r0, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000700)=0x4) r3 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d1, 0x0) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) close(0x4) 203.253412ms ago: executing program 2 (id=2904): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983", 0x13}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xd8, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40824}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) 146.809125ms ago: executing program 4 (id=2905): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2008000) 0s ago: executing program 3 (id=2906): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x2}, 0x50) kernel console output (not intermixed with test programs): 3][T11241] netlink: 'syz.1.1393': attribute type 8 has an invalid length. [ 190.772328][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 190.808727][T11241] bond0: entered promiscuous mode [ 190.838390][T11241] gretap0: entered promiscuous mode [ 190.850119][T11241] debugfs: 'hsr0' already exists in 'hsr' [ 190.859681][T11241] Cannot create hsr debugfs directory [ 190.868648][T11241] hsr0: entered promiscuous mode [ 191.222036][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 191.241812][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 191.308817][T11226] delete_channel: no stack [ 191.988230][T11278] syzkaller0: entered promiscuous mode [ 192.019257][T11278] syzkaller0: entered allmulticast mode [ 192.127237][T11322] netlink: 'syz.2.1407': attribute type 2 has an invalid length. [ 192.137254][T11322] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.1407'. [ 193.536243][T11320] bond0: option min_links: invalid value (18446744073709530014) [ 193.544000][T11320] bond0: option min_links: allowed values 0 - 2147483647 [ 193.572031][T11333] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1407'. [ 193.603115][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'. [ 193.636532][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'. [ 193.669341][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 193.679096][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'. [ 193.733408][T11362] bridge_slave_1: entered promiscuous mode [ 194.062011][T11391] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1415'. [ 194.084607][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.093672][T11392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1416'. [ 194.112202][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.215130][T11398] netlink: 'syz.1.1418': attribute type 4 has an invalid length. [ 194.243793][T11398] netlink: 'syz.1.1418': attribute type 4 has an invalid length. [ 194.263737][T11398] xt_hashlimit: size too large, truncated to 1048576 [ 194.313521][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 195.547468][T11463] netlink: 'syz.0.1429': attribute type 13 has an invalid length. [ 195.798107][T11469] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 195.999683][T11469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.094044][T11476] bond4: (slave veth7): Enslaving as an active interface with a down link [ 196.153425][T11480] bond4: (slave veth9): Enslaving as an active interface with a down link [ 196.568389][T11515] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1437'. [ 196.713201][T11522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1438'. [ 196.872123][T11530] netlink: 'syz.3.1442': attribute type 3 has an invalid length. [ 197.435685][T11553] xfrm2: entered promiscuous mode [ 197.445410][T11553] xfrm2: entered allmulticast mode [ 197.603013][T11566] vlan1: entered promiscuous mode [ 197.653215][T11566] geneve1: entered promiscuous mode [ 197.659668][T11566] vlan1: entered allmulticast mode [ 197.668457][T11566] geneve1: entered allmulticast mode [ 197.849762][T11581] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 198.167183][T11605] FAULT_INJECTION: forcing a failure. [ 198.167183][T11605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.182198][T11605] CPU: 0 UID: 0 PID: 11605 Comm: syz.0.1465 Not tainted syzkaller #0 PREEMPT(full) [ 198.182223][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.182235][T11605] Call Trace: [ 198.182242][T11605] [ 198.182250][T11605] dump_stack_lvl+0xe8/0x150 [ 198.182279][T11605] should_fail_ex+0x412/0x560 [ 198.182306][T11605] _copy_from_user+0x2d/0xb0 [ 198.182331][T11605] ___sys_sendmsg+0x1c6/0x360 [ 198.182363][T11605] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.182422][T11605] ? __fget_files+0x2a/0x420 [ 198.182445][T11605] ? __fget_files+0x3a0/0x420 [ 198.182479][T11605] __x64_sys_sendmsg+0x1bd/0x2a0 [ 198.182506][T11605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.182540][T11605] ? __pfx_ksys_write+0x10/0x10 [ 198.182568][T11605] do_syscall_64+0x14d/0xf80 [ 198.182590][T11605] ? trace_irq_disable+0x3b/0x150 [ 198.182614][T11605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.182632][T11605] ? clear_bhb_loop+0x40/0x90 [ 198.182653][T11605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.182670][T11605] RIP: 0033:0x7f457a39c799 [ 198.182687][T11605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.182701][T11605] RSP: 002b:00007f457b1ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.182720][T11605] RAX: ffffffffffffffda RBX: 00007f457a615fa0 RCX: 00007f457a39c799 [ 198.182732][T11605] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 198.182743][T11605] RBP: 00007f457b1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 198.182753][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.182763][T11605] R13: 00007f457a616038 R14: 00007f457a615fa0 R15: 00007ffd3ae976c8 [ 198.182791][T11605] [ 198.505353][T11615] netlink: 'syz.1.1467': attribute type 3 has an invalid length. [ 198.669129][T11639] netlink: 'syz.3.1472': attribute type 1 has an invalid length. [ 198.710888][T11640] netlink: 'syz.1.1473': attribute type 4 has an invalid length. [ 198.739669][T11640] __nla_validate_parse: 40 callbacks suppressed [ 198.739686][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 198.741934][T11639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.820692][T11646] : entered promiscuous mode [ 198.891530][T11649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1475'. [ 198.900734][T11649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1475'. [ 199.046311][T11659] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 199.047887][T11658] FAULT_INJECTION: forcing a failure. [ 199.047887][T11658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.070811][T11658] CPU: 1 UID: 0 PID: 11658 Comm: syz.0.1479 Not tainted syzkaller #0 PREEMPT(full) [ 199.070835][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.070846][T11658] Call Trace: [ 199.070852][T11658] [ 199.070860][T11658] dump_stack_lvl+0xe8/0x150 [ 199.070889][T11658] should_fail_ex+0x412/0x560 [ 199.070915][T11658] _copy_from_user+0x2d/0xb0 [ 199.070940][T11658] __copy_msghdr+0x3c5/0x5b0 [ 199.070989][T11658] ___sys_sendmsg+0x213/0x360 [ 199.071019][T11658] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.071075][T11658] ? __fget_files+0x2a/0x420 [ 199.071100][T11658] ? __fget_files+0x3a0/0x420 [ 199.071132][T11658] __x64_sys_sendmsg+0x1bd/0x2a0 [ 199.071160][T11658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.071191][T11658] ? __pfx_ksys_write+0x10/0x10 [ 199.071219][T11658] do_syscall_64+0x14d/0xf80 [ 199.071243][T11658] ? trace_irq_disable+0x3b/0x150 [ 199.071266][T11658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.071284][T11658] ? clear_bhb_loop+0x40/0x90 [ 199.071306][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.071323][T11658] RIP: 0033:0x7f457a39c799 [ 199.071341][T11658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.071356][T11658] RSP: 002b:00007f457b1ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.071375][T11658] RAX: ffffffffffffffda RBX: 00007f457a615fa0 RCX: 00007f457a39c799 [ 199.071388][T11658] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 199.071399][T11658] RBP: 00007f457b1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 199.071410][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.071421][T11658] R13: 00007f457a616038 R14: 00007f457a615fa0 R15: 00007ffd3ae976c8 [ 199.071449][T11658] [ 199.377536][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 199.398309][T11665] netlink: 212232 bytes leftover after parsing attributes in process `syz.0.1481'. [ 199.433290][T11673] Bluetooth: MGMT ver 1.23 [ 199.577312][T11677] syzkaller0: entered promiscuous mode [ 199.584427][T11677] syzkaller0: entered allmulticast mode [ 199.697394][T11683] netlink: 'syz.4.1486': attribute type 2 has an invalid length. [ 199.714269][T11683] netlink: 'syz.4.1486': attribute type 2 has an invalid length. [ 200.255360][T11704] FAULT_INJECTION: forcing a failure. [ 200.255360][T11704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.268668][T11704] CPU: 0 UID: 0 PID: 11704 Comm: syz.1.1489 Not tainted syzkaller #0 PREEMPT(full) [ 200.268692][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.268702][T11704] Call Trace: [ 200.268710][T11704] [ 200.268718][T11704] dump_stack_lvl+0xe8/0x150 [ 200.268748][T11704] should_fail_ex+0x412/0x560 [ 200.268773][T11704] _copy_from_iter+0x1d3/0x1670 [ 200.268798][T11704] ? rcu_is_watching+0x15/0xb0 [ 200.268822][T11704] ? trace_kmalloc+0x2a/0x110 [ 200.268844][T11704] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 200.268863][T11704] ? __pfx__copy_from_iter+0x10/0x10 [ 200.268886][T11704] ? __alloc_skb+0x55c/0x7d0 [ 200.268908][T11704] ? skb_put+0x11b/0x210 [ 200.268930][T11704] ? tipc_msg_build+0x912/0xd60 [ 200.268958][T11704] tipc_msg_build+0x76e/0xd60 [ 200.268993][T11704] ? __pfx_tipc_msg_build+0x10/0x10 [ 200.269039][T11704] ? net_generic+0x1e/0x240 [ 200.269057][T11704] ? net_generic+0x1e/0x240 [ 200.269078][T11704] ? tipc_group_bc_cong+0x15f/0x210 [ 200.269108][T11704] tipc_send_group_bcast+0x7db/0xad0 [ 200.269149][T11704] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 200.269184][T11704] ? __pfx_woken_wake_function+0x10/0x10 [ 200.269218][T11704] __tipc_sendmsg+0x33b/0x2bf0 [ 200.269246][T11704] ? css_rstat_updated+0x23a/0x530 [ 200.269268][T11704] ? __pfx_css_rstat_updated+0x10/0x10 [ 200.269290][T11704] ? __pfx___tipc_sendmsg+0x10/0x10 [ 200.269312][T11704] ? aa_label_sk_perm+0x532/0x6e0 [ 200.269342][T11704] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 200.269372][T11704] ? update_load_avg+0x1b0/0x1ec0 [ 200.269392][T11704] ? update_load_avg+0x1b0/0x1ec0 [ 200.269418][T11704] ? __lock_acquire+0x6b5/0x2cf0 [ 200.269476][T11704] ? tipc_sendmsg+0x47/0x70 [ 200.269501][T11704] ? __local_bh_enable_ip+0xd0/0x130 [ 200.269528][T11704] tipc_sendmsg+0x55/0x70 [ 200.269551][T11704] ? __pfx_tipc_sendmsg+0x10/0x10 [ 200.269571][T11704] ____sys_sendmsg+0xa68/0xad0 [ 200.269595][T11704] ? __lock_acquire+0x6b5/0x2cf0 [ 200.269625][T11704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.269660][T11704] ? import_iovec+0x73/0xa0 [ 200.269691][T11704] ___sys_sendmsg+0x2a5/0x360 [ 200.269723][T11704] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.269753][T11704] ? kstrtouint+0x6e/0xe0 [ 200.269799][T11704] ? __fget_files+0x2a/0x420 [ 200.269823][T11704] ? __fget_files+0x3a0/0x420 [ 200.269857][T11704] __sys_sendmmsg+0x27c/0x4e0 [ 200.269888][T11704] ? __pfx___sys_sendmmsg+0x10/0x10 [ 200.269911][T11704] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 200.269966][T11704] ? rcu_is_watching+0x15/0xb0 [ 200.269998][T11704] __x64_sys_sendmmsg+0xa0/0xc0 [ 200.270025][T11704] do_syscall_64+0x14d/0xf80 [ 200.270049][T11704] ? trace_irq_disable+0x3b/0x150 [ 200.270072][T11704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.270089][T11704] ? clear_bhb_loop+0x40/0x90 [ 200.270109][T11704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.270125][T11704] RIP: 0033:0x7fa64a79c799 [ 200.270142][T11704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.270156][T11704] RSP: 002b:00007fa64b600028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 200.270174][T11704] RAX: ffffffffffffffda RBX: 00007fa64aa16090 RCX: 00007fa64a79c799 [ 200.270187][T11704] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 200.270198][T11704] RBP: 00007fa64b600090 R08: 0000000000000000 R09: 0000000000000000 [ 200.270209][T11704] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.270220][T11704] R13: 00007fa64aa16128 R14: 00007fa64aa16090 R15: 00007ffec81aa638 [ 200.270250][T11704] [ 200.948415][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 201.839793][T11715] veth7: entered promiscuous mode [ 201.917860][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 202.037983][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 202.261314][T11741] tipc: Enabled bearer , priority 0 [ 202.279131][T11735] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1498'. [ 202.348807][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1500'. [ 202.521733][T11751] netlink: 'syz.2.1503': attribute type 9 has an invalid length. [ 202.532359][T11751] netlink: 'syz.2.1503': attribute type 11 has an invalid length. [ 202.540404][T11751] netlink: 'syz.2.1503': attribute type 12 has an invalid length. [ 202.985292][T11757] netlink: 'syz.0.1504': attribute type 5 has an invalid length. [ 203.630775][T11749] syzkaller0: entered promiscuous mode [ 203.636343][T11749] syzkaller0: entered allmulticast mode [ 203.644401][T11754] syzkaller0: mtu greater than device maximum [ 203.656441][T11757] geneve2: entered promiscuous mode [ 203.666469][T11757] geneve2: entered allmulticast mode [ 203.686259][T11739] tipc: Disabling bearer [ 203.833007][T11769] __nla_validate_parse: 4 callbacks suppressed [ 203.833034][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 203.851251][T11769] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 203.910616][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 203.928986][T11769] netlink: 'syz.3.1507': attribute type 3 has an invalid length. [ 203.947287][T11773] IPv6: addrconf: prefix option has invalid lifetime [ 205.368042][T10521] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 205.377366][T10521] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 205.404040][T10521] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 205.454314][T10521] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 205.526612][T11805] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1518'. [ 205.815734][T11833] netlink: 'syz.1.1524': attribute type 16 has an invalid length. [ 205.826173][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 205.871135][T11831] vlan2: entered allmulticast mode [ 205.880837][T11831] team0: entered allmulticast mode [ 205.894715][T11831] team_slave_0: entered allmulticast mode [ 205.900899][T11831] team_slave_1: entered allmulticast mode [ 205.915528][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1524'. [ 206.057339][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 206.211501][T11852] sctp: [Deprecated]: syz.4.1531 (pid 11852) Use of int in max_burst socket option. [ 206.211501][T11852] Use struct sctp_assoc_value instead [ 206.414835][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 206.435924][T11861] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 206.667101][T11878] syzkaller0: entered promiscuous mode [ 206.682265][T11878] syzkaller0: entered allmulticast mode [ 206.766936][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'. [ 206.843976][T11887] IPv6: sit3: Disabled Multicast RS [ 206.866665][T11875] tipc: Started in network mode [ 206.871709][T11875] tipc: Node identity , cluster identity 4711 [ 206.878202][T11875] tipc: Failed to obtain node identity [ 206.884536][T11875] tipc: Enabling of bearer rejected, failed to enable media [ 206.996448][T11892] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 207.053462][T11893] bond6: (slave geneve3): making interface the new active one [ 207.074965][T11893] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 207.085820][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.104282][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.122087][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.138562][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.163036][T11910] netlink: 'syz.3.1550': attribute type 61 has an invalid length. [ 207.219023][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'. [ 207.253079][T11911] netlink: 'syz.1.1549': attribute type 39 has an invalid length. [ 207.531434][T11927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1555'. [ 207.638459][T11927] geneve2: entered promiscuous mode [ 207.654990][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.671969][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.711062][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.723171][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.881460][T11948] bridge4: entered allmulticast mode [ 208.042063][T11957] pim6reg: entered allmulticast mode [ 208.049972][T11957] pim6reg: left allmulticast mode [ 208.114668][T11961] syzkaller1: entered promiscuous mode [ 208.120338][T11961] syzkaller1: entered allmulticast mode [ 208.132386][T11957] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 208.242921][T11967] xt_CT: No such helper "pptp" [ 208.449648][ T29] audit: type=1800 audit(1772524963.905:3): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1572" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1505 res=0 errno=0 [ 208.688670][T11996] xt_limit: Overflow, try lower: 271964/0 [ 208.727586][T11995] xt_limit: Overflow, try lower: 271964/0 [ 208.850931][T12005] syzkaller0: entered promiscuous mode [ 208.871324][T12005] syzkaller0: entered allmulticast mode [ 208.923394][T12013] syzkaller0: entered promiscuous mode [ 208.930737][T12017] xt_l2tp: v2 doesn't support IP mode [ 208.968624][T12013] syzkaller0: entered allmulticast mode [ 209.041701][T12024] __nla_validate_parse: 9 callbacks suppressed [ 209.041719][T12024] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1585'. [ 209.783069][T12062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.102195][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 210.126398][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1597'. [ 210.128162][T12074] tunl0: Caught tx_queue_len zero misconfig [ 210.149596][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1596'. [ 210.177938][T12078] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 210.489497][T12092] : entered promiscuous mode [ 210.503464][T12098] netlink: 'syz.1.1603': attribute type 10 has an invalid length. [ 210.532556][T12098] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 210.576624][T12102] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1604'. [ 210.743413][T12115] netlink: 'syz.4.1607': attribute type 6 has an invalid length. [ 210.760442][T12115] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.1607'. [ 210.941612][T12123] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001 [ 212.406727][T12098] veth7: entered promiscuous mode [ 212.504936][T12126] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 212.630223][T12138] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1614'. [ 212.652980][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 212.730774][T12134] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 212.769107][T12134] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 212.780706][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'. [ 212.881481][T12126] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 212.891956][T12143] bridge0: port 3(syz_tun) entered blocking state [ 212.909853][T12143] bridge0: port 3(syz_tun) entered disabled state [ 212.916965][T12143] syz_tun: entered allmulticast mode [ 212.941039][T12143] syz_tun: entered promiscuous mode [ 212.962322][T12146] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.013147][T12156] batadv1: entered promiscuous mode [ 213.045920][T12156] batadv1: entered allmulticast mode [ 213.062761][T12156] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 213.091180][T12134] macvlan2: entered promiscuous mode [ 213.097502][T12134] macvlan2: entered allmulticast mode [ 213.109298][T12134] bond6: entered promiscuous mode [ 213.120551][T12134] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.130229][T12134] bond6: left promiscuous mode [ 213.167292][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 213.184220][T12165] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.968334][T12218] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 213.999493][T12218] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 214.008017][T12218] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 214.262815][T12238] __nla_validate_parse: 6 callbacks suppressed [ 214.262833][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1642'. [ 214.353740][T12249] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 214.565862][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1646'. [ 214.577792][T12259] netlink: 'syz.4.1648': attribute type 64 has an invalid length. [ 214.677679][T12262] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1646'. [ 214.936859][T12273] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1652'. [ 215.175733][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 215.494939][T12315] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 215.662870][T12326] netlink: 'syz.3.1668': attribute type 11 has an invalid length. [ 215.681916][T12324] netlink: 'syz.1.1666': attribute type 2 has an invalid length. [ 215.701540][T12324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.734944][T12326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.872496][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 215.891398][T12337] hsr0: entered promiscuous mode [ 215.915575][T12337] macvlan0: entered allmulticast mode [ 215.920995][T12337] hsr0: entered allmulticast mode [ 215.926577][T12337] hsr_slave_0: entered allmulticast mode [ 215.953907][T12337] hsr_slave_1: entered allmulticast mode [ 216.376164][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 216.406350][T12362] netlink: 'syz.4.1676': attribute type 30 has an invalid length. [ 216.539278][ T997] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.539566][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 216.553202][ T997] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.559373][T12362] netlink: 'syz.4.1676': attribute type 30 has an invalid length. [ 216.676087][ T997] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.692157][T12379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1681'. [ 216.703124][ T997] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.740770][T12379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1681'. [ 217.643091][T12423] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 218.446694][T12469] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 219.335181][T12525] __nla_validate_parse: 38 callbacks suppressed [ 219.335200][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 219.504739][T12540] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1724'. [ 219.577693][T12542] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 219.599319][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 219.617997][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 219.762116][T12563] ip6tnl0: Caught tx_queue_len zero misconfig [ 219.902045][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1733'. [ 219.912471][T12568] nbd: illegal input index -1113835520 [ 219.935002][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 220.028568][T12571] bond5: ARP target 9.0.0.0 is already present [ 220.051076][T12571] bond5: option arp_ip_target: invalid value (9) [ 220.063762][T12571] bond5 (unregistering): Released all slaves [ 220.149069][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'. [ 220.393712][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 220.420804][T12595] netlink: zone id is out of range [ 220.423751][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 220.429709][T12595] netlink: zone id is out of range [ 220.441722][T12597] syzkaller0: entered promiscuous mode [ 220.448268][T12597] syzkaller0: entered allmulticast mode [ 220.454025][T12595] netlink: zone id is out of range [ 220.461104][T12595] netlink: zone id is out of range [ 220.501317][T12595] netlink: zone id is out of range [ 220.506894][T12595] netlink: zone id is out of range [ 220.521551][T12595] netlink: zone id is out of range [ 220.688659][T12612] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 220.716482][T12613] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 220.827864][T12623] vlan1: entered promiscuous mode [ 220.833123][T12623] vlan1: entered allmulticast mode [ 220.841869][T12623] hsr0: entered promiscuous mode [ 220.907960][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 220.935692][T12624] hsr_slave_0: left promiscuous mode [ 220.943478][T12624] hsr_slave_1: left promiscuous mode [ 220.984922][T12624] hsr0 (unregistering): left promiscuous mode [ 221.280867][T12639] netlink: 'syz.2.1752': attribute type 1 has an invalid length. [ 221.374967][T12638] syz_tun: Device is already in use. [ 221.549702][T12643] netlink: 'syz.3.1753': attribute type 1 has an invalid length. [ 221.629243][T12649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.962560][T12666] sctp: [Deprecated]: syz.3.1757 (pid 12666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.962560][T12666] Use struct sctp_sack_info instead [ 222.669064][T12700] bond5 (unregistering): Released all slaves [ 222.738854][T12706] syzkaller0: entered promiscuous mode [ 222.744531][T12706] syzkaller0: entered allmulticast mode [ 222.810007][T12715] bond2 (unregistering): Released all slaves [ 224.243222][T12721] syzkaller1: entered promiscuous mode [ 224.249082][T12721] syzkaller1: entered allmulticast mode [ 224.541450][T12754] __nla_validate_parse: 6 callbacks suppressed [ 224.541469][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1780'. [ 224.570801][T12754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1780'. [ 224.705031][T12769] sctp: [Deprecated]: syz.4.1785 (pid 12769) Use of int in max_burst socket option. [ 224.705031][T12769] Use struct sctp_assoc_value instead [ 224.842552][T12770] syzkaller0: entered promiscuous mode [ 224.848441][T12770] syzkaller0: entered allmulticast mode [ 224.886212][T12780] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1788'. [ 225.234687][T12794] FAULT_INJECTION: forcing a failure. [ 225.234687][T12794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.247900][T12794] CPU: 1 UID: 0 PID: 12794 Comm: syz.0.1790 Not tainted syzkaller #0 PREEMPT(full) [ 225.247923][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.247933][T12794] Call Trace: [ 225.247940][T12794] [ 225.247947][T12794] dump_stack_lvl+0xe8/0x150 [ 225.247976][T12794] should_fail_ex+0x412/0x560 [ 225.248000][T12794] _copy_from_iter+0x1d3/0x1670 [ 225.248019][T12794] ? rcu_is_watching+0x15/0xb0 [ 225.248041][T12794] ? trace_kmalloc+0x2a/0x110 [ 225.248059][T12794] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 225.248075][T12794] ? __pfx__copy_from_iter+0x10/0x10 [ 225.248100][T12794] ? __alloc_skb+0x55c/0x7d0 [ 225.248120][T12794] ? skb_put+0x11b/0x210 [ 225.248141][T12794] ? tipc_msg_build+0x912/0xd60 [ 225.248167][T12794] tipc_msg_build+0x76e/0xd60 [ 225.248199][T12794] ? __pfx_tipc_msg_build+0x10/0x10 [ 225.248226][T12794] ? net_generic+0x1e/0x240 [ 225.248244][T12794] ? net_generic+0x1e/0x240 [ 225.248264][T12794] ? tipc_group_bc_cong+0x15f/0x210 [ 225.248308][T12794] tipc_send_group_bcast+0x7db/0xad0 [ 225.248346][T12794] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 225.248378][T12794] ? __pfx_woken_wake_function+0x10/0x10 [ 225.248412][T12794] __tipc_sendmsg+0x33b/0x2bf0 [ 225.248441][T12794] ? up_write+0x1ab/0x410 [ 225.248461][T12794] ? __pfx___tipc_sendmsg+0x10/0x10 [ 225.248478][T12794] ? process_measurement+0x195e/0x1c80 [ 225.248501][T12794] ? aa_label_sk_perm+0x532/0x6e0 [ 225.248526][T12794] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 225.248543][T12794] ? __pfx_process_measurement+0x10/0x10 [ 225.248565][T12794] ? tomoyo_check_open_permission+0x38e/0x470 [ 225.248583][T12794] ? tomoyo_check_open_permission+0x1d3/0x470 [ 225.248603][T12794] ? __lock_acquire+0x6b5/0x2cf0 [ 225.248655][T12794] ? tipc_sendmsg+0x47/0x70 [ 225.248677][T12794] ? __local_bh_enable_ip+0xd0/0x130 [ 225.248701][T12794] tipc_sendmsg+0x55/0x70 [ 225.248721][T12794] ? __pfx_tipc_sendmsg+0x10/0x10 [ 225.248739][T12794] ____sys_sendmsg+0xa68/0xad0 [ 225.248761][T12794] ? __lock_acquire+0x6b5/0x2cf0 [ 225.248787][T12794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.248826][T12794] ? import_iovec+0x73/0xa0 [ 225.248852][T12794] ___sys_sendmsg+0x2a5/0x360 [ 225.248879][T12794] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.248906][T12794] ? kstrtouint+0x6e/0xe0 [ 225.248948][T12794] ? __fget_files+0x2a/0x420 [ 225.248969][T12794] ? __fget_files+0x3a0/0x420 [ 225.248999][T12794] __sys_sendmmsg+0x27c/0x4e0 [ 225.249027][T12794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 225.249047][T12794] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 225.249094][T12794] ? ksys_write+0x242/0x270 [ 225.249112][T12794] ? __pfx_ksys_write+0x10/0x10 [ 225.249134][T12794] __x64_sys_sendmmsg+0xa0/0xc0 [ 225.249159][T12794] do_syscall_64+0x14d/0xf80 [ 225.249180][T12794] ? trace_irq_disable+0x3b/0x150 [ 225.249201][T12794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.249217][T12794] ? clear_bhb_loop+0x40/0x90 [ 225.249237][T12794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.249253][T12794] RIP: 0033:0x7f457a39c799 [ 225.249269][T12794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.249283][T12794] RSP: 002b:00007f457b18a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 225.249301][T12794] RAX: ffffffffffffffda RBX: 00007f457a616090 RCX: 00007f457a39c799 [ 225.249312][T12794] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 225.249323][T12794] RBP: 00007f457b18a090 R08: 0000000000000000 R09: 0000000000000000 [ 225.249333][T12794] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.249343][T12794] R13: 00007f457a616128 R14: 00007f457a616090 R15: 00007ffd3ae976c8 [ 225.249371][T12794] [ 226.165971][T12804] x_tables: duplicate underflow at hook 2 [ 226.684142][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 226.716007][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 226.859903][T12814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1797'. [ 226.955322][T12816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.149826][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1800'. [ 227.335060][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'. [ 227.355032][T12827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1801'. [ 227.534235][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'. [ 227.978184][T12867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.118497][T12873] netlink: 'syz.0.1813': attribute type 1 has an invalid length. [ 228.306801][T12882] bond7: entered promiscuous mode [ 228.307281][T12888] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 228.320338][T12882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.601187][T12888] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.609027][T12888] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.964557][T12888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.007100][T12888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.909536][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.967856][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.994066][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.027441][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.103104][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.115442][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.141540][T12908] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!' [ 230.157989][T12908] CPU: 0 UID: 0 PID: 12908 Comm: syz.1.1823 Not tainted syzkaller #0 PREEMPT(full) [ 230.158015][T12908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.158028][T12908] Call Trace: [ 230.158036][T12908] [ 230.158045][T12908] dump_stack_lvl+0xe8/0x150 [ 230.158079][T12908] sysfs_warn_dup+0x8e/0xa0 [ 230.158108][T12908] sysfs_do_create_link_sd+0xc0/0x110 [ 230.158139][T12908] device_add_class_symlinks+0x1cf/0x240 [ 230.158176][T12908] device_add+0x475/0xb70 [ 230.158212][T12908] wiphy_register+0x1d73/0x2d50 [ 230.158255][T12908] ? __pfx_wiphy_register+0x10/0x10 [ 230.158279][T12908] ? __pfx_netdev_run_todo+0x10/0x10 [ 230.158299][T12908] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 230.158340][T12908] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 230.158382][T12908] ieee80211_register_hw+0x3571/0x4220 [ 230.158431][T12908] ? ieee80211_register_hw+0x1451/0x4220 [ 230.158473][T12908] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 230.158523][T12908] ? __hrtimer_setup+0x181/0x200 [ 230.158551][T12908] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 230.158578][T12908] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 230.158643][T12908] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 230.158673][T12908] ? kstrndup+0xbf/0x160 [ 230.158709][T12908] hwsim_new_radio_nl+0xf35/0x1bd0 [ 230.158766][T12908] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 230.158809][T12908] ? rcu_is_watching+0x15/0xb0 [ 230.158838][T12908] ? trace_kmalloc+0x2a/0x110 [ 230.158864][T12908] ? __nla_parse+0x40/0x60 [ 230.158896][T12908] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 230.158939][T12908] genl_family_rcv_msg_doit+0x22a/0x330 [ 230.158979][T12908] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 230.159025][T12908] ? bpf_lsm_capable+0x9/0x20 [ 230.159051][T12908] ? security_capable+0x7e/0x2c0 [ 230.159082][T12908] genl_rcv_msg+0x61c/0x7a0 [ 230.159120][T12908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.159150][T12908] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 230.159183][T12908] ? __lock_acquire+0x6b5/0x2cf0 [ 230.159222][T12908] netlink_rcv_skb+0x232/0x4b0 [ 230.159249][T12908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.159282][T12908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.159328][T12908] ? down_read+0x272/0x2e0 [ 230.159345][T12908] ? genl_rcv+0xd/0x40 [ 230.159382][T12908] genl_rcv+0x28/0x40 [ 230.159410][T12908] netlink_unicast+0x80f/0x9b0 [ 230.159443][T12908] ? __pfx_netlink_unicast+0x10/0x10 [ 230.159468][T12908] ? netlink_sendmsg+0x650/0xb40 [ 230.159492][T12908] ? skb_put+0x11b/0x210 [ 230.159525][T12908] netlink_sendmsg+0x813/0xb40 [ 230.159562][T12908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.159592][T12908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.159619][T12908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.159642][T12908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.159667][T12908] ____sys_sendmsg+0xa68/0xad0 [ 230.159696][T12908] ? futex_unqueue+0x211/0x240 [ 230.159728][T12908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.159765][T12908] ? import_iovec+0x73/0xa0 [ 230.159794][T12908] ___sys_sendmsg+0x2a5/0x360 [ 230.159827][T12908] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.159861][T12908] ? futex_wait+0x29a/0x380 [ 230.159919][T12908] ? __fget_files+0x2a/0x420 [ 230.159947][T12908] ? __fget_files+0x3a0/0x420 [ 230.159987][T12908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 230.160022][T12908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.160062][T12908] ? rcu_is_watching+0x15/0xb0 [ 230.160105][T12908] do_syscall_64+0x14d/0xf80 [ 230.160133][T12908] ? trace_irq_disable+0x3b/0x150 [ 230.160162][T12908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.160183][T12908] ? clear_bhb_loop+0x40/0x90 [ 230.160209][T12908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.160229][T12908] RIP: 0033:0x7fa64a79c799 [ 230.160248][T12908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.160266][T12908] RSP: 002b:00007fa64b621028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.160287][T12908] RAX: ffffffffffffffda RBX: 00007fa64aa15fa0 RCX: 00007fa64a79c799 [ 230.160303][T12908] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 230.160317][T12908] RBP: 00007fa64a832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 230.160330][T12908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.160341][T12908] R13: 00007fa64aa16038 R14: 00007fa64aa15fa0 R15: 00007ffec81aa638 [ 230.160382][T12908] [ 230.231006][T12908] __nla_validate_parse: 4 callbacks suppressed [ 230.231023][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 230.332579][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.544863][T12909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1823'. [ 230.568744][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.732505][T12909] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.744420][T12909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.751697][T12909] IPv6: NLM_F_CREATE should be set when creating new route [ 230.759005][T12909] IPv6: NLM_F_CREATE should be set when creating new route [ 230.766272][T12909] IPv6: NLM_F_CREATE should be set when creating new route [ 230.797016][T12926] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1827'. [ 230.809742][T12934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.060809][T12942] xt_TCPMSS: Only works on TCP SYN packets [ 231.270272][T12959] syzkaller0: entered promiscuous mode [ 231.280916][T12959] syzkaller0: entered allmulticast mode [ 231.295287][T12970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1838'. [ 231.310018][T12948] xt_CT: No such helper "syz1" [ 231.709520][T12991] netlink: 'syz.0.1845': attribute type 33 has an invalid length. [ 231.737804][T12991] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1845'. [ 231.755047][T12996] x_tables: duplicate underflow at hook 2 [ 232.055879][T13017] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.1852'. [ 232.261827][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 232.674675][T13053] tipc: Enabled bearer , priority 0 [ 232.682162][T13053] syzkaller0: entered promiscuous mode [ 232.689857][T13053] syzkaller0: entered allmulticast mode [ 232.725986][T13053] tipc: Resetting bearer [ 232.761876][T13052] tipc: Resetting bearer [ 232.794443][T13052] tipc: Disabling bearer [ 233.081355][T13076] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1869'. [ 233.110582][T13077] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.133948][T13077] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.193600][T13077] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.216769][T13077] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.274025][T13087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1871'. [ 233.346514][T13077] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.375665][T13077] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.460912][T13077] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.471433][T13077] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.500714][T13097] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.609864][T13097] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.712240][T13097] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.752143][ T6177] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 233.762381][ T6177] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 233.775198][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 233.788079][T13097] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.826683][T13109] netlink: 'syz.0.1879': attribute type 3 has an invalid length. [ 233.849998][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 233.859430][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 233.874318][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 233.885345][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 233.951536][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 233.970313][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 234.186726][ T6980] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.227607][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.300103][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.330768][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.527317][T13146] netlink: 'syz.0.1893': attribute type 13 has an invalid length. [ 235.064466][T13175] xt_hashlimit: size too large, truncated to 1048576 [ 235.160807][T13181] tipc: Enabled bearer , priority 14 [ 235.256782][T13185] __nla_validate_parse: 13 callbacks suppressed [ 235.256800][T13185] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1902'. [ 235.306151][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 235.485038][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1905'. [ 235.504150][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1905'. [ 235.718093][T13208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1907'. [ 235.829670][T13214] netlink: 'syz.0.1909': attribute type 29 has an invalid length. [ 235.842846][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1908'. [ 235.937080][T13214] netlink: 'syz.0.1909': attribute type 29 has an invalid length. [ 236.104908][T13225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1913'. [ 236.116216][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1911'. [ 236.153950][T12702] tipc: Node number set to 3693647162 [ 236.331629][T13240] netlink: set zone limit has 8 unknown bytes [ 236.652944][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1919'. [ 236.989948][T13274] netlink: 'syz.0.1922': attribute type 5 has an invalid length. [ 237.005222][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 237.869094][T13295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.047155][T13304] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 238.741943][T13334] xt_CT: No such helper "pptp" [ 239.123228][T13347] syzkaller0: entered promiscuous mode [ 239.185875][T13347] syzkaller0: entered allmulticast mode [ 241.049133][T13368] openvswitch: : Dropping previously announced user features [ 241.049464][T13375] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 241.068636][T13375] __nla_validate_parse: 4 callbacks suppressed [ 241.068654][T13375] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1947'. [ 241.149529][T13377] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1948'. [ 241.269560][T13382] geneve2: left promiscuous mode [ 241.295574][T13387] netlink: 'syz.0.1952': attribute type 9 has an invalid length. [ 241.308016][T13382] ip6gre1: left promiscuous mode [ 241.318366][T13382] bond3: left promiscuous mode [ 241.323200][T13382] bridge3: left promiscuous mode [ 241.332215][T13382] vlan1: left promiscuous mode [ 241.338137][T13382] geneve1: left promiscuous mode [ 241.344940][T13382] bond7: left promiscuous mode [ 242.072639][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1962'. [ 242.433318][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 242.494078][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 242.742163][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1972'. [ 242.752236][T13479] syzkaller0: entered promiscuous mode [ 242.774647][T13479] syzkaller0: entered allmulticast mode [ 242.968204][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 243.303200][T13447] lec:lec_atm_close: lec0: Shut down! [ 244.644761][T12698] lec:lec_start_xmit: lec0:No lecd attached [ 244.709969][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'. [ 244.767478][T13549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1982'. [ 244.957086][T13558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1983'. [ 245.150602][T13564] netlink: 'syz.0.1983': attribute type 11 has an invalid length. [ 245.159073][T13564] netlink: 'syz.0.1983': attribute type 23 has an invalid length. [ 245.351418][T13579] netlink: 'syz.2.1988': attribute type 1 has an invalid length. [ 245.628379][T13591] vlan3: entered allmulticast mode [ 245.633546][T13591] bond0: entered allmulticast mode [ 245.660561][T13591] bond_slave_0: entered allmulticast mode [ 245.711581][T13591] bond_slave_1: entered allmulticast mode [ 245.948425][T13614] netlink: 'syz.4.1995': attribute type 6 has an invalid length. [ 246.009894][T13611] syzkaller0: entered promiscuous mode [ 246.024361][T13611] syzkaller0: entered allmulticast mode [ 246.212318][T13611] tipc: Enabled bearer , priority 0 [ 246.335695][T13623] bond5: option arp_all_targets: invalid value (129) [ 246.403442][T13623] bond5 (unregistering): Released all slaves [ 246.469512][T13639] __nla_validate_parse: 2 callbacks suppressed [ 246.469531][T13639] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2001'. [ 246.565034][T13644] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 246.580156][T13609] tipc: Resetting bearer [ 246.869683][T13609] tipc: Disabling bearer [ 246.957556][T13637] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 246.972288][T13659] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2003'. [ 247.015212][T13659] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 247.195026][T13668] syzkaller0: entered promiscuous mode [ 247.200812][T13668] syzkaller0: entered allmulticast mode [ 247.212830][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 247.267231][T13673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2006'. [ 247.289189][T13673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2006'. [ 247.371088][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 247.659299][T13703] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2019'. [ 247.738657][T13710] IPVS: Unknown mcast interface: bridge_slave_0 [ 247.760038][T13710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.810592][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2023'. [ 247.862774][T13718] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2024'. [ 247.872006][T13718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2024'. [ 247.963487][T13720] netlink: 'syz.3.2025': attribute type 1 has an invalid length. [ 247.989286][T13720] bond8: entered promiscuous mode [ 247.995824][T13720] 8021q: adding VLAN 0 to HW filter on device bond8 [ 248.120252][T13731] openvswitch: netlink: Message has 6 unknown bytes. [ 248.245383][T13739] xt_CT: No such helper "pptp" [ 248.328418][T13744] pim6reg: entered allmulticast mode [ 248.341421][T13744] pim6reg: left allmulticast mode [ 249.114020][T13785] xt_CT: No such helper "pptp" [ 249.221121][T13788] bond9: (slave bond_slave_1): Device is not our slave [ 249.228439][T13788] bond9: option active_slave: invalid value (bond_slave_1) [ 249.240556][T13788] bond9 (unregistering): Released all slaves [ 249.478756][T13809] xt_hashlimit: size too large, truncated to 1048576 [ 249.686046][T13815] bridge_slave_0 (unregistering): left allmulticast mode [ 249.708861][T13819] netlink: 'syz.4.2052': attribute type 1 has an invalid length. [ 249.719064][T13815] bridge_slave_0 (unregistering): left promiscuous mode [ 249.734745][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.742929][T13819] netlink: 'syz.4.2052': attribute type 4 has an invalid length. [ 249.753865][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 249.762251][ C0] lec:lec_tx_timeout: lec0 [ 249.767518][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 249.768453][T13819] netlink: 'syz.4.2052': attribute type 8 has an invalid length. [ 249.781773][T13819] netlink: 'syz.4.2052': attribute type 1 has an invalid length. [ 249.802765][T13819] NCSI netlink: No device for ifindex 4294967295 [ 250.009897][T13829] xt_CT: No such helper "pptp" [ 250.202610][T13840] syzkaller0: entered promiscuous mode [ 250.233993][T13840] syzkaller0: entered allmulticast mode [ 250.343479][T10526] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.360005][T13854] netlink: 'syz.4.2062': attribute type 5 has an invalid length. [ 250.376091][T10526] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.522126][T10526] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.542954][T10526] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.808491][T13880] xt_CT: No such helper "pptp" [ 251.081009][T13902] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 251.103402][T13902] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 251.676014][T13927] netlink: 'syz.4.2081': attribute type 1 has an invalid length. [ 251.803322][T13927] bond6: entered promiscuous mode [ 251.829645][T13927] bond6: entered allmulticast mode [ 251.835860][T13927] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.967582][T13943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.353799][T13974] __nla_validate_parse: 20 callbacks suppressed [ 252.395321][T13974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2094'. [ 252.642225][T13997] netlink: 'syz.4.2102': attribute type 11 has an invalid length. [ 252.745357][T13999] xt_addrtype: ipv6 does not support BROADCAST matching [ 252.832202][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 252.843515][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'. [ 253.152333][T14035] netlink: 'syz.0.2110': attribute type 16 has an invalid length. [ 253.160443][T14035] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2110'. [ 253.207527][T14030] xt_CT: No such helper "pptp" [ 253.220567][T14033] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.251811][T14033] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.435480][T14035] netlink: 'syz.0.2110': attribute type 16 has an invalid length. [ 253.463720][T14042] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 253.504799][T14035] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2110'. [ 253.641840][T14035] netlink: 'syz.0.2110': attribute type 16 has an invalid length. [ 253.662868][T14035] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2110'. [ 253.684067][T14042] bond7: (slave geneve3): making interface the new active one [ 253.694757][T14042] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 253.813383][ T6980] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.825757][ T6980] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.864336][T14035] netlink: 'syz.0.2110': attribute type 16 has an invalid length. [ 253.872187][T14035] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2110'. [ 253.883957][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 253.892858][T14072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2120'. [ 253.939209][T14072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2120'. [ 253.948996][ T6980] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.964205][ T6980] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.188465][T14081] xt_CT: No such helper "pptp" [ 254.452393][T14112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.555477][T14116] syzkaller0: entered promiscuous mode [ 254.560985][T14116] syzkaller0: entered allmulticast mode [ 254.691520][T14123] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 254.773869][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 254.781931][ C0] lec:lec_tx_timeout: lec0 [ 254.786934][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 254.920853][T14130] xt_CT: No such helper "pptp" [ 254.998024][T14135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.035379][T14138] ip6tnl0: Caught tx_queue_len zero misconfig [ 255.245806][T14150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.489865][ T29] audit: type=1800 audit(1772525010.945:4): pid=14158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2149" name="memory.events" dev="tmpfs" ino=2104 res=0 errno=0 [ 255.519561][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.526045][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.552841][T14153] syzkaller1: entered promiscuous mode [ 255.558420][T14153] syzkaller1: entered allmulticast mode [ 255.617016][T14155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.793972][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 259.801979][ C0] lec:lec_tx_timeout: lec0 [ 259.806551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.813943][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 264.821965][ C0] lec:lec_tx_timeout: lec0 [ 264.826641][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.834102][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 269.842106][ C0] lec:lec_tx_timeout: lec0 [ 269.846701][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.853927][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 274.862075][ C0] lec:lec_tx_timeout: lec0 [ 274.866813][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.874020][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 279.882041][ C0] lec:lec_tx_timeout: lec0 [ 279.886649][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.673913][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 285.681952][ C0] lec:lec_tx_timeout: lec0 [ 285.686638][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 290.714024][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 290.722051][ C0] lec:lec_tx_timeout: lec0 [ 290.726861][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.733948][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 295.741956][ C0] lec:lec_tx_timeout: lec0 [ 295.746571][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 297.429180][T14211] __nla_validate_parse: 8 callbacks suppressed [ 297.429199][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 297.439254][T14205] xt_CT: No such helper "pptp" [ 297.461642][T14213] netlink: 'syz.2.2157': attribute type 16 has an invalid length. [ 297.478116][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 297.504741][T14213] netlink: 'syz.2.2157': attribute type 17 has an invalid length. [ 297.515091][T14214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.522433][T14214] IPv6: NLM_F_CREATE should be set when creating new route [ 297.570818][T14217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.578128][T14217] IPv6: NLM_F_CREATE should be set when creating new route [ 297.803765][T14233] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2161'. [ 297.853628][T14228] 8021q: adding VLAN 0 to HW filter on device bond9 [ 297.921431][T14228] bond0: (slave bond9): Enslaving as an active interface with an up link [ 297.983618][T14233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.998660][T14233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.017998][T14233] bond0 (unregistering): (slave bond9): Releasing backup interface [ 298.036878][T14233] bond0 (unregistering): Released all slaves [ 298.148273][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 298.176818][T14248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2166'. [ 298.179800][T14247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2168'. [ 298.204117][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'. [ 298.233664][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'. [ 298.249656][T14253] netlink: 'syz.3.2169': attribute type 21 has an invalid length. [ 298.268609][T14253] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2169'. [ 298.268898][T14248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2166'. [ 298.278110][T14253] netlink: 'syz.3.2169': attribute type 5 has an invalid length. [ 298.471930][T14262] xt_CT: No such helper "pptp" [ 298.544744][T14269] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 299.068185][T14318] xt_CT: No such helper "pptp" [ 299.221445][T14331] tipc: Enabled bearer , priority 0 [ 300.117346][T14379] xt_CT: No such helper "pptp" [ 300.323472][T14398] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 300.405191][T14389] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 300.421063][T14389] erspan1: entered allmulticast mode [ 300.622266][T14414] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 300.733255][T14414] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.753899][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 300.762784][ C0] lec:lec_tx_timeout: lec0 [ 300.767917][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 300.879708][T14435] netlink: 'syz.0.2216': attribute type 13 has an invalid length. [ 300.889642][T14434] netlink: 'syz.0.2216': attribute type 13 has an invalid length. [ 300.898915][T14435] netlink: 'syz.0.2216': attribute type 17 has an invalid length. [ 300.934687][T14434] netlink: 'syz.0.2216': attribute type 17 has an invalid length. [ 301.076703][T14434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.104030][T14435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.259764][T14443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.335415][T14450] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 301.345982][T14450] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 301.641675][T14476] syz_tun: entered promiscuous mode [ 301.665745][T14476] syz_tun: left promiscuous mode [ 301.798490][T14493] veth0_to_batadv: mtu less than device minimum [ 302.047848][T14509] openvswitch: netlink: EtherType 0 is less than min 600 [ 302.110039][T14501] syzkaller0: entered promiscuous mode [ 302.118326][T14501] syzkaller0: entered allmulticast mode [ 302.162962][T14518] xt_CT: No such helper "pptp" [ 304.263413][T14553] __nla_validate_parse: 15 callbacks suppressed [ 304.263434][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 304.269139][T14554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2239'. [ 304.329393][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2239'. [ 304.342583][T14553] tun0: tun_chr_ioctl cmd 1074025675 [ 304.349383][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2239'. [ 304.353961][T14553] tun0: persist enabled [ 304.387987][T14553] tun0: tun_chr_ioctl cmd 1074025675 [ 304.396037][T14553] tun0: persist disabled [ 304.623261][T14564] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2245'. [ 304.632618][T14564] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2245'. [ 304.651827][T14563] delete_channel: no stack [ 305.127617][T14577] ip6tnl2: entered allmulticast mode [ 305.133386][T14580] IPVS: set_ctl: invalid protocol: 23 100.1.1.0:20003 [ 305.255529][T14590] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2253'. [ 305.439848][T14601] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2257'. [ 305.580002][T14614] Bluetooth: MGMT ver 1.23 [ 305.625533][T14614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.777423][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 305.793865][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 305.801909][ C0] lec:lec_tx_timeout: lec0 [ 305.806626][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 305.947513][T14634] syzkaller0: entered promiscuous mode [ 305.953947][T14634] syzkaller0: entered allmulticast mode [ 306.011434][T14639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2267'. [ 306.765469][T14683] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 306.778763][T14689] validate_nla: 1 callbacks suppressed [ 306.778781][T14689] netlink: 'syz.1.2282': attribute type 21 has an invalid length. [ 306.834234][T14689] netlink: 'syz.1.2282': attribute type 4 has an invalid length. [ 306.847857][T14689] netlink: 'syz.1.2282': attribute type 5 has an invalid length. [ 307.166041][T14218] udevd[14218]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 307.226198][T14711] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 307.251704][T14712] xt_hashlimit: size too large, truncated to 1048576 [ 307.778126][T14717] netlink: 'syz.0.2289': attribute type 2 has an invalid length. [ 307.786388][T14717] netlink: 'syz.0.2289': attribute type 8 has an invalid length. [ 307.803114][T14733] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 307.830312][T14733] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.163295][T14744] xt_ecn: cannot match TCP bits for non-tcp packets [ 308.201845][T14744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.283061][T14744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.326120][T14749] ip6gretap0: entered allmulticast mode [ 308.371986][T14744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.443267][T14744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.522849][ T6177] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.574532][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.627798][ T6177] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.679992][ T997] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.981767][T14767] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 308.998559][T14765] xt_CT: No such helper "pptp" [ 309.045574][T14767] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.215865][T14767] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 309.244064][T14767] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.507916][T14767] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 309.587861][T14767] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.679501][T14797] geneve4: entered promiscuous mode [ 309.771019][T14767] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 309.800019][T14767] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.915954][T14818] __nla_validate_parse: 14 callbacks suppressed [ 309.915977][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2317'. [ 310.055372][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 310.083937][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.132016][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 310.150597][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.213314][T14828] wg1 speed is unknown, defaulting to 1000 [ 310.219888][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 310.231076][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.241740][T14828] wg1 speed is unknown, defaulting to 1000 [ 310.270936][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 310.284756][T14837] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2324'. [ 310.314102][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.323175][T14828] wg1 speed is unknown, defaulting to 1000 [ 310.330322][T14839] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 310.357645][T14828] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 310.421302][T14828] wg1 speed is unknown, defaulting to 1000 [ 310.440840][T14828] wg1 speed is unknown, defaulting to 1000 [ 310.460768][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 310.470553][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 310.510414][T14828] wg1 speed is unknown, defaulting to 1000 [ 310.556846][T14847] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 310.584874][T14828] wg1 speed is unknown, defaulting to 1000 [ 310.596181][T14828] wg1 speed is unknown, defaulting to 1000 [ 310.623239][T14849] netlink: 'syz.3.2329': attribute type 21 has an invalid length. [ 310.640945][T14849] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2329'. [ 310.712452][T14856] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2331'. [ 310.741161][T14856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2331'. [ 310.751520][T14849] netlink: 'syz.3.2329': attribute type 2 has an invalid length. [ 310.782535][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2331'. [ 310.813939][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 310.822043][ C0] lec:lec_tx_timeout: lec0 [ 310.827073][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 310.860335][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 311.120196][T14891] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 311.143939][T14891] syzkaller1: Linktype set failed because interface is up [ 311.144165][T12702] syzkaller1: tun_net_xmit 90 [ 311.160368][T14899] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 311.184061][T14901] netlink: 1084 bytes leftover after parsing attributes in process `syz.4.2340'. [ 311.216437][ T13] syzkaller1: tun_net_xmit 86 [ 311.438185][T14916] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 311.507212][T14916] bond10: (slave bridge6): making interface the new active one [ 311.524877][T14916] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 312.369009][T14959] xt_CT: No such helper "pptp" [ 312.468757][T14967] FAULT_INJECTION: forcing a failure. [ 312.468757][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 312.500294][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.0.2360 Not tainted syzkaller #0 PREEMPT(full) [ 312.500320][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.500346][T14967] Call Trace: [ 312.500352][T14967] [ 312.500360][T14967] dump_stack_lvl+0xe8/0x150 [ 312.500389][T14967] should_fail_ex+0x412/0x560 [ 312.500420][T14967] should_failslab+0xa8/0x100 [ 312.500443][T14967] __kmalloc_cache_noprof+0x88/0x660 [ 312.500461][T14967] ? sctp_add_bind_addr+0x8c/0x370 [ 312.500487][T14967] sctp_add_bind_addr+0x8c/0x370 [ 312.500510][T14967] sctp_copy_local_addr_list+0x314/0x4f0 [ 312.500535][T14967] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 312.500555][T14967] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 312.500578][T14967] ? sctp_v4_is_any+0x35/0x60 [ 312.500598][T14967] ? sctp_copy_one_addr+0x93/0x360 [ 312.500621][T14967] sctp_bind_addr_copy+0xb3/0x3c0 [ 312.500642][T14967] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 312.500672][T14967] sctp_connect_new_asoc+0x2ff/0x6b0 [ 312.500699][T14967] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 312.500729][T14967] ? __local_bh_enable_ip+0xd0/0x130 [ 312.500750][T14967] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 312.500769][T14967] ? security_sctp_bind_connect+0x7e/0x2c0 [ 312.500800][T14967] sctp_sendmsg+0x1528/0x2c10 [ 312.500838][T14967] ? __pfx_sctp_sendmsg+0x10/0x10 [ 312.500864][T14967] ? aa_sk_perm+0x6d5/0x900 [ 312.500893][T14967] ? __pfx_aa_sk_perm+0x10/0x10 [ 312.500917][T14967] ? sock_rps_record_flow+0x19/0x400 [ 312.500945][T14967] ? inet_sendmsg+0x2f4/0x370 [ 312.500974][T14967] ____sys_sendmsg+0x894/0xad0 [ 312.501010][T14967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.501046][T14967] ? import_iovec+0x73/0xa0 [ 312.501080][T14967] ___sys_sendmsg+0x2a5/0x360 [ 312.501116][T14967] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.501147][T14967] ? kstrtouint+0x6e/0xe0 [ 312.501194][T14967] ? __fget_files+0x2a/0x420 [ 312.501216][T14967] ? __fget_files+0x3a0/0x420 [ 312.501250][T14967] __sys_sendmmsg+0x27c/0x4e0 [ 312.501282][T14967] ? __pfx___sys_sendmmsg+0x10/0x10 [ 312.501305][T14967] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 312.501357][T14967] ? ksys_write+0x242/0x270 [ 312.501378][T14967] ? __pfx_ksys_write+0x10/0x10 [ 312.501410][T14967] __x64_sys_sendmmsg+0xa0/0xc0 [ 312.501438][T14967] do_syscall_64+0x14d/0xf80 [ 312.501461][T14967] ? trace_irq_disable+0x3b/0x150 [ 312.501485][T14967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.501503][T14967] ? clear_bhb_loop+0x40/0x90 [ 312.501526][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.501544][T14967] RIP: 0033:0x7f457a39c799 [ 312.501562][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.501574][T14967] RSP: 002b:00007f457b1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.501591][T14967] RAX: ffffffffffffffda RBX: 00007f457a615fa0 RCX: 00007f457a39c799 [ 312.501601][T14967] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 312.501609][T14967] RBP: 00007f457b1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 312.501619][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.501630][T14967] R13: 00007f457a616038 R14: 00007f457a615fa0 R15: 00007ffd3ae976c8 [ 312.501661][T14967] [ 312.884444][T14972] netlink: 'syz.1.2361': attribute type 11 has an invalid length. [ 313.413261][T14984] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 313.463095][T14980] wg1 speed is unknown, defaulting to 1000 [ 313.890903][T15029] FAULT_INJECTION: forcing a failure. [ 313.890903][T15029] name failslab, interval 1, probability 0, space 0, times 0 [ 313.950556][T15029] CPU: 0 UID: 0 PID: 15029 Comm: syz.3.2374 Not tainted syzkaller #0 PREEMPT(full) [ 313.950583][T15029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.950594][T15029] Call Trace: [ 313.950601][T15029] [ 313.950609][T15029] dump_stack_lvl+0xe8/0x150 [ 313.950639][T15029] should_fail_ex+0x412/0x560 [ 313.950663][T15029] should_failslab+0xa8/0x100 [ 313.950686][T15029] __kmalloc_cache_noprof+0x88/0x660 [ 313.950707][T15029] ? sctp_add_bind_addr+0x8c/0x370 [ 313.950732][T15029] sctp_add_bind_addr+0x8c/0x370 [ 313.950756][T15029] sctp_copy_local_addr_list+0x314/0x4f0 [ 313.950778][T15029] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 313.950797][T15029] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 313.950822][T15029] ? sctp_v4_is_any+0x35/0x60 [ 313.950839][T15029] ? sctp_copy_one_addr+0x93/0x360 [ 313.950860][T15029] sctp_bind_addr_copy+0xb3/0x3c0 [ 313.950880][T15029] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 313.950908][T15029] sctp_connect_new_asoc+0x2ff/0x6b0 [ 313.950935][T15029] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 313.950964][T15029] ? __local_bh_enable_ip+0xd0/0x130 [ 313.950985][T15029] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 313.951004][T15029] ? security_sctp_bind_connect+0x7e/0x2c0 [ 313.951034][T15029] sctp_sendmsg+0x1528/0x2c10 [ 313.951071][T15029] ? __pfx_sctp_sendmsg+0x10/0x10 [ 313.951096][T15029] ? aa_sk_perm+0x6d5/0x900 [ 313.951123][T15029] ? __pfx_aa_sk_perm+0x10/0x10 [ 313.951145][T15029] ? sock_rps_record_flow+0x19/0x400 [ 313.951173][T15029] ? inet_sendmsg+0x2f4/0x370 [ 313.951201][T15029] ____sys_sendmsg+0x894/0xad0 [ 313.951236][T15029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.951280][T15029] ? import_iovec+0x73/0xa0 [ 313.951310][T15029] ___sys_sendmsg+0x2a5/0x360 [ 313.951342][T15029] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.951373][T15029] ? kstrtouint+0x6e/0xe0 [ 313.951420][T15029] ? __fget_files+0x2a/0x420 [ 313.951443][T15029] ? __fget_files+0x3a0/0x420 [ 313.951479][T15029] __sys_sendmmsg+0x27c/0x4e0 [ 313.951510][T15029] ? __pfx___sys_sendmmsg+0x10/0x10 [ 313.951533][T15029] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 313.951585][T15029] ? ksys_write+0x242/0x270 [ 313.951606][T15029] ? __pfx_ksys_write+0x10/0x10 [ 313.951631][T15029] __x64_sys_sendmmsg+0xa0/0xc0 [ 313.951658][T15029] do_syscall_64+0x14d/0xf80 [ 313.951681][T15029] ? trace_irq_disable+0x3b/0x150 [ 313.951706][T15029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.951723][T15029] ? clear_bhb_loop+0x40/0x90 [ 313.951746][T15029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.951764][T15029] RIP: 0033:0x7fd43eb9c799 [ 313.951781][T15029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.951796][T15029] RSP: 002b:00007fd43fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.951815][T15029] RAX: ffffffffffffffda RBX: 00007fd43ee15fa0 RCX: 00007fd43eb9c799 [ 313.951828][T15029] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 313.951840][T15029] RBP: 00007fd43fa96090 R08: 0000000000000000 R09: 0000000000000000 [ 313.951856][T15029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.951867][T15029] R13: 00007fd43ee16038 R14: 00007fd43ee15fa0 R15: 00007ffeb8be0048 [ 313.951895][T15029] [ 314.332541][T15037] netlink: 'syz.4.2377': attribute type 1 has an invalid length. [ 314.451788][T15030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.507109][T15044] Bluetooth: MGMT ver 1.23 [ 314.558036][T15030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.262760][T15056] __nla_validate_parse: 5 callbacks suppressed [ 315.262781][T15056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2383'. [ 315.335474][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2384'. [ 315.373991][T15057] xt_CT: No such helper "pptp" [ 315.449890][T15069] wg1 speed is unknown, defaulting to 1000 [ 315.552429][T15078] FAULT_INJECTION: forcing a failure. [ 315.552429][T15078] name failslab, interval 1, probability 0, space 0, times 0 [ 315.590462][T15078] CPU: 1 UID: 0 PID: 15078 Comm: syz.0.2388 Not tainted syzkaller #0 PREEMPT(full) [ 315.590487][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.590498][T15078] Call Trace: [ 315.590506][T15078] [ 315.590513][T15078] dump_stack_lvl+0xe8/0x150 [ 315.590543][T15078] should_fail_ex+0x412/0x560 [ 315.590568][T15078] should_failslab+0xa8/0x100 [ 315.590592][T15078] __kmalloc_cache_noprof+0x88/0x660 [ 315.590611][T15078] ? sctp_add_bind_addr+0x8c/0x370 [ 315.590638][T15078] sctp_add_bind_addr+0x8c/0x370 [ 315.590662][T15078] sctp_copy_local_addr_list+0x314/0x4f0 [ 315.590686][T15078] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 315.590705][T15078] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 315.590731][T15078] ? sctp_v4_is_any+0x35/0x60 [ 315.590751][T15078] ? sctp_copy_one_addr+0x93/0x360 [ 315.590785][T15078] sctp_bind_addr_copy+0xb3/0x3c0 [ 315.590807][T15078] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 315.590838][T15078] sctp_connect_new_asoc+0x2ff/0x6b0 [ 315.590865][T15078] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 315.590897][T15078] ? __local_bh_enable_ip+0xd0/0x130 [ 315.590919][T15078] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 315.590938][T15078] ? security_sctp_bind_connect+0x7e/0x2c0 [ 315.590969][T15078] sctp_sendmsg+0x1528/0x2c10 [ 315.591008][T15078] ? __pfx_sctp_sendmsg+0x10/0x10 [ 315.591035][T15078] ? aa_sk_perm+0x6d5/0x900 [ 315.591063][T15078] ? __pfx_aa_sk_perm+0x10/0x10 [ 315.591086][T15078] ? sock_rps_record_flow+0x19/0x400 [ 315.591113][T15078] ? inet_sendmsg+0x2f4/0x370 [ 315.591140][T15078] ____sys_sendmsg+0x894/0xad0 [ 315.591178][T15078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.591208][T15078] ? import_iovec+0x73/0xa0 [ 315.591234][T15078] ___sys_sendmsg+0x2a5/0x360 [ 315.591264][T15078] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.591293][T15078] ? kstrtouint+0x6e/0xe0 [ 315.591339][T15078] ? __fget_files+0x2a/0x420 [ 315.591363][T15078] ? __fget_files+0x3a0/0x420 [ 315.591395][T15078] __sys_sendmmsg+0x27c/0x4e0 [ 315.591425][T15078] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.591447][T15078] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 315.591498][T15078] ? ksys_write+0x242/0x270 [ 315.591523][T15078] ? __pfx_ksys_write+0x10/0x10 [ 315.591544][T15078] __x64_sys_sendmmsg+0xa0/0xc0 [ 315.591571][T15078] do_syscall_64+0x14d/0xf80 [ 315.591594][T15078] ? trace_irq_disable+0x3b/0x150 [ 315.591618][T15078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.591635][T15078] ? clear_bhb_loop+0x40/0x90 [ 315.591656][T15078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.591674][T15078] RIP: 0033:0x7f457a39c799 [ 315.591692][T15078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.591707][T15078] RSP: 002b:00007f457b1ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.591726][T15078] RAX: ffffffffffffffda RBX: 00007f457a615fa0 RCX: 00007f457a39c799 [ 315.591738][T15078] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 315.591747][T15078] RBP: 00007f457b1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 315.591765][T15078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.591774][T15078] R13: 00007f457a616038 R14: 00007f457a615fa0 R15: 00007ffd3ae976c8 [ 315.591803][T15078] [ 315.843929][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 315.923660][ C0] lec:lec_tx_timeout: lec0 [ 315.928736][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 316.019882][T15073] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2386'. [ 316.040077][T15067] wg1 speed is unknown, defaulting to 1000 [ 316.192732][T15096] xt_hashlimit: size too large, truncated to 1048576 [ 316.374039][T15098] netlink: 'syz.3.2392': attribute type 6 has an invalid length. [ 316.394157][T15098] netlink: 'syz.3.2392': attribute type 7 has an invalid length. [ 316.403088][T15098] netlink: 'syz.3.2392': attribute type 8 has an invalid length. [ 316.424193][T15098] netlink: 'syz.3.2392': attribute type 15 has an invalid length. [ 316.461050][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 316.486941][T15103] Cannot find del_set index 1 as target [ 316.548629][T15096] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.576279][T15096] bridge_slave_0 (unregistering): left allmulticast mode [ 316.583477][T15096] bridge_slave_0 (unregistering): left promiscuous mode [ 316.592855][T15096] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.738388][T15111] tipc: Enabled bearer , priority 0 [ 316.753741][T15111] syzkaller0: entered promiscuous mode [ 316.761904][T15111] syzkaller0: entered allmulticast mode [ 316.771640][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 316.786664][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 316.858885][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 316.877518][T15111] tipc: Resetting bearer [ 316.908526][T15109] tipc: Resetting bearer [ 316.950417][T15109] tipc: Disabling bearer [ 316.962251][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.000207][T15119] netlink: 'syz.4.2399': attribute type 3 has an invalid length. [ 317.019077][T15119] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2399'. [ 317.166937][T15133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2403'. [ 317.225882][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2405'. [ 317.275464][T15140] openvswitch: netlink: IP tunnel dst address not specified [ 317.398703][T15147] netlink: 'syz.0.2409': attribute type 25 has an invalid length. [ 317.422715][T15149] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.511794][T15149] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.649689][T15149] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.757835][T15162] wg1 speed is unknown, defaulting to 1000 [ 317.797590][T15149] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.860640][T15158] wg1 speed is unknown, defaulting to 1000 [ 318.072907][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.207420][ T6974] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.239522][ T6974] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.289953][ T997] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.988702][T15211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.290732][T15236] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 319.314140][T15229] xt_CT: No such helper "snmp_trap" [ 319.424409][T15230] wg1 speed is unknown, defaulting to 1000 [ 319.465581][T15237] wg1 speed is unknown, defaulting to 1000 [ 319.527056][T15243] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20002 [ 319.598443][T15241] wg1 speed is unknown, defaulting to 1000 [ 319.761350][T15253] wg1 speed is unknown, defaulting to 1000 [ 320.163734][T15268] wg1 speed is unknown, defaulting to 1000 [ 320.455598][T15275] bridge_slave_1: left allmulticast mode [ 320.461302][T15275] bridge_slave_1: left promiscuous mode [ 320.467931][T15275] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.486172][T15275] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 320.941051][T15301] __nla_validate_parse: 10 callbacks suppressed [ 320.941074][T15301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2447'. [ 320.945575][T15297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2446'. [ 321.219459][T15309] wg1 speed is unknown, defaulting to 1000 [ 321.281068][T15301] wg1 speed is unknown, defaulting to 1000 [ 321.316325][T15323] x_tables: duplicate underflow at hook 1 [ 321.331232][T15322] x_tables: duplicate underflow at hook 1 [ 321.589293][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 321.629701][T15339] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 321.629860][T15340] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 321.638011][T15339] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2456'. [ 321.646958][T15340] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2456'. [ 321.673861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 321.681888][ C0] lec:lec_tx_timeout: lec0 [ 321.687155][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.768815][T15331] hsr_slave_0: left promiscuous mode [ 321.797258][T15331] hsr_slave_1: left promiscuous mode [ 321.970927][T15353] nbd: must specify a size in bytes for the device [ 322.102033][T15359] wg1 speed is unknown, defaulting to 1000 [ 322.286554][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2465'. [ 322.423777][T15385] netlink: 'syz.4.2466': attribute type 2 has an invalid length. [ 322.426902][T15369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.444370][T15369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.459069][T15369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 322.642896][T15369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.655184][T15369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.666873][T15369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 322.700094][T15388] wg1 speed is unknown, defaulting to 1000 [ 322.708577][T15377] wg1 speed is unknown, defaulting to 1000 [ 322.789234][T15395] netlink: 'syz.4.2469': attribute type 2 has an invalid length. [ 322.801007][T15369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.814039][T15369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.825751][T15369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 322.979283][T15369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.989836][T15369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.001497][T15369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 323.208280][ T997] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.227946][ T997] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 323.246274][ T997] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.295813][ T997] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.306578][ T997] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 323.315106][ T997] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.412562][ T997] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.428468][ T997] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 323.446676][ T997] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.487037][ T997] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.518057][ T997] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 323.554116][ T997] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.684530][T15442] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 323.692677][T15442] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2480'. [ 323.770533][T15453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2484'. [ 323.988038][T15453] wg1 speed is unknown, defaulting to 1000 [ 324.059912][T15463] wg1 speed is unknown, defaulting to 1000 [ 324.265595][T15481] netlink: 'syz.3.2490': attribute type 2 has an invalid length. [ 324.294925][T15481] netlink: 1696 bytes leftover after parsing attributes in process `syz.3.2490'. [ 324.915744][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2492'. [ 325.127084][T15495] wg1 speed is unknown, defaulting to 1000 [ 325.374407][T15507] netlink: 'syz.4.2497': attribute type 1 has an invalid length. [ 325.432223][T15507] bond12: entered promiscuous mode [ 325.438574][T15507] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.473590][T15507] 8021q: adding VLAN 0 to HW filter on device bond13 [ 325.483364][T15507] bond12: (slave bond13): making interface the new active one [ 325.491613][T15507] bond13: entered promiscuous mode [ 325.498004][T15507] bond12: (slave bond13): Enslaving as an active interface with an up link [ 325.516125][T15517] nbd: socks must be embedded in a SOCK_ITEM attr [ 325.786437][T15527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.945470][T15533] syzkaller0: entered promiscuous mode [ 325.951255][T15533] syzkaller0: entered allmulticast mode [ 325.959460][T15536] __nla_validate_parse: 3 callbacks suppressed [ 325.959478][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2507'. [ 325.977472][T15533] TC_ACT_REPEAT abuse ? [ 326.041923][T15539] bond7: entered allmulticast mode [ 326.047710][T15539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 326.055250][T15534] wg1 speed is unknown, defaulting to 1000 [ 326.068325][T15539] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2508'. [ 326.189388][T15549] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2509'. [ 326.209559][T15530] wg1 speed is unknown, defaulting to 1000 [ 326.268455][T15549] bond11 (unregistering): Released all slaves [ 326.407407][T15557] pimreg: entered allmulticast mode [ 326.561242][T15561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.723949][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 326.732064][ C0] lec:lec_tx_timeout: lec0 [ 326.737697][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 326.776368][T15574] netlink: 'syz.3.2516': attribute type 10 has an invalid length. [ 326.785334][T15574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2516'. [ 326.795788][T15574] dummy0: entered promiscuous mode [ 326.801375][T15574] bridge0: port 1(dummy0) entered blocking state [ 326.808077][T15574] bridge0: port 1(dummy0) entered disabled state [ 326.818253][T15574] dummy0: entered allmulticast mode [ 326.826024][T15574] bridge0: port 1(dummy0) entered blocking state [ 326.832439][T15574] bridge0: port 1(dummy0) entered forwarding state [ 327.016003][T15577] netlink: 'syz.2.2517': attribute type 3 has an invalid length. [ 327.193148][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'. [ 327.352002][T15593] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2521'. [ 327.396425][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 327.590376][T15598] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2523'. [ 327.613943][T15592] infiniband syz2: set down [ 327.618934][T15592] infiniband syz2: added syzkaller0 [ 327.691123][T15592] RDS/IB: syz2: added [ 327.713131][T15592] smc: adding ib device syz2 with port count 1 [ 327.720476][T15592] smc: ib device syz2 port 1 has no pnetid [ 327.782408][T15606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.018132][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2528'. [ 328.088283][T15615] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2529'. [ 328.097833][T15615] netlink: 'syz.3.2529': attribute type 4 has an invalid length. [ 328.202679][T15617] syz_tun: entered allmulticast mode [ 328.698965][T15638] syzkaller0: entered promiscuous mode [ 328.704597][T15638] syzkaller0: entered allmulticast mode [ 328.980251][T15652] delete_channel: no stack [ 329.071820][T15656] xt_ecn: cannot match TCP bits for non-tcp packets [ 329.125754][T15656] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.163088][T15656] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 329.186378][T15656] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.309645][ T6177] smc: removing ib device syz2 [ 330.093698][T15664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.668550][T15656] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.678511][T15656] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 330.688545][T15656] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.709166][ T6974] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.725398][ T6974] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 330.734305][ T6974] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.754038][ T6974] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.762434][ T6974] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 330.775026][ T6974] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.221107][T15709] syzkaller0: entered promiscuous mode [ 331.226737][T15709] syzkaller0: entered allmulticast mode [ 331.246077][T15714] pim6reg: entered allmulticast mode [ 331.261430][T15723] pim6reg: left allmulticast mode [ 331.550595][T15738] __nla_validate_parse: 2 callbacks suppressed [ 331.550616][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 331.588017][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 331.597685][T15738] netlink: 'syz.1.2561': attribute type 20 has an invalid length. [ 331.746212][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 331.754301][ C0] lec:lec_tx_timeout: lec0 [ 331.759094][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 333.318478][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 333.402999][T15751] batadv_slave_0: entered promiscuous mode [ 333.417511][T15750] batadv_slave_0: left promiscuous mode [ 333.441745][T15754] wg1 speed is unknown, defaulting to 1000 [ 333.473771][T15756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2566'. [ 333.523197][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2568'. [ 333.602991][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 334.034102][T15783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2572'. [ 334.756736][T15813] sctp: [Deprecated]: syz.3.2579 (pid 15813) Use of int in maxseg socket option. [ 334.756736][T15813] Use struct sctp_assoc_value instead [ 334.846799][T15820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2583'. [ 334.874928][T15823] netlink: 'syz.2.2582': attribute type 1 has an invalid length. [ 334.909277][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2581'. [ 335.036140][T15830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2585'. [ 335.587351][T15865] syzkaller1: entered promiscuous mode [ 335.593079][T15865] syzkaller1: entered allmulticast mode [ 335.804231][T15877] batadv_slave_1: entered promiscuous mode [ 336.075817][T15903] netlink: 'syz.0.2602': attribute type 4 has an invalid length. [ 336.308815][T15916] nbd: must specify a device to reconfigure [ 336.439183][T15924] syzkaller0: entered promiscuous mode [ 336.445577][T15924] syzkaller0: entered allmulticast mode [ 336.631229][T15876] batadv_slave_1: left promiscuous mode [ 336.752367][T15942] __nla_validate_parse: 9 callbacks suppressed [ 336.752385][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 336.769789][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 336.773889][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 336.786755][ C0] lec:lec_tx_timeout: lec0 [ 336.790697][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 336.791427][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 336.801075][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 336.815715][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 336.897467][T15951] syzkaller1: entered promiscuous mode [ 336.903234][T15951] syzkaller1: entered allmulticast mode [ 336.905029][T15949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2618'. [ 337.007343][T15954] netlink: 'syz.0.2621': attribute type 3 has an invalid length. [ 337.016154][T15954] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2621'. [ 337.072524][T15962] netlink: 'syz.2.2623': attribute type 1 has an invalid length. [ 337.176432][T15965] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2624'. [ 337.200725][T15968] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2624'. [ 337.217381][T15969] gretap2: entered allmulticast mode [ 337.234232][T15969] bond8: (slave gretap2): making interface the new active one [ 337.242802][T15969] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 337.282755][T15975] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2625'. [ 337.395632][T15978] bond15 (unregistering): Released all slaves [ 337.453381][T15981] netlink: 'syz.3.2628': attribute type 3 has an invalid length. [ 337.623263][T15994] geneve5: entered promiscuous mode [ 337.628797][T15994] geneve5: entered allmulticast mode [ 337.874781][T16009] ..0{X: left allmulticast mode [ 338.017126][T16009] bridge0: port 3(syz_tun) entered blocking state [ 338.023720][T16009] bridge0: port 3(syz_tun) entered forwarding state [ 338.036985][T16009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.047749][T16009] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.057163][T16009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.104840][T14875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.129719][T14875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.458981][T16036] syzkaller0: entered promiscuous mode [ 338.464833][T14876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.484912][T16036] syzkaller0: entered allmulticast mode [ 338.674222][ T997] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.718199][T16044] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 338.795001][T14876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.825317][ T997] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.929540][T16047] wg1 speed is unknown, defaulting to 1000 [ 339.170202][T16045] wg1 speed is unknown, defaulting to 1000 [ 339.174346][T16058] netlink: 'syz.4.2645': attribute type 1 has an invalid length. [ 339.203230][T16058] netlink: 'syz.4.2645': attribute type 2 has an invalid length. [ 339.223385][T16059] netlink: 'syz.4.2645': attribute type 1 has an invalid length. [ 339.259790][T16059] netlink: 'syz.4.2645': attribute type 2 has an invalid length. [ 339.455622][T16065] syzkaller0: entered promiscuous mode [ 339.461152][T16065] syzkaller0: entered allmulticast mode [ 339.483221][T16066] vlan3: entered promiscuous mode [ 339.494027][T16066] geneve1: entered promiscuous mode [ 339.504447][T16066] vlan3: entered allmulticast mode [ 339.509606][T16066] geneve1: entered allmulticast mode [ 339.754354][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 339.762841][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 340.014305][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 340.048409][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 340.100327][T16092] ipvlan0: entered promiscuous mode [ 340.107260][T16092] ipvlan0: left promiscuous mode [ 340.128943][T16100] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 340.165137][T16093] ipvlan0: entered promiscuous mode [ 340.171370][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.185263][T16093] ipvlan0: left promiscuous mode [ 340.389332][T16106] batman_adv: batadv0: Adding interface: ip6gretap2 [ 340.424068][T16106] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.453757][T16106] batman_adv: batadv0: Interface activated: ip6gretap2 [ 340.683659][T16125] netlink: 'syz.1.2662': attribute type 1 has an invalid length. [ 340.694854][T16125] netlink: 'syz.1.2662': attribute type 1 has an invalid length. [ 340.702722][T16125] netlink: 'syz.1.2662': attribute type 8 has an invalid length. [ 340.727261][T16121] x_tables: duplicate underflow at hook 1 [ 340.871810][T16139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.967956][T16146] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 340.990188][T16147] set match dimension is over the limit! [ 341.021876][T16147] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 341.030586][T16147] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 341.039307][T16147] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 341.048916][T16147] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 341.057064][T16147] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 341.074356][T16147] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 341.094104][T16147] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 341.130279][T16152] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 341.130557][T16151] IPVS: stopping backup sync thread 16152 ... [ 341.156034][T16147] tap0: tun_chr_ioctl cmd 2147767506 [ 341.187169][T16156] bond15: option arp_interval: invalid value (18446744073709551615) [ 341.195492][T16156] bond15: option arp_interval: allowed values 0 - 2147483647 [ 341.205707][T16156] bond15 (unregistering): Released all slaves [ 341.814098][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 341.822186][ C0] lec:lec_tx_timeout: lec0 [ 341.826958][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 341.893790][T16199] wg1 speed is unknown, defaulting to 1000 [ 342.084261][T16208] IPVS: Error connecting to the multicast addr [ 342.124951][T16210] IPVS: Error connecting to the multicast addr [ 342.305731][T16227] __nla_validate_parse: 23 callbacks suppressed [ 342.305746][T16227] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2695'. [ 342.431776][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2696'. [ 342.437299][T16231] syzkaller0: entered promiscuous mode [ 342.447290][T16231] syzkaller0: entered allmulticast mode [ 342.647010][T16240] bridge0: port 3(gretap0) entered blocking state [ 342.653633][T16240] bridge0: port 3(gretap0) entered disabled state [ 342.660804][T16240] gretap0: entered allmulticast mode [ 342.668894][T16240] gretap0: entered promiscuous mode [ 342.698587][T16248] bond0: entered promiscuous mode [ 342.704394][T16248] bond_slave_0: entered promiscuous mode [ 342.725175][T16248] bond_slave_1: entered promiscuous mode [ 342.756809][T16248] batadv0: entered promiscuous mode [ 342.763257][T16248] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 342.781714][T16248] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 342.817810][T16248] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 342.828956][T16248] bond0: left promiscuous mode [ 342.834377][T16248] bond_slave_0: left promiscuous mode [ 342.840224][T16248] bond_slave_1: left promiscuous mode [ 342.849518][T16248] batadv0: left promiscuous mode [ 343.914108][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 343.914128][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.394119][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 345.052757][T16265] syzkaller0: entered promiscuous mode [ 345.059317][T16265] syzkaller0: entered allmulticast mode [ 345.250898][T16286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.349950][T16302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2711'. [ 345.576229][T16308] wg1 speed is unknown, defaulting to 1000 [ 345.747057][T16327] validate_nla: 36 callbacks suppressed [ 345.747078][T16327] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 345.762303][T16327] netlink: 'syz.0.2717': attribute type 2 has an invalid length. [ 345.874170][T16346] syzkaller0: entered promiscuous mode [ 345.880824][T16342] wg1 speed is unknown, defaulting to 1000 [ 345.885465][T16346] syzkaller0: entered allmulticast mode [ 346.188439][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2725'. [ 346.266285][T16356] wg1 speed is unknown, defaulting to 1000 [ 346.379183][T16368] netlink: 'syz.2.2727': attribute type 21 has an invalid length. [ 346.408115][T16368] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2727'. [ 346.505178][T16372] netlink: 'syz.0.2728': attribute type 317 has an invalid length. [ 346.713561][T16378] bond7: option primary_reselect: invalid value (4) [ 346.722304][T16378] bond7 (unregistering): Released all slaves [ 346.780046][T16385] xt_TCPMSS: Only works on TCP SYN packets [ 346.833904][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 346.841939][ C0] lec:lec_tx_timeout: lec0 [ 346.848141][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 347.166661][T16394] wg1 speed is unknown, defaulting to 1000 [ 347.283704][T16401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2734'. [ 347.499994][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 347.522600][T16405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2736'. [ 347.567253][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.567388][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 347.584570][T16405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2736'. [ 347.603710][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.650355][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.683199][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 347.704255][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.910986][T16430] FAULT_INJECTION: forcing a failure. [ 347.910986][T16430] name failslab, interval 1, probability 0, space 0, times 0 [ 347.934037][T16430] CPU: 1 UID: 0 PID: 16430 Comm: syz.4.2745 Not tainted syzkaller #0 PREEMPT(full) [ 347.934063][T16430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.934073][T16430] Call Trace: [ 347.934081][T16430] [ 347.934088][T16430] dump_stack_lvl+0xe8/0x150 [ 347.934119][T16430] should_fail_ex+0x412/0x560 [ 347.934144][T16430] should_failslab+0xa8/0x100 [ 347.934167][T16430] __kmalloc_cache_noprof+0x88/0x660 [ 347.934187][T16430] ? sctp_add_bind_addr+0x8c/0x370 [ 347.934211][T16430] sctp_add_bind_addr+0x8c/0x370 [ 347.934236][T16430] sctp_copy_local_addr_list+0x314/0x4f0 [ 347.934259][T16430] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 347.934280][T16430] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 347.934305][T16430] ? sctp_v4_is_any+0x35/0x60 [ 347.934324][T16430] ? sctp_copy_one_addr+0x93/0x360 [ 347.934345][T16430] sctp_bind_addr_copy+0xb3/0x3c0 [ 347.934366][T16430] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 347.934397][T16430] sctp_connect_new_asoc+0x2ff/0x6b0 [ 347.934424][T16430] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 347.934454][T16430] ? __local_bh_enable_ip+0xd0/0x130 [ 347.934483][T16430] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 347.934503][T16430] ? security_sctp_bind_connect+0x7e/0x2c0 [ 347.934534][T16430] sctp_sendmsg+0x1528/0x2c10 [ 347.934576][T16430] ? __pfx_sctp_sendmsg+0x10/0x10 [ 347.934602][T16430] ? aa_sk_perm+0x6d5/0x900 [ 347.934631][T16430] ? __pfx_aa_sk_perm+0x10/0x10 [ 347.934654][T16430] ? sock_rps_record_flow+0x19/0x400 [ 347.934682][T16430] ? inet_sendmsg+0x2f4/0x370 [ 347.934710][T16430] ____sys_sendmsg+0x894/0xad0 [ 347.934745][T16430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.934780][T16430] ? import_iovec+0x73/0xa0 [ 347.934808][T16430] ___sys_sendmsg+0x2a5/0x360 [ 347.934840][T16430] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.934870][T16430] ? kstrtouint+0x6e/0xe0 [ 347.934917][T16430] ? __fget_files+0x2a/0x420 [ 347.934941][T16430] ? __fget_files+0x3a0/0x420 [ 347.934973][T16430] __sys_sendmmsg+0x27c/0x4e0 [ 347.935009][T16430] ? __pfx___sys_sendmmsg+0x10/0x10 [ 347.935032][T16430] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 347.935084][T16430] ? ksys_write+0x242/0x270 [ 347.935105][T16430] ? __pfx_ksys_write+0x10/0x10 [ 347.935130][T16430] __x64_sys_sendmmsg+0xa0/0xc0 [ 347.935158][T16430] do_syscall_64+0x14d/0xf80 [ 347.935181][T16430] ? trace_irq_disable+0x3b/0x150 [ 347.935205][T16430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.935222][T16430] ? clear_bhb_loop+0x40/0x90 [ 347.935244][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.935260][T16430] RIP: 0033:0x7f7e4f19c799 [ 347.935276][T16430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.935290][T16430] RSP: 002b:00007f7e4ffea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 347.935308][T16430] RAX: ffffffffffffffda RBX: 00007f7e4f415fa0 RCX: 00007f7e4f19c799 [ 347.935321][T16430] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 347.935332][T16430] RBP: 00007f7e4ffea090 R08: 0000000000000000 R09: 0000000000000000 [ 347.935343][T16430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.935353][T16430] R13: 00007f7e4f416038 R14: 00007f7e4f415fa0 R15: 00007ffe3a096848 [ 347.935383][T16430] [ 348.297355][T16436] netlink: 'syz.4.2748': attribute type 12 has an invalid length. [ 348.317096][T16434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2747'. [ 348.328728][T16436] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004 [ 348.379254][T16432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2743'. [ 348.606180][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2754'. [ 348.626113][T16461] IPv4: Oversized IP packet from 127.202.26.0 [ 348.640398][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2752'. [ 348.694683][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2754'. [ 348.864979][T16473] gre0: entered promiscuous mode [ 349.208234][T16501] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 349.313715][T16501] bond15: entered promiscuous mode [ 349.326112][T16517] sctp: [Deprecated]: syz.0.2769 (pid 16517) Use of int in maxseg socket option. [ 349.326112][T16517] Use struct sctp_assoc_value instead [ 349.341025][T16501] 8021q: adding VLAN 0 to HW filter on device bond15 [ 349.353608][T16519] openvswitch: netlink: IP tunnel dst address not specified [ 349.503292][T16522] wg1 speed is unknown, defaulting to 1000 [ 349.736491][T16541] tipc: Enabled bearer , priority 0 [ 349.753486][T16541] syzkaller0: entered promiscuous mode [ 349.763354][T16541] syzkaller0: entered allmulticast mode [ 349.830553][T16540] tipc: Resetting bearer [ 349.861031][T16540] tipc: Disabling bearer [ 349.978366][ T51] block nbd0: Receive control failed (result -107) [ 349.988555][T16547] block nbd0: reconnected socket [ 350.004636][T16547] block nbd0: reconnected socket [ 350.004658][ T51] block nbd0: Receive control failed (result -32) [ 350.014015][T16547] netem: incorrect gi model size [ 350.021472][T16547] netem: change failed [ 350.467660][T16572] bond3: option lacp_active: invalid value (8) [ 350.496661][T16572] bond3 (unregistering): Released all slaves [ 350.566691][T16579] xt_hashlimit: size too large, truncated to 1048576 [ 350.665449][T16587] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 350.898854][T16597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.910153][T16597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.995218][T16599] x_tables: duplicate underflow at hook 2 [ 351.262788][T16626] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 351.471994][T16647] syzkaller0: entered promiscuous mode [ 351.481069][T16647] syzkaller0: entered allmulticast mode [ 351.597955][T16653] openvswitch: netlink: IP tunnel dst address not specified [ 351.643591][T16654] geneve3: entered promiscuous mode [ 351.649158][T16654] geneve3: entered allmulticast mode [ 351.675689][T16655] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 351.779887][T16658] netlink: 'syz.1.2805': attribute type 10 has an invalid length. [ 351.807093][T16658] bond0: (slave wlan1): Opening slave failed [ 351.826369][T16661] syzkaller1: entered promiscuous mode [ 351.863890][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 351.864044][T16661] syzkaller1: entered allmulticast mode [ 351.872004][ C0] lec:lec_tx_timeout: lec0 [ 351.872147][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 351.929592][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.089904][T16677] bridge8: port 1(ip6gretap2) entered blocking state [ 352.096841][T16677] bridge8: port 1(ip6gretap2) entered disabled state [ 352.103694][T16677] ip6gretap2: entered allmulticast mode [ 352.111726][T16677] ip6gretap2: entered promiscuous mode [ 352.160910][T16677] bridge8: port 2(veth9) entered blocking state [ 352.167747][T16677] bridge8: port 2(veth9) entered disabled state [ 352.174632][T16677] veth9: entered allmulticast mode [ 352.182601][T16677] veth9: entered promiscuous mode [ 352.188850][T16677] bridge8: port 2(veth9) entered blocking state [ 352.195772][T16677] bridge8: port 2(veth9) entered forwarding state [ 352.418472][T16704] netlink: 'syz.1.2817': attribute type 11 has an invalid length. [ 352.496840][T10526] bridge8: port 2(veth9) entered disabled state [ 352.510076][T16704] __nla_validate_parse: 14 callbacks suppressed [ 352.510096][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'. [ 352.612728][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2822'. [ 352.621325][T16718] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2821'. [ 352.655322][T16691] wg1 speed is unknown, defaulting to 1000 [ 352.664853][T16721] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2822'. [ 352.665537][T16715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2821'. [ 352.733876][T16715] x_tables: duplicate underflow at hook 2 [ 352.795184][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 352.803163][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 352.853094][T16726] IPv6: sit2: Disabled Multicast RS [ 352.981870][T16729] netlink: 'syz.2.2826': attribute type 39 has an invalid length. [ 353.033777][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2826'. [ 353.147201][T16753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'. [ 353.169493][T16731] wg1 speed is unknown, defaulting to 1000 [ 353.281969][T16755] netlink: 'syz.4.2831': attribute type 2 has an invalid length. [ 353.327037][T16755] !9: entered promiscuous mode [ 353.478787][T16771] xt_ecn: cannot match TCP bits for non-tcp packets [ 353.521668][T16768] gre0: Master is either lo or non-ether device [ 353.848190][T16793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.866922][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 353.882743][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 354.048167][T16810] netlink: 'syz.3.2844': attribute type 1 has an invalid length. [ 354.060593][T16810] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2844'. [ 354.072050][T16810] netlink: 'syz.3.2844': attribute type 1 has an invalid length. [ 354.085520][T16810] netlink: 'syz.3.2844': attribute type 8 has an invalid length. [ 354.160008][T16816] netlink: 'syz.3.2848': attribute type 9 has an invalid length. [ 354.213106][T16821] netem: unknown loss type 0 [ 354.217923][T16821] netem: change failed [ 354.436307][T16832] tc_dump_action: action bad kind [ 357.673909][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 357.682001][ C0] lec:lec_tx_timeout: lec0 [ 357.686707][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 362.714016][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 362.722059][ C0] lec:lec_tx_timeout: lec0 [ 362.726744][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 367.733950][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 367.741969][ C0] lec:lec_tx_timeout: lec0 [ 367.746574][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 370.074130][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.082490][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 372.753966][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 372.762005][ C0] lec:lec_tx_timeout: lec0 [ 372.766731][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 377.773939][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 377.781977][ C0] lec:lec_tx_timeout: lec0 [ 377.786726][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 382.793972][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 382.802015][ C0] lec:lec_tx_timeout: lec0 [ 382.806614][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 387.814078][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 387.822099][ C0] lec:lec_tx_timeout: lec0 [ 387.826774][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.834141][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 392.842157][ C0] lec:lec_tx_timeout: lec0 [ 392.846785][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 397.853928][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 397.861942][ C0] lec:lec_tx_timeout: lec0 [ 397.866598][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 400.275640][T16852] __nla_validate_parse: 3 callbacks suppressed [ 400.275658][T16852] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2860'. [ 400.445199][T16874] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2865'. [ 400.479061][T16877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2867'. [ 400.849437][T16910] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 400.895674][T16913] netlink: 496 bytes leftover after parsing attributes in process `syz.2.2880'. [ 400.908502][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 400.931462][T16915] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address [ 400.947294][T16915] bond16: (slave vxcan3): Error -95 calling set_mac_address [ 400.983257][T16914] vlan4: entered promiscuous mode [ 401.015627][T16910] bond16: (slave bridge8): Enslaving as an active interface with a down link [ 401.237350][T16935] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2886'. [ 401.259905][T16934] bridge0: port 1(batadv2) entered blocking state [ 401.267215][T16934] bridge0: port 1(batadv2) entered disabled state [ 401.285749][T16934] batadv2: entered allmulticast mode [ 401.293141][T16934] batadv2: entered promiscuous mode [ 401.316949][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 401.334127][T16935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2886'. [ 401.354038][T16935] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2886'. [ 401.393891][T16935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2886'. [ 401.569357][T16950] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.757409][T10526] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 401.767218][T10526] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 401.905241][T16965] batadv2: left allmulticast mode [ 401.910517][T16965] batadv2: left promiscuous mode [ 401.925939][T16965] bridge0: port 1(batadv2) entered disabled state [ 401.960449][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.543256][T17001] bridge9: entered allmulticast mode [ 402.638647][T17004] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 402.648413][T17007] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 402.665733][T17006] wg1 speed is unknown, defaulting to 1000 [ 402.714100][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 402.740577][T17002] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 402.744129][T17012] pim6reg1: entered promiscuous mode [ 402.752497][T17002] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 402.758339][T17012] pim6reg1: entered allmulticast mode [ 402.766327][T17002] CPU: 0 UID: 0 PID: 17002 Comm: syz.0.2903 Not tainted syzkaller #0 PREEMPT(full) [ 402.766352][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.766371][T17002] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 402.766556][T17002] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 cd e8 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 a5 e8 57 f7 4d 8b 75 00 4d 8d a7 30 [ 402.766571][T17002] RSP: 0018:ffffc9000c9efbc8 EFLAGS: 00010046 [ 402.766588][T17002] RAX: 0000000000000000 RBX: ffff888058b7c800 RCX: dffffc0000000000 [ 402.766600][T17002] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffff888058b7c800 [ 402.766610][T17002] RBP: ffff88806e696000 R08: ffffffff8ef1bef3 R09: 1ffffffff1de37de [ 402.766620][T17002] R10: dffffc0000000000 R11: fffffbfff1de37df R12: ffff8880354f5650 [ 402.766631][T17002] R13: 0000000000000000 R14: ffff888058b7c830 R15: ffff8880354f5000 [ 402.766643][T17002] FS: 0000555584521500(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 402.766657][T17002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.766670][T17002] CR2: 00007f0490ac9ff8 CR3: 0000000080116000 CR4: 00000000003526f0 [ 402.766684][T17002] Call Trace: [ 402.766691][T17002] [ 402.766701][T17002] lec_push+0x3cb/0x19d0 [ 402.766725][T17002] ? __local_bh_enable_ip+0xd0/0x130 [ 402.901645][T17002] ? __pfx_lec_push+0x10/0x10 [ 402.906320][T17002] vcc_release+0x15f/0x580 [ 402.910808][T17002] sock_close+0xc3/0x240 [ 402.915097][T17002] ? __pfx_sock_close+0x10/0x10 [ 402.919932][T17002] __fput+0x44f/0xa70 [ 402.923939][T17002] task_work_run+0x1d9/0x270 [ 402.928510][T17002] ? __pfx_task_work_run+0x10/0x10 [ 402.933605][T17002] exit_to_user_mode_loop+0xed/0x480 [ 402.938908][T17002] ? rcu_is_watching+0x15/0xb0 [ 402.943692][T17002] do_syscall_64+0x32d/0xf80 [ 402.948372][T17002] ? trace_irq_disable+0x3b/0x150 [ 402.953413][T17002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.959564][T17002] ? clear_bhb_loop+0x40/0x90 [ 402.964230][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.970107][T17002] RIP: 0033:0x7f457a39c799 [ 402.974523][T17002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.994113][T17002] RSP: 002b:00007ffd3ae97828 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 403.002519][T17002] RAX: 0000000000000000 RBX: 00007f457a617da0 RCX: 00007f457a39c799 [ 403.010479][T17002] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 403.018433][T17002] RBP: 00007f457a617da0 R08: 00007f457a616128 R09: 0000000000000000 [ 403.026389][T17002] R10: 000000000003fcec R11: 0000000000000246 R12: 000000000006276a [ 403.034346][T17002] R13: 00007f457a615fac R14: 00000000000624fa R15: 00007f457a615fa0 [ 403.042398][T17002] [ 403.045416][T17002] Modules linked in: [ 403.049302][T17002] ---[ end trace 0000000000000000 ]--- [ 403.054740][T17002] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 403.060451][T17002] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 cd e8 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 a5 e8 57 f7 4d 8b 75 00 4d 8d a7 30 [ 403.080216][T17002] RSP: 0018:ffffc9000c9efbc8 EFLAGS: 00010046 [ 403.086268][T17002] RAX: 0000000000000000 RBX: ffff888058b7c800 RCX: dffffc0000000000 [ 403.094257][T17002] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffff888058b7c800 [ 403.102215][T17002] RBP: ffff88806e696000 R08: ffffffff8ef1bef3 R09: 1ffffffff1de37de [ 403.110175][T17002] R10: dffffc0000000000 R11: fffffbfff1de37df R12: ffff8880354f5650 [ 403.118137][T17002] R13: 0000000000000000 R14: ffff888058b7c830 R15: ffff8880354f5000 [ 403.126098][T17002] FS: 0000555584521500(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 403.135013][T17002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.141579][T17002] CR2: 00007f0490ac9ff8 CR3: 0000000080116000 CR4: 00000000003526f0 [ 403.149553][T17002] Kernel panic - not syncing: Fatal exception [ 403.155894][T17002] Kernel Offset: disabled [ 403.160209][T17002] Rebooting in 86400 seconds..