last executing test programs: 1m13.014745236s ago: executing program 2 (id=475): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvtap0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x6, 0x1, 0x7, "c856f7a614e0"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001040101000000000000000003000004050001000200120006fdff4000040000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040095) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18}, 0x0) r8 = socket(0x23, 0x80805, 0x0) listen(r8, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40881}, 0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000170a050200000000000000000000ffff8c4007ddb740"], 0x14}}, 0x4080) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) 1m12.179601888s ago: executing program 4 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x97, 0x406, 0x4, 0xffffffff, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r9, 0x6}, 0x94) 1m11.528706508s ago: executing program 2 (id=498): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @random="bdd1221610b5"}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f000001000000000000feff1300020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0xb8, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "5e409f2fbe4bbe5ecb13c42b7842ad0b78b95c8a20b30c84b15fdd44125b6a958bbe3210b2ef8f38ef57b5b8119790cd25bdc42aa1daa048cc0ef0966b6c490baa60e6612fd671e2211fda37c5f6de6493bd2d027f5fc99e"}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1m10.909756469s ago: executing program 2 (id=505): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) (async) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000000c0)=0x8000, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, 0x0, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r8, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1a1d0466e0241665}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48054) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1a1d0466e0241665}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m10.855132144s ago: executing program 3 (id=506): unshare(0x22020600) unshare(0x2a020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a}, 0x94) 1m10.854798374s ago: executing program 4 (id=507): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="a7086274b50164920ff22e09fa1a64921c6120a21d9b573d8aeaf1d59c089a918f139aedffbe3b6eccc3dd53e8982da3568a9aa657ffad5066f451245ff4a7dd0f561e0a441b71c1635216a29d2bc546ee3f69239684fb22558827c2373aedf0d0c030caf7ff1e8a2689e03991eb55655ae41f47ee950d79cc2ee0f503f6ad02a915a7b3ae6e7f46ea7a1dd2e457f372bee5ee3b7a669160178bb41d473a0f6652265edc0245edbc7ba191be7d37e4fc976d0f117cf299bc508ecf42d8a95340445bd66c0b7e6a4c9a6bbf55680d1324f79979e526e06fc9408545c8229b590aa82dfb8cd93416da", 0xe8}, {&(0x7f00000000c0)="fcd5520dbbe12eff82f37db693a59f73a8132984da41fc4693c1880000afbab35e9ef258bdd7f257d04cc0edac", 0x2d}, {0x0}, {&(0x7f0000001f40)="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"/4230, 0x1086}], 0x4}, 0x4008840) 1m10.795639784s ago: executing program 3 (id=508): unshare(0x6a040080) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) unshare(0x32050100) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) unshare(0x22020400) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000140)) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r5, &(0x7f0000000380), 0xe) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) shutdown(r6, 0x0) (async) recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 1m10.642992254s ago: executing program 4 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x30, r1, 0x501, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x3}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r4, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000280)={0x5, 0x4, 0x845, 0x7, 0x9, 0x7, 0x4, 0x8}, &(0x7f0000001300)={0x2, 0x100000001, 0xd01, 0x2, 0x100000000, 0x3, 0xff, 0x7}, 0x0, &(0x7f0000001380)={0x0, 0x2710}) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x95}]}, &(0x7f0000000300)='syzkaller\x00', 0xcc, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1f, r4, 0x8, &(0x7f0000000380)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0xb, 0x9f6}, 0x10, 0x0, r5, 0x0, &(0x7f0000000600)=[r6, r7, r8], 0x0, 0x10, 0x55}, 0x94) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x400, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0xc0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x34}}, 0x400c890) 1m10.596564713s ago: executing program 2 (id=511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r6, 0x1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x9}, &(0x7f0000000340)=0x8) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000080)=0xfffffff9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="611228000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be9c8d7d69b32cfa8758c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e12bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50030a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000afa6dabf3f69f41da8765ba8cc1fc08fb188bfca010117fdd2b1b97b0cd373d3f35f0de28914d0ff8b3800a370e8d01cd50e4c20a1c49478478e539ba1975f28ed19cab5f568bc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r5, 0x0, 0xd}, 0x18) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000840)={r2, r6, 0x8, 0x99, &(0x7f0000000180)="6356d73a5bd9cb78f2af682a4a71ca2239fb8ef928ed8058583086266f67cec522f98d209da86173b8d805efd9329e44e7dd8b06a2397b9204f34ce484d667e71c282c08722f1fc06e4c3183b0ebe663bf3e8486375c0889224364cc80d0a7e18ba5843756f65ce9002f870ddd67d167968ad9a0c80ec947d43fa46fe5b3c04ab91562f382aeb243a17016b16eac33c6c1e288863d33d29925", 0xc5, 0x6, 0x3, 0xfff0, 0x5, 0x4, 0x8, 'syz0\x00'}) (async) socket$kcm(0x2d, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000700)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000000)="2e000300010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.484380923s ago: executing program 3 (id=514): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0xa20141, 0x0) r0 = socket$kcm(0x10, 0x9, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 1m10.483384133s ago: executing program 4 (id=515): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x4811) (async) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, 0x0, 0x4000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg(r4, 0x0, 0x0, 0x1) (async) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000001d00)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="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", @ANYBLOB, @ANYRES32=r8, @ANYBLOB="080003000300000008000300020000001400020076657468305f746f5f626f6e64000000"], 0x2558}, 0x1, 0x0, 0x0, 0x44}, 0x4040011) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r1) 1m10.475768961s ago: executing program 3 (id=516): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000110000003700"], 0x18}, 0x40c0) 1m10.39285117s ago: executing program 2 (id=517): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x24) (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff2f24e205607e6b51ffffffffaaaa08060102080506008000000000000029620362b3aaaa"], 0x0) 1m10.330943364s ago: executing program 3 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r5) pipe(&(0x7f0000000100)) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d"], 0x1c}}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x4, 0x8001, 0x2, 0x6, 0x6, 0x9, 0x2}, 0x1c) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 1m10.330222114s ago: executing program 4 (id=519): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x40e647}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m10.139256833s ago: executing program 2 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006910a000000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc4, &(0x7f0000000200)=""/196}, 0x94) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0000000000000000000c0090000000000000000000d8b82afa579de8c13cf6b96a283146d0a43725d7d048ec0c12b2c20eb26a99990dfd2b7fd3522c971ca7e2685239087926ef4a05550afe67b338563eacef8fd21c68b68b5681f5fcb8502e155247f519543c768369247df66fadffdbeabd8d69c29d82"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x6, 0x19, "d8a0"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) 1m9.954649059s ago: executing program 32 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006910a000000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc4, &(0x7f0000000200)=""/196}, 0x94) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0000000000000000000c0090000000000000000000d8b82afa579de8c13cf6b96a283146d0a43725d7d048ec0c12b2c20eb26a99990dfd2b7fd3522c971ca7e2685239087926ef4a05550afe67b338563eacef8fd21c68b68b5681f5fcb8502e155247f519543c768369247df66fadffdbeabd8d69c29d82"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x6, 0x19, "d8a0"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) 1m9.895461665s ago: executing program 3 (id=525): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x4}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000000000000001000000000000080000000000030000000000000000000000000000000000000000000000000000002b00000002"], 0x23c}}, 0x0) 1m9.687391748s ago: executing program 33 (id=525): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x4}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000000000000001000000000000080000000000030000000000000000000000000000000000000000000000000000002b00000002"], 0x23c}}, 0x0) 1m9.636930105s ago: executing program 4 (id=528): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004d00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}, {0x0, 0x7}}}, 0x24}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r10, 0x25, 0x2, @void}, 0x10) 1m9.462281968s ago: executing program 34 (id=528): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004d00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}, {0x0, 0x7}}}, 0x24}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r10, 0x25, 0x2, @void}, 0x10) 3.448426445s ago: executing program 6 (id=1135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x40d0, &(0x7f0000000140)={0xa, 0x4e23, 0x8040000, @mcast2, 0xfffffffc}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) unshare(0x22020600) ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0x9da6]}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_proto_private(r3, 0x89e0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x1a000}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) close(0x3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020601080000000000000000000000000000000008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 2.519548344s ago: executing program 5 (id=1147): socket$unix(0x1, 0x1, 0x0) (async) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) (async) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) (async) unshare(0x62040200) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r2, &(0x7f0000001300)="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", 0x1000) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ff"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0xd, 0x1, 0x12800, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, r9, 0x4, 0x4, 0x1, 0x8, @void, @value, @value=r10}, 0x50) (async) shutdown(r7, 0x1) (async) recvmmsg(r7, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 2.517665414s ago: executing program 6 (id=1148): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (rerun: 32) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x1, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYRESOCT=r2, @ANYRESOCT=r4], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x400c4) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) (rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r10}, 0xc) (async, rerun: 32) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) 1.882150335s ago: executing program 1 (id=1156): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8e4bc8e6569f85655cf3cd072d238c08b2abd0abb3e12889093c16add1c084ea3f26ba93354e659a28671009282f2eac4a5d7579849fb4478193301a22dd8d4dfd85c33bc", 0x46}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000a00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x10002, 0x0) recvfrom$unix(r4, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r5, 0x4) r7 = socket$kcm(0x11, 0xa, 0x300) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="f2f2d393ed781ce1198c4fbf7b1aa80334837a817d0d34cf65570fa927b5d76b9088be5592e5c1a855c5d8807808b7cad939a974099b64731bb02e4c4acbaa2e568953d821432507103de0c6418445daea2fa532c04286584e6997d0573ee6f938f211bb9a4a97fba192e0d3390eb7b769fd765790e757105d504903bf79c865ad9654d984b1699fc0536dde66cb"], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000) r12 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r12, &(0x7f0000000140)={0x11, 0x0, r13, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000027c0)={0x170, r9, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x11c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x8000) recvmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}, 0x0) 1.730828225s ago: executing program 5 (id=1158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061193800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x4, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x0, 0x2000000}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9df}, 0x1c) write$cgroup_int(r2, &(0x7f0000000000)=0x8, 0x12) r4 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x1, 0x2b22, 0x3, 0x6, 0x0, 0x3}) close(r2) splice(r1, 0x0, r2, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="19000000040000000800000008", @ANYRES32=r2, @ANYRES16, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r5, @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r5}, 0xc) 1.684195889s ago: executing program 5 (id=1160): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x13, 0xfb, 0x5, 0x2, 0x0, 0x70bd28, 0xeedc}, 0x10}}, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="549e5063544b3c51c5ddb0e528dab2c0f1d5e76a82d2873ff578911bc55bf83ddd9857b8eaf7387c400bea450c3bd594bda1f4e6be23f002d6db240a9c482fb9326be52e6c1f0421b034f17a323b696a137301a5ebd0c15541c6f5822d2c534770f4d5da8026e9b73a4846c3076907726c08987b523312b0e01125d8f41fdb5d706e6c8d731e0bdf75880afe535b46a6ce727b281788ab84f502b1074c014280770d24eb11a36aa3d7d1cd1c9902466250880f478429ab31f674370e04f8883b323dbc00cb", 0xc5}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="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", 0xfe}, {&(0x7f0000000340)="0274ed6f6ca4831bb17083e75806f5a2b4b381f28bfb", 0x16}, {&(0x7f0000001800)="b7e4d5f7e9365992dca10f7ad3044bb81ef23c6019fcb3b48717bbd57379b8dfa652d33c9d0e7d32a45f73307f6356d4a14a5828ce6176748eb51efab465f7fe69a9c9333272eab27a461220a8724067328927af054da3e5152d256761fd018a7c2f07aec7b5a6c5acb013649104f657918411d9c5ffe35201115115c22d91e7b56fdf493b959bce45654e1785581cf7ddf9a1a0683038c36b62b5e34dbff00a728c9224b477a1d7547bab092a11f83ee55804f027b01309b353cdc21e5889168de0163fdd1c6807228cdf3c6acf7bd3e7b4b39e1548af9ad6d9474ed605f0afde0cc954d5f53a0f753e", 0xea}], 0x5}, 0x20000054) getsockopt$rose(r1, 0x104, 0x7, 0x0, &(0x7f0000000040)=0xfffffffffffffe3b) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3a, 0x4, 0x2, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x1, 0x0, 0x2, [0x0, 0x80]}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@struct={0x6, 0x5, 0x0, 0x4, 0x1, 0xfff, [{0xd, 0x5, 0xe5}, {0x2, 0x1, 0x81}, {0xa, 0x1, 0x8}, {0xb, 0x2, 0x1000}, {0x2, 0x0, 0x61d}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f00000003c0)=""/214, 0x64, 0xd6, 0x0, 0x9}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1d, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r7, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000400)="3af75f", 0x3}], 0x2}}], 0x1, 0x4000890) syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @multicast, @void, {@generic={0x88f5}}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r8}, 0x50) 1.460643096s ago: executing program 5 (id=1164): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x25}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4010, r1}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@bridge_setlink={0x28c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1e0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x6c, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "180a8e792a3df706b7c245d4d2882523"}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbfade857c0e1c"}]}, {0x3c, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x70, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x28c}}, 0x0) 1.395123013s ago: executing program 6 (id=1165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x64000090) 1.386738256s ago: executing program 6 (id=1166): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x400, 0x9, 0x3ff}) sendto$isdn(r2, &(0x7f00000000c0)={0xffffff9b, 0x2, "cbcfb4b3972a901033e455a742006b7b5a3f970f2dceaf0f31236346962daaba1bbb4e9e38fa7d6429898ade6f7edf52dc26a25532562d2ec545d78149397c801c7497fdc50931ce9820d147d375a740d88de0aa949548b74b64dc3c4a709455dbd5e4b91b0b8db63eff91c5d7017baa05c3c2a60e6de294fdbb3d0022d96ef896fe0a45fac2bb4b15e4bbe9db0c7444c98104bd7e6bfe3b11405dc9804a4db758b196841521b905b5c9b6c7bc12e661761c8a60c121190461183d921cf14f67a44334ca1615c2"}, 0xcf, 0xc1, &(0x7f00000001c0)={0x22, 0x1, 0x2, 0x6, 0x4}, 0x6) (async, rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x9, 0x6, 0xc, 0x7fc, 0x0, 0x53, 0x734a, 0x2, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r3, 0x4}, &(0x7f00000002c0)=0x8) (async) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) (async) r5 = epoll_create(0x1) epoll_wait(r5, &(0x7f0000000380)=[{}], 0x1, 0x7ff) (async) r6 = socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r3, 0x1}, 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x3341, 0x8, 0x43d8, 0x40, 0x18000}, 0x14) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 32) sendmsg$can_raw(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@can={{0x1, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "7f07b252fde40542"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c000}, 0x1) (rerun: 32) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000500)={r3, 0xe}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000580)={r4, 0xf}, &(0x7f00000005c0)=0x8) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=@newchain={0xc4, 0x64, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x9}, {0x0, 0x4}, {0xffff, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x90, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0xa}}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x5, 0x5, 0x2, 0x7}, {0x5, 0x10, 0xb, 0x2}, {0x401, 0x3, 0x0, 0x6}, {0x4, 0xff, 0x3, 0x10}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x2, 0xf3, 0xf, 0x4}, {0xb, 0x8, 0x9, 0x5}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0x2, 0x81, 0x6}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x80}}]}, 0xc4}}, 0x20000000) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000800)={'pim6reg1\x00', {0x2, 0x0, @empty}}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xbc}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1e}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xac}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x54}}, 0x80) (async, rerun: 64) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000980)={@dev={0xfe, 0x80, '\x00', 0x7}, @mcast1, @mcast2, 0x99, 0x1, 0x4, 0x500, 0x4d, 0x80002, r8}) (rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000a00)={0x55f1d666, 0x93, 0x52a7b85e, 0xae, 0x800}, 0x14) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd4, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x2, 0x3, 0x80]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x68}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4) (async) accept4$phonet_pipe(r2, &(0x7f0000000c00), &(0x7f0000000c40)=0x10, 0x80000) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r10, 0xb24, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1.252872026s ago: executing program 5 (id=1169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'batadv0\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0xccaa, 0x7fffffffffffffff}}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000000)={0x81, @multicast}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000df5204370095000000000000009500000000000000184000009500000000000000d2d4655a47ac6f5baade07b691df5dd574b93a98caae79032e9ad7d5b864686c285cc7f202fe962a46e3fda752f40e6320fb4a"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x5}, 0x10}, 0x94) 1.218385839s ago: executing program 6 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x7f, 0x2, 0x3, 0x1, 0x7, 0xfffc}, 0xffffffffffffff5e) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r3, 0x2, 0x1, 0x5}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095", @ANYRES64=r4, @ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000003000000e27f00000100000000000000", @ANYRES16=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000e6ff00"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r10, 0x8b32, &(0x7f0000000040)) r11 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000040)={0x2a, 0x1}, 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) 1.174603418s ago: executing program 0 (id=1171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xd}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x2f, 0x0, @multicast2, @local, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@local}, {}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.153739722s ago: executing program 5 (id=1173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) 1.05880015s ago: executing program 0 (id=1174): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x10, 0x0, 0x0, 0x336c}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000"], 0x70}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x3ef, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000500)=0xfffffffc, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r11, @ANYBLOB="040025bd7000fcdbdf25060000000e0001006e657464657673696d0000000f0002006e65e47464657673696d30000008000300020000000600040000000067de5fde47f3e11764657673696d0000000f0002006e657464657673696d300000080003000100000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040003000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r12 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r12, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xffff, 0x3}, {0x8, 0x7}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x40000) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaaac1414bb0180c2000000ffffffff6507a4"], 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="79a244d649700463275e660c4326856a7c67e407b085b5479f4d0253ee32f80887605ff1456ab17fa500fc14d58c866d900cf0d14ea85c26afa79515210750f2fd66139b6279b2642de492cc10da75bf90543f7c6beaa3cb362b3a660e5a05ae726064b4a53217466b542dabf6d7e05f06fffe070000006e20bd2f8e6209c5b1cea51a08a9e30600c4f7", @ANYRESOCT], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8800) socket$netlink(0x10, 0x3, 0xf) 1.050051159s ago: executing program 7 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0xc8040) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911010000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x7c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x6, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1005}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4044805}, 0x4008045) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 968.162917ms ago: executing program 1 (id=1176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d28435a016387cf0c69cef003550d83ef4f866ee78add21e6e69a19ca03ba5381791e38b4fb91d725d3e8c0bc7cfa95aa35f48a9127eb93dd67e9746ab92b9cdc9519f2bca2d5d2eaf864381ee2c6a76db4d1b0440dd3aa65b34fbcb3dbfd649c5886cb9b9be8e6aa0a1e5e09ad0afa6a70c203344468ae3e3750af30aff7b140d0906112767a4f5ce3147206ebe7478af7a3ec636f898f09063d138cf90b715bf1bcfb9f8132f9c612db07b458c249244a737095bbb428722e4473e4ef36494ebca4c6463e217ecea9beb0b9df3172e928464a67d0747ef707ee4a9ea8c1d0a8a608243305b8454a28230cf7632b5d6d", 0x443}], 0x1, 0x9) (async) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x443}], 0x1, 0x9) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21) 824.905407ms ago: executing program 1 (id=1177): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0xc030) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r4}, 0x10) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800030000000000140000004500801600660000000190780a010100ac1414aa05009078e0000002450b0f6c0068002f05330001ac39f51db87c3dfb7967420949ecfc51038b31c36f6d324008b2e42262810ab27f41b50104b620d46b25ead57324fd3c8b78bb80b7b440521a190ce0f3731267089fa73680d24076da4cd4bdbb2113cfe2bfc26663e768942425e49d7398d707156ebbba2d2f392e428e53e2d228520cbc532891bd0b3d5ab367d8c6dbc40ca008f239e517974cbfeef892b47bd43d485703477f3e3217bedfe54d1cd84d1421ab93234e79e315662be64b5e781220f3aea51f5b127cfd7f47ae7e5b089f5dc866d5fd98c554d752cbce73e1dd97432d300e986623cb52661e842a57a0759282dbf180cbf3"], 0xfdef) 707.239405ms ago: executing program 1 (id=1178): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce1}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x1002, &(0x7f00000018c0)=""/4098, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x10, 0x881}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x37, 0xad, &(0x7f0000000280)="6d7979b7d8814bc8b58a75310c6a3d1a8d0ad76c962df176435145b11b59eb03dff035ef2285af4887f5b1d8f9607f0149a8d4288441b7", &(0x7f0000000400)=""/173, 0x3, 0x0, 0x93, 0x33, &(0x7f00000004c0)="e3026ff2a93a8298a7fe8e5b23537c876bfb7bf70cc54a9247394ad5c55fb94b4abbaba04763493127852f06f1e644391d6bf8ab59aeee245aa57b5dffc45bfb9887f6cbb19f56542952c6a74abfcda64d26a9719afe232b17281c5eca3e0188622e6039a3e49dcb1249730e4543d6d1c29ef3632ac3f97dd11f7eca66628ef32576b2221d88265258760fac93910ceb8f52f7", &(0x7f0000000580)="8b28a25668ed73304e59b413ed2eb06de6f391aabcf6b5d32fc2db8d1598f6f77ed6d8b20eddc9c7783b7a7ec7658960ff78a3", 0x0, 0x0, 0xd31}, 0x50) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 706.200164ms ago: executing program 0 (id=1179): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce1}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x1002, &(0x7f00000018c0)=""/4098, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x10, 0x881}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x37, 0xad, &(0x7f0000000280)="6d7979b7d8814bc8b58a75310c6a3d1a8d0ad76c962df176435145b11b59eb03dff035ef2285af4887f5b1d8f9607f0149a8d4288441b7", &(0x7f0000000400)=""/173, 0x3, 0x0, 0x93, 0x33, &(0x7f00000004c0)="e3026ff2a93a8298a7fe8e5b23537c876bfb7bf70cc54a9247394ad5c55fb94b4abbaba04763493127852f06f1e644391d6bf8ab59aeee245aa57b5dffc45bfb9887f6cbb19f56542952c6a74abfcda64d26a9719afe232b17281c5eca3e0188622e6039a3e49dcb1249730e4543d6d1c29ef3632ac3f97dd11f7eca66628ef32576b2221d88265258760fac93910ceb8f52f7", &(0x7f0000000580)="8b28a25668ed73304e59b413ed2eb06de6f391aabcf6b5d32fc2db8d1598f6f77ed6d8b20eddc9c7783b7a7ec7658960ff78a3", 0x0, 0x0, 0xd31}, 0x50) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 705.631274ms ago: executing program 6 (id=1180): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x985549d2d66c0474) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000d40)=[{{&(0x7f0000000480)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/22, 0x16}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/51, 0x33}], 0x3, &(0x7f0000000600)=""/86, 0x56}, 0xfc000000}, {{&(0x7f0000000800)=@can, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f0000000980)=""/204, 0xcc}, {&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/172, 0xac}], 0x5}, 0x5}], 0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000400000000000000a78ab603"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700060000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0x20000014}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f0000000240)="0f88a81dcbfdd94242a1", 0xa}], 0x2) r10 = socket(0x1d, 0x4, 0x99) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r10) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close(0x3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r12, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24044880) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 623.048859ms ago: executing program 7 (id=1181): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f1", 0x1}], 0x1}, 0x20008045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)="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", 0x171}, {&(0x7f00000002c0)="c41718c8b6288fd7207f9e0718509ad108877f885d1ff6de65bbf218affe9865f29080d2b2ff99c07a218edf25149a3988758b13b47d1d43f9f0571c9551bbfd4e1a74c3b073b0b52ee330f62b7e65c075b9de874263793739c4ad28d0ff13c818ad21cc3333a39587f2a53178edc9b925286b1f1a5bdf306d2bb8353e0e5db07d81b71daab07f523086a4138edb6431ee3c69207e5d1bf8b236550ccc076ce3", 0xa0}, {&(0x7f0000000380)="3acd76ff56e6d94b6556", 0xa}, {&(0x7f00000005c0)="8e30185c3a8e7581b5062e4757a6663a30f2296baaf1293da19b7609f7b341220605c3c91dccd37756a4396538a4bb1db796da3791efeb3a3d499ed25f89f1a0f5adb96d067a1f8a2739f6604dae81f93b525779ab4a48ce7befd8f18bc40a8b9dea86fae97ee1f6a093c6d543a7a8e54f3171e84b8b1987aef1124589aea88fbd27842d2b62cb09f659aa5e076ce1004d5e6b22a97bf61b95a592b929d133f616c193ae695ffb8363edc792c5fb74d64c7ab24067ee97cab0519f23846e16af79cdf31e90bddba12167ee51a1a8bdb8ddad9d302c17a92714db4fb3a85746b82703ec00ea0ca98aa740", 0xea}, {&(0x7f00000006c0)="3b8a5cb4571d24706993c192d7df6eb78423f84021c0d07789ee4b21650bc4064009d3f8e0245e3b07901d2fafb454e2077604800dcadcbf9031c4046b1d472f1ea47a338d0a8ba49f664e4f03d326f8d540b5d0b7b10c227bc483a949ea161fc36945e1c4ade41887dea7e1e3ffba4d8f97db322d3d28aef0aa1992ed0493a3f348f5ebdab033567c", 0x89}], 0x5}, 0x40) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x21, 0xc, 0x0, 0x9, 0x0, [@local, @private1, @private1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xd1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x30) 548.396755ms ago: executing program 7 (id=1182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01000000005e1affd502000000b949010073797a300000000008000240000000032c000000030a01030000e6ffaf1cb9cd8261609a090001007379fa30000000000900030073797a32000000001400000000000000"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f1e625bd7000000000001300000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x40, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xb}, @void, @val={0xc, 0x99, {0x3, 0x21}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008095}, 0x4040080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r8}) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x0, 0x5f, 0x15, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r10}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f000000c300)={0xd80, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 496.816547ms ago: executing program 0 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x3, 0x0, 0x2000000, 0x0, 0x1}}) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000b40)={0x2c4, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x115, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, 0x4f26c, 0x280}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@setneightbl={0x24, 0x43, 0x100, 0x70bd2c, 0x25dfdbfd, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x20e7}, @NDTA_THRESH1={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20005004) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="03150000040f0000000903800b0001006970766c616e0000040002800800f198230508", @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="c72f96550667cc55de9c970049a1021036c6bff863e19679402df550e81ab8433bc74ced7e101881e36b8b7d52ca83bf42f99ea88e49b6aae1aad5552ba21a83a2848acaeb81712989ee119cae80b48b47486f2d391116575dd112e2e7696e9c30bc5bd44ff45c4ab562f69e26131da62998670c0000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 485.974241ms ago: executing program 1 (id=1184): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000000)=0x400, 0xffffffffffffff90) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0xa, 0x1, 0x1, 0x6, 0x1}, @ldst={0x1, 0x0, 0x1, 0x5, 0x7, 0x4, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000001040)='virtio_transport_alloc_pkt\x00', r3, 0x0, 0x6}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) 363.208178ms ago: executing program 7 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}}, 0x2000c050) 327.14333ms ago: executing program 1 (id=1186): r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x10, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e23, @local}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2a, 0x3507}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (rerun: 64) r6 = socket(0x10, 0x80003, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async, rerun: 64) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) listen(r9, 0xfffffbeb) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=r5, @ANYBLOB="7f00"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0400000000000000030000000200"/28], 0x50) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtclass={0x0, 0x28, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfc8a10eac7f9fd09}, {0x6, 0x4}, {0xfff3, 0xfff1}}, [@tclass_kind_options=@c_cake, @tclass_kind_options=@c_prio, @TCA_RATE={0x0, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_mqprio, @TCA_RATE={0x0, 0x5, {0x0, 0x2}}, @TCA_RATE={0x0, 0x5, {0x2f, 0x81}}, @tclass_kind_options=@c_mq, @tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_RSC={0x0, 0x1, {0x8, 0x8, 0x6}}]}}, @TCA_RATE={0x0, 0x5, {0x5e, 0x10}}]}, 0x90}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}}, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) 314.595397ms ago: executing program 7 (id=1187): socket$netlink(0x10, 0x3, 0x1a) (async) r0 = socket$netlink(0x10, 0x3, 0x1a) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private=0xa010102, 0x1, 0x0, 0x70, 0x0, [{@multicast1}, {@multicast1}, {@remote}, {@loopback}, {@multicast2}, {@multicast1}, {@dev}]}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000000c0)={0x0, 0x3, [0x5, 0x7, 0x0, 0x5, 0x10c, 0x6]}) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'wm\x00'}, 0x9) (async) write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'wm\x00'}, 0x9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x59, "437a8f77951bd0d9e031cd357d9583eb97057eac2a8977d3469ee36e1a29c890d1743d96be5067b76397c223ef5ace73c87914a81341e1c8060f9c636ae07f8ac4495ea3967b3809f1751e5ba09b130ff57c0991b8c787fece"}, &(0x7f0000000200)=0x61) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r3, 0xfd, "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"}, &(0x7f0000000380)=0x105) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x1) r6 = accept$ax25(r1, &(0x7f0000000500)={{0x3, @netrom}, [@rose, @default, @default, @remote, @rose, @netrom, @remote, @null]}, &(0x7f0000000580)=0x48) accept4$ax25(r6, &(0x7f00000005c0)={{0x3, @default}, [@null, @rose, @null, @netrom, @remote, @null, @null, @default]}, &(0x7f0000000640)=0x48, 0x80000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000680)={@private, @private, 0x0}, &(0x7f00000006c0)=0xc) connect$packet(r0, &(0x7f0000000700)={0x11, 0x1c, r7, 0x1, 0x3, 0x6, @multicast}, 0x14) (async) connect$packet(r0, &(0x7f0000000700)={0x11, 0x1c, r7, 0x1, 0x3, 0x6, @multicast}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x2002, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000780)={'macvtap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) r9 = socket(0xe309959bda52c141, 0xb, 0x5) setsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000007c0)={r4, 0x1, 0x4, 0x8}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000840)={'nat\x00', 0x0, 0x0, 0x0, [0xbf, 0x100000001, 0x3, 0x7, 0x3ff, 0x4], 0x5, &(0x7f0000000800)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f00000009c0)={r11, r12/1000+60000}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@mpls_getroute={0x24, 0x1a, 0x400, 0x70bd26, 0x25dfdbfd, {0x1c, 0x10, 0x14, 0x7, 0xfe, 0x3, 0xe5fe1c92d76e1841, 0x4}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x850) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0x4, 0x8}, 0xc) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0x4, 0x8}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x943d, '\x00', 0x0, r1, 0x3, 0x5, 0x5}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x943d, '\x00', 0x0, r1, 0x3, 0x5, 0x5}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r14, 0x4004f506, &(0x7f0000000bc0)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r14, 0x4004f506, &(0x7f0000000bc0)) 75.052894ms ago: executing program 7 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd090002"], 0x1ec}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000cdf605efe7b5ece9accfbb00006d1b742936000000dbc2b11b49c374e5bef5373d3d78cdf1cfee8387ba6e71ab28ee523c95dec40351897161e06a574a52f71847ed54eea733c3323f8fabf12f45a970d46c1474553d681bcee88656dd9bf14a6db9120bab3e6a3fee8fe19d3e1a56804c4c5b46dfbd"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0xfffe, 0x200, 0xa}, {0x10000, 0x65ad, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x7fffffffffffffff}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@loopback, 0x40000, 0x5, 0x0, 0xb7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 49.855002ms ago: executing program 0 (id=1189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0xf}, 0x28) 0s ago: executing program 0 (id=1190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r4, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r4, 0x2, 0x0, 0xb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, 0x0, 0x0, 0x8804, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r11, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r11, 0x20eeb000) kernel console output (not intermixed with test programs): command tx timeout [ 77.145360][ T5873] Bluetooth: hci3: command tx timeout [ 77.149198][ T5183] Bluetooth: hci0: command tx timeout [ 77.154781][ T5868] Bluetooth: hci2: command tx timeout [ 77.160376][ T51] Bluetooth: hci4: command tx timeout [ 77.185167][ T6122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.209966][ T6161] ip6erspan0: entered allmulticast mode [ 77.370275][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.432893][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.484971][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.541701][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.171044][ T6220] netlink: 'syz.4.60': attribute type 5 has an invalid length. [ 78.287764][ T6223] netlink: 'syz.4.60': attribute type 5 has an invalid length. [ 78.302861][ T6230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.351794][ T6227] batman_adv: batadv0: Adding interface: macvlan1 [ 78.360612][ T6227] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.439023][ T6227] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 78.486189][ T6241] bridge0: entered promiscuous mode [ 78.526192][ T6241] vlan2: entered promiscuous mode [ 78.554315][ T6241] bridge0: port 3(vlan2) entered blocking state [ 78.578633][ T6241] bridge0: port 3(vlan2) entered disabled state [ 78.590843][ T6241] vlan2: entered allmulticast mode [ 78.598386][ T6241] bridge0: entered allmulticast mode [ 78.609465][ T6241] vlan2: left allmulticast mode [ 78.623466][ T6241] bridge0: left allmulticast mode [ 78.738135][ T6249] bridge_slave_0: left allmulticast mode [ 78.794355][ T6249] bridge_slave_0: left promiscuous mode [ 78.800363][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.895759][ T6249] bridge_slave_1: left allmulticast mode [ 78.924083][ T6249] bridge_slave_1: left promiscuous mode [ 78.965260][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.008135][ T6249] bond0: (slave bond_slave_0): Releasing backup interface [ 79.036862][ T6249] bond0: (slave bond_slave_1): Releasing backup interface [ 79.134592][ T6249] team0: Port device team_slave_0 removed [ 79.178343][ T6249] team0: Port device team_slave_1 removed [ 79.208439][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.234321][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.260286][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.271922][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.494480][ T6271] bond1: entered promiscuous mode [ 79.536954][ T6271] bond1: entered allmulticast mode [ 79.558754][ T6271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.749660][ T6291] __nla_validate_parse: 10 callbacks suppressed [ 79.749686][ T6291] netlink: 452 bytes leftover after parsing attributes in process `syz.3.72'. [ 79.772774][ T6294] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.72'. [ 80.167765][ T55] hid-generic 0005:0C45:8002.0001: collection stack underflow [ 80.178234][ T55] hid-generic 0005:0C45:8002.0001: item 0 0 0 12 parsing failed [ 80.187181][ T55] hid-generic 0005:0C45:8002.0001: probe with driver hid-generic failed with error -22 [ 80.427196][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 80.623799][ T6358] netlink: 'syz.3.85': attribute type 13 has an invalid length. [ 80.656692][ T6358] netlink: 'syz.3.85': attribute type 17 has an invalid length. [ 80.708582][ T6357] bridge0: port 3(erspan0) entered blocking state [ 80.749115][ T6357] bridge0: port 3(erspan0) entered disabled state [ 80.792204][ T6357] erspan0: entered allmulticast mode [ 80.820524][ T6357] erspan0: entered promiscuous mode [ 80.856477][ T6357] bridge0: port 3(erspan0) entered blocking state [ 80.863234][ T6357] bridge0: port 3(erspan0) entered forwarding state [ 81.010769][ T6358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.571203][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 81.954953][ T6428] Bluetooth: MGMT ver 1.23 [ 82.286732][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 82.395144][ T6451] netlink: 'syz.2.102': attribute type 4 has an invalid length. [ 82.419569][ T6451] netlink: 152 bytes leftover after parsing attributes in process `syz.2.102'. [ 82.437839][ T6451] : renamed from bond0 [ 82.578228][ T6459] netlink: 'syz.4.104': attribute type 58 has an invalid length. [ 82.589727][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.104'. [ 82.732401][ T6464] bridge0: entered allmulticast mode [ 82.930967][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 83.027137][ T6483] netlink: 228 bytes leftover after parsing attributes in process `syz.3.110'. [ 83.077257][ T6483] netlink: 87 bytes leftover after parsing attributes in process `syz.3.110'. [ 83.197716][ T6490] tipc: Started in network mode [ 83.202755][ T6490] tipc: Node identity eeb6a038b5d, cluster identity 4711 [ 83.279794][ T6490] tipc: Enabled bearer , priority 0 [ 83.293896][ T6503] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.316342][ T6495] syzkaller0: entered promiscuous mode [ 83.359846][ T6495] syzkaller0: entered allmulticast mode [ 83.571794][ T6522] tipc: Resetting bearer [ 83.969930][ T6487] tipc: Resetting bearer [ 84.015719][ T6487] tipc: Disabling bearer [ 85.310066][ T6588] netlink: 'syz.4.134': attribute type 13 has an invalid length. [ 85.318709][ T6588] netlink: 'syz.4.134': attribute type 17 has an invalid length. [ 85.384765][ T6588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.466445][ T6596] __nla_validate_parse: 1 callbacks suppressed [ 85.466469][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'. [ 85.613560][ T6600] syzkaller1: entered promiscuous mode [ 85.619179][ T6600] syzkaller1: entered allmulticast mode [ 85.628480][ T6600] netlink: 'syz.4.136': attribute type 10 has an invalid length. [ 85.636745][ T6600] netlink: 2 bytes leftover after parsing attributes in process `syz.4.136'. [ 85.646755][ T6600] team0: entered promiscuous mode [ 85.651892][ T6600] team_slave_0: entered promiscuous mode [ 85.658361][ T6600] team_slave_1: entered promiscuous mode [ 85.664837][ T6600] bridge0: port 4(team0) entered blocking state [ 85.671513][ T6600] bridge0: port 4(team0) entered disabled state [ 85.678997][ T6600] team0: entered allmulticast mode [ 85.684993][ T6600] team_slave_0: entered allmulticast mode [ 85.690916][ T6600] team_slave_1: entered allmulticast mode [ 85.699596][ T6600] bridge0: port 4(team0) entered blocking state [ 85.706104][ T6600] bridge0: port 4(team0) entered forwarding state [ 85.713013][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 86.042167][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 86.190962][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'. [ 86.355645][ T6620] netlink: 'syz.2.142': attribute type 4 has an invalid length. [ 86.404572][ T6624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.143'. [ 86.547193][ T6639] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 86.557476][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 86.590639][ T6639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.602987][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 86.622563][ T6624] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.677379][ T6645] netlink: 200 bytes leftover after parsing attributes in process `syz.3.147'. [ 86.678740][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 86.703543][ T6645] netlink: 200 bytes leftover after parsing attributes in process `syz.3.147'. [ 86.837171][ T6652] bond0: (slave gretap1): making interface the new active one [ 86.852675][ T6652] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 86.866416][ T6654] batadv0: entered promiscuous mode [ 86.871825][ T6654] vlan2: entered promiscuous mode [ 86.888555][ T6645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.960183][ T6645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.040703][ T6645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.100771][ T6645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.240515][ T981] cfg80211: failed to load regulatory.db [ 87.255023][ T1085] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.282531][ T6673] warning: `syz.4.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.297500][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.336000][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.367419][ T6673] erspan0: left allmulticast mode [ 87.377873][ T6673] erspan0: left promiscuous mode [ 87.383254][ T6673] bridge0: port 3(erspan0) entered disabled state [ 87.427722][ T6673] team0: left allmulticast mode [ 87.456850][ T6673] team_slave_0: left allmulticast mode [ 87.496343][ T6673] team_slave_1: left allmulticast mode [ 87.521900][ T6673] bridge0: port 4(team0) entered disabled state [ 87.552877][ T6691] netlink: 'syz.4.154': attribute type 10 has an invalid length. [ 87.572998][ T6673] bridge_slave_0: left allmulticast mode [ 87.588090][ T6673] bridge_slave_0: left promiscuous mode [ 87.594555][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.616328][ T6673] bridge_slave_1: left allmulticast mode [ 87.622138][ T6673] bridge_slave_1: left promiscuous mode [ 87.628206][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.641996][ T6673] bond0: (slave bond_slave_0): Releasing backup interface [ 87.662999][ T6673] bond0: (slave bond_slave_1): Releasing backup interface [ 87.679699][ T6673] team_slave_0: left promiscuous mode [ 87.689683][ T6673] team0: Port device team_slave_0 removed [ 87.709795][ T6673] team_slave_1: left promiscuous mode [ 87.717862][ T6673] team0: Port device team_slave_1 removed [ 87.725402][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.732859][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.741500][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.749386][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.761992][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.795345][ T6691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.831404][ T6691] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.864817][ T6704] netlink: 'syz.1.161': attribute type 1 has an invalid length. [ 87.940307][ T6704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.966846][ T6707] tipc: Invalid UDP bearer configuration [ 87.966932][ T6707] tipc: Enabling of bearer rejected, failed to enable media [ 88.075781][ T6704] veth3: entered promiscuous mode [ 88.207133][ T6717] netlink: 'syz.1.167': attribute type 4 has an invalid length. [ 88.261650][ T6717] netlink: 'syz.1.167': attribute type 4 has an invalid length. [ 88.335474][ T6694] syz.4.154 (6694) used greatest stack depth: 17896 bytes left [ 88.651041][ T6738] netlink: 'syz.1.172': attribute type 10 has an invalid length. [ 88.855811][ T6758] openvswitch: netlink: Flow actions attr not present in new flow. [ 88.897899][ T30] audit: type=1800 audit(1756174215.119:2): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.175" name="memory.events" dev="tmpfs" ino=119 res=0 errno=0 [ 89.344446][ T6778] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 89.359219][ T6778] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 89.619018][ T6814] syz_tun: entered allmulticast mode [ 89.643902][ T6814] dvmrp8: entered allmulticast mode [ 89.665394][ T6814] syz_tun: left allmulticast mode [ 89.671016][ T6814] dvmrp8: left allmulticast mode [ 89.871334][ T6834] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 89.881925][ T6834] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 89.939754][ T6838] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 89.966976][ T6838] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 90.015215][ T6842] netlink: 'syz.2.200': attribute type 29 has an invalid length. [ 90.023768][ T6838] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 90.039831][ T6842] netlink: 'syz.2.200': attribute type 29 has an invalid length. [ 90.176966][ T6846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.610970][ T6868] __nla_validate_parse: 12 callbacks suppressed [ 90.610993][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 90.834976][ T6876] `: entered promiscuous mode [ 90.865607][ T6876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.210'. [ 90.968604][ T6878] tipc: Started in network mode [ 90.986553][ T6878] tipc: Node identity 362bcca5770c, cluster identity 4711 [ 90.997899][ T6878] tipc: Enabled bearer , priority 0 [ 91.040430][ T6890] syzkaller0: entered promiscuous mode [ 91.046247][ T6890] syzkaller0: entered allmulticast mode [ 91.072524][ T6878] syzkaller0: entered promiscuous mode [ 91.084459][ T6878] syzkaller0: entered allmulticast mode [ 91.172776][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.218'. [ 91.197385][ T6878] tipc: Resetting bearer [ 91.300882][ T6877] tipc: Resetting bearer [ 91.339214][ T6877] tipc: Disabling bearer [ 91.367212][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.222'. [ 91.427486][ T6921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.219'. [ 91.540743][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 91.560934][ T6930] netlink: 277 bytes leftover after parsing attributes in process `syz.3.225'. [ 91.588551][ T6931] tipc: Started in network mode [ 91.596975][ T6931] tipc: Node identity 62d7e8e5163f, cluster identity 4711 [ 91.607548][ T6931] tipc: Enabled bearer , priority 0 [ 91.616506][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 91.631757][ T6934] veth3: entered allmulticast mode [ 91.638107][ T6934] bridge1: port 1(veth3) entered blocking state [ 91.645601][ T6934] bridge1: port 1(veth3) entered disabled state [ 91.652860][ T6934] veth3: entered promiscuous mode [ 91.659981][ T6931] syzkaller0: entered promiscuous mode [ 91.665801][ T6931] syzkaller0: entered allmulticast mode [ 91.682627][ T6927] bridge1: port 2(veth0_to_bond) entered blocking state [ 91.692266][ T6927] bridge1: port 2(veth0_to_bond) entered disabled state [ 91.701051][ T6927] veth0_to_bond: entered allmulticast mode [ 91.710956][ T6927] veth0_to_bond: entered promiscuous mode [ 91.747035][ T6934] vlan2: entered allmulticast mode [ 91.752510][ T6934] veth1: entered allmulticast mode [ 91.758826][ T6934] bridge1: port 3(vlan2) entered blocking state [ 91.767360][ T6934] bridge1: port 3(vlan2) entered disabled state [ 91.777402][ T6934] vlan2: entered promiscuous mode [ 91.782777][ T6934] veth1: entered promiscuous mode [ 91.831480][ T6941] tipc: Resetting bearer [ 91.843545][ T6929] tipc: Resetting bearer [ 91.852841][ T6929] tipc: Disabling bearer [ 91.950926][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 91.965352][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 92.099250][ T6964] Bluetooth: MGMT ver 1.23 [ 92.117229][ T6937] IPVS: set_ctl: invalid protocol: 44 172.30.1.2:65535 [ 92.589101][ T6995] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 92.596755][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.733441][ T6999] validate_nla: 4 callbacks suppressed [ 92.733462][ T6999] netlink: 'syz.0.241': attribute type 4 has an invalid length. [ 92.825355][ T51] Bluetooth: hci0: command tx timeout [ 93.484266][ T7033] macsec1: entered promiscuous mode [ 93.495878][ T7033] syzkaller0: entered promiscuous mode [ 93.516429][ T7033] syzkaller0: left promiscuous mode [ 93.909669][ T7081] nbd: must specify an index to disconnect [ 93.930961][ T7080] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 93.960044][ T7055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.037582][ T7092] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 94.070818][ T7091] delete_channel: no stack [ 94.082259][ T7095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.101849][ T7094] Illegal XDP return value 4294967274 on prog (id 108) dev N/A, expect packet loss! [ 94.282832][ T7117] openvswitch: netlink: IP tunnel TTL not specified. [ 94.427390][ T7125] raw_sendmsg: syz.4.278 forgot to set AF_INET. Fix it! [ 94.848938][ T7151] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 95.059319][ T7166] netlink: 'syz.0.290': attribute type 1 has an invalid length. [ 95.247883][ T7178] : renamed from bond_slave_0 [ 95.469873][ T7187] bond1: entered promiscuous mode [ 95.505492][ T7187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.627548][ T7212] __nla_validate_parse: 13 callbacks suppressed [ 95.627571][ T7212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.300'. [ 95.686361][ T7216] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.752122][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 95.773802][ T7222] netlink: 'syz.4.300': attribute type 1 has an invalid length. [ 95.784884][ T7222] netlink: 244 bytes leftover after parsing attributes in process `syz.4.300'. [ 95.802405][ T7216] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.892237][ T7216] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.910659][ T7230] netlink: 83 bytes leftover after parsing attributes in process `syz.2.306'. [ 95.970588][ T7216] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.988240][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 96.015355][ T7233] bond1: left promiscuous mode [ 96.026855][ T7233] @: renamed from veth0_vlan [ 96.084751][ T1157] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.093052][ T1157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.117160][ T1157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.146955][ T1157] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.264969][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 97.348828][ T7297] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 97.373375][ T7297] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 97.602072][ T7313] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 97.643411][ T7313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.727312][ T7297] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 97.851947][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 97.981592][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 98.012844][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 98.036582][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 98.046151][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 98.205165][ T7347] team0: entered promiscuous mode [ 98.215257][ T7343] geneve2: entered promiscuous mode [ 98.231075][ T7347] team0 (unregistering): left promiscuous mode [ 98.280706][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.289618][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.300858][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.318706][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.328114][ T7354] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 98.336126][ T7354] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 98.355891][ T60] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.378742][ T60] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.404365][ T60] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.441700][ T60] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.576500][ T7370] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0 [ 98.599796][ T7370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.725599][ T7386] netlink: 'syz.4.353': attribute type 39 has an invalid length. [ 98.731619][ T7387] tipc: Enabled bearer , priority 0 [ 98.742818][ T7387] tipc: Enabling of bearer rejected, already enabled [ 98.759453][ T7388] syzkaller0: entered promiscuous mode [ 98.765299][ T7388] syzkaller0: entered allmulticast mode [ 98.773392][ T7387] tipc: Enabling of bearer rejected, already enabled [ 98.785013][ T7387] tipc: Enabling of bearer rejected, already enabled [ 98.812174][ T7387] tipc: Resetting bearer [ 98.821672][ T7387] tipc: Disabling bearer [ 99.180029][ T7407] netlink: 'syz.4.359': attribute type 3 has an invalid length. [ 99.191818][ T7408] netlink: 'syz.4.359': attribute type 3 has an invalid length. [ 99.362588][ T7413] bridge0: port 1(erspan0) entered blocking state [ 99.405101][ T7413] bridge0: port 1(erspan0) entered disabled state [ 99.434077][ T7413] erspan0: entered allmulticast mode [ 99.502412][ T7413] erspan0: entered promiscuous mode [ 99.540676][ T7413] bridge0: port 1(erspan0) entered blocking state [ 99.547311][ T7413] bridge0: port 1(erspan0) entered forwarding state [ 99.726843][ T7434] ipvlan2: entered promiscuous mode [ 99.801476][ T7442] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 100.115852][ T7473] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 100.134356][ T7461] IPv6: Can't replace route, no match found [ 100.634608][ T7524] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.720783][ T7485] __nla_validate_parse: 143 callbacks suppressed [ 100.720803][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 101.091721][ T7536] FAULT_INJECTION: forcing a failure. [ 101.091721][ T7536] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.191267][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(full) [ 101.191299][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.191311][ T7536] Call Trace: [ 101.191318][ T7536] [ 101.191326][ T7536] dump_stack_lvl+0x189/0x250 [ 101.191356][ T7536] ? __pfx____ratelimit+0x10/0x10 [ 101.191384][ T7536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.191405][ T7536] ? __pfx__printk+0x10/0x10 [ 101.191429][ T7536] ? __might_fault+0xb0/0x130 [ 101.191458][ T7536] ? rcu_is_watching+0x15/0xb0 [ 101.191478][ T7536] should_fail_ex+0x414/0x560 [ 101.191504][ T7536] _copy_from_user+0x2d/0xb0 [ 101.191527][ T7536] ___sys_sendmsg+0x158/0x2a0 [ 101.191560][ T7536] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.191596][ T7536] ? __fget_files+0x2a/0x420 [ 101.191612][ T7536] ? __fget_files+0x3a0/0x420 [ 101.191634][ T7536] __x64_sys_sendmsg+0x19b/0x260 [ 101.191655][ T7536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.191680][ T7536] ? __pfx_ksys_write+0x10/0x10 [ 101.191703][ T7536] ? rcu_is_watching+0x15/0xb0 [ 101.191724][ T7536] ? rcu_is_watching+0x15/0xb0 [ 101.191744][ T7536] do_syscall_64+0xfa/0x3b0 [ 101.191762][ T7536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.191780][ T7536] ? clear_bhb_loop+0x60/0xb0 [ 101.191799][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.191817][ T7536] RIP: 0033:0x7fbee478ebe9 [ 101.191834][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.191850][ T7536] RSP: 002b:00007fbee5514038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.191874][ T7536] RAX: ffffffffffffffda RBX: 00007fbee49b5fa0 RCX: 00007fbee478ebe9 [ 101.191888][ T7536] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 101.191901][ T7536] RBP: 00007fbee5514090 R08: 0000000000000000 R09: 0000000000000000 [ 101.191913][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.191925][ T7536] R13: 00007fbee49b6038 R14: 00007fbee49b5fa0 R15: 00007ffc4122e3c8 [ 101.191946][ T7536] [ 101.485182][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 101.506749][ T7545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.397'. [ 101.540435][ T7545] bridge0: port 3(vlan2) entered blocking state [ 101.547929][ T7545] bridge0: port 3(vlan2) entered disabled state [ 101.554731][ T7545] vlan2: entered allmulticast mode [ 101.560444][ T7545] bridge0: entered allmulticast mode [ 101.570956][ T7545] vlan2: left allmulticast mode [ 101.583576][ T7545] bridge0: left allmulticast mode [ 101.608349][ T7548] tipc: Started in network mode [ 101.613785][ T7548] tipc: Node identity 1a72d142722f, cluster identity 4711 [ 101.621304][ T7548] tipc: Enabled bearer , priority 0 [ 101.659025][ T7548] syzkaller0: entered promiscuous mode [ 101.684342][ T7548] syzkaller0: entered allmulticast mode [ 101.745113][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 101.760284][ T7548] tipc: Resetting bearer [ 101.782543][ T7547] tipc: Resetting bearer [ 101.796859][ T7547] tipc: Disabling bearer [ 101.805154][ T7567] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 101.814480][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 101.829874][ T7567] netlink: 224 bytes leftover after parsing attributes in process `syz.0.404'. [ 101.830869][ T7571] netlink: 3612 bytes leftover after parsing attributes in process `syz.2.406'. [ 101.917508][ T7575] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 101.962043][ T7575] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 102.010891][ T7564] syzkaller0: entered promiscuous mode [ 102.024534][ T7564] syzkaller0: entered allmulticast mode [ 102.052027][ T7585] netlink: 830 bytes leftover after parsing attributes in process `syz.3.410'. [ 102.097018][ T7589] dvmrp8: entered allmulticast mode [ 102.106646][ T7591] netlink: 32 bytes leftover after parsing attributes in process `syz.0.412'. [ 102.124905][ T7591] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 102.147168][ T7591] netlink: 32 bytes leftover after parsing attributes in process `syz.0.412'. [ 102.202857][ T7591] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 102.215656][ T7601] netlink: 'syz.1.411': attribute type 23 has an invalid length. [ 102.365514][ T7588] dvmrp8: left allmulticast mode [ 102.422578][ T7611] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 102.554791][ T7619] macvtap1: entered promiscuous mode [ 102.568768][ T7619] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 102.877496][ T7655] FAULT_INJECTION: forcing a failure. [ 102.877496][ T7655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.942867][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.3.430 Not tainted syzkaller #0 PREEMPT(full) [ 102.942897][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.942909][ T7655] Call Trace: [ 102.942916][ T7655] [ 102.942925][ T7655] dump_stack_lvl+0x189/0x250 [ 102.942955][ T7655] ? __pfx____ratelimit+0x10/0x10 [ 102.942983][ T7655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.943006][ T7655] ? __pfx__printk+0x10/0x10 [ 102.943030][ T7655] ? __might_fault+0xb0/0x130 [ 102.943078][ T7655] ? aa_file_perm+0x13a/0x1550 [ 102.943097][ T7655] ? rcu_is_watching+0x15/0xb0 [ 102.943117][ T7655] ? rcu_is_watching+0x15/0xb0 [ 102.943143][ T7655] should_fail_ex+0x414/0x560 [ 102.943171][ T7655] _copy_from_user+0x2d/0xb0 [ 102.943192][ T7655] ____sys_sendmsg+0x2fe/0x830 [ 102.943215][ T7655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.943239][ T7655] ? import_iovec+0x74/0xa0 [ 102.943261][ T7655] ___sys_sendmsg+0x21f/0x2a0 [ 102.943292][ T7655] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.943327][ T7655] ? __fget_files+0x2a/0x420 [ 102.943343][ T7655] ? __fget_files+0x3a0/0x420 [ 102.943364][ T7655] __x64_sys_sendmsg+0x19b/0x260 [ 102.943385][ T7655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.943409][ T7655] ? __pfx_ksys_write+0x10/0x10 [ 102.943432][ T7655] ? rcu_is_watching+0x15/0xb0 [ 102.943452][ T7655] ? rcu_is_watching+0x15/0xb0 [ 102.943471][ T7655] do_syscall_64+0xfa/0x3b0 [ 102.943489][ T7655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.943508][ T7655] ? clear_bhb_loop+0x60/0xb0 [ 102.943528][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.943545][ T7655] RIP: 0033:0x7f767498ebe9 [ 102.943563][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.943579][ T7655] RSP: 002b:00007f76758a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.943601][ T7655] RAX: ffffffffffffffda RBX: 00007f7674bb5fa0 RCX: 00007f767498ebe9 [ 102.943615][ T7655] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.943628][ T7655] RBP: 00007f76758a7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.943639][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.943651][ T7655] R13: 00007f7674bb6038 R14: 00007f7674bb5fa0 R15: 00007fff1ca9be58 [ 102.943672][ T7655] [ 103.433946][ T7688] bond0: (slave rose0): Error: Device can not be enslaved while up [ 103.469887][ T7690] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 103.522398][ T7690] netlink: 'syz.1.438': attribute type 4 has an invalid length. [ 103.577482][ T7696] bridge2: entered allmulticast mode [ 103.793073][ T7715] syzkaller1: entered promiscuous mode [ 103.799091][ T7715] syzkaller1: entered allmulticast mode [ 104.051730][ T7723] FAULT_INJECTION: forcing a failure. [ 104.051730][ T7723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.163327][ T7723] CPU: 1 UID: 0 PID: 7723 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(full) [ 104.163357][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.163369][ T7723] Call Trace: [ 104.163376][ T7723] [ 104.163384][ T7723] dump_stack_lvl+0x189/0x250 [ 104.163414][ T7723] ? __pfx____ratelimit+0x10/0x10 [ 104.163452][ T7723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.163473][ T7723] ? __pfx__printk+0x10/0x10 [ 104.163496][ T7723] ? __might_fault+0xb0/0x130 [ 104.163525][ T7723] ? rcu_is_watching+0x15/0xb0 [ 104.163545][ T7723] should_fail_ex+0x414/0x560 [ 104.163572][ T7723] _copy_from_user+0x2d/0xb0 [ 104.163594][ T7723] ___sys_sendmsg+0x158/0x2a0 [ 104.163616][ T7723] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.163654][ T7723] ? __fget_files+0x2a/0x420 [ 104.163675][ T7723] ? __fget_files+0x3a0/0x420 [ 104.163696][ T7723] __x64_sys_sendmsg+0x19b/0x260 [ 104.163717][ T7723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.163741][ T7723] ? __pfx_ksys_write+0x10/0x10 [ 104.163768][ T7723] ? rcu_is_watching+0x15/0xb0 [ 104.163787][ T7723] do_syscall_64+0xfa/0x3b0 [ 104.163804][ T7723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.163822][ T7723] ? clear_bhb_loop+0x60/0xb0 [ 104.163842][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.163860][ T7723] RIP: 0033:0x7ff93fb8ebe9 [ 104.163877][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.163893][ T7723] RSP: 002b:00007ff940969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.163914][ T7723] RAX: ffffffffffffffda RBX: 00007ff93fdb5fa0 RCX: 00007ff93fb8ebe9 [ 104.163928][ T7723] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 104.163941][ T7723] RBP: 00007ff940969090 R08: 0000000000000000 R09: 0000000000000000 [ 104.163952][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.163963][ T7723] R13: 00007ff93fdb6038 R14: 00007ff93fdb5fa0 R15: 00007ffd50263a28 [ 104.163985][ T7723] [ 104.452518][ T7732] macvtap0: refused to change device tx_queue_len [ 104.816068][ T7770] FAULT_INJECTION: forcing a failure. [ 104.816068][ T7770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.861358][ T7770] CPU: 0 UID: 0 PID: 7770 Comm: syz.1.466 Not tainted syzkaller #0 PREEMPT(full) [ 104.861389][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.861400][ T7770] Call Trace: [ 104.861407][ T7770] [ 104.861415][ T7770] dump_stack_lvl+0x189/0x250 [ 104.861443][ T7770] ? __pfx____ratelimit+0x10/0x10 [ 104.861485][ T7770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.861506][ T7770] ? __pfx__printk+0x10/0x10 [ 104.861527][ T7770] ? rcu_is_watching+0x15/0xb0 [ 104.861544][ T7770] ? lock_acquire+0x5f/0x360 [ 104.861569][ T7770] ? __might_fault+0xb0/0x130 [ 104.861594][ T7770] ? rcu_is_watching+0x15/0xb0 [ 104.861612][ T7770] should_fail_ex+0x414/0x560 [ 104.861639][ T7770] _copy_from_user+0x2d/0xb0 [ 104.861659][ T7770] __copy_msghdr+0x3c5/0x5b0 [ 104.861680][ T7770] ___sys_sendmsg+0x1a5/0x2a0 [ 104.861700][ T7770] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.861735][ T7770] ? __fget_files+0x2a/0x420 [ 104.861756][ T7770] ? __fget_files+0x3a0/0x420 [ 104.861775][ T7770] __x64_sys_sendmsg+0x19b/0x260 [ 104.861795][ T7770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.861817][ T7770] ? __pfx_ksys_write+0x10/0x10 [ 104.861839][ T7770] ? rcu_is_watching+0x15/0xb0 [ 104.861858][ T7770] ? rcu_is_watching+0x15/0xb0 [ 104.861876][ T7770] do_syscall_64+0xfa/0x3b0 [ 104.861893][ T7770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.861911][ T7770] ? clear_bhb_loop+0x60/0xb0 [ 104.861930][ T7770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.861948][ T7770] RIP: 0033:0x7fbee478ebe9 [ 104.861965][ T7770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.861981][ T7770] RSP: 002b:00007fbee5514038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.862002][ T7770] RAX: ffffffffffffffda RBX: 00007fbee49b5fa0 RCX: 00007fbee478ebe9 [ 104.862016][ T7770] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 104.862027][ T7770] RBP: 00007fbee5514090 R08: 0000000000000000 R09: 0000000000000000 [ 104.862038][ T7770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.862049][ T7770] R13: 00007fbee49b6038 R14: 00007fbee49b5fa0 R15: 00007ffc4122e3c8 [ 104.862069][ T7770] [ 105.156603][ T7778] sctp: [Deprecated]: syz.1.469 (pid 7778) Use of int in maxseg socket option. [ 105.156603][ T7778] Use struct sctp_assoc_value instead [ 105.264701][ T7784] pimreg: entered allmulticast mode [ 105.416515][ T7783] pimreg: left allmulticast mode [ 105.574417][ T55] IPVS: starting estimator thread 0... [ 105.597327][ T7806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.673299][ T7809] IPVS: using max 41 ests per chain, 98400 per kthread [ 105.792781][ T7825] netlink: 'syz.3.483': attribute type 21 has an invalid length. [ 105.812203][ T7825] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.833412][ T7825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.840687][ T7825] IPv6: NLM_F_CREATE should be set when creating new route [ 105.848008][ T7825] IPv6: NLM_F_CREATE should be set when creating new route [ 105.855321][ T7825] IPv6: NLM_F_CREATE should be set when creating new route [ 105.932514][ T7840] netlink: 'syz.3.488': attribute type 322 has an invalid length. [ 105.974170][ T7843] veth5: entered allmulticast mode [ 106.227687][ T7857] tipc: Enabled bearer , priority 0 [ 106.330457][ T7866] __nla_validate_parse: 23 callbacks suppressed [ 106.330479][ T7866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.492'. [ 106.528830][ T7857] syzkaller0: entered promiscuous mode [ 106.536339][ T7857] syzkaller0: entered allmulticast mode [ 106.910153][ T7871] tipc: Resetting bearer [ 106.912435][ T7884] netlink: 'syz.2.498': attribute type 10 has an invalid length. [ 106.956662][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.980068][ T7884] : (slave team0): Enslaving as an active interface with an up link [ 107.025046][ T7890] FAULT_INJECTION: forcing a failure. [ 107.025046][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.053587][ T7890] CPU: 1 UID: 0 PID: 7890 Comm: syz.1.500 Not tainted syzkaller #0 PREEMPT(full) [ 107.053618][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.053630][ T7890] Call Trace: [ 107.053638][ T7890] [ 107.053646][ T7890] dump_stack_lvl+0x189/0x250 [ 107.053675][ T7890] ? __pfx____ratelimit+0x10/0x10 [ 107.053703][ T7890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.053725][ T7890] ? __pfx__printk+0x10/0x10 [ 107.053753][ T7890] ? rcu_is_watching+0x15/0xb0 [ 107.053773][ T7890] should_fail_ex+0x414/0x560 [ 107.053799][ T7890] _copy_to_user+0x31/0xb0 [ 107.053822][ T7890] simple_read_from_buffer+0xe1/0x170 [ 107.053852][ T7890] proc_fail_nth_read+0x1b3/0x220 [ 107.053874][ T7890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.053896][ T7890] ? rw_verify_area+0x2a6/0x4d0 [ 107.053919][ T7890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.053940][ T7890] vfs_read+0x1fd/0xa30 [ 107.053962][ T7890] ? fdget_pos+0x247/0x320 [ 107.053980][ T7890] ? __pfx___mutex_lock+0x10/0x10 [ 107.053999][ T7890] ? __pfx_vfs_read+0x10/0x10 [ 107.054025][ T7890] ? __fget_files+0x3a0/0x420 [ 107.054041][ T7890] ? __fget_files+0x2a/0x420 [ 107.054062][ T7890] ksys_read+0x145/0x250 [ 107.054087][ T7890] ? __pfx_ksys_read+0x10/0x10 [ 107.054114][ T7890] ? rcu_is_watching+0x15/0xb0 [ 107.054133][ T7890] do_syscall_64+0xfa/0x3b0 [ 107.054162][ T7890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.054181][ T7890] ? clear_bhb_loop+0x60/0xb0 [ 107.054202][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.054221][ T7890] RIP: 0033:0x7fbee478d5fc [ 107.054238][ T7890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.054254][ T7890] RSP: 002b:00007fbee5514030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.054276][ T7890] RAX: ffffffffffffffda RBX: 00007fbee49b5fa0 RCX: 00007fbee478d5fc [ 107.054291][ T7890] RDX: 000000000000000f RSI: 00007fbee55140a0 RDI: 0000000000000004 [ 107.054303][ T7890] RBP: 00007fbee5514090 R08: 0000000000000000 R09: 0000000000000000 [ 107.054315][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.054326][ T7890] R13: 00007fbee49b6038 R14: 00007fbee49b5fa0 R15: 00007ffc4122e3c8 [ 107.054347][ T7890] [ 107.055530][ T7876] syzkaller0: entered promiscuous mode [ 107.292074][ T7876] syzkaller0: entered allmulticast mode [ 107.299708][ T7887] tipc: Enabling of bearer rejected, failed to enable media [ 107.330182][ T7896] dvmrp0: entered allmulticast mode [ 107.337297][ T7856] tipc: Resetting bearer [ 107.357360][ T7856] tipc: Disabling bearer [ 107.508881][ T7913] netlink: 'syz.4.507': attribute type 21 has an invalid length. [ 107.518895][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 107.581372][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.590939][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.613763][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.628747][ T7919] netlink: 'syz.3.508': attribute type 5 has an invalid length. [ 107.666745][ T10] IPVS: starting estimator thread 0... [ 107.683829][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 107.693102][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.794477][ T7927] IPVS: using max 41 ests per chain, 98400 per kthread [ 107.823011][ T7943] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.511'. [ 107.826432][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 107.847459][ T7935] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.511'. [ 107.857707][ T7945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.512'. [ 107.889307][ T7947] netlink: 'syz.0.513': attribute type 3 has an invalid length. [ 107.914347][ T7946] netlink: 'syz.0.513': attribute type 3 has an invalid length. [ 107.939989][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 108.180310][ T4644] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.248188][ T7973] syz_tun: entered promiscuous mode [ 108.264474][ T7973] batadv_slave_0: entered promiscuous mode [ 108.283875][ T7973] batadv_slave_0: left promiscuous mode [ 108.290712][ T7973] syz_tun: left promiscuous mode [ 108.343798][ T3000] wlan0: Trigger new scan to find an IBSS to join [ 108.358357][ T4644] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.430364][ T4644] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.488865][ T4644] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.733833][ T4644] bridge_slave_1: left allmulticast mode [ 108.749937][ T4644] bridge_slave_1: left promiscuous mode [ 108.759562][ T4644] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.767388][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.774869][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.783916][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.792500][ T5183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.802260][ T5183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.830772][ T4644] bridge_slave_0: left allmulticast mode [ 108.836740][ T4644] bridge_slave_0: left promiscuous mode [ 108.842465][ T4644] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.925779][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 108.945306][ T4644] bond0 (unregistering): (slave gretap1): Releasing active interface [ 108.957802][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.965925][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.973780][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.978559][ T7996] sctp: [Deprecated]: syz.1.529 (pid 7996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.978559][ T7996] Use struct sctp_sack_info instead [ 108.981883][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.006753][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.086479][ T4644]  (unregistering): (slave 5): Releasing backup interface [ 109.137741][ T4644]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.158370][ T4644]  (unregistering): (slave team0): Releasing backup interface [ 109.169947][ T4644]  (unregistering): Released all slaves [ 109.184151][ T4644] bond0 (unregistering): Released all slaves [ 109.184752][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.199425][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.199679][ T4644] bond1 (unregistering): Released all slaves [ 109.206913][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.221928][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.229578][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.264745][ T7995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.275429][ T7995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.303652][ T4644] tipc: Left network mode [ 109.370374][ T7995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.383492][ T7995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.487854][ T7995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.499375][ T7995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.598948][ T4644] hsr_slave_0: left promiscuous mode [ 109.604804][ T4644] hsr_slave_1: left promiscuous mode [ 109.610807][ T4644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.618920][ T4644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.626741][ T4644] batman_adv: batadv0: Removing interface: macvlan1 [ 109.684928][ T4644] team0 (unregistering): Port device team_slave_1 removed [ 109.699844][ T4644] team0 (unregistering): Port device team_slave_0 removed [ 109.796184][ T7995] bond0: (slave netdevsim0): Releasing backup interface [ 109.808253][ T7995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.819075][ T7995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.885456][ T7989] chnl_net:caif_netlink_parms(): no params data found [ 109.902779][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 109.971145][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.981982][ T49] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.020018][ T8026] netlink: 68 bytes leftover after parsing attributes in process `syz.1.533'. [ 110.050261][ T3000] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.065748][ T3000] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.110000][ T7997] chnl_net:caif_netlink_parms(): no params data found [ 110.186795][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.196194][ T49] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.211263][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.219928][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.227960][ T8007] bridge_slave_0: entered allmulticast mode [ 110.235296][ T8007] bridge_slave_0: entered promiscuous mode [ 110.251397][ T1157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.261938][ T1157] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.275797][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.283719][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.291614][ T7989] bridge_slave_0: entered allmulticast mode [ 110.299037][ T7989] bridge_slave_0: entered promiscuous mode [ 110.307935][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.317375][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.324997][ T8007] bridge_slave_1: entered allmulticast mode [ 110.332230][ T8007] bridge_slave_1: entered promiscuous mode [ 110.823338][ T5183] Bluetooth: hci1: command tx timeout [ 110.905307][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.912577][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.933411][ T7989] bridge_slave_1: entered allmulticast mode [ 110.945222][ T7989] bridge_slave_1: entered promiscuous mode [ 111.063390][ T5183] Bluetooth: hci2: command tx timeout [ 111.147015][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.163334][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.172900][ T7997] bridge_slave_0: entered allmulticast mode [ 111.190689][ T7997] bridge_slave_0: entered promiscuous mode [ 111.303331][ T5183] Bluetooth: hci3: command tx timeout [ 111.309456][ T49] wlan0: Trigger new scan to find an IBSS to join [ 111.360006][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 111.367096][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.375173][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.383376][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.391578][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.399776][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.409032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.416883][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.424976][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.432818][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.441012][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.449186][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.457405][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.465640][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.474170][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.482417][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.491193][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.500838][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.509109][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.517403][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.525788][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.534021][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.542090][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.550686][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.559277][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.567619][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.575688][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.583760][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.592028][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.599963][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.608123][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.616195][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.624259][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.632199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.640366][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.648216][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.656454][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.664457][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.672382][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.680866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.688825][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.696834][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.704758][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.712564][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.720721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.728707][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.736873][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.744860][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.753032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.761224][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.769474][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.777902][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.785934][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.794006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.802280][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.810313][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.818283][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 111.826185][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 111.841096][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.850684][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.858115][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.866812][ T7997] bridge_slave_1: entered allmulticast mode [ 111.873991][ T7997] bridge_slave_1: entered promiscuous mode [ 111.880709][ T8045] tipc: Enabling of bearer rejected, failed to enable media [ 111.892719][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.905436][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.916220][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.968031][ T8007] team0: Port device team_slave_0 added [ 111.975978][ T8007] team0: Port device team_slave_1 added [ 111.985956][ T7997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.997573][ T7989] team0: Port device team_slave_0 added [ 112.005673][ T7989] team0: Port device team_slave_1 added [ 112.023817][ T7997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.046761][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.054567][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.082821][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.096008][ T4644] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.149911][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.159603][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.164924][ T8049] __nla_validate_parse: 2 callbacks suppressed [ 112.164945][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 112.188325][ T7989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.215184][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.222180][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.248663][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.260953][ T7997] team0: Port device team_slave_0 added [ 112.268870][ T4644] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.282692][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.290213][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.316743][ T7989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.333902][ T7997] team0: Port device team_slave_1 added [ 112.364311][ T4644] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.392046][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.400199][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.427101][ T7997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.441657][ T8007] hsr_slave_0: entered promiscuous mode [ 112.448406][ T8007] hsr_slave_1: entered promiscuous mode [ 112.463726][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.471014][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.497760][ T7997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.510196][ T4644] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.542706][ T7989] hsr_slave_0: entered promiscuous mode [ 112.549348][ T7989] hsr_slave_1: entered promiscuous mode [ 112.556188][ T7989] debugfs: 'hsr0' already exists in 'hsr' [ 112.562059][ T7989] Cannot create hsr debugfs directory [ 112.616941][ T7997] hsr_slave_0: entered promiscuous mode [ 112.623934][ T7997] hsr_slave_1: entered promiscuous mode [ 112.629993][ T7997] debugfs: 'hsr0' already exists in 'hsr' [ 112.636441][ T7997] Cannot create hsr debugfs directory [ 112.732940][ T4644] erspan0: left allmulticast mode [ 112.739327][ T4644] erspan0: left promiscuous mode [ 112.744720][ T4644] bridge0: port 1(erspan0) entered disabled state [ 112.756770][ T4644] vlan2: left promiscuous mode [ 112.761680][ T4644] veth1: left promiscuous mode [ 112.767087][ T4644] bridge1: port 3(vlan2) entered disabled state [ 112.775648][ T4644] veth0_to_bond: left allmulticast mode [ 112.781250][ T4644] veth0_to_bond: left promiscuous mode [ 112.787394][ T4644] bridge1: port 2(veth0_to_bond) entered disabled state [ 112.796732][ T4644] veth3: left promiscuous mode [ 112.801884][ T4644] bridge1: port 1(veth3) entered disabled state [ 112.903301][ T5183] Bluetooth: hci1: command tx timeout [ 112.957550][ T4644] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 112.968058][ T4644] bond0 (unregistering): Released all slaves [ 113.062986][ T4644] tipc: Left network mode [ 113.115649][ T8007] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.125980][ T8007] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.144598][ T5183] Bluetooth: hci2: command tx timeout [ 113.145895][ T8007] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.161860][ T8007] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.239986][ T7989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.262623][ T4644] hsr_slave_0: left promiscuous mode [ 113.277787][ T4644] hsr_slave_1: left promiscuous mode [ 113.287690][ T4644] veth1_macvtap: left promiscuous mode [ 113.293687][ T4644] veth0_macvtap: left promiscuous mode [ 113.299445][ T4644] veth1_vlan: left promiscuous mode [ 113.305898][ T4644] veth0_vlan: left promiscuous mode [ 113.383422][ T5183] Bluetooth: hci3: command tx timeout [ 113.480832][ T7989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.493111][ T7989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.515800][ T7989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.526707][ T7997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.539217][ T7997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.550839][ T7997] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.565735][ T7997] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.630102][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.670349][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.690121][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.697602][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.731126][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.738557][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.759362][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.775116][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.808692][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.831454][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.838680][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.848888][ T7997] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.865458][ T4644] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.873500][ T4644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.883979][ T4644] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.891637][ T4644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.907210][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.914604][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.111807][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.205134][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 114.344284][ T49] wlan0: Trigger new scan to find an IBSS to join [ 114.345162][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.435744][ T7997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.711091][ T8007] veth0_vlan: entered promiscuous mode [ 114.754747][ T8007] veth1_vlan: entered promiscuous mode [ 114.812336][ T8007] veth0_macvtap: entered promiscuous mode [ 114.845657][ T8007] veth1_macvtap: entered promiscuous mode [ 114.874979][ T8141] netlink: 6 bytes leftover after parsing attributes in process `syz.0.549'. [ 114.888819][ T8141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.938446][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.938458][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.550'. [ 114.979286][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.987224][ T5183] Bluetooth: hci1: command tx timeout [ 115.011688][ T4644] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.032006][ T7989] veth0_vlan: entered promiscuous mode [ 115.040466][ T4644] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.054433][ T4644] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.066715][ T4644] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.097595][ T7997] veth0_vlan: entered promiscuous mode [ 115.109164][ T7989] veth1_vlan: entered promiscuous mode [ 115.126507][ T7997] veth1_vlan: entered promiscuous mode [ 115.163899][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 115.174556][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.182457][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.217212][ T4644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.224960][ T7997] veth0_macvtap: entered promiscuous mode [ 115.225378][ T5183] Bluetooth: hci2: command tx timeout [ 115.238138][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.251998][ T4644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.260257][ T7997] veth1_macvtap: entered promiscuous mode [ 115.270191][ T7989] veth0_macvtap: entered promiscuous mode [ 115.298159][ T8147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.325894][ T7989] veth1_macvtap: entered promiscuous mode [ 115.336987][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.361775][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.382389][ T4644] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.392687][ T4644] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.417805][ T4644] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.427777][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.445745][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.463860][ T5183] Bluetooth: hci3: command tx timeout [ 115.472047][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.490591][ T8150] netlink: 'syz.7.535': attribute type 10 has an invalid length. [ 115.509267][ T8150] syz_tun: entered promiscuous mode [ 115.519780][ T8150] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 115.535271][ T1085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.545501][ T1085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.566102][ T1085] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.575826][ T3000] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.609927][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.633055][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.701348][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.719982][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.736797][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.749865][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.811952][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.823097][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.046318][ T8166] syz.5.523: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.068426][ T8166] CPU: 1 UID: 0 PID: 8166 Comm: syz.5.523 Not tainted syzkaller #0 PREEMPT(full) [ 116.068455][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.068466][ T8166] Call Trace: [ 116.068473][ T8166] [ 116.068481][ T8166] dump_stack_lvl+0x189/0x250 [ 116.068511][ T8166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.068532][ T8166] ? __pfx__printk+0x10/0x10 [ 116.068556][ T8166] ? lock_release+0x4b/0x3e0 [ 116.068583][ T8166] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 116.068605][ T8166] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 116.068627][ T8166] warn_alloc+0x214/0x310 [ 116.068657][ T8166] ? __pfx_warn_alloc+0x10/0x10 [ 116.068688][ T8166] ? __get_vm_area_node+0x28f/0x300 [ 116.068713][ T8166] ? hash_ipmac_create+0x358/0xfe0 [ 116.068736][ T8166] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 116.068762][ T8166] ? do_syscall_64+0xfa/0x3b0 [ 116.068792][ T8166] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.068821][ T8166] ? rcu_is_watching+0x15/0xb0 [ 116.068839][ T8166] ? hash_ipmac_create+0x358/0xfe0 [ 116.068858][ T8166] ? hash_ipmac_create+0x358/0xfe0 [ 116.068877][ T8166] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 116.068902][ T8166] ? hash_ipmac_create+0x358/0xfe0 [ 116.068922][ T8166] ? hash_ipmac_create+0x2fe/0xfe0 [ 116.068944][ T8166] hash_ipmac_create+0x358/0xfe0 [ 116.068968][ T8166] ? __nla_parse+0x40/0x60 [ 116.068996][ T8166] ? __pfx_hash_ipmac_create+0x10/0x10 [ 116.069018][ T8166] ip_set_create+0xa94/0x1940 [ 116.069041][ T8166] ? ip_set_create+0x4a2/0x1940 [ 116.069079][ T8166] ? __pfx_ip_set_create+0x10/0x10 [ 116.069112][ T8166] ? rcu_is_watching+0x15/0xb0 [ 116.069129][ T8166] ? lock_release+0x4b/0x3e0 [ 116.069155][ T8166] ? __nla_parse+0x40/0x60 [ 116.069181][ T8166] nfnetlink_rcv_msg+0xb4a/0x1130 [ 116.069206][ T8166] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 116.069236][ T8166] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.069258][ T8166] ? kasan_save_free_info+0x46/0x50 [ 116.069299][ T8166] netlink_rcv_skb+0x205/0x470 [ 116.069326][ T8166] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.069350][ T8166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.069381][ T8166] ? bpf_lsm_capable+0x9/0x20 [ 116.069405][ T8166] ? security_capable+0x7e/0x2e0 [ 116.069432][ T8166] nfnetlink_rcv+0x26a/0x2520 [ 116.069456][ T8166] ? __dev_queue_xmit+0x1d79/0x3b50 [ 116.069481][ T8166] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.069506][ T8166] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 116.069528][ T8166] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.069555][ T8166] ? ref_tracker_free+0x63a/0x7d0 [ 116.069579][ T8166] ? __asan_memcpy+0x40/0x70 [ 116.069599][ T8166] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.069622][ T8166] ? __skb_clone+0x63/0x7a0 [ 116.069644][ T8166] ? __skb_clone+0x483/0x7a0 [ 116.069664][ T8166] ? skb_clone+0x246/0x3a0 [ 116.069686][ T8166] ? __netlink_deliver_tap+0x807/0x850 [ 116.069711][ T8166] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.069737][ T8166] ? rcu_is_watching+0x15/0xb0 [ 116.069753][ T8166] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.069780][ T8166] ? lock_release+0x4b/0x3e0 [ 116.069810][ T8166] netlink_unicast+0x82c/0x9e0 [ 116.069838][ T8166] ? __pfx_netlink_unicast+0x10/0x10 [ 116.069863][ T8166] ? netlink_sendmsg+0x642/0xb30 [ 116.069878][ T8166] ? skb_put+0x11b/0x210 [ 116.069896][ T8166] netlink_sendmsg+0x805/0xb30 [ 116.069915][ T8166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.069938][ T8166] ? futex_unqueue+0x22/0x240 [ 116.069957][ T8166] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.069972][ T8166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.069999][ T8166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.070016][ T8166] __sock_sendmsg+0x21c/0x270 [ 116.070042][ T8166] ____sys_sendmsg+0x505/0x830 [ 116.070160][ T8166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.070185][ T8166] ? import_iovec+0x74/0xa0 [ 116.070207][ T8166] ___sys_sendmsg+0x21f/0x2a0 [ 116.070228][ T8166] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.070250][ T8166] ? futex_wait+0x285/0x360 [ 116.070288][ T8166] ? file_init_path+0x434/0x590 [ 116.070311][ T8166] __x64_sys_sendmsg+0x19b/0x260 [ 116.070332][ T8166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.070356][ T8166] ? rcu_is_watching+0x15/0xb0 [ 116.070376][ T8166] ? rcu_is_watching+0x15/0xb0 [ 116.070396][ T8166] do_syscall_64+0xfa/0x3b0 [ 116.070413][ T8166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.070432][ T8166] ? clear_bhb_loop+0x60/0xb0 [ 116.070451][ T8166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.070469][ T8166] RIP: 0033:0x7f90e2b8ebe9 [ 116.070488][ T8166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.070504][ T8166] RSP: 002b:00007f90e3994038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.070526][ T8166] RAX: ffffffffffffffda RBX: 00007f90e2db6090 RCX: 00007f90e2b8ebe9 [ 116.070541][ T8166] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000011 [ 116.070553][ T8166] RBP: 00007f90e2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 116.070565][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.070577][ T8166] R13: 00007f90e2db6128 R14: 00007f90e2db6090 R15: 00007ffc88eb16a8 [ 116.070598][ T8166] [ 116.071032][ T8166] Mem-Info: [ 116.604862][ T8166] active_anon:4386 inactive_anon:0 isolated_anon:0 [ 116.604862][ T8166] active_file:3469 inactive_file:39845 isolated_file:0 [ 116.604862][ T8166] unevictable:768 dirty:232 writeback:0 [ 116.604862][ T8166] slab_reclaimable:11886 slab_unreclaimable:111128 [ 116.604862][ T8166] mapped:29273 shmem:1357 pagetables:1136 [ 116.604862][ T8166] sec_pagetables:0 bounce:0 [ 116.604862][ T8166] kernel_misc_reclaimable:0 [ 116.604862][ T8166] free:1307319 free_pcp:13780 free_cma:0 [ 116.662879][ T8166] Node 0 active_anon:17504kB inactive_anon:0kB active_file:13876kB inactive_file:159196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117028kB dirty:956kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12248kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 116.711570][ T8166] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 116.745001][ T8166] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.828879][ T8166] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 116.859464][ T8166] Node 0 DMA32 free:1344984kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17356kB inactive_anon:0kB active_file:13876kB inactive_file:157636kB unevictable:1536kB writepending:952kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:27700kB local_pcp:10744kB free_cma:0kB [ 116.921014][ T8186] can: request_module (can-proto-4) failed. [ 116.940107][ T8166] lowmem_reserve[]: 0 0 1 1 1 [ 116.950681][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.563'. [ 116.953026][ T8166] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 116.991969][ T8166] lowmem_reserve[]: 0 0 0 0 0 [ 117.030063][ T8166] Node 1 Normal free:3882676kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22916kB local_pcp:15116kB free_cma:0kB [ 117.067430][ T5183] Bluetooth: hci1: command tx timeout [ 117.078497][ T8166] lowmem_reserve[]: 0 0 0 0 0 [ 117.082853][ T8205] netlink: 80 bytes leftover after parsing attributes in process `syz.0.562'. [ 117.092740][ T8166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.107414][ T8166] Node 0 DMA32: 706*4kB (UM) 447*8kB (UM) 260*16kB (UM) 146*32kB (UM) 93*64kB (M) 41*128kB (M) 8*256kB (ME) 8*512kB (UM) 9*1024kB (UME) 6*2048kB (ME) 315*4096kB (UM) = 1344320kB [ 117.127860][ T8166] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 117.137462][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.566'. [ 117.141527][ T8166] Node 1 Normal: 176*4kB (UME) 46*8kB (UME) 43*16kB (UME) 73*32kB (UME) 22*64kB (UME) 6*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (UM) = 3882624kB [ 117.169370][ T8166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.179783][ T8166] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.190347][ T8166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.201227][ T8166] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.210967][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.6.566'. [ 117.220410][ T8211] netlink: 'syz.6.566': attribute type 18 has an invalid length. [ 117.230368][ T8166] 44671 total pagecache pages [ 117.246337][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.566'. [ 117.255911][ T4644] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.256253][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 117.276110][ T4644] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.287750][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.6.566'. [ 117.300722][ T8215] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 117.310625][ T8166] 0 pages in swap cache [ 117.314949][ T8166] Free swap = 124996kB [ 117.317007][ T51] Bluetooth: hci2: command tx timeout [ 117.319839][ T8166] Total swap = 124996kB [ 117.334530][ T1085] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.357529][ T1085] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.361694][ T8211] netlink: 'syz.6.566': attribute type 18 has an invalid length. [ 117.376951][ T8166] 2097051 pages RAM [ 117.380986][ T8166] 0 pages HighMem/MovableOnly [ 117.387286][ T8166] 425663 pages reserved [ 117.391573][ T8166] 0 pages cma reserved [ 117.470640][ T8218] Bluetooth: MGMT ver 1.23 [ 117.545283][ T51] Bluetooth: hci3: command tx timeout [ 117.674063][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.6.573'. [ 117.683764][ T8238] netlink: 36 bytes leftover after parsing attributes in process `syz.6.573'. [ 117.716835][ T8239] netlink: 'syz.5.569': attribute type 16 has an invalid length. [ 117.734194][ T8239] netlink: 'syz.5.569': attribute type 17 has an invalid length. [ 117.770277][ T8239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.903526][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 117.926954][ T8253] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 118.042465][ T8260] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 118.048036][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 118.086989][ T8260] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 118.096560][ T8260] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 118.131275][ T8260] gretap1: entered allmulticast mode [ 118.172525][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 118.191810][ T8267] ip6tnl1: entered promiscuous mode [ 118.200311][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 118.636534][ T8293] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 118.650733][ T8294] openvswitch: netlink: Unknown nsh attribute 0 [ 118.657354][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.987916][ T8313] syzkaller1: entered promiscuous mode [ 118.995501][ T8313] syzkaller1: entered allmulticast mode [ 119.230705][ T8335] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 119.370652][ T8346] erspan0: entered promiscuous mode [ 119.389772][ T8346] macsec1: entered promiscuous mode [ 119.404031][ T8346] erspan0: left promiscuous mode [ 119.535587][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.543404][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.626048][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 119.993265][ T8373] netlink: 'syz.7.614': attribute type 1 has an invalid length. [ 120.001811][ T8373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.012846][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.065641][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.406914][ T1157] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.440099][ T1157] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.471005][ T1157] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.473306][ T8394] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 120.489513][ T1157] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.520697][ T1157] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.545072][ T1157] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.585257][ T1157] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.626852][ T1157] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.639162][ T8403] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 120.919190][ T8421] netlink: 'syz.5.620': attribute type 1 has an invalid length. [ 121.432923][ T8434] tipc: Started in network mode [ 121.444777][ T8434] tipc: Node identity 7ea0c6165b22, cluster identity 4711 [ 121.465747][ T8434] tipc: Enabled bearer , priority 0 [ 121.496010][ T8434] syzkaller0: entered promiscuous mode [ 121.512121][ T8434] syzkaller0: entered allmulticast mode [ 121.555229][ T8434] tipc: Resetting bearer [ 121.807569][ T8433] tipc: Resetting bearer [ 121.821107][ T8433] tipc: Disabling bearer [ 121.948372][ T8438] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 122.261746][ T8461] __nla_validate_parse: 9 callbacks suppressed [ 122.261770][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 122.294764][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.7.640'. [ 122.307685][ T8463] netlink: 'syz.7.640': attribute type 5 has an invalid length. [ 122.323576][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.7.640'. [ 122.332740][ T8463] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 122.454196][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.643'. [ 122.475028][ T8470] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 122.518118][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 122.552953][ T8478] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 122.686803][ T8470] veth5: entered promiscuous mode [ 122.705022][ T8470] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 122.720299][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 122.720879][ T8496] netlink: 'syz.5.649': attribute type 39 has an invalid length. [ 122.761557][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 122.774936][ T8470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.791270][ T8498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.650'. [ 122.883547][ T1157] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 123.078010][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 123.208553][ T8539] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 123.547902][ T8548] vlan2: entered allmulticast mode [ 123.553843][ T8548] veth1: entered allmulticast mode [ 123.578428][ T8556] netlink: 'syz.7.668': attribute type 2 has an invalid length. [ 123.764691][ T8569] veth0_to_bridge: entered promiscuous mode [ 123.780487][ T8569] veth0_to_bridge: left promiscuous mode [ 123.944589][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 124.110426][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.674'. [ 124.220268][ T8595] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 124.320575][ T8595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.538694][ T8604] netlink: 'syz.6.679': attribute type 1 has an invalid length. [ 124.997220][ T8613] tipc: Enabled bearer , priority 0 [ 125.024317][ T8613] syzkaller0: entered promiscuous mode [ 125.046112][ T8613] syzkaller0: entered allmulticast mode [ 125.125155][ T8613] tipc: Resetting bearer [ 125.161822][ T8611] tipc: Resetting bearer [ 125.202415][ T8611] tipc: Disabling bearer [ 125.328696][ T8631] bridge2: entered allmulticast mode [ 125.346952][ T10] IPVS: starting estimator thread 0... [ 125.434777][ T8632] IPVS: using max 39 ests per chain, 93600 per kthread [ 125.510786][ T8641] ipvlan1: entered promiscuous mode [ 125.591225][ T8645] netlink: 'syz.0.692': attribute type 16 has an invalid length. [ 125.897829][ T8665] netlink: 'syz.7.697': attribute type 2 has an invalid length. [ 126.206916][ T8676] netlink: 'syz.0.701': attribute type 29 has an invalid length. [ 126.236745][ T8676] netlink: 'syz.0.701': attribute type 29 has an invalid length. [ 126.544006][ T8683] bridge_slave_0: left allmulticast mode [ 126.557040][ T8683] bridge_slave_0: left promiscuous mode [ 126.576804][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.617416][ T8683] bridge_slave_1: left allmulticast mode [ 126.632796][ T8683] bridge_slave_1: left promiscuous mode [ 126.639935][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.684392][ T8683] bond0: (slave bond_slave_0): Releasing backup interface [ 126.740496][ T8683] bond0: (slave bond_slave_1): Releasing backup interface [ 126.818888][ T8683] team0: Port device team_slave_0 removed [ 126.841824][ T8683] team0: Port device team_slave_1 removed [ 126.857060][ T8695] netlink: 'syz.5.705': attribute type 3 has an invalid length. [ 126.879718][ T8683] bond2: (slave ip6gretap1): Removing an active aggregator [ 126.899742][ T8683] bond2: (slave ip6gretap1): Releasing backup interface [ 126.914234][ T8683] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 46:6b:bc:23:b8:35 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 126.936584][ T8683] bond2: (slave veth5): Releasing backup interface [ 126.994721][ T30] audit: type=1804 audit(1756174253.219:3): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.707" name="/newroot/16/cgroup.controllers" dev="tmpfs" ino=100 res=1 errno=0 [ 127.019735][ T30] audit: type=1800 audit(1756174253.229:4): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.707" name="cgroup.controllers" dev="tmpfs" ino=100 res=0 errno=0 [ 127.118769][ T8685] bond1: left promiscuous mode [ 127.125337][ T8685] geneve2: left promiscuous mode [ 127.132194][ T8685] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 127.140137][ T8685] macvtap1: left promiscuous mode [ 127.147840][ T8685] veth5: left promiscuous mode [ 127.191764][ T8706] bridge0: left allmulticast mode [ 127.225741][ T3000] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.273590][ T3000] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.283446][ T8693] lo speed is unknown, defaulting to 1000 [ 127.349879][ T8696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.372626][ T3000] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.382673][ T3000] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.429434][ T8693] lo speed is unknown, defaulting to 1000 [ 127.429542][ T3000] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.485911][ T3000] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.513784][ T3000] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.531784][ T3000] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.551321][ T8693] lo speed is unknown, defaulting to 1000 [ 127.591765][ T8713] __nla_validate_parse: 10 callbacks suppressed [ 127.591785][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.709'. [ 127.638721][ T8727] netlink: 'syz.6.715': attribute type 21 has an invalid length. [ 127.654725][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.7.709'. [ 127.668791][ T8727] netlink: 36 bytes leftover after parsing attributes in process `syz.6.715'. [ 127.825070][ T8732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.716'. [ 127.862247][ T8693] infiniband syz0: set active [ 127.867307][ T5981] lo speed is unknown, defaulting to 1000 [ 127.881931][ T8693] infiniband syz0: added lo [ 127.901131][ T8693] syz0: rxe_create_cq: returned err = -12 [ 127.922580][ T8693] infiniband syz0: Couldn't create ib_mad CQ [ 127.942120][ T8693] infiniband syz0: Couldn't open port 1 [ 127.962879][ T8738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.967723][ T8693] RDS/IB: syz0: added [ 127.988968][ T8693] smc: adding ib device syz0 with port count 1 [ 127.998090][ T8693] smc: ib device syz0 port 1 has pnetid [ 128.005562][ T8740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.039676][ T8693] lo speed is unknown, defaulting to 1000 [ 128.049631][ T5981] lo speed is unknown, defaulting to 1000 [ 132.090581][ T8774] netlink: 48 bytes leftover after parsing attributes in process `syz.6.727'. [ 132.752291][ T8693] lo speed is unknown, defaulting to 1000 [ 133.322188][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.732'. [ 133.407128][ T8693] lo speed is unknown, defaulting to 1000 [ 133.580137][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.736'. [ 133.586952][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 133.612592][ T8789] netlink: 'syz.0.729': attribute type 13 has an invalid length. [ 133.619344][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.737'. [ 133.623320][ T8789] netlink: 'syz.0.729': attribute type 17 has an invalid length. [ 133.690559][ T8785] lo speed is unknown, defaulting to 1000 [ 133.745174][ T8811] trusted_key: syz.5.737 sent an empty control message without MSG_MORE. [ 133.784100][ T8813] netlink: 24 bytes leftover after parsing attributes in process `syz.7.738'. [ 133.786971][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.806372][ T8789] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.820968][ T8789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.866377][ T8693] lo speed is unknown, defaulting to 1000 [ 133.985049][ T8818] netlink: 44 bytes leftover after parsing attributes in process `syz.7.739'. [ 134.152604][ T8693] lo speed is unknown, defaulting to 1000 [ 134.307756][ T8693] lo speed is unknown, defaulting to 1000 [ 134.569998][ T8825] lo speed is unknown, defaulting to 1000 [ 134.803477][ T8841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.067869][ T8837] lo speed is unknown, defaulting to 1000 [ 137.322059][ T8849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.367693][ T8830] lo speed is unknown, defaulting to 1000 [ 137.455959][ T8849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.595401][ T8849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.627440][ T8862] netlink: 44 bytes leftover after parsing attributes in process `syz.5.751'. [ 137.693805][ T8849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.721281][ T8865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.752'. [ 137.940129][ T3000] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.961494][ T8871] lo speed is unknown, defaulting to 1000 [ 137.973105][ T3000] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.996844][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.071148][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.085403][ T8876] netlink: 'syz.0.755': attribute type 21 has an invalid length. [ 138.110897][ T8876] ipvlan2: entered promiscuous mode [ 138.402902][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 138.500486][ T8896] netlink: 56 bytes leftover after parsing attributes in process `syz.6.759'. [ 138.501597][ T8889] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 138.510961][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.759'. [ 138.592031][ T8894] lo speed is unknown, defaulting to 1000 [ 138.675087][ T8900] netlink: 44 bytes leftover after parsing attributes in process `syz.6.759'. [ 139.131984][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.764'. [ 139.302511][ T8917] lo speed is unknown, defaulting to 1000 [ 139.408719][ T8929] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.418078][ T8929] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 139.520330][ T8925] netlink: 96 bytes leftover after parsing attributes in process `syz.6.768'. [ 139.649968][ T8943] netlink: 'syz.6.772': attribute type 1 has an invalid length. [ 139.902652][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.6.774'. [ 140.660482][ T8970] tipc: Started in network mode [ 140.670476][ T8970] tipc: Node identity 3a13092e20ce, cluster identity 4711 [ 140.685447][ T8970] tipc: Enabled bearer , priority 0 [ 140.707930][ T8970] syzkaller0: entered promiscuous mode [ 140.715177][ T8970] syzkaller0: entered allmulticast mode [ 140.731038][ T8970] tipc: Resetting bearer [ 140.740227][ T8967] tipc: Resetting bearer [ 140.754744][ T8967] tipc: Disabling bearer [ 140.962554][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.7.786'. [ 140.975314][ T8989] netlink: 16 bytes leftover after parsing attributes in process `syz.7.786'. [ 141.166002][ T9005] netlink: 'syz.7.791': attribute type 13 has an invalid length. [ 141.175576][ T9005] netlink: 'syz.7.791': attribute type 17 has an invalid length. [ 141.199096][ T9005] syz_tun: left promiscuous mode [ 141.226023][ T9005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.303046][ T9002] lo speed is unknown, defaulting to 1000 [ 141.723070][ T9017] team0 (unregistering): Port device team_slave_0 removed [ 141.747042][ T9017] team0 (unregistering): Port device team_slave_1 removed [ 141.790932][ T9022] netlink: 'syz.6.796': attribute type 21 has an invalid length. [ 141.807089][ T9022] ipvlan2: entered promiscuous mode [ 141.815213][ T9022] bridge0: port 3(ipvlan2) entered blocking state [ 141.821989][ T9022] bridge0: port 3(ipvlan2) entered disabled state [ 141.831000][ T9022] ipvlan2: entered allmulticast mode [ 141.836961][ T9022] gretap0: entered allmulticast mode [ 141.844056][ T9022] ipvlan2: left allmulticast mode [ 141.849143][ T9022] gretap0: left allmulticast mode [ 142.071132][ T9032] tipc: Started in network mode [ 142.077633][ T9032] tipc: Node identity 767544f9227f, cluster identity 4711 [ 142.085919][ T9032] tipc: Enabled bearer , priority 0 [ 142.108628][ T9032] tipc: Disabling bearer [ 142.180865][ T9041] netlink: 'syz.6.802': attribute type 3 has an invalid length. [ 142.190911][ T9041] netlink: 'syz.6.802': attribute type 3 has an invalid length. [ 142.297513][ T9051] tc_dump_action: action bad kind [ 142.302006][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.6.805'. [ 142.397150][ T9054] netlink: 'syz.6.806': attribute type 3 has an invalid length. [ 142.595094][ T9064] netlink: 'syz.5.819': attribute type 6 has an invalid length. [ 142.825403][ T9075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.840048][ T30] audit: type=1800 audit(1756174269.059:5): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.813" name="blkio.bfq.time_recursive" dev="tmpfs" ino=250 res=0 errno=0 [ 142.873849][ T9075] bridge0: port 3(bond1) entered blocking state [ 142.880388][ T9075] bridge0: port 3(bond1) entered disabled state [ 142.887658][ T9075] bond1: entered allmulticast mode [ 142.894895][ T9075] bond1: entered promiscuous mode [ 143.014719][ T9091] lo speed is unknown, defaulting to 1000 [ 143.285613][ T9108] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 143.456683][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.481883][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.722551][ T30] audit: type=1107 audit(1756174269.939:6): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q45L`(|u9Rmw׊[&!GOx*R2z^#ei5])8љWc&Y7w+mbZIAB?e&FȰ<'nL"|T&Z)CTA7f4'!oyОG4:TT(곎M^=2Au!m'VXk:{`,|\'p43Jh' [ 143.747446][ T9149] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 143.787328][ T9146] __nla_validate_parse: 3 callbacks suppressed [ 143.787353][ T9146] netlink: 20 bytes leftover after parsing attributes in process `syz.5.835'. [ 143.923943][ T9155] bridge0: port 4(erspan0) entered blocking state [ 143.952985][ T9155] bridge0: port 4(erspan0) entered disabled state [ 143.974903][ T9155] erspan0: entered allmulticast mode [ 143.982337][ T9155] erspan0: entered promiscuous mode [ 144.138503][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 144.148257][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 144.161073][ T9171] netlink: 'syz.1.843': attribute type 6 has an invalid length. [ 144.182214][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 144.182559][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.216607][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 144.217863][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.246781][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.841'. [ 144.256511][ T9174] netlink: 16 bytes leftover after parsing attributes in process `syz.6.841'. [ 144.278883][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.841'. [ 144.306223][ T9174] netlink: 16 bytes leftover after parsing attributes in process `syz.6.841'. [ 144.318569][ T9174] netlink: 5 bytes leftover after parsing attributes in process `syz.6.841'. [ 144.333082][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.342079][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.352631][ T9177] lo speed is unknown, defaulting to 1000 [ 144.363886][ T9177] lo speed is unknown, defaulting to 1000 [ 144.371962][ T9177] lo speed is unknown, defaulting to 1000 [ 144.380553][ T9177] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.396183][ T9177] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.418537][ T9177] lo speed is unknown, defaulting to 1000 [ 144.429251][ T9177] lo speed is unknown, defaulting to 1000 [ 144.436643][ T9177] lo speed is unknown, defaulting to 1000 [ 144.444206][ T9177] lo speed is unknown, defaulting to 1000 [ 144.452044][ T9177] lo speed is unknown, defaulting to 1000 [ 144.459364][ T9177] lo speed is unknown, defaulting to 1000 [ 144.780351][ T9204] tipc: Invalid UDP bearer configuration [ 144.780394][ T9204] tipc: Enabling of bearer rejected, failed to enable media [ 145.009225][ T9224] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 145.037387][ T9233] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 145.081413][ T9235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.204377][ T9243] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 145.238688][ T9243] validate_nla: 1 callbacks suppressed [ 145.238712][ T9243] netlink: 'syz.5.864': attribute type 1 has an invalid length. [ 145.356000][ T9252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.485927][ T9252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.552741][ T9252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.620659][ T9252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.743265][ T3000] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.776794][ T3000] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.805497][ T3000] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.837918][ T9266] syzkaller1: entered promiscuous mode [ 145.854546][ T9266] syzkaller1: entered allmulticast mode [ 145.864067][ T3000] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.970281][ T9274] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 145.983298][ T4644] bond0: (slave bond_slave_0): interface is now down [ 145.990231][ T4644] bond0: (slave bond_slave_1): interface is now down [ 146.026100][ T4644] bond0: (slave batadv0): interface is now down [ 146.066073][ T49] bond0: (slave bond_slave_0): interface is now down [ 146.093213][ T49] bond0: (slave bond_slave_1): interface is now down [ 146.101986][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 146.106926][ T49] bond0: (slave batadv0): interface is now down [ 146.143616][ T3000] bond0: (slave bond_slave_0): interface is now down [ 146.160298][ T3000] bond0: (slave bond_slave_1): interface is now down [ 146.176394][ T3000] bond0: (slave batadv0): interface is now down [ 146.193947][ T3000] bond0: now running without any active interface! [ 147.207933][ T9326] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 147.336365][ T9330] lo speed is unknown, defaulting to 1000 [ 147.656075][ T9330] lo speed is unknown, defaulting to 1000 [ 147.894563][ T9360] syz_tun: entered allmulticast mode [ 148.021317][ T9360] syz_tun (unregistering): left allmulticast mode [ 148.447708][ T9373] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 148.577051][ T9370] tipc: Enabled bearer , priority 0 [ 148.656587][ T9370] syzkaller0: entered promiscuous mode [ 148.662150][ T9370] syzkaller0: entered allmulticast mode [ 148.705648][ T9378] pimreg: entered allmulticast mode [ 148.820224][ T9377] pimreg: left allmulticast mode [ 148.939597][ T9370] tipc: Resetting bearer [ 148.967186][ T9383] lo speed is unknown, defaulting to 1000 [ 148.996323][ T9369] tipc: Resetting bearer [ 149.035064][ T9369] tipc: Disabling bearer [ 149.048524][ T9387] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 149.308270][ T9401] __nla_validate_parse: 19 callbacks suppressed [ 149.308291][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.907'. [ 149.448090][ T9383] lo speed is unknown, defaulting to 1000 [ 149.449947][ T9384] lo speed is unknown, defaulting to 1000 [ 149.597267][ T9412] batadv_slave_1: entered promiscuous mode [ 149.707117][ T9414] team0: Device macvlan2 is already an upper device of the team interface [ 149.724871][ T9403] lo speed is unknown, defaulting to 1000 [ 149.843468][ T9384] lo speed is unknown, defaulting to 1000 [ 149.854403][ T9403] lo speed is unknown, defaulting to 1000 [ 150.537566][ T9436] syzkaller1: entered promiscuous mode [ 150.554687][ T9436] syzkaller1: entered allmulticast mode [ 150.778326][ T9442] bond0: (slave batadv0): Releasing backup interface [ 150.826294][ T9443] rdma_op ffff88805434f9f0 conn xmit_rdma 0000000000000000 [ 150.866060][ T9442] bridge_slave_0: left allmulticast mode [ 150.905797][ T9442] bridge_slave_0: left promiscuous mode [ 150.956042][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.988509][ T9446] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 151.016690][ T9442] bridge_slave_1: left allmulticast mode [ 151.029764][ T9442] bridge_slave_1: left promiscuous mode [ 151.036014][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.050311][ T9442] bond0: (slave bond_slave_0): Releasing backup interface [ 151.071292][ T9442] bond0: (slave bond_slave_1): Releasing backup interface [ 151.092018][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.7.920'. [ 151.104089][ T9442] team0: Port device team_slave_0 removed [ 151.131265][ T9442] team0: Port device team_slave_1 removed [ 151.145214][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.7.920'. [ 151.148521][ T9442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.162874][ T9442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.172921][ T9442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.180998][ T9442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.200030][ T24] lo speed is unknown, defaulting to 1000 [ 151.216895][ T9446] bond0: (slave wlan1): refused to change device type [ 152.308751][ T9462] gretap1: entered promiscuous mode [ 152.316815][ T9462] gretap1: entered allmulticast mode [ 152.323057][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.924'. [ 152.572731][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 152.742445][ T9491] tipc: Started in network mode [ 152.765828][ T9491] tipc: Node identity 8ee2e8bc1249, cluster identity 4711 [ 152.792465][ T9491] tipc: Enabled bearer , priority 0 [ 152.821982][ T9502] syzkaller0: entered promiscuous mode [ 152.845519][ T9502] syzkaller0: entered allmulticast mode [ 152.866488][ T9500] netlink: 96 bytes leftover after parsing attributes in process `syz.0.932'. [ 152.876339][ T9489] tipc: Resetting bearer [ 152.900690][ T9489] tipc: Disabling bearer [ 152.984820][ T5183] Bluetooth: hci2: command tx timeout [ 153.045922][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.933'. [ 153.078502][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.933'. [ 153.198529][ T9516] netlink: 324 bytes leftover after parsing attributes in process `syz.0.937'. [ 153.243871][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.938'. [ 153.489539][ T9520] syzkaller0: entered promiscuous mode [ 153.510140][ T9520] syzkaller0: entered allmulticast mode [ 153.680279][ T9535] tipc: Enabled bearer , priority 0 [ 153.749586][ T9535] syzkaller0: entered promiscuous mode [ 153.775325][ T9535] syzkaller0: entered allmulticast mode [ 153.794748][ T9535] tipc: Resetting bearer [ 153.937124][ T9538] tipc: Resetting bearer [ 154.031593][ T9538] tipc: Disabling bearer [ 154.433021][ T9571] lo speed is unknown, defaulting to 1000 [ 154.568455][ T9576] tipc: Enabled bearer , priority 0 [ 154.577383][ T9576] vxcan1: entered allmulticast mode [ 154.587336][ T9576] tipc: Resetting bearer [ 154.716211][ T9575] lo speed is unknown, defaulting to 1000 [ 154.723888][ T9571] lo speed is unknown, defaulting to 1000 [ 154.838105][ T9579] __nla_validate_parse: 4 callbacks suppressed [ 154.838129][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 154.862035][ T9575] lo speed is unknown, defaulting to 1000 [ 154.905735][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'. [ 154.946607][ T9581] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 154.958164][ T9581] team0: Device ipvlan2 is already an upper device of the team interface [ 155.175589][ T9570] tipc: Disabling bearer [ 155.264948][ T9587] lo speed is unknown, defaulting to 1000 [ 155.576502][ T9605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.605129][ T9608] gtp0: entered promiscuous mode [ 155.779220][ T9618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.810993][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 155.824595][ T9587] lo speed is unknown, defaulting to 1000 [ 155.838790][ T9590] netlink: 'syz.1.960': attribute type 13 has an invalid length. [ 155.851709][ T9590] netlink: 'syz.1.960': attribute type 17 has an invalid length. [ 155.877491][ T9618] openvswitch: netlink: Duplicate or invalid key (type 0). [ 155.885263][ T9618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.985380][ T9590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.087297][ T9622] veth0_vlan: left promiscuous mode [ 156.107772][ T9622] veth0_vlan: entered promiscuous mode [ 157.810511][ T9637] netlink: 'syz.6.972': attribute type 11 has an invalid length. [ 158.019355][ T9637] netlink: 'syz.6.972': attribute type 11 has an invalid length. [ 158.412313][ T9637] netlink: 224 bytes leftover after parsing attributes in process `syz.6.972'. [ 162.458215][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.975'. [ 162.496259][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 162.631142][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.977'. [ 162.642031][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.977'. [ 162.684988][ T49] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.698816][ T49] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.733558][ T49] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.750549][ T9661] netlink: 'syz.6.978': attribute type 1 has an invalid length. [ 162.760447][ T49] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.031541][ T9678] lo speed is unknown, defaulting to 1000 [ 163.041650][ T9680] netlink: 1284 bytes leftover after parsing attributes in process `syz.7.981'. [ 163.255116][ T9678] lo speed is unknown, defaulting to 1000 [ 163.693762][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.6.990'. [ 163.759566][ T9704] vlan2: entered allmulticast mode [ 163.765167][ T9704] veth1: entered allmulticast mode [ 163.904927][ T9711] netlink: 'syz.0.993': attribute type 3 has an invalid length. [ 163.973496][ T9713] syzkaller0: entered promiscuous mode [ 163.979256][ T9713] syzkaller0: entered allmulticast mode [ 164.218193][ T9725] IPv6: sit1: Disabled Multicast RS [ 164.235681][ T9727] netlink: 'syz.5.998': attribute type 4 has an invalid length. [ 164.279032][ T5981] lo speed is unknown, defaulting to 1000 [ 164.296548][ T5981] syz1: Port: 1 Link DOWN [ 164.327591][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 164.395445][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 164.475762][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 164.582227][ T9746] netlink: 'syz.7.1002': attribute type 22 has an invalid length. [ 164.829961][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1004'. [ 164.843300][ T9750] !: renamed from dummy0 (while UP) [ 165.044933][ T9765] tipc: Enabled bearer , priority 0 [ 165.142519][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.247709][ T9765] tipc: Disabling bearer [ 165.341715][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.353947][ T9758] lo speed is unknown, defaulting to 1000 [ 165.366071][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.438092][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.028024][ T9758] lo speed is unknown, defaulting to 1000 [ 166.054047][ T9796] lo speed is unknown, defaulting to 1000 [ 166.384980][ T9796] lo speed is unknown, defaulting to 1000 [ 166.511443][ T9821] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 167.332055][ T30] audit: type=1804 audit(1756174293.549:7): pid=9873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1025" name="/newroot/107/memory.events" dev="tmpfs" ino=567 res=1 errno=0 [ 167.433434][ T30] audit: type=1800 audit(1756174293.549:8): pid=9873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1025" name="memory.events" dev="tmpfs" ino=567 res=0 errno=0 [ 167.518865][ T9884] __nla_validate_parse: 4 callbacks suppressed [ 167.518891][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1026'. [ 167.571609][ T9877] 8021q: VLANs not supported on gre0 [ 167.701296][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1030'. [ 167.731430][ T9899] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 167.748957][ T9899] bond0: (slave wlan1): refused to change device type [ 167.864009][ T9910] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1033'. [ 167.973967][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1035'. [ 168.046421][ T9928] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 168.160828][ T9933] netlink: 'syz.0.1037': attribute type 13 has an invalid length. [ 168.421447][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1040'. [ 169.289716][ T9971] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 169.328148][ T9976] tipc: Can't bind to reserved service type 2 [ 169.391909][ T9979] netlink: 'syz.5.1045': attribute type 1 has an invalid length. [ 169.401348][ T9979] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1045'. [ 169.477031][ T9976] netlink: 788 bytes leftover after parsing attributes in process `syz.6.1047'. [ 169.558960][ T9993] netlink: 'syz.1.1052': attribute type 12 has an invalid length. [ 169.568744][ T9993] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1052'. [ 169.633973][ T9988] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.732119][T10003] lo speed is unknown, defaulting to 1000 [ 169.798125][T10012] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 169.806149][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 169.893435][T10028] netlink: 'syz.5.1061': attribute type 1 has an invalid length. [ 169.909516][T10022] ip6tnl1: entered promiscuous mode [ 169.921400][T10028] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1061'. [ 169.986031][T10003] lo speed is unknown, defaulting to 1000 [ 169.996170][T10012] netlink: 'syz.1.1057': attribute type 10 has an invalid length. [ 170.021577][T10012] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 170.032815][T10012] bond0: (slave wlan1): refused to change device type [ 170.417332][T10070] lo speed is unknown, defaulting to 1000 [ 170.693717][T10070] lo speed is unknown, defaulting to 1000 [ 171.181374][T10116] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.238557][T10123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.279918][ T5981] lo speed is unknown, defaulting to 1000 [ 171.291393][ T5981] syz1: Port: 1 Link ACTIVE [ 171.302096][T10116] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.331993][T10124] lo speed is unknown, defaulting to 1000 [ 171.348729][T10127] IPVS: Error joining to the multicast group [ 171.356443][T10127] tc_dump_action: action bad kind [ 171.369602][T10116] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.461096][T10116] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.497600][T10124] lo speed is unknown, defaulting to 1000 [ 171.504616][T10134] tc_dump_action: action bad kind [ 171.585207][T10143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.619711][ T4644] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.640581][ T4644] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.745091][ T4644] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.812856][ T4644] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.614191][T10191] pim6reg1: entered promiscuous mode [ 172.620039][T10191] pim6reg1: entered allmulticast mode [ 172.732547][T10194] lo speed is unknown, defaulting to 1000 [ 172.939809][T10211] tap0: tun_chr_ioctl cmd 1074025677 [ 172.945625][T10211] tap0: linktype set to 0 [ 173.186523][T10211] netlink: 'syz.1.1109': attribute type 12 has an invalid length. [ 173.188418][T10194] lo speed is unknown, defaulting to 1000 [ 173.195087][T10211] __nla_validate_parse: 8 callbacks suppressed [ 173.195103][T10211] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1109'. [ 173.314578][T10236] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1113'. [ 173.744268][T10251] lo speed is unknown, defaulting to 1000 [ 173.839820][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1122'. [ 173.895302][T10262] netlink: 'syz.5.1121': attribute type 13 has an invalid length. [ 173.925189][T10262] netlink: 'syz.5.1121': attribute type 17 has an invalid length. [ 174.088402][T10262] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.108339][T10262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.116081][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 174.165327][T10251] lo speed is unknown, defaulting to 1000 [ 174.168372][T10274] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1126'. [ 174.216835][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.231473][T10265] lo speed is unknown, defaulting to 1000 [ 174.401823][T10286] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1129'. [ 174.415134][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1129'. [ 174.424684][T10286] bridge_slave_1: left allmulticast mode [ 174.430625][T10286] bridge_slave_1: left promiscuous mode [ 174.437542][T10286] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.457786][T10286] bridge_slave_0: left allmulticast mode [ 174.464838][T10286] bridge_slave_0: left promiscuous mode [ 174.486345][T10286] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.582008][T10265] lo speed is unknown, defaulting to 1000 [ 174.781412][T10300] can: request_module (can-proto-5) failed. [ 174.805844][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'. [ 174.818616][T10300] IPv6: sit2: Disabled Multicast RS [ 174.824883][T10300] sit2: entered allmulticast mode [ 174.911464][T10309] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 174.928555][T10309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.948643][T10309] bond4: (slave geneve2): making interface the new active one [ 174.957865][T10309] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 174.996401][T10313] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'. [ 175.006970][T10314] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'. [ 175.084295][T10313] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 175.331093][T10328] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 175.666487][T10333] netlink: 'syz.1.1138': attribute type 29 has an invalid length. [ 175.803820][T10349] macsec2: entered promiscuous mode [ 175.810399][T10349] dummy0: entered promiscuous mode [ 175.816418][T10349] macsec2: entered allmulticast mode [ 175.822447][T10349] dummy0: entered allmulticast mode [ 175.830363][T10349] dummy0: left allmulticast mode [ 175.841499][T10349] dummy0: left promiscuous mode [ 175.890108][T10353] lo speed is unknown, defaulting to 1000 [ 175.997447][T10353] lo speed is unknown, defaulting to 1000 [ 175.997503][T10354] lo speed is unknown, defaulting to 1000 [ 176.264613][T10354] lo speed is unknown, defaulting to 1000 [ 176.718070][T10398] netlink: 'syz.0.1159': attribute type 3 has an invalid length. [ 176.892050][T10418] syz_tun: entered allmulticast mode [ 176.921779][T10416] syz_tun: left allmulticast mode [ 177.078949][ T9835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.089030][ T9835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.198682][T10451] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.236428][T10451] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.426066][T10451] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.445853][T10451] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.512303][T10489] vlan0: entered promiscuous mode [ 177.538911][T10489] syz_tun: entered promiscuous mode [ 177.552134][T10499] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 177.566801][T10499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.587992][T10451] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.625734][T10451] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.678897][T10505] netlink: 'syz.6.1180': attribute type 2 has an invalid length. [ 177.789684][T10451] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.837656][T10451] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.929115][T10524] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 177.947515][T10526] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 178.035601][T10483] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.050897][T10483] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.122816][T10520] bond5 (unregistering): Released all slaves [ 178.148329][T10483] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.160694][T10483] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.189990][T10483] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.198833][T10483] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.236914][T10483] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.240521][T10547] __nla_validate_parse: 14 callbacks suppressed [ 178.240541][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1188'. [ 178.248015][T10483] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.275801][T10453] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.289995][T10453] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.329048][T10483] ================================================================== [ 178.337179][T10483] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 178.344985][T10483] Read of size 8 at addr ffff88806482acb0 by task kworker/u8:31/10483 [ 178.353268][T10483] [ 178.355719][T10483] CPU: 0 UID: 0 PID: 10483 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 178.355750][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.355765][T10483] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 178.355802][T10483] Call Trace: [ 178.355811][T10483] [ 178.355819][T10483] dump_stack_lvl+0x189/0x250 [ 178.355848][T10483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.355872][T10483] ? lock_release+0x4b/0x3e0 [ 178.355903][T10483] ? __virt_addr_valid+0x4a5/0x5c0 [ 178.355931][T10483] print_report+0xca/0x240 [ 178.355950][T10483] ? __mutex_lock+0x147/0x1350 [ 178.355967][T10483] kasan_report+0x118/0x150 [ 178.355994][T10483] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 178.356022][T10483] ? __mutex_lock+0x147/0x1350 [ 178.356042][T10483] __mutex_lock+0x147/0x1350 [ 178.356062][T10483] ? __mutex_lock+0x5bb/0x1350 [ 178.356081][T10483] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 178.356111][T10483] ? __pfx___mutex_lock+0x10/0x10 [ 178.356129][T10483] ? do_raw_spin_unlock+0x122/0x240 [ 178.356154][T10483] ? rcu_is_watching+0x15/0xb0 [ 178.356180][T10483] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 178.356211][T10483] ? process_scheduled_works+0x9ef/0x17b0 [ 178.356230][T10483] ? process_scheduled_works+0x9ef/0x17b0 [ 178.356250][T10483] process_scheduled_works+0xae1/0x17b0 [ 178.356283][T10483] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.356309][T10483] worker_thread+0x8a0/0xda0 [ 178.356336][T10483] ? __kthread_parkme+0x7b/0x200 [ 178.356362][T10483] kthread+0x70e/0x8a0 [ 178.356387][T10483] ? __pfx_worker_thread+0x10/0x10 [ 178.356406][T10483] ? __pfx_kthread+0x10/0x10 [ 178.356431][T10483] ? rcu_is_watching+0x15/0xb0 [ 178.356450][T10483] ? __pfx_kthread+0x10/0x10 [ 178.356473][T10483] ret_from_fork+0x3f9/0x770 [ 178.356495][T10483] ? __pfx_ret_from_fork+0x10/0x10 [ 178.356517][T10483] ? __switch_to_asm+0x39/0x70 [ 178.356541][T10483] ? __switch_to_asm+0x33/0x70 [ 178.356575][T10483] ? __pfx_kthread+0x10/0x10 [ 178.356599][T10483] ret_from_fork_asm+0x1a/0x30 [ 178.356632][T10483] [ 178.356640][T10483] [ 178.564454][T10483] Allocated by task 10451: [ 178.568966][T10483] kasan_save_track+0x3e/0x80 [ 178.574261][T10483] __kasan_kmalloc+0x93/0xb0 [ 178.578880][T10483] __kmalloc_noprof+0x27a/0x4f0 [ 178.583736][T10483] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 178.589999][T10483] notifier_call_chain+0x1b3/0x3e0 [ 178.595242][T10483] register_netdevice+0x1608/0x1ae0 [ 178.600508][T10483] nsim_create+0xae8/0xf10 [ 178.604948][T10483] __nsim_dev_port_add+0x6b6/0xb10 [ 178.610082][T10483] nsim_dev_port_add_all+0x37/0xf0 [ 178.615194][T10483] nsim_dev_reload_up+0x451/0x780 [ 178.620226][T10483] devlink_reload+0x4ec/0x8d0 [ 178.625179][T10483] devlink_nl_reload_doit+0xb35/0xd50 [ 178.630670][T10483] genl_family_rcv_msg_doit+0x215/0x300 [ 178.636248][T10483] genl_rcv_msg+0x60e/0x790 [ 178.640968][T10483] netlink_rcv_skb+0x205/0x470 [ 178.646019][T10483] genl_rcv+0x28/0x40 [ 178.650098][T10483] netlink_unicast+0x82c/0x9e0 [ 178.654864][T10483] netlink_sendmsg+0x805/0xb30 [ 178.659768][T10483] __sock_sendmsg+0x21c/0x270 [ 178.664600][T10483] ____sys_sendmsg+0x505/0x830 [ 178.669489][T10483] ___sys_sendmsg+0x21f/0x2a0 [ 178.674281][T10483] __x64_sys_sendmsg+0x19b/0x260 [ 178.679451][T10483] do_syscall_64+0xfa/0x3b0 [ 178.684045][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.690566][T10483] [ 178.692893][T10483] Freed by task 10453: [ 178.696972][T10483] kasan_save_track+0x3e/0x80 [ 178.701932][T10483] kasan_save_free_info+0x46/0x50 [ 178.706955][T10483] __kasan_slab_free+0x5b/0x80 [ 178.711738][T10483] kfree+0x18e/0x440 [ 178.715656][T10483] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 178.722047][T10483] notifier_call_chain+0x1b3/0x3e0 [ 178.727460][T10483] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 178.734291][T10483] unregister_netdevice_queue+0x33c/0x380 [ 178.740382][T10483] nsim_destroy+0x1dd/0x670 [ 178.746248][T10483] __nsim_dev_port_del+0x14d/0x1b0 [ 178.752128][T10483] nsim_dev_reload_destroy+0x288/0x490 [ 178.757900][T10483] nsim_dev_reload_down+0x8a/0xc0 [ 178.763045][T10483] devlink_reload+0x1b3/0x8d0 [ 178.768015][T10483] devlink_nl_reload_doit+0xb35/0xd50 [ 178.773594][T10483] genl_family_rcv_msg_doit+0x215/0x300 [ 178.779237][T10483] genl_rcv_msg+0x60e/0x790 [ 178.783930][T10483] netlink_rcv_skb+0x205/0x470 [ 178.788791][T10483] genl_rcv+0x28/0x40 [ 178.792972][T10483] netlink_unicast+0x82c/0x9e0 [ 178.797999][T10483] netlink_sendmsg+0x805/0xb30 [ 178.802885][T10483] __sock_sendmsg+0x21c/0x270 [ 178.807699][T10483] ____sys_sendmsg+0x505/0x830 [ 178.812536][T10483] ___sys_sendmsg+0x21f/0x2a0 [ 178.817250][T10483] __x64_sys_sendmsg+0x19b/0x260 [ 178.822429][T10483] do_syscall_64+0xfa/0x3b0 [ 178.827040][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.833032][T10483] [ 178.835369][T10483] Last potentially related work creation: [ 178.841287][T10483] kasan_save_stack+0x3e/0x60 [ 178.846238][T10483] kasan_record_aux_stack+0xbd/0xd0 [ 178.851749][T10483] insert_work+0x3d/0x330 [ 178.856086][T10483] __queue_work+0xbaf/0xfb0 [ 178.860701][T10483] queue_work_on+0x181/0x270 [ 178.865551][T10483] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 178.871830][T10483] udp_tunnel_push_rx_port+0x17d/0x200 [ 178.877811][T10483] geneve_offload_rx_ports+0xd7/0x160 [ 178.883298][T10483] geneve_netdevice_event+0x6a/0x80 [ 178.888632][T10483] notifier_call_chain+0x1b3/0x3e0 [ 178.893763][T10483] call_netdevice_notifiers+0x88/0xc0 [ 178.899164][T10483] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 178.905542][T10483] notifier_call_chain+0x1b3/0x3e0 [ 178.910662][T10483] register_netdevice+0x1608/0x1ae0 [ 178.915979][T10483] nsim_create+0xae8/0xf10 [ 178.920402][T10483] __nsim_dev_port_add+0x6b6/0xb10 [ 178.925807][T10483] nsim_dev_port_add_all+0x37/0xf0 [ 178.931068][T10483] nsim_dev_reload_up+0x451/0x780 [ 178.936115][T10483] devlink_reload+0x4ec/0x8d0 [ 178.940834][T10483] devlink_nl_reload_doit+0xb35/0xd50 [ 178.946266][T10483] genl_family_rcv_msg_doit+0x215/0x300 [ 178.951934][T10483] genl_rcv_msg+0x60e/0x790 [ 178.956483][T10483] netlink_rcv_skb+0x205/0x470 [ 178.962727][T10483] genl_rcv+0x28/0x40 [ 178.967365][T10483] netlink_unicast+0x82c/0x9e0 [ 178.973201][T10483] netlink_sendmsg+0x805/0xb30 [ 178.978341][T10483] __sock_sendmsg+0x21c/0x270 [ 178.983216][T10483] ____sys_sendmsg+0x505/0x830 [ 178.988008][T10483] ___sys_sendmsg+0x21f/0x2a0 [ 178.992699][T10483] __x64_sys_sendmsg+0x19b/0x260 [ 178.997643][T10483] do_syscall_64+0xfa/0x3b0 [ 179.002417][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.008416][T10483] [ 179.010750][T10483] Second to last potentially related work creation: [ 179.017431][T10483] kasan_save_stack+0x3e/0x60 [ 179.022423][T10483] kasan_record_aux_stack+0xbd/0xd0 [ 179.027799][T10483] insert_work+0x3d/0x330 [ 179.032224][T10483] __queue_work+0xcd2/0xfb0 [ 179.036901][T10483] queue_work_on+0x181/0x270 [ 179.041498][T10483] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 179.047224][T10483] udp_tunnel_push_rx_port+0x17d/0x200 [ 179.052874][T10483] vxlan_offload_rx_ports+0x139/0x200 [ 179.058304][T10483] vxlan_netdevice_event+0x111/0x470 [ 179.063692][T10483] notifier_call_chain+0x1b3/0x3e0 [ 179.068814][T10483] call_netdevice_notifiers+0x88/0xc0 [ 179.074368][T10483] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 179.080707][T10483] notifier_call_chain+0x1b3/0x3e0 [ 179.085827][T10483] register_netdevice+0x1608/0x1ae0 [ 179.091036][T10483] nsim_create+0xae8/0xf10 [ 179.095451][T10483] __nsim_dev_port_add+0x6b6/0xb10 [ 179.100579][T10483] nsim_dev_port_add_all+0x37/0xf0 [ 179.105692][T10483] nsim_dev_reload_up+0x451/0x780 [ 179.110752][T10483] devlink_reload+0x4ec/0x8d0 [ 179.115517][T10483] devlink_nl_reload_doit+0xb35/0xd50 [ 179.121094][T10483] genl_family_rcv_msg_doit+0x215/0x300 [ 179.126900][T10483] genl_rcv_msg+0x60e/0x790 [ 179.131526][T10483] netlink_rcv_skb+0x205/0x470 [ 179.136316][T10483] genl_rcv+0x28/0x40 [ 179.140307][T10483] netlink_unicast+0x82c/0x9e0 [ 179.145174][T10483] netlink_sendmsg+0x805/0xb30 [ 179.150032][T10483] __sock_sendmsg+0x21c/0x270 [ 179.154807][T10483] ____sys_sendmsg+0x505/0x830 [ 179.159688][T10483] ___sys_sendmsg+0x21f/0x2a0 [ 179.164478][T10483] __x64_sys_sendmsg+0x19b/0x260 [ 179.169420][T10483] do_syscall_64+0xfa/0x3b0 [ 179.173925][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.179903][T10483] [ 179.182405][T10483] The buggy address belongs to the object at ffff88806482ac00 [ 179.182405][T10483] which belongs to the cache kmalloc-256 of size 256 [ 179.197098][T10483] The buggy address is located 176 bytes inside of [ 179.197098][T10483] freed 256-byte region [ffff88806482ac00, ffff88806482ad00) [ 179.210930][T10483] [ 179.213391][T10483] The buggy address belongs to the physical page: [ 179.220016][T10483] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6482a [ 179.228900][T10483] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 179.238824][T10483] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 179.246959][T10483] page_type: f5(slab) [ 179.251138][T10483] raw: 00fff00000000040 ffff88801a441b40 ffffea0000c40c00 0000000000000005 [ 179.259820][T10483] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 179.268548][T10483] head: 00fff00000000040 ffff88801a441b40 ffffea0000c40c00 0000000000000005 [ 179.277431][T10483] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 179.286649][T10483] head: 00fff00000000001 ffffea0001920a81 00000000ffffffff 00000000ffffffff [ 179.296723][T10483] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 179.305409][T10483] page dumped because: kasan: bad access detected [ 179.311914][T10483] page_owner tracks the page as allocated [ 179.318138][T10483] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8430, tgid 8426 (syz.7.625), ts 121345181371, free_ts 117411884522 [ 179.339908][T10483] post_alloc_hook+0x240/0x2a0 [ 179.344712][T10483] get_page_from_freelist+0x21e4/0x22c0 [ 179.350267][T10483] __alloc_frozen_pages_noprof+0x181/0x370 [ 179.356250][T10483] alloc_pages_mpol+0x232/0x4a0 [ 179.361225][T10483] allocate_slab+0x8a/0x370 [ 179.366599][T10483] ___slab_alloc+0xbeb/0x1410 [ 179.371472][T10483] __kmalloc_noprof+0x305/0x4f0 [ 179.376519][T10483] iter_file_splice_write+0x1c6/0x10e0 [ 179.383198][T10483] direct_splice_actor+0xfe/0x160 [ 179.389651][T10483] splice_direct_to_actor+0x5a8/0xcc0 [ 179.395653][T10483] do_splice_direct+0x181/0x270 [ 179.400757][T10483] do_sendfile+0x4da/0x7e0 [ 179.405742][T10483] __se_sys_sendfile64+0x13e/0x190 [ 179.411221][T10483] do_syscall_64+0xfa/0x3b0 [ 179.416298][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.422425][T10483] page last free pid 8214 tgid 8203 stack trace: [ 179.428932][T10483] __free_frozen_pages+0xbc4/0xd30 [ 179.434059][T10483] __slab_free+0x303/0x3c0 [ 179.438477][T10483] qlist_free_all+0x97/0x140 [ 179.443172][T10483] kasan_quarantine_reduce+0x148/0x160 [ 179.448634][T10483] __kasan_slab_alloc+0x22/0x80 [ 179.453756][T10483] __kmalloc_cache_noprof+0x1be/0x3d0 [ 179.459342][T10483] do_check+0x3558/0xe520 [ 179.463887][T10483] do_check_common+0x1949/0x24f0 [ 179.469207][T10483] bpf_check+0x1746a/0x1d2d0 [ 179.473999][T10483] bpf_prog_load+0x1318/0x1930 [ 179.478858][T10483] __sys_bpf+0x528/0x870 [ 179.483217][T10483] __x64_sys_bpf+0x7c/0x90 [ 179.488596][T10483] do_syscall_64+0xfa/0x3b0 [ 179.493294][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.499972][T10483] [ 179.502500][T10483] Memory state around the buggy address: [ 179.508508][T10483] ffff88806482ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.516782][T10483] ffff88806482ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.525242][T10483] >ffff88806482ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.533835][T10483] ^ [ 179.539500][T10483] ffff88806482ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.547855][T10483] ffff88806482ad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.556092][T10483] ================================================================== [ 179.577353][T10483] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.584707][T10483] CPU: 1 UID: 0 PID: 10483 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 179.594626][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.606084][T10483] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 179.613779][T10483] Call Trace: [ 179.617495][T10483] [ 179.620620][T10483] dump_stack_lvl+0x99/0x250 [ 179.625225][T10483] ? __asan_memcpy+0x40/0x70 [ 179.629923][T10483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.635313][T10483] ? __pfx__printk+0x10/0x10 [ 179.640331][T10483] vpanic+0x281/0x750 [ 179.644367][T10483] ? preempt_schedule+0xae/0xc0 [ 179.649321][T10483] ? __pfx_vpanic+0x10/0x10 [ 179.653833][T10483] ? preempt_schedule_common+0x83/0xd0 [ 179.659338][T10483] ? preempt_schedule+0xae/0xc0 [ 179.664591][T10483] ? __pfx_preempt_schedule+0x10/0x10 [ 179.670885][T10483] panic+0xb9/0xc0 [ 179.675351][T10483] ? __pfx_panic+0x10/0x10 [ 179.680286][T10483] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 179.686597][T10483] ? __mutex_lock+0x147/0x1350 [ 179.691746][T10483] check_panic_on_warn+0x89/0xb0 [ 179.696843][T10483] ? __mutex_lock+0x147/0x1350 [ 179.701722][T10483] end_report+0x78/0x160 [ 179.706071][T10483] kasan_report+0x129/0x150 [ 179.710688][T10483] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 179.717248][T10483] ? __mutex_lock+0x147/0x1350 [ 179.722058][T10483] __mutex_lock+0x147/0x1350 [ 179.726689][T10483] ? __mutex_lock+0x5bb/0x1350 [ 179.731574][T10483] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 179.737846][T10483] ? __pfx___mutex_lock+0x10/0x10 [ 179.742888][T10483] ? do_raw_spin_unlock+0x122/0x240 [ 179.748112][T10483] ? rcu_is_watching+0x15/0xb0 [ 179.753174][T10483] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 179.759643][T10483] ? process_scheduled_works+0x9ef/0x17b0 [ 179.765475][T10483] ? process_scheduled_works+0x9ef/0x17b0 [ 179.771319][T10483] process_scheduled_works+0xae1/0x17b0 [ 179.777040][T10483] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.783226][T10483] worker_thread+0x8a0/0xda0 [ 179.787930][T10483] ? __kthread_parkme+0x7b/0x200 [ 179.792874][T10483] kthread+0x70e/0x8a0 [ 179.797036][T10483] ? __pfx_worker_thread+0x10/0x10 [ 179.802270][T10483] ? __pfx_kthread+0x10/0x10 [ 179.807062][T10483] ? rcu_is_watching+0x15/0xb0 [ 179.811830][T10483] ? __pfx_kthread+0x10/0x10 [ 179.816699][T10483] ret_from_fork+0x3f9/0x770 [ 179.821300][T10483] ? __pfx_ret_from_fork+0x10/0x10 [ 179.826443][T10483] ? __switch_to_asm+0x39/0x70 [ 179.831233][T10483] ? __switch_to_asm+0x33/0x70 [ 179.836016][T10483] ? __pfx_kthread+0x10/0x10 [ 179.840713][T10483] ret_from_fork_asm+0x1a/0x30 [ 179.845694][T10483] [ 179.849312][T10483] Kernel Offset: disabled [ 179.853746][T10483] Rebooting in 86400 seconds..