last executing test programs: 1m13.27562328s ago: executing program 1 (id=2437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r1, 0x603}, 0x14}}, 0x0) (async) socketpair(0x8979d398cbba0db7, 0x6, 0xb6, &(0x7f0000000000)) 1m13.07186225s ago: executing program 1 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r2, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100736f636b6574000280080002400000000b08000140000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac68e2c36b6ebc3b35f35e8def249aa0fa593757eab6b032c7a0000b8ed631466f8f57ce8fdf2e3606e5e9723a04c0070db907944648837edd67bc314f5cad8c5dd1dc6f821827f8ebaf07430a257031b39cc9aa56e51654cb5bdaaf9764e1815"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r2, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x3}, 0x18) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100736f636b6574000280080002400000000b08000140000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac68e2c36b6ebc3b35f35e8def249aa0fa593757eab6b032c7a0000b8ed631466f8f57ce8fdf2e3606e5e9723a04c0070db907944648837edd67bc314f5cad8c5dd1dc6f821827f8ebaf07430a257031b39cc9aa56e51654cb5bdaaf9764e1815"], 0x7c}}, 0x0) (async) 1m12.815289922s ago: executing program 1 (id=2445): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff}) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)="51f2cdd4846b1d45995719200ad7c46c4bdc14cf76d874d1ef12216d3fa343eccde1dc4843524effff17ca20353e3173d24d94a0314cf7b8d0257e153dd07e91dced667c1b4ef537b8e7a0bfddfa7b2e4946d5efe5df2cf715ebe840", 0x5c) 1m12.43405758s ago: executing program 1 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000001000085000000c60000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) socketpair(0x28, 0x3, 0x4758, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r6, &(0x7f0000000a00)={0x1f, 0x65, @none, 0x2}, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r8, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r8, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r9, r9, 0x0, 0x9) socketpair(0x0, 0x6, 0x1, &(0x7f0000000b00)={0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r7) sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c000000852d7da5742e3053343f8d4d659d03f72617170bd01faf2ff8951d6c8323fd90fd38855d03392c95a63de2cb1f5bbd338eeba208b9bf805c69a80e75622e0c26d7db78fcf0bbcc968ffe12d248595cf18ae6", @ANYRES16=r11, @ANYBLOB="000126bd7000fedbdf25350000001400fe00a588d977e6cf40828e861c69bef5cf881400fe00089dd6297047aa26c8398ecfb073cdf3"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600)="045fd05381fa0dc0b08244ed44e1268270c515e6c786caa8bf6a826f6639b8158baee19ebd222df3f7fcc2b75fd7f2bb698ee13197cb9dad08385c48a7353ecb8165e1cc26bf8a02432f74445f584b033a67eaa03886a88f219f8746b5335a185a67c2ba44dba549398da36fa6d939f388aa24cc6ef837e64604d64b98dad7276858bd378bb4ac53c5c414506319dd3986b71a187ca29afdb8b421b18b904007563239dce9543d8a59d4e823af286f7a2f60f3662e124d0a09990f8cf354934246f52dd97031ba12e278d7b39c09949c6467c7e353c572685f336a0537c6251d7850bd03a45ca9b5f720e01918f220a80f7900421073", 0xf6) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c40000001000010700000000000000000a000000b0008a8008007b800400928008003100", @ANYRES32, @ANYBLOB="9a005680040041800400f480c2ab2aa8a81073212dc6bb23c32f149c4c94a2d521f84a40b8eb33d6362815088e13501034dace4e810a7345c0300ad41e0173e73db54ed179d480989c380872234618dde25bda214dcc3aeada5df5488cb701d4da6e4b9d24ab4b757f34f692c7369af55e08d2e41918ed25b94f6228493f0a6863833b02de75c21afffc052619b104007880be3b9ddf0f4e5add0000"], 0xc4}}, 0x4000) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="39d5fd8e4dec77190b864b008349843e22648c4bffe54f1fc607d6e9b032a611c3eeb9a7fdc2eb1e9b6863d992dde3fb8a6ad0aa07c8fdd1be4a3869f117de4617740a70c52c262c276c6b3d6fd2f5e9dcd8751271fbbb21e1954d7df3857450ab87", 0x62}, {&(0x7f0000000180)="e51f5a4321bf9673e1715cdd698a618fe245048edd64d7ab64dfd8afd46937695975e0d896c66a2b49e2fc4d725d1601590d11bee5cc004ad066629b069e4f7a0e197149bef10e9df13f9297f5f83fffb38331f51f8a803738fa353e0b531e072ca3d114cc23f2d46b4243c997cafb661b819ea3608d8e2d6b90eb90171e8eccb2509108d8976fc936692c92f3bbd41672369555a7a5", 0x96}, {&(0x7f0000000240)="5a124c6d35d276d377913a2010a1e4a62fb224511686d9ae33356bd026eedbfffc1276644e720ad94dc89d291f085c7af4953fe05bf32e1387aae72e54c851556bff9c3f5859fceb7013cb793e30c35df22c06", 0x53}, {&(0x7f00000002c0)="c3d469aa197c01e471250f4af5579b8aa6e498c97d9849da1a9ebf56349de36497522aac83edf3ecc4c3e0179ebc32f017baf0966653301514b1", 0x3a}, {&(0x7f0000000500)="ee11c6953d6675c65a5ccab81f5b83d294c442105f844c7fa9cc048df284ec73bdc266e4df23c9e1a113c71ec4c21ebb53a477d255d9e5566d2f416a61ddce056e6fe07ea7d28d0504ccee0349b764ee81d97e19579ad76a8b69dcec63290eb1149fce20146d5c266e04a8bd261d2cb94c918d84253c1952681c058f2495dccf902143d65e4b26423b3de1c7c5cf78c2f7ee78c0a752cc4ce2034e81f6e7bf950e3ce14bd25fef4be4fc3bfe33", 0xad}], 0x5, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x8001}}], 0x18}, 0x8005) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x17, 0x0, 0x400, &(0x7f0000000700)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r2, r8, 0xd, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x3, 0x0, &(0x7f0000000980)=[0x6, 0x8, 0x1], 0x6}}, 0x30) 1m11.464826567s ago: executing program 1 (id=2455): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x118, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r5, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x12, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1m9.286702004s ago: executing program 1 (id=2466): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x4, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1m8.88197627s ago: executing program 32 (id=2466): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x4, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2.202585937s ago: executing program 5 (id=3268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008884}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.120015266s ago: executing program 5 (id=3271): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="249a87b804b8007f00", @ANYRES16=0x0, @ANYBLOB="020026bd7000fcdbdf251000000005003800010000000800310003000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffed8) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) 2.06707601s ago: executing program 2 (id=3272): sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r1, 0xa18, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x791f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4014}, 0xc840) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x48}}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfb}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x8050}, 0x20000004) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2800}]}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000a40)={&(0x7f0000000800), 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x15c, r5, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x41}}}}, [@NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5f4800f17ce20809bdaed8d1d8316d1aabc7a74ccda381150449ef7be8488064"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="484ca679772bca3c2242c6044fd65bfb083428df2e936323"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9c6b}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3435279b21e212fc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="860aa26d7f51133d5b1e0e0b69a81754"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a20a161fe5530aacb269268a81b20d28d5a5db4e5f8408d908b2bd9f2862fa8b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a740d9862e8138a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7b3dff96c5fba75f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3f727899269867907c450d9b60d1610c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="31b2c25c9fd4466c62a605c250b13fb94ac98553120590c6c24fa28928335bb1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ed493d1f8f2953d7afe7f67fdd22d329"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4040810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x6, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x70, r9, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040094}, 0x4008091) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f00), r8) sendmsg$NLBL_CIPSOV4_C_LISTALL(r8, &(0x7f0000001580)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001540)={&(0x7f0000000f40)={0x5e4, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49d452af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x302e6b2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58a9a612}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71d3df2b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44fd1c1c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bfc5a2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ca25f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44255e25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4766e40a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e5981e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16d29221}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7430a359}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b4d2c9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32fc759b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72f6b6e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a0aca32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x380949f0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x313f181a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42d19c09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x162b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x444b90b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cc3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b169cb8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1387a6d9}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b4a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3aafb66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a01a95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ff94fef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68bdf8f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72c24eb1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x404d4b1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe833}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x308aadb0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb295}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5737}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c7b0ea3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac06}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ff31159}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62b1ef55}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe117}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20b0c0b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39778121}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdfb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbc7d8ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf06c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77666a8d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51c9c4dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x535d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x147f095a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe611}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4edb48c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205f61ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd80f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe31f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5042cc93}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x708243ce}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ecbbb00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa353}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x467}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f3a8b68}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x511e16da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6af}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1551eb90}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x336a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe6dc653}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x477a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x174, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fce64e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62ecc4c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79cd33a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x467b41e5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71dc5fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18b1475b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e35ed9a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40c89668}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30fcdef1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70fc0f44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}, {0x4}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57401f13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ce876cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2646e5e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bad383b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcb7d3c1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7923a908}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cc9ffd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2756013d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7547c06d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17b7a9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6483c8eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf5b62ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe712}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa39d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x470473f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53c0d77c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0xcfcfb7840a1f9f2f}, {0x5, 0x3, 0x5}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x98, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x19}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1000}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x35, 0xbe, "6ccf34ed7d104dd1681a9fe37d8d074c2a29d66be89ef356644203d4707e4cfa113a77d1349047da879e86472c4403db29"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x4}, {0x12}, {0x36}, {0x48, 0x1}, {0x16, 0x1}, {0x6c}, {0x6}, {0x5, 0x1}, {0x48, 0x1}, {0x36}, {0xb}, {0x6, 0x1}, {0x18}, {0x5}, {0xc, 0x1}, {0x1b, 0x1}, {0x0, 0x1}, {0x2}, {0xb, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x74, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), r14) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r13, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.911243787s ago: executing program 5 (id=3275): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x9, 0x0, 0x20, 0xe8}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x9, 0x0, 0x20, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79", 0xed}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79", 0xed}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="7a04d682eaeaf8dafa86fe1ee4f760d0271dcd14f1bb978ea8da3e5638c4d8947dfcf473094674889f699440c9eb049b308c4eb2d025cb368856aad4b398882325fabe2a8e262edc2a608939d3522246257ff40e99976546429efb67f05c904770ffe39a1d56bb2b31540f23ac9e2811", 0x70, 0x1000c815, 0x0, 0x0) 1.909566418s ago: executing program 2 (id=3277): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r1 = socket(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001200970c25bd70000200000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040034"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a800000002060500000000e1f14b22b8ac12d8db085d479e000000000000000000540007800800093600000001080000000005001400680000000800131f00000000080008400000008208000b400000000605001400010000000800134000000003080008400000007013000300686173683a6e65742c696661636500002c0007809a1800018014020240ff01000000000000000000000000000108001240000000000800"], 0xa8}}, 0x0) 1.908971194s ago: executing program 3 (id=3278): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) 1.791492592s ago: executing program 2 (id=3280): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x9d51, 0x2}, &(0x7f0000000240)=0xbe) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x10, 0x8, 0x22, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={0x0, 0x7}, &(0x7f0000000380)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r9, 0x8, 0x8, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000410000000000000000000000000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c40000000800014000000009249f038be60001006d6574400000000014000280080002400000000808000140f6ffff0f0900010073797a30000000000900020073797a320000000020000000080a05000000000000000800020000000900010073797a30"], 0xc8}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.693164791s ago: executing program 2 (id=3282): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r2, 0x5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) 1.613164636s ago: executing program 3 (id=3283): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000980)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)="4e0db95590f005503356c1d9f8af230a744c", 0x12}, {&(0x7f00000003c0)="10f1eb8f3a5f70d34b60884199d06e556088f0efdede78c31e87b7ecb7cdf94339da8059732959f6e1b95e6f97b6e84364d2ed442d65eaf618ed02456af22ce1f702e61c5e90f102a3371d5d8d81905399b46b28f147c5ab8368b386e5dd104c697cce8cdee2de8b178ed8de0e106046afc8fbbb59d1bb69a31d137db720b4b79fa9cbe629a8c15e0afc9cd05ffda7581c08f66ef12a9abac7d173e5f17e1a1cd84d031fbe37d839c2cfb686d11fcca0d537ff", 0xb3}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="14a9825e6a000000000000000200000003000000000000008c0000000000000000000000070000004420b150000000090000000800000006000000030000000600000101000000024411f50eadd1cf790c7aee5df00241b837442ccbc1ffffffff00000400ac1414aaffffffffe0000002000000076401010000000009ffffffff0000000294040100890b69e0000002ac1414aa010e0f79ac141421ffffffffffffffff000000005c000000000000000000000007be4e5e0673ea0ce90016b1956f88d3b566830b9fac1414bbe000000294040100890cbbed83a8c58850e63bd8831043ff4c7c7958d92cbc517593e803070f12ac1efc00e00000020a01010200000000000000001400000000000000000000000100000009000000850cfec748ede86100000000000000000200000007000000000000001100000000000000000000000100000040000000000000001100000000000000000000000100000007f70b0000000000"], 0x168}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) 1.497566474s ago: executing program 2 (id=3285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'pim6reg0\x00', {0x4}, 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xfffffe5c, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}}, 0x24}}, 0x0) 1.454806485s ago: executing program 3 (id=3287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/uts\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000300)) (async) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) accept$alg(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x28, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) r5 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9", 0x10}, {&(0x7f0000000700)="d39b50944b1e27953500d8d1636e9b342f44540c037cafdabc170c0a78212e05e866581f5dd2436c40640412c5823ac90df0327faa0e7c6061ebc62a00dd79f0e5e97aa31b9698669dade22b68c0a7484a213ce0218ab6", 0x57}, {&(0x7f0000001940)="49c3d1c436d978ac278ea02fd409ee16cc1a8e81577eea8d564146cfa0b082feaceab16bd25d38b3195485206357cc80cb5d8607fa76cc58e59a74571e5b893733209652828b35d2b505e91bdb75b632c614da2e8b428d5a04", 0x59}], 0x3, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001040)=""/187, 0xbb}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x400}], 0x1, 0x22, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x4) (async) recvmmsg$unix(r6, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x10001, 0x0) 1.3494265s ago: executing program 4 (id=3289): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8916, 0x0) r1 = socket(0x1e, 0x805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x80}}, 0x0) 1.295389963s ago: executing program 2 (id=3290): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) epoll_create1(0x80000) (async) epoll_create1(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000000000002c3, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000640)=[{}, {}], 0x53, 0x10, &(0x7f0000000180), &(0x7f0000000580), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) socket(0x2, 0x2, 0x1) (async) r5 = socket(0x2, 0x2, 0x1) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000078fdca1b0d2abd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x3200000c) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) recvfrom(r5, &(0x7f0000000480)=""/62, 0x3e, 0x10060, &(0x7f00000004c0)=@ethernet={0x1}, 0x80) getsockopt(r1, 0x0, 0xd2, &(0x7f0000000240)=""/18, &(0x7f0000000280)=0x12) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r9, 0x0, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) (async) socket$inet6_sctp(0xa, 0x4, 0x84) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) (async) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) write$cgroup_int(r11, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8008811}, 0x800) (async) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8008811}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x1, 0x9, 0x8000, r0, 0x7, '\x00', r3, r4, 0x5, 0x1, 0x3, 0x2, @value=r6}, 0x50) 1.215530978s ago: executing program 0 (id=3291): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000080)={'xfrm0\x00', @ifru_names='dvmrp0\x00'}) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xb0, @none, 0x1, 0x2}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = getuid() r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000001b40)=0xe8) r8 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003d40)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000003e40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003e80)={0x0, 0x0, 0x0}, &(0x7f0000003ec0)=0xc) r11 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003f00), 0x40000) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003f40)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) r13 = socket$key(0xf, 0x3, 0x2) r14 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003f80)={0x0, 0x0}, &(0x7f0000003fc0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004000)={0x0, 0x0, 0x0}, &(0x7f0000004040)=0xc) r17 = accept4$tipc(0xffffffffffffffff, &(0x7f00000043c0)=@name, &(0x7f0000004400)=0x10, 0x800) r18 = epoll_create1(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004440)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004480)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000044c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004500)={0x0, 0x0, 0x0}, &(0x7f0000004540)=0xc) r23 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004580)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000004680)=0xe8) r25 = getgid() sendmmsg$unix(r1, &(0x7f0000004d80)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000240)="4d22f28747cd7a0acb89b1896e5a9fb7802a04347abfb4608ca4accbd3c2a5e48172b1660ea20e133d7315505a26153b911fea7228d98e72ba855a69774905af39702647d97ef54b73f099083ca29b44464727f05748932e5ed1a504b90f6300815af4146d2d6fc4d93374a842627cb36984b4d599aa5216fb7c2b916fe4ee664bdc86d59801cef1e722ec0328f01e962dfd07b5ec585fb12b95f3e56197d4a84c151c2698ed2788c8d5585041c2b553fd715ccd6f17697460e1f8bc2db0afff7f45a9b06f39f39688122fa162bd66a165f652", 0xd3}, {&(0x7f0000000340)="de63625b8ecb30cf37f3979c9193b6097c876e02e1dbcf783ac13c755f6613d19ccb41b041a31c96b29a739f4112432662d667d40a126765cb46c0967cfec949953805add7c8038a29a8ae6883b779c36d923b6dd5d240299d5072e95201d95055d33302bbadf38be34a4341d4c6db1346a7192543a7dc65f94d63bbd064edcca25afbefe53c52ebc5ef90d6bd28bec35fd439f36c59714cc80f5680e218ae3c9c9185fccfc88da14e8a52348da534c0ff0d3ff37f3f65dbfe67ad6944d139b8fb", 0xc1}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="b6aa67601448db8c33b1a2f91b2f92b946d15958cf", 0x15}, {&(0x7f0000001480)="67eb43869a9eb7fc70957652f7b081378d9c9b0a47c9a1bbce5a6766134bd496dfded96ffc79ed28bcffd76fed065e5786749a995f6f19e0f7eb4174e2ea7a28694ea75a286ff9", 0x47}], 0x5, &(0x7f0000001580)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0xb0}}, {{&(0x7f0000001640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000016c0)="df28", 0x2}, {&(0x7f0000001700)="3aba0b18a632900771bb9d4ee26adee00a23eb2879d8d5d9f0b045eac539cc7545ac7cd83eb3008b02785299d8778cc024a8f665c977eae3c588d3e8f9f7a65e20f71fa23a098e079ae858a0554eb29f05b5db4f1fedbd26f73832c7e701dee2d829b121420487d51d2720e4f0938db7a28cfc1c718a1c64786a6afdff61d493e5fa974737cd9ed27ca65c2985765bfce9c13fcb13018e6f99dc551a12cc6c8127dfcb4c8b5c6a607eaa9fd06170f85004c5c86bae107d95e57eaa095422539803b01c1db9111bd50325cb1f4c48e0e8bd11137e93411ac21fe1354edba5bf128f4b853963ca313fca95", 0xea}, {&(0x7f0000001800)="4eab9606a31065b403828811e12850994219a2ed9b0c746067bb6546fa2812f56bfd818eb5496239a4a9be0f00c99b5a392ff45e74bff217e0c34a0ae90df4e26d974f55b60124456f82181fb67238e8933107383378f4617f17642eeff7cecccca70a930041df64ea57fe0088738db160a7418b08889d0f2f3c3bc836cb90eacd9d80cd6a8c2e35ec95943f5a7aa2d6f5c49722c5e74e610e8b8c5e3f22cb96dc7c323bfab141af98e2e7ae08da0ecc7e928a8ea30811246bd046aee044405e99660b38245060c2dd541ae2b5383b6c6cb8c1f2bf9323d31424c9697b5e88e2c31ecc862b6c1cf4", 0xe8}, {&(0x7f0000001900)="335bab3fbae6a750019d08fec00723053d484b84f636ce2f0cc62cda42a60fafa0", 0x21}, {&(0x7f0000001940)="14e4338ece", 0x5}, {&(0x7f0000001980)="a8cfeef02ae5f15a294af64512019b0c0c77107502e6d1117842d46b1f8e9f539927cce657d1d0", 0x27}], 0x6, &(0x7f0000001b80)=[@rights={{0x1c, 0x1, 0x1, [r0, r4, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x98, 0x20004004}}, {{&(0x7f0000001c40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000001cc0)="4b3e9f7dd006a92f5d7f1d974069f228ffe192c77ee1a72b423c7b3e34e945926549b37142039a28cffa235a4eefdb05adef799d34d4785ee9b65703c71e73a4e993fb7bc8908530b616e2901241691c004e77bce292635d5063b8f60ed813b737ac078e5a3f7dc2760d353854969bfe372564d36fd4ee457d7ce3f9f52e1e541e274c149acd061e59592a917c320d3394b4eaebc78d20acc295fac5e446aad8146de6445c7cadeb3ae747f4410a70d1c5ba49665e210b0d82dc2b1a3156954d3607e75fde4643c58b8e9245970e01528bbcb201c98438328f27839f26236848e3392e1415f90103fe610698982e6f883a644e964e7fcadbe64b6aee1db80d8c2fdeb021410c01f4e86b48ce9e6b3a01d6a33c9f0643945a9004c0a8a0c80601573b1d5afd4a7191f8dfbd49a9c1187b7efadef2ccbca6711e94914520353d3c14397cd8dc56a00f3b66e892fe7860223ccb7ba984a29e52ae48a170341a538e88d095269c26d3c1f6b66ef01a5f38d5958bc7ea44937be92e2ecf28f8e8b96f135befce4fce5cd0099c496925624a137d1d498070460dc10401a92c2f8531ce3ab7b92733121116e290c4078c1020ec7f241d86f1bd82c2d06e761525913118a0b4aa734c507b345778213e1bcc62a2c4477ce945b057bc075ffab1d437619a7a58a20ad299a00e19c5c044109b6ea3ef5d01ccf318e63db4edff00a3b5f0a7498fe14751c1bf8c6512e1b30f0987590e48c2cd53102c92059f4d0c6db7524df5c86cf73cdd9a8cead1b6241ed1cb7ce5606709681eda3b483bc2ea93ed8cfab1f693eb84bf0ebfd4d47dd15e4be60488078a910a0572644d760312ec9b64ab60dc484bb02ed2fcd1cce0e1d9264353701b981407445116fd71f5a3da60f29e1f48fd09eedfbc4ae451891d17d3ed675f8cf823a2c82c468760a01187980634a778991210f576c4d7e691bb6d99a2311db2749cba9670627a9a87d3df9fc8579986b278c66f7ff8d005a7caabc18f683e04871a483b96f9b13a72166c3a2180c9115c17b74cceb11531f177e3e26af64e64446a97f24562a3148ba48abb738211d6a25e49a0042125fbe2410a1386b66193f640685cce4169912c120aa456be61f6a7a01496d6b72198e5e51a6e09de09a8ca367b751029b36e70dc488619aeb614747d036922d99d4ed35a180276c75eff8ce16b4e9af40b3ec39b896bd816e23829cb9e0bfa5bcf9545a17d279c3a4f9d7c4e8f44896200917480aae0279a8e8d76965e78d64af6baba9f65f2dc7199fe3ac9c69450dade7596a953541002a0dc64d57a43d768ac70f39e89e7bb430022221db5af47250d7857c6d6c1272b02b2d811c28d576619e98ba13218755de36071f70b4159ad279f2d9fb26530a3c42ed2d7e8a40ba095fba39779b74d9e9d1392cc5dc50dd3b2be5d21fc15b0a5ae088c777da90928f3671b18b5aba8f2a72e5d931bcb63d48f9b1007d23c2c276a0b064291e39126ba8acf48df6c461b06dddfed506b53dd161b49ba1c7c098436acb29cd01c832aef73b38178b72a090cb7e16796e9a7d6c69d4e771009a9c0564046dda32adb0007ecf2d2a410c5e65ea4067cdcca9e00fb1ca2b258d0749203bc95b92c29d07334b7b69352755d0dfbf696deb439b41f85b8a44e8cf1ed8d672ce9bf88d45424af5c47f5f53a5999092a6e6fdaeca725deaf83df39ee931c20496dd24c87ac18f1ed5931ec191498469ac6df5514a455d80f8d650225b695a5e16a5fd6c78b3dffb0bd4473a0cd8f2fbc51759f15ea9300350c2b2f80ecf5173625a2c2d389e5ba447acbba9f47ce5722a4460eed0b84c37a3bfab87d0341795aa623039bc433d93665bcc862a56b2bf2264e7d28dd43602ca13c8200ed102c62f4973a1f1c680f08922d9d867257e87a16498f167e273e7b183d3cec3a3ce0ae152a089a0bccd2a8df598a97c00a534d81ae3a726c449134fefc77fbcf26dc06451a12b281bf98e101bc2162ae7d3acdf2102f3d5284e2a493ff1a6b2413226f749948d712516d5813bd5003b94b8df30d550d23c95f6272f7d060cd503cd232f60c7bd54876ba24510106d628e2b99d98fc16d5eaacaa666e031113b3a325bc3025582c5e9a0f93aef258de964f93e0aa30f426a26ab3955a109984a26d6b9492cbb8767d9704f3d49612ebc4ec173954da5209f9965e110a508de2ca4980303367d46654246d4e1c6e122ddae6a2ea51b2645c49ebd207d61822f9056a99fec90ff389c8723e04c31af4d09e8a23be2e525c48f2ce276d298f424e2b206075f293f3993e728e5993cde9e4dee16a3d4231f66c6e9a68e3b0b196b7be2b1659901392cb9826ce607cdd69be16d504bcf49686659098dae19c1e392be6e429ec6ac32cb26742f895250cb6447530cb03d70b83efaed9efbcd023c7fac30f8cd3d1b180e923d14c55449ce126b4afe1d9afd2d719d543935dd6a9d17b682b9f4e56c425e7491e6360f9c0796f21ae99bb9ae55e0d4be452b4e13be4456cfd7c7c9f3305494a51c7fa8b4f4bf31dac98d9046db85f9c5c4787d30e84a507e535850ca062fe22ea84b743f669a17a11e44710897c78bb2d33fab41f93c9c280c70c4a2779f099489b904c49b8ef883527eb746924de1dc9a84a2ff39be0c5b5c14961f125e52dad13a139e32f8a1c834205bb0180fe1d02edca544c4bec26583b116145ccba9f48d1cd9f78143c22e91e3ca80d3b6f0ff952709dffde56ce4337f9532eb5a3ce9fa06c0f39a5ab83cf5f4036f9d9abd9a6bd11d362f8f08155dfe12ee0a58ebc8081ce165aba8804165d0d820b23ec2db4054b51bc97b04c91b626f3c18458d86d259519f80c7ff8a2f9925f8602786c2cc3f75f132c9d83431e0e55e3bc715eb93d6672323e9d90f9f189d2ad57cfa9adc3bfcbec1d9c2ff0df8ee67f4200d657809888dae4ad88c182cd8223764cabcc51f3bb550a1d449fcd156c68b6db13cbc0e2ed0cfe29195560723d3f4d1c5b4cdef5a1e6cd5b5cf4c9b9b62ce0a27621bc7ce042de5fcdddef1624b4fa1f7c8bbf1df2c6c5f9d49cb3766c9067d5238b510938677925d3c8438cc3c6a215a57250a8e6c17119a6bce8e84b9c9703e24dfe168a91cf7ce1f201664baf76a872f60dc9fc5187d1cbe34452d42993181d68ff51dfbc46d6d1eb922213244c142925633180ad1278b41b70ed2015d7bc12fc158229ba7aae86514daabc7a2714f1b24fc1b35324f264228f63558c3869ba65c1e8041658a1ce4f47f519d8d36a4a4e750d893a2c01ad1dcdc23a52967aa0f502085bac12d14b10c98e60bd98174469b457425a554dd92710d992a80ac06b0f2d4ab435c42bccde5b68fbca7501bf6680a21dd1526a2695d2ffa64288986d22476945ecd9ea08f5cdcd266f8c7cfebda9908a65e7e6440362fbb686b21d0a004302135b68400ab8e3c300e909230257860529cb303ca59bd58eb43db63b5e41029cf19eb0fa4fcda85c51707bb4cd8a982d0a25729532a23c63577195a455859847ad2bdca3540ee800535527b11a0a32549d2aa96c2f0dfdf367e0dfeb5dfbf303aa94e93562d25819fb5c85e7b5656db281071049f1bd4aa1d9721df6b4921f5efa58fea7c2c463c55d2e3712107876954afc07d9f7ae3075d6bf678febcb1c8c6844c231170a2b50ce5e3ec42fa54053c5f35d5f620236bd50e516718569ffce504ed94eefd2b9705f942077ec2e078d5ee0d2476feaecb04bb73bd4bbfcccf3d45b6fe364181fa5adfd11324531e11255628808dbe783b34d687063d37f55326b6f1270a8c6d1e41e2dd35eea5bf4ff571d79ade0d8ce502cb6c41cefc239731227f44a92060e12cd025911883c37a382befa0dee18865e893112f1d68907796fe9853f7221b860175290113014a28a0d7325b04008855590bb2a4b3d6b146abb174f7d357299c0b909f6845eada3d9c51cae90f24bbaa4b592606835b37cf7445183f23cf2249551501a8fedc25c1bb08229ca8a061637eef046557b10c9555291d3d9c589d0449a22d390b44ffd9c397abc764c88f74b65a61a51c14528690e40a1e4b0b0acf33778fa0723d42ab22174413e717f350efc98fedbdcae170ba3b682a197b7e006891e2286233009552d015d1c0031da5af74377b127473a3dbf6734d418a476e470e67fb4cd87d7988cc0bceb97b8a0638c29ee3e6d17a5a8341c49458c3b40c91ba2b883837065574565921bdf6506b454569ac734d0a57d8f5ba90202bce6adce16ad11ae7f1a92de57cfc942d51d6fe7ca6f9a127416b5e676b32f6924cc853e9ade2ca3c3713e36eb53f5190a014efe704554c6604a94777616fd5d9aa70c1430472df3cde1861db6e6b69478567c06e6f46f1485090a478c267ed873066a8c16a26160ae64667ffbfe02e6c27d3824790e318ba852a73123af1f49a4a1f2a8eb8dcfb72ef8aa701f8992a1fa518665546eae9a4332250b1f1c0402d444923d33ab0e5353436207ab90794fc72cb6c5f0ae0d5240bd719af03275272b82a9b83608a757689bff301dc796d64f61c6c98657051ecc5527e7650facbd5028fff8ada0da6c75a403880764b92f79ec8c81577773804f633ab3b448f634ff0ab3b16688e0f915e2fadf186484ea866f34153e79819104b18501f0c7789013b93b9dbb2859f506736ed3602393083774f93b02b7ceefdc3684652b36e6fc271dcf505782ce90fd04cd5372840416e4f9313e27221eb7fa47516fa3f659d74dd96dce96f82484b710167d6c3c66875dc89725b762dfcc74191f7dcf793475808337421afe6cdf2e8118c4e0b3a16a044957850853c28333263cfbf411c685c690a2d67fe45b70f65fe2a735e9a60a190b33828488261e1ca895f3da845503200cc7d89981635c4fdcf6ec56677ffd1f77e74fd288caec80d1a93fd20177468342983fc48e7bd9487e769c29a4802bf25f2598f6887d89838048ba0ba9fb700f7f76aaa3dd9ba489a5913b10d148280e5901f72917b0283352a26213ec7c29606ae01a95f34708689c3d46bddb5e30317746648bf996719baea88a1da5afcf49018f9bf3863a3e55347be9f746154b02db7225eb1fb69f367a9429fd7487c0fd91c748eb39d09ed18d25a83f6d392ef4bdc1383e310a989b6df78d319ca58b53e3063104e305a23eb24f0bd1c5923e76ce81a7886ec4cd29c3f98edadd113b12105e88cd35469065ba44f3e2aaa63edb429688caeff9e17900a66fceb3c2191083984a24e6e8d482822891f2dd6a1880583040e7ca0c0baff70e1a9b76b0249e121fd3dda23ff8e42a42c9c965a3729809a8edad7228be0c6e8a96b82da65470849d584304dbd0cce588f44a84f9c29dc6446659b12fdb61fb3f826e86f874aab8113800d06f18c33383bf29aac2cc8a273467719a11135e8f83a3556a99af59316ff30566660c169f37b0eed6d528bbd582e61367068aa28fe73031ee7b1455b68cd8aecb18cc82305aac8d825e0d3031a705c26dcad54f578e1670b7fe4de8305a7c609827100c094057b1c5a4ddff4c1e09e8d2d3e2d9c2187a41b7c2b95c451ed92a56ffc2d1f7166b13def4f534434e85aaebed41d8b629e7e93c82f31849112d81ef73b0f1907e13ac343a20e2a8a84fad04b25deda100f80b2652eb9bb79a4a3f54a93b8cc8bbeecd3de0b56df69728269f26731f212536da8fea69023adf28d209e31f1eef16bf7f5f37c060a40722e16923f87862d96278a08719ce649fdde7bc0e7fb858e796e9ed8318ec", 0x1000}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="a9d2a1cf19174499e337cf1e", 0xc}], 0x3, &(0x7f0000004080)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r11, r0, r0, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x80, 0x20000000}}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004100)="873ed68daa8707f3b3ca625857ae85cb7d1802b3276f3cb703aebcc09045f8bd7410119a2b11f2f15244aed2591ac5b34dedff7b7c8bdedfcde7e16d507ba1b73cb2eae0d88ea0ea4ec8a8f8151095a2901f54d9296de617329c5415e52253aa6406be", 0x63}, {&(0x7f0000004180)="e3421ff16d0536b186ff9a34b9f648827d45ff580ee5e2b5b93490992c6d026c9a33f6f401cd23fef2bae6ec582ccbea9f77d101e2a112a5c97dd6699e8b3311c7e404ff7660fb39ba9666933f1f286e2e413912095102ef7fad83d4480a061fac1c993c9f7f49c48a21a2c1b32da14ddf323bc11b7f5ece23e3ae41b797bcc219179755b3c0a7ae6d024f82ce3d5ec3dc921ca55b054180c27c9c8f693edb8fd87993666aaff43bc3b00454d7b4a0be5a56bc73bb53ce8132d835c505e6454e225e40cc7ed47b1b0458a1735d179614", 0xd0}, {&(0x7f0000004280)="290b0f957983dcb12899fda96f26cfa9d4346e42f02988cfd107eeb87efdf06098956014ad1e1d1b8e66cfa2cf2b51feb7f46ede37f39974c5eb47c54d193aa47d5151b288ab0a2e0483f9fe254bc70c294633331d88e343fdba9ced40f8181d9fcc7a1f6c583ad6ab4f5e30441a8461d34b7639368601d1e0f58e7952786b8feeac830acddb89af7ed8d9025f3d4db9904eee646942f5fa025854b11375f0c0f804511fd42497d4eb6984b831892730438f5230f33a9461513389fbd8c509f54f2f6670afdddb79edd18a930fb3524632e8b7e74a416370c45340cacfc9f61a", 0xe0}], 0x3, &(0x7f0000004880)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r17, r0, r0, r0, r0, r0, r18, r0]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0xf8, 0x4000000}}, {{&(0x7f0000004980)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004a00)="b9cf595f77eb6332b905f1adb5a1dd979cfb2f4404bac5e67c14a2ef5c47b7ad5c7d5ac8ffd6b0c92c2147a95e23294592b1ab125ef1eefb", 0x38}, {&(0x7f0000004a40)="b5cc58f95af97cf2265d62143fafaf6c9adf4458049e5aff6fd0162e247617bf6e4172ae613a0487dc623dc7fa", 0x2d}, {&(0x7f0000004a80)="a0b82f96db079df62b70b41e958962e524ee55ed20912b296eacacaeede35cd987d85ea4969d1c9611297f8bdf7626ac8faad22a77c0fa2749f7685b031524c8688c2654b0f3d7b53578973915ae4ea66be09bfb7941637346a747b167ecfaaa4e2b01e1d04ac35e9ab965640bb13ce694a74d65b6d38c477a89db0b2e74891dd87ffb42f1f38d55ba132f4cb8b5eebbf87bb4f5c246910e58350f0a7db33ee854ea5cf1c7900e806dd568ab5c360b25c5d14d76c80121b360ce2ceb0876ce459529f0a808e0e579338d09cbfff99392f686399c16161c45bac6b13821e459fe77f630c9bead3a47c2f0537c9ae797daecd5", 0xf2}], 0x3, &(0x7f0000004cc0)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x1010}}], 0x5, 0x44) 1.211606293s ago: executing program 4 (id=3292): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)) r4 = socket(0x10, 0x803, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f0000000480)={'veth0_to_team\x00', @multicast}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r13, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x34, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x0, 0x99, {0x10000, 0x6c}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.175039147s ago: executing program 0 (id=3293): ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x120, 0x1, [@m_ctinfo={0x11c, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x7e, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x810) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESOCT=r1, @ANYRESOCT], 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x184}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1.016465448s ago: executing program 5 (id=3294): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x0, [{@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x37, 0x9d, 0x3}, 0x2c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1ff, 0x3}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0xffffffffffffff9d) 839.066714ms ago: executing program 5 (id=3295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xcc, 0xa, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_USERDATA={0xf, 0xd, 0x1, 0x0, "342f1001c348ba89d097fc"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2a}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8008080}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xcc, 0xa, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_USERDATA={0xf, 0xd, 0x1, 0x0, "342f1001c348ba89d097fc"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2a}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8008080}, 0x0) 823.192216ms ago: executing program 0 (id=3296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4006) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000004}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x8080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) 807.891289ms ago: executing program 5 (id=3297): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000980)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)="4e0db95590f005503356c1d9f8af230a744c", 0x12}, {&(0x7f00000003c0)="10f1eb8f3a5f70d34b60884199d06e556088f0efdede78c31e87b7ecb7cdf94339da8059732959f6e1b95e6f97b6e84364d2ed442d65eaf618ed02456af22ce1f702e61c5e90f102a3371d5d8d81905399b46b28f147c5ab8368b386e5dd104c697cce8cdee2de8b178ed8de0e106046afc8fbbb59d1bb69a31d137db720b4b79fa9cbe629a8c15e0afc9cd05ffda7581c08f66ef12a9abac7d173e5f17e1a1cd84d031fbe37d839c2cfb686d11fcca0d537ff", 0xb3}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x168}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) 673.95858ms ago: executing program 0 (id=3298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)={0x40, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40084) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40000) r7 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x52}, 0x38, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r9) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r10, 0xc11, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x51204204}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 672.886914ms ago: executing program 4 (id=3299): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866207d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb96a9acd5261df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xea, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) socket$key(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000010003904fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 511.886327ms ago: executing program 3 (id=3300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r1 = socket$isdn(0x22, 0x3, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x41ed772e) 377.139139ms ago: executing program 4 (id=3301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0xa, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0xc090}, 0x0) r2 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x3c, &(0x7f0000000100), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="9c000000"], 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES16=r4], &(0x7f0000003ff6)='GPL\x00', 0x98, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002ab067870fe18f0e000000000000ff00000000000000d610de04ee25576b0d019cf5b0107fc033d3137e21ab84349612740fb96d0fee38b7b6eda8c6e3f72e85b99838525457b109fa5e480dd34469198c7352a4b46170d97cda6f4d0c964cca820374"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x26, 0x0, @void}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000bc0)={r5, 0x1000, "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"}, &(0x7f0000000180)=0x1008) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 304.065031ms ago: executing program 0 (id=3302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd=r0}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14c}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x9b}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, 0x0, 0x4000001) 261.549398ms ago: executing program 3 (id=3303): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000", 0x11}}, 0x20040814) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x8, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x40, 0x3, 0x2, 0x10000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f00000003c0)="c9d0eb88cefbe0786c48b152da4a6327ce668fc694fad74208dcf27bdbe4cb6dc93e9e8597c97f080865af7c69a2741911b884f0b011f83ebdfaa28895b5c8bfac7d7c887a41edaf8105dc2290a6322e1d452942416ca2fad387b5faa6609fb7553cf1874177f91c2732b32d98cb3b486919ca7fca98082104ddd72b64cb023803775debb383e8adb2b03a67feec3097aaf485757ed54dd4732d4de8af36e73a608dabf2da84ce52b2d89da53b56be8910160ab5d6570d2ca44200ab5eb37c38ec5b67902f96b775eec71323d156258e1d9a64ea84b553c723ae305171165daf2232746cc0add3e230ebd795", &(0x7f0000000300)=@udp6}, 0x20) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffef, @remote}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r8}, 0x10) r9 = socket$kcm(0x21, 0x2, 0xa) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) 148.669289ms ago: executing program 0 (id=3304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 75.977385ms ago: executing program 4 (id=3305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003b9a866aa1052a4a9418e6ce85a12a5c5da1732c2c7c51962f9f7b06d37051232eeb8e2938eb417153302019b0f9c3366e310de9b51440871964dd"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r1}, 0x10) 75.188263ms ago: executing program 3 (id=3306): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001900170001bd7000fedbdf2502201498ff02fd010016000008000f00ffffff7f"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000095280500240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r5, @ANYBLOB="ed95f4859f29f6a8b8aea29ba62c95560d3a1ac19edb93d6d85e60a1ad172560541188fde4e4021b4282026ecc5f2a45"], 0x4c}}, 0x4000040) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0) (async) syz_open_procfs$namespace(r2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001900170001bd7000fedbdf2502201498ff02fd010016000008000f00ffffff7f"], 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000095280500240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r5, @ANYBLOB="ed95f4859f29f6a8b8aea29ba62c95560d3a1ac19edb93d6d85e60a1ad172560541188fde4e4021b4282026ecc5f2a45"], 0x4c}}, 0x4000040) (async) 0s ago: executing program 4 (id=3307): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) (async) kernel console output (not intermixed with test programs): valid value (bond_slave_1) [ 287.208289][T11712] syzkaller0: entered promiscuous mode [ 287.249812][T11712] syzkaller0: entered allmulticast mode [ 287.403298][T11704] tipc: Resetting bearer [ 287.445361][T11693] tipc: Resetting bearer [ 287.516224][T11693] tipc: Disabling bearer [ 287.606293][T11739] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.640291][T11741] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 288.155594][T11770] netlink: 'syz.1.1556': attribute type 8 has an invalid length. [ 288.396865][T11783] tipc: Enabled bearer , priority 0 [ 288.413035][T11783] syzkaller0: entered promiscuous mode [ 288.438022][T11783] syzkaller0: entered allmulticast mode [ 288.474509][T11783] tipc: Resetting bearer [ 288.535895][T11782] tipc: Resetting bearer [ 288.564630][T11782] tipc: Disabling bearer [ 288.836405][T11801] __nla_validate_parse: 5 callbacks suppressed [ 288.836424][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1564'. [ 288.892571][T11801] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 288.942484][T11807] netlink: 'syz.0.1565': attribute type 21 has an invalid length. [ 289.043157][T11807] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 289.110524][T11803] tipc: Enabled bearer , priority 0 [ 289.129119][ T4611] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 289.151621][T11803] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 289.168614][T11816] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 289.189782][T11817] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1568'. [ 289.635786][ T7966] tipc: Resetting bearer [ 289.643123][T11795] tipc: Resetting bearer [ 290.873001][T11795] tipc: Disabling bearer [ 290.891417][T11834] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 291.113312][T11836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1574'. [ 291.190032][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 291.547820][T11867] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 291.641701][T11867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 291.673495][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1586'. [ 291.875489][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 291.971805][T11892] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 292.432678][T11920] syzkaller0: entered promiscuous mode [ 292.483068][T11920] syzkaller0: entered allmulticast mode [ 292.553196][T11933] netlink: 'syz.4.1605': attribute type 29 has an invalid length. [ 292.766209][T11945] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1609'. [ 292.794371][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1607'. [ 292.941205][T11952] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1610'. [ 293.016143][T11945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.032418][T11945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.044226][T11945] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 293.059431][T11945] bond0 (unregistering): Released all slaves [ 293.380067][T11968] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1615'. [ 293.982305][T12003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.148122][T12003] wg1 speed is unknown, defaulting to 1000 [ 294.457646][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 294.888908][T11604] IPVS: starting estimator thread 0... [ 294.975909][T12037] IPVS: using max 26 ests per chain, 62400 per kthread [ 295.022197][T12041] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 295.198097][T12046] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1634'. [ 295.479429][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1639'. [ 295.490609][T12059] netlink: 'syz.3.1637': attribute type 9 has an invalid length. [ 295.529904][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1639'. [ 295.566102][T12059] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1637'. [ 295.619056][T12066] netlink: 163948 bytes leftover after parsing attributes in process `syz.2.1638'. [ 295.814291][T12076] netlink: 'syz.4.1643': attribute type 10 has an invalid length. [ 295.896848][T12078] xt_limit: Overflow, try lower: 271964/0 [ 295.897748][T12076] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 295.936717][ T4611] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.972200][ T4611] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.011061][ T4611] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.033570][ T4611] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.308159][T12103] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1649'. [ 296.379185][T12114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1649'. [ 296.506692][T12119] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 296.558368][T12122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.105755][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 297.169101][T12157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1658'. [ 298.394283][T12217] dummy0: entered promiscuous mode [ 298.413538][T12217] batadv_slave_1: entered promiscuous mode [ 298.452707][T12217] debugfs: 'hsr1' already exists in 'hsr' [ 298.500278][T12217] Cannot create hsr debugfs directory [ 299.152325][T12259] netlink: 'syz.1.1685': attribute type 3 has an invalid length. [ 299.230005][T12261] netlink: 'syz.2.1686': attribute type 4 has an invalid length. [ 299.491352][T12275] __nla_validate_parse: 5 callbacks suppressed [ 299.491371][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 299.701600][T12277] netlink: 'syz.0.1691': attribute type 4 has an invalid length. [ 300.144219][T12314] bond7: entered allmulticast mode [ 300.152495][T12314] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.160672][T12314] bridge0: port 3(bond7) entered blocking state [ 300.167862][T12314] bridge0: port 3(bond7) entered disabled state [ 300.179835][T12314] bond7: entered promiscuous mode [ 300.187534][T12314] bridge0: port 3(bond7) entered blocking state [ 300.194223][T12314] bridge0: port 3(bond7) entered forwarding state [ 300.343884][T12321] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1703'. [ 300.359565][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1704'. [ 300.538209][T12334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1707'. [ 300.599493][T12339] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 300.680531][ T79] bridge0: port 3(bond7) entered disabled state [ 300.725149][T12353] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1709'. [ 300.746065][T12354] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1708'. [ 300.764068][T12358] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 300.787156][T12359] netlink: 'syz.2.1710': attribute type 8 has an invalid length. [ 300.825570][T12361] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1708'. [ 300.923433][T12364] bond8: entered promiscuous mode [ 300.928647][T12364] bond8: entered allmulticast mode [ 300.934285][T12364] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.035940][T12370] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1715'. [ 301.125599][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 301.362384][T12382] policy can only be matched on NF_INET_PRE_ROUTING [ 301.362407][T12382] unable to load match [ 301.409772][T12385] bond0: (slave gre0): Error: Device type is different from other slaves [ 302.554422][T12449] tap0: tun_chr_ioctl cmd 1074025678 [ 302.561609][T12449] tap0: group set to 0 [ 302.600041][T12449] tap0: tun_chr_ioctl cmd 1074025673 [ 302.606884][T12453] tap0: tun_chr_ioctl cmd 1074025678 [ 302.615249][T12453] tap0: group set to 0 [ 302.724418][T12457] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1738'. [ 302.744513][T12459] syzkaller0: entered promiscuous mode [ 302.755744][T12459] syzkaller0: entered allmulticast mode [ 302.873692][T12466] veth0_to_batadv: entered promiscuous mode [ 302.977109][T12474] tipc: Enabled bearer , priority 0 [ 303.067550][T12459] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 303.358692][T12481] tipc: Resetting bearer [ 303.550607][T12458] tipc: Resetting bearer [ 303.684403][T12458] tipc: Disabling bearer [ 303.709116][T12504] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 303.931956][T12511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.176523][T12532] openvswitch: netlink: Flow key attr not present in new flow. [ 304.587789][T12553] nbd: must specify at least one socket [ 304.597344][T12546] vlan2: entered promiscuous mode [ 304.618358][T12546] vlan2: entered allmulticast mode [ 304.628553][T12546] hsr_slave_1: entered allmulticast mode [ 306.328224][T12558] __nla_validate_parse: 5 callbacks suppressed [ 306.328241][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 306.549800][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 306.561566][T12591] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1768'. [ 306.778362][T12606] netlink: 'syz.0.1769': attribute type 6 has an invalid length. [ 306.899007][T12614] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1775'. [ 306.914854][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 306.929987][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'. [ 307.290842][T12636] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.440052][T12641] nft_compat: unsupported protocol 60 [ 307.608800][T12654] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 307.683045][T12654] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 307.945250][T12666] openvswitch: netlink: IP tunnel dst address not specified [ 308.425045][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 308.466738][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 308.478683][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 309.065452][T12725] pim6reg1: entered promiscuous mode [ 309.102268][T12725] pim6reg1: entered allmulticast mode [ 309.147082][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 309.170812][T12729] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 309.300808][T12740] netlink: 'syz.1.1815': attribute type 8 has an invalid length. [ 309.556543][T12751] delete_channel: no stack [ 309.621857][T12747] wg1 speed is unknown, defaulting to 1000 [ 309.729434][T12760] IPVS: set_ctl: invalid protocol: 115 172.30.1.1:20002 [ 309.761742][ T30] audit: type=1107 audit(1756576363.233:8): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‡-ÝÄS™ŠzÞa"Îg‚w,µnPŸæ{PÃ3X"•™óBZBŸ6û22ÈGó¨Cý\2¾ ‹Lã‰jѧúQØ5 [ 309.761742][ T30] #¶íYs—ÖË-2+ø+nðà. ÏY b' [ 310.582476][T12797] syzkaller1: entered promiscuous mode [ 310.649531][T12797] syzkaller1: entered allmulticast mode [ 310.980615][T12807] 8021q: VLANs not supported on ip6tnl0 [ 311.258169][T12823] erspan0: entered allmulticast mode [ 311.638488][T12843] __nla_validate_parse: 4 callbacks suppressed [ 311.638508][T12843] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1841'. [ 311.973778][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1847'. [ 312.078471][T12870] netlink: 'syz.3.1849': attribute type 39 has an invalid length. [ 312.137028][T12872] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1849'. [ 312.830194][T12904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.082052][T12926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1859'. [ 313.134438][T12929] netlink: 'syz.4.1863': attribute type 1 has an invalid length. [ 313.238442][T12936] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1863'. [ 313.290950][T12929] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 313.304156][T12929] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 313.315311][T12929] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 313.451564][T12943] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1866'. [ 313.456556][T12936] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 313.504547][T12936] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 313.816781][T12964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1870'. [ 313.846029][T12964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1870'. [ 314.024068][T12978] veth0: entered promiscuous mode [ 314.031905][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 314.102825][T12978] veth0 (unregistering): left promiscuous mode [ 314.408573][T12989] xt_limit: Overflow, try lower: 271964/0 [ 314.599631][T13008] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 314.717801][T13008] bond5: entered promiscuous mode [ 314.730378][T13008] bond5: entered allmulticast mode [ 314.743181][T13008] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.799217][T13019] kthread_run failed with err -4 [ 315.034603][T13029] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1889'. [ 315.147056][T13034] IPVS: Error connecting to the multicast addr [ 315.341008][T13043] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 315.424791][T13043] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.493110][T13051] bond9: (slave veth11): Enslaving as an active interface with a down link [ 315.562040][T13043] veth13: entered promiscuous mode [ 315.590947][T13043] bond9: (slave veth13): Enslaving as an active interface with a down link [ 315.666855][T13043] vlan2: entered allmulticast mode [ 315.681452][T13043] team0: entered allmulticast mode [ 315.695752][T13043] team_slave_0: entered allmulticast mode [ 315.717444][T13043] team_slave_1: entered allmulticast mode [ 315.733749][T13043] team0: Device vlan2 is already an upper device of the team interface [ 315.920339][T13074] netlink: 'syz.0.1902': attribute type 8 has an invalid length. [ 315.946234][T13079] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 315.987629][T13079] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 315.995631][T13079] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 316.369125][T13106] netlink: 'syz.0.1909': attribute type 4 has an invalid length. [ 316.389396][T13105] netlink: 'syz.0.1909': attribute type 4 has an invalid length. [ 316.418051][T13111] syz.1.1911: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.450122][T13111] CPU: 1 UID: 0 PID: 13111 Comm: syz.1.1911 Not tainted syzkaller #0 PREEMPT(full) [ 316.450160][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.450174][T13111] Call Trace: [ 316.450182][T13111] [ 316.450192][T13111] dump_stack_lvl+0x189/0x250 [ 316.450228][T13111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.450255][T13111] ? __pfx__printk+0x10/0x10 [ 316.450288][T13111] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.450315][T13111] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.450342][T13111] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 316.450370][T13111] warn_alloc+0x214/0x310 [ 316.450404][T13111] ? stack_depot_save_flags+0x40/0x860 [ 316.450436][T13111] ? __pfx_warn_alloc+0x10/0x10 [ 316.450469][T13111] ? kasan_save_track+0x4f/0x80 [ 316.450496][T13111] ? xskq_create+0x56/0x170 [ 316.450551][T13111] ? xsk_init_queue+0xb0/0x110 [ 316.450586][T13111] ? xsk_setsockopt+0x4dc/0x8d0 [ 316.450611][T13111] ? do_sock_setsockopt+0x179/0x1b0 [ 316.450630][T13111] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 316.450651][T13111] ? do_syscall_64+0xfa/0x3b0 [ 316.450667][T13111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.450699][T13111] __vmalloc_node_range_noprof+0x125/0x12f0 [ 316.450778][T13111] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.450810][T13111] ? xskq_create+0x56/0x170 [ 316.450842][T13111] ? __kasan_kmalloc+0x93/0xb0 [ 316.450872][T13111] vmalloc_user_noprof+0xad/0xf0 [ 316.450902][T13111] ? xskq_create+0xbf/0x170 [ 316.450931][T13111] xskq_create+0xbf/0x170 [ 316.450962][T13111] xsk_init_queue+0xb0/0x110 [ 316.450993][T13111] xsk_setsockopt+0x4dc/0x8d0 [ 316.451022][T13111] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.451049][T13111] ? __pfx_aa_sk_perm+0x10/0x10 [ 316.451084][T13111] ? aa_sock_opt_perm+0xff/0x1b0 [ 316.451107][T13111] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 316.451127][T13111] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.451157][T13111] do_sock_setsockopt+0x179/0x1b0 [ 316.451183][T13111] __x64_sys_setsockopt+0x13f/0x1b0 [ 316.451210][T13111] do_syscall_64+0xfa/0x3b0 [ 316.451227][T13111] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.451255][T13111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.451275][T13111] ? clear_bhb_loop+0x60/0xb0 [ 316.451300][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.451319][T13111] RIP: 0033:0x7fc23218ebe9 [ 316.451338][T13111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.451356][T13111] RSP: 002b:00007fc233063038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.451377][T13111] RAX: ffffffffffffffda RBX: 00007fc2323c5fa0 RCX: 00007fc23218ebe9 [ 316.451392][T13111] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 316.451405][T13111] RBP: 00007fc232211e19 R08: 0000000000000004 R09: 0000000000000000 [ 316.451417][T13111] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.451430][T13111] R13: 00007fc2323c6038 R14: 00007fc2323c5fa0 R15: 00007fff763657f8 [ 316.451463][T13111] [ 316.451471][T13111] Mem-Info: [ 316.764258][T13111] active_anon:6004 inactive_anon:0 isolated_anon:0 [ 316.764258][T13111] active_file:3211 inactive_file:39923 isolated_file:0 [ 316.764258][T13111] unevictable:768 dirty:173 writeback:0 [ 316.764258][T13111] slab_reclaimable:11330 slab_unreclaimable:102959 [ 316.764258][T13111] mapped:29553 shmem:1374 pagetables:1324 [ 316.764258][T13111] sec_pagetables:0 bounce:0 [ 316.764258][T13111] kernel_misc_reclaimable:0 [ 316.764258][T13111] free:1317655 free_pcp:13500 free_cma:0 [ 316.812038][T13111] Node 0 active_anon:24016kB inactive_anon:0kB active_file:12844kB inactive_file:159488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118212kB dirty:692kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13640kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.948120][T13125] __nla_validate_parse: 6 callbacks suppressed [ 316.948138][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 316.954889][T13111] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 317.004543][T13111] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.044115][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 317.095340][T13129] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1916'. [ 317.131782][T13111] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 317.170425][T13111] Node 0 DMA32 free:1359480kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23868kB inactive_anon:0kB active_file:12844kB inactive_file:157920kB unevictable:1536kB writepending:692kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:36520kB local_pcp:16100kB free_cma:0kB [ 317.250304][T13123] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 317.252064][T13111] lowmem_reserve[]: 0 0 1 1 1 [ 317.272092][T13111] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 317.284674][T13123] netlink: 'syz.2.1914': attribute type 10 has an invalid length. [ 317.320790][T13111] lowmem_reserve[]: 0 0 0 0 0 [ 317.327380][T13111] Node 1 Normal free:3895684kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17568kB local_pcp:8536kB free_cma:0kB [ 317.390690][T13111] lowmem_reserve[]: 0 0 0 0 0 [ 317.405500][T13123] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 317.429289][T13123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.466642][T13111] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.468115][T13142] netlink: 'syz.3.1919': attribute type 1 has an invalid length. [ 317.513585][T13142] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1919'. [ 317.518198][T13123] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 317.525022][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 317.541087][T13111] Node 0 DMA32: 1410*4kB (UM) 1020*8kB (UM) 215*16kB (UM) 272*32kB (UM) 863*64kB (UM) 303*128kB (UME) 93*256kB (UM) 30*512kB (UM) 20*1024kB (UM) 2*2048kB (U) 287*4096kB (UM) = 1359256kB [ 317.616491][T13111] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.639834][T13149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1920'. [ 317.661852][T13130] bond0: (slave wlan1): Releasing backup interface [ 317.678353][T13111] Node 1 Normal: 199*4kB (UE) 67*8kB (UME) 49*16kB (UME) 80*32kB (UME) 27*64kB (UME) 5*128kB (UME) 4*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895684kB [ 317.708324][T13111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.721370][T13111] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.740150][T13111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.750343][T13111] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.761871][T13111] 44506 total pagecache pages [ 317.767714][T13111] 0 pages in swap cache [ 317.772059][T13111] Free swap = 124996kB [ 317.773700][T13143] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 317.777623][T13111] Total swap = 124996kB [ 317.797737][T13111] 2097051 pages RAM [ 317.801638][T13111] 0 pages HighMem/MovableOnly [ 317.808303][T13111] 425662 pages reserved [ 317.812498][T13111] 0 pages cma reserved [ 318.188983][T13170] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1927'. [ 318.278322][T13177] wg1 speed is unknown, defaulting to 1000 [ 318.296124][T13179] : entered promiscuous mode [ 318.516947][T13196] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1933'. [ 318.983043][T13177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1929'. [ 319.319652][T13226] bridge_slave_0: left allmulticast mode [ 319.337704][T13226] bridge_slave_0: left promiscuous mode [ 319.343660][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.359993][T13228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1942'. [ 319.370654][T13226] bridge_slave_1: left allmulticast mode [ 319.392643][T13226] bridge_slave_1: left promiscuous mode [ 319.404937][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.416892][T13226] bond0: (slave bond_slave_0): Releasing backup interface [ 319.426398][T13226] bond0: (slave bond_slave_1): Releasing backup interface [ 319.437532][T13226] team0: Port device team_slave_0 removed [ 319.445500][T13226] team0: Port device team_slave_1 removed [ 319.451710][T13226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.462753][T13226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.478754][T13226] bond0: (slave geneve1): Releasing backup interface [ 319.543575][T13231] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 319.592218][ T7968] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.633014][ T7968] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.643663][T13230] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20004 [ 319.665396][ T79] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.714463][ T79] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.336945][T13284] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 320.346768][T13284] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 320.372090][T13285] xt_policy: neither incoming nor outgoing policy selected [ 320.528428][T13291] siw: device registration error -23 [ 320.743826][T13307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.830218][T13315] syz_tun: entered allmulticast mode [ 321.081217][T13322] wg1 speed is unknown, defaulting to 1000 [ 321.827878][T13363] netlink: 'syz.2.1979': attribute type 3 has an invalid length. [ 322.002339][T13373] __nla_validate_parse: 10 callbacks suppressed [ 322.002358][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 322.003395][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 322.207389][T13364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.345907][T13383] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1987'. [ 322.377956][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 322.427352][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 322.447001][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1990'. [ 322.668980][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 322.691598][T13399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1993'. [ 322.751371][T13405] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1995'. [ 322.756130][T13399] geneve2: entered promiscuous mode [ 322.792360][T13399] geneve2: entered allmulticast mode [ 322.915494][T13410] tipc: Enabled bearer , priority 0 [ 323.012279][T13422] syzkaller0: MTU too low for tipc bearer [ 323.035225][T13422] tipc: Disabling bearer [ 323.297608][T13433] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 323.332326][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'. [ 323.336446][T13436] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 323.350691][T13433] netlink: 'syz.3.2003': attribute type 11 has an invalid length. [ 323.380484][T13433] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2003'. [ 323.416679][T13436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.627637][T13451] syzkaller0: entered promiscuous mode [ 323.645427][T13451] syzkaller0: entered allmulticast mode [ 323.670920][T13447] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 323.792626][T13460] xt_policy: neither incoming nor outgoing policy selected [ 324.126904][T13483] tipc: Enabled bearer , priority 0 [ 324.271943][T13487] syzkaller0: entered promiscuous mode [ 324.278071][T13487] syzkaller0: entered allmulticast mode [ 324.307760][T13482] tipc: Resetting bearer [ 324.342541][T13482] tipc: Disabling bearer [ 324.360525][T13499] netlink: 'syz.4.2020': attribute type 4 has an invalid length. [ 324.498744][T13503] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 324.744549][T13520] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 325.565532][T13566] netlink: 'syz.4.2042': attribute type 10 has an invalid length. [ 325.597048][T13566] netlink: 'syz.4.2042': attribute type 11 has an invalid length. [ 325.849269][T13578] tipc: Enabled bearer , priority 0 [ 325.859203][T13578] syzkaller0: entered promiscuous mode [ 325.868212][T13578] syzkaller0: entered allmulticast mode [ 325.911748][T13578] tipc: Resetting bearer [ 326.053434][T13577] tipc: Resetting bearer [ 326.101421][T13596] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 326.162146][T13596] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 326.186521][T13577] tipc: Disabling bearer [ 326.261012][T13601] veth1_to_bond: entered allmulticast mode [ 326.269684][T13601] veth1_to_bond: left allmulticast mode [ 326.392163][T13606] netlink: 'syz.0.2056': attribute type 21 has an invalid length. [ 326.527733][T13619] macvtap1: entered promiscuous mode [ 326.546244][T13619] vlan0: entered promiscuous mode [ 326.571583][T13619] macvtap1: entered allmulticast mode [ 326.590446][T13619] vlan0: entered allmulticast mode [ 326.897783][T13640] netlink: 'syz.3.2065': attribute type 12 has an invalid length. [ 326.943397][T13643] netlink: 'syz.3.2065': attribute type 12 has an invalid length. [ 327.055254][T13651] __nla_validate_parse: 24 callbacks suppressed [ 327.055273][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2068'. [ 327.102046][T13651] netem: change failed [ 327.747503][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2081'. [ 328.908220][T13733] GUP no longer grows the stack in syz.3.2087 (13733): 200000003000-20000000a000 (200000001000) [ 328.923532][T13733] CPU: 1 UID: 0 PID: 13733 Comm: syz.3.2087 Not tainted syzkaller #0 PREEMPT(full) [ 328.923563][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.923578][T13733] Call Trace: [ 328.923587][T13733] [ 328.923597][T13733] dump_stack_lvl+0x189/0x250 [ 328.923634][T13733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.923661][T13733] ? __pfx__printk+0x10/0x10 [ 328.923688][T13733] ? find_vma+0xe7/0x160 [ 328.923717][T13733] ? __lock_acquire+0xab9/0xd20 [ 328.923764][T13733] __get_user_pages+0x24d0/0x2ce0 [ 328.923788][T13733] ? __lock_acquire+0xab9/0xd20 [ 328.923850][T13733] ? __gup_longterm_locked+0xc68/0x1660 [ 328.923886][T13733] __gup_longterm_locked+0xde9/0x1660 [ 328.923930][T13733] ? sanity_check_pinned_pages+0x123a/0x1300 [ 328.923966][T13733] gup_fast_fallback+0x1e6a/0x2010 [ 328.924034][T13733] ? __pfx_gup_fast_fallback+0x10/0x10 [ 328.924058][T13733] ? stack_trace_save+0x9c/0xe0 [ 328.924082][T13733] ? __pfx_stack_trace_save+0x10/0x10 [ 328.924121][T13733] ? pin_user_pages_fast+0x4d/0xb0 [ 328.924151][T13733] iov_iter_extract_pages+0x35a/0x5e0 [ 328.924187][T13733] extract_iter_to_sg+0xe46/0x24e0 [ 328.924240][T13733] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 328.924296][T13733] ? __asan_memset+0x22/0x50 [ 328.924323][T13733] af_alg_get_rsgl+0x436/0x810 [ 328.924372][T13733] aead_recvmsg+0x4cc/0x13f0 [ 328.924430][T13733] ? __pfx_aead_recvmsg+0x10/0x10 [ 328.924469][T13733] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 328.924494][T13733] ? __pfx_aead_recvmsg+0x10/0x10 [ 328.924530][T13733] sock_recvmsg_nosec+0x186/0x1c0 [ 328.924565][T13733] ____sys_recvmsg+0x3aa/0x460 [ 328.924600][T13733] ? __pfx_____sys_recvmsg+0x10/0x10 [ 328.924644][T13733] ? import_iovec+0x74/0xa0 [ 328.924674][T13733] ___sys_recvmsg+0x1b5/0x510 [ 328.924706][T13733] ? __pfx____sys_recvmsg+0x10/0x10 [ 328.924770][T13733] ? __might_fault+0xb0/0x130 [ 328.924804][T13733] do_recvmmsg+0x307/0x770 [ 328.924840][T13733] ? __pfx_do_recvmmsg+0x10/0x10 [ 328.924879][T13733] ? __pfx_do_futex+0x10/0x10 [ 328.924925][T13733] __x64_sys_recvmmsg+0x190/0x240 [ 328.924955][T13733] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 328.924977][T13733] ? rcu_is_watching+0x15/0xb0 [ 328.925004][T13733] ? do_syscall_64+0xbe/0x3b0 [ 328.925029][T13733] do_syscall_64+0xfa/0x3b0 [ 328.925046][T13733] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.925076][T13733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.925096][T13733] ? clear_bhb_loop+0x60/0xb0 [ 328.925122][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.925143][T13733] RIP: 0033:0x7f1cde58ebe9 [ 328.925164][T13733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.925182][T13733] RSP: 002b:00007f1cdf36c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 328.925205][T13733] RAX: ffffffffffffffda RBX: 00007f1cde7c6090 RCX: 00007f1cde58ebe9 [ 328.925220][T13733] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000c [ 328.925233][T13733] RBP: 00007f1cde611e19 R08: 0000000000000000 R09: 0000000000000000 [ 328.925246][T13733] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 328.925259][T13733] R13: 00007f1cde7c6128 R14: 00007f1cde7c6090 R15: 00007ffe34747b98 [ 328.925295][T13733] [ 329.442809][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 329.497395][T13744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2094'. [ 329.897035][T13772] tipc: Enabling of bearer rejected, failed to enable media [ 330.285840][T13791] validate_nla: 1 callbacks suppressed [ 330.285860][T13791] netlink: 'syz.2.2108': attribute type 21 has an invalid length. [ 330.534714][T13812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2112'. [ 330.724494][T13823] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2114'. [ 330.785991][T13826] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 331.221616][T13827] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.076221][T13827] vlan0: left allmulticast mode [ 332.081149][T13827] veth0_vlan: left allmulticast mode [ 332.110783][T13827] vlan0: left promiscuous mode [ 332.374549][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 332.403331][ T7962] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.435042][ T7962] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.471993][ T7962] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.492299][ T7962] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.522022][ T7962] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.564574][ T7962] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.592777][ T7962] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.623020][ T7962] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.818512][T13888] veth0_to_bridge: entered promiscuous mode [ 332.908854][T13888] veth0_to_bridge: left promiscuous mode [ 333.021860][T13911] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2129'. [ 333.304062][T13916] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.2130'. [ 333.406325][ T5855] IPVS: starting estimator thread 0... [ 333.515456][T13928] IPVS: using max 24 ests per chain, 57600 per kthread [ 333.523554][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 333.606884][T13940] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2134'. [ 333.656592][T13942] netlink: 'syz.0.2135': attribute type 1 has an invalid length. [ 333.666236][T13942] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2135'. [ 333.694570][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 333.797964][T13940] syzkaller0: entered promiscuous mode [ 333.803511][T13940] syzkaller0: entered allmulticast mode [ 333.890580][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2135'. [ 336.003685][T13962] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2137'. [ 336.013134][T13962] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2137'. [ 336.927197][ T6591] nci: nci_rsp_packet: unsupported rsp opcode 0xf05 [ 336.929612][T14047] 8021q: adding VLAN 0 to HW filter on device bond10 [ 337.345940][T14069] dvmrp0: entered allmulticast mode [ 337.511523][T14074] __nla_validate_parse: 2 callbacks suppressed [ 337.511543][T14074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2156'. [ 337.787429][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2158'. [ 337.832703][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 337.841446][T14084] 8021q: adding VLAN 0 to HW filter on device bond11 [ 337.866859][ T30] audit: type=1107 audit(1756576391.343:9): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='CÜåtŒ›K¦€½õçäô^ä‹Ëê)ǯ••áùeŽØ˜®Sâ8'<=$;ŒNåºGkýh…ªøT}|Æ/¼Ÿ·ËÍsü ”Xì ÎÈ—s¤' [ 337.886992][T14087] netlink: 'syz.2.2160': attribute type 26 has an invalid length. [ 337.928460][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 337.995251][T14100] netlink: 'syz.2.2160': attribute type 11 has an invalid length. [ 338.016710][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 338.094528][T14087] netlink: 'syz.2.2160': attribute type 26 has an invalid length. [ 338.173667][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 338.214045][T14096] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2160'. [ 338.245771][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'. [ 338.263279][T14096] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2160'. [ 338.303348][T14096] netlink: 'syz.2.2160': attribute type 3 has an invalid length. [ 338.327863][T14096] netlink: 'syz.2.2160': attribute type 2 has an invalid length. [ 338.352701][T14096] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2160'. [ 338.692111][T14130] : entered promiscuous mode [ 339.449541][T14166] netlink: 'syz.1.2182': attribute type 2 has an invalid length. [ 339.810294][T14182] tipc: Enabled bearer , priority 0 [ 339.856093][T14182] syzkaller0: entered promiscuous mode [ 339.861630][T14182] syzkaller0: entered allmulticast mode [ 339.900519][T14182] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 339.989594][T14182] tipc: Resetting bearer [ 340.073589][T14181] tipc: Resetting bearer [ 340.212276][T14181] tipc: Disabling bearer [ 340.898692][T14242] syzkaller0: entered promiscuous mode [ 340.917785][T14242] syzkaller0: entered allmulticast mode [ 340.960192][T14240] tipc: Enabled bearer , priority 0 [ 341.267011][T14240] tipc: Resetting bearer [ 341.573993][T14240] tipc: Resetting bearer [ 341.780175][T14240] tipc: Disabling bearer [ 341.848111][T14261] syz_tun (unregistering): left allmulticast mode [ 342.251318][T14288] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.322886][T14294] sock: sock_timestamping_bind_phc: sock not bind to device [ 342.453055][T14297] IPVS: sed: FWM 3 0x00000003 - no destination available [ 342.463483][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 364.194007][T14310] __nla_validate_parse: 11 callbacks suppressed [ 364.194032][T14310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2224'. [ 364.219598][T14309] vxcan1: tx address claim with dlc 0 [ 364.365102][T14313] sch_fq: defrate 0 ignored. [ 364.584089][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'. [ 364.720942][T14325] batadv_slave_1 (unregistering): left promiscuous mode [ 365.022748][T14340] netlink: 'syz.1.2234': attribute type 3 has an invalid length. [ 365.031895][T14340] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 365.332837][T14356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2239'. [ 365.371980][T14360] syzkaller0: entered promiscuous mode [ 365.399874][T14363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2237'. [ 365.423945][T14360] syzkaller0: entered allmulticast mode [ 365.442650][T14363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2237'. [ 365.457672][T14357] tipc: Enabled bearer , priority 0 [ 365.568753][T14360] tipc: Resetting bearer [ 365.696762][T14360] tipc: Disabling bearer [ 366.065425][T14390] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2244'. [ 366.137526][T14398] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 366.220099][T14403] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 366.452579][T14414] netlink: 'syz.4.2251': attribute type 1 has an invalid length. [ 366.500087][T14414] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2251'. [ 366.561138][T14417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2250'. [ 367.132321][T14435] netlink: 'syz.4.2257': attribute type 21 has an invalid length. [ 367.168701][T14435] netlink: 'syz.4.2257': attribute type 22 has an invalid length. [ 367.216133][T14435] netlink: 'syz.4.2257': attribute type 23 has an invalid length. [ 367.263846][T14435] netlink: 'syz.4.2257': attribute type 25 has an invalid length. [ 367.355023][T14435] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2257'. [ 367.471007][T14443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.835688][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2265'. [ 368.252802][T14474] vlan2: entered promiscuous mode [ 368.265472][T14479] netlink: 'syz.1.2270': attribute type 1 has an invalid length. [ 368.284711][T14474] vlan2: entered allmulticast mode [ 368.292658][T14479] netlink: 'syz.1.2270': attribute type 3 has an invalid length. [ 368.310396][T14474] hsr_slave_1: entered allmulticast mode [ 369.204679][T14522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.341689][T14525] __nla_validate_parse: 7 callbacks suppressed [ 369.341710][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 369.461475][T14532] tipc: New replicast peer: 0.0.0.0 [ 369.496595][T14532] tipc: Enabled bearer , priority 10 [ 369.541518][T14538] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 369.736497][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 369.762330][T14548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2288'. [ 370.008370][T14563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.041866][T14563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2296'. [ 370.044383][T14568] nbd: socks must be embedded in a SOCK_ITEM attr [ 370.071486][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 370.073139][T14563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2296'. [ 370.459458][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 370.615692][ T5855] tipc: Node number set to 1817505640 [ 370.801320][T14616] openvswitch: netlink: IP tunnel dst address not specified [ 370.836964][T14616] openvswitch: netlink: IP tunnel dst address not specified [ 371.048734][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2311'. [ 371.544981][T14645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2317'. [ 371.733804][T14670] netlink: 'syz.1.2323': attribute type 3 has an invalid length. [ 371.740184][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2320'. [ 371.744064][T14669] netlink: 'syz.3.2322': attribute type 1 has an invalid length. [ 371.766824][T14670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.784249][T14669] netlink: 'syz.3.2322': attribute type 1 has an invalid length. [ 371.820190][T14670] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 371.832499][T14670] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 372.391350][T14710] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 372.588140][T14730] netlink: 'syz.2.2337': attribute type 1 has an invalid length. [ 372.771495][T14739] 8021q: adding VLAN 0 to HW filter on device bond7 [ 372.784027][T14739] bond6: (slave bond7): making interface the new active one [ 372.796226][T14739] bond6: (slave bond7): Enslaving as an active interface with an up link [ 372.927022][T14748] netlink: 'syz.3.2339': attribute type 49 has an invalid length. [ 372.968759][T14751] netlink: 'syz.4.2340': attribute type 1 has an invalid length. [ 373.010135][T14751] veth1: entered promiscuous mode [ 373.372966][T14763] openvswitch: netlink: Multiple metadata blocks provided [ 373.437351][T14765] tipc: Enabled bearer , priority 0 [ 373.456155][T14765] syzkaller0: entered promiscuous mode [ 373.485054][T14765] syzkaller0: entered allmulticast mode [ 373.588388][T14765] tipc: Resetting bearer [ 373.680551][T14764] tipc: Resetting bearer [ 373.842283][T14764] tipc: Disabling bearer [ 373.952811][T14787] : renamed from hsr0 [ 374.139149][T14793] netlink: 'syz.4.2352': attribute type 4 has an invalid length. [ 374.144619][T14795] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 374.636019][T14823] __nla_validate_parse: 76 callbacks suppressed [ 374.636041][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2359'. [ 374.707720][T14823] bond8: (slave vcan2): The slave device specified does not support setting the MAC address [ 374.722972][T14823] bond8: (slave vcan2): Error -95 calling set_mac_address [ 374.791419][T14829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2361'. [ 374.878350][T14834] netlink: 'syz.2.2363': attribute type 2 has an invalid length. [ 375.130209][T14842] netlink: 'syz.4.2366': attribute type 11 has an invalid length. [ 375.145195][T14842] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2366'. [ 375.212045][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 375.756361][T14879] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2379'. [ 375.788663][T14882] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 375.805263][T14879] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2379'. [ 376.233675][T14896] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 376.261880][T14898] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2382'. [ 376.291102][T14898] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2382'. [ 376.441306][T14914] delete_channel: no stack [ 376.721881][T14928] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 376.907799][T14943] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 377.135808][T14960] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 377.184476][T14960] netlink: 294 bytes leftover after parsing attributes in process `syz.3.2397'. [ 377.529739][T14975] netlink: 'syz.4.2404': attribute type 6 has an invalid length. [ 377.620250][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2407'. [ 379.171851][T15058] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 379.456753][T15071] netlink: 'syz.3.2432': attribute type 11 has an invalid length. [ 379.500970][T15071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.539056][T15071] tipc: Enabling of bearer rejected, already enabled [ 379.677664][T15083] __nla_validate_parse: 3 callbacks suppressed [ 379.677684][T15083] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2438'. [ 379.893428][T15100] IPVS: Error connecting to the multicast addr [ 379.910248][T15100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2442'. [ 379.942917][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2442'. [ 379.967134][T15100] IPVS: Error connecting to the multicast addr [ 379.973666][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 380.028384][T15108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.234827][T15120] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 380.659445][T15142] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 380.679457][T15137] syzkaller0: entered allmulticast mode [ 380.731603][T15137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2448'. [ 380.797123][T15145] sctp: [Deprecated]: syz.3.2450 (pid 15145) Use of int in max_burst socket option. [ 380.797123][T15145] Use struct sctp_assoc_value instead [ 380.854499][T15149] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 381.042491][T15160] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 381.455877][T15166] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2455'. [ 382.902562][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2456'. [ 383.024629][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2459'. [ 383.052048][T15183] netlink: 'syz.3.2459': attribute type 11 has an invalid length. [ 383.062279][T15183] netlink: 'syz.3.2459': attribute type 11 has an invalid length. [ 383.075869][T15183] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2459'. [ 383.153207][T15166] bond0 (unregistering): left promiscuous mode [ 383.162951][T15166] bond0 (unregistering): Released all slaves [ 383.562270][T15204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2463'. [ 383.617205][T15206] netlink: 'syz.2.2463': attribute type 4 has an invalid length. [ 383.747111][T15212] netlink: 'syz.4.2469': attribute type 1 has an invalid length. [ 383.851552][T15212] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 383.867017][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 384.148931][T15223] tipc: Enabled bearer , priority 0 [ 384.177264][T15223] syzkaller0: entered promiscuous mode [ 384.209044][T15223] syzkaller0: entered allmulticast mode [ 384.284528][T15223] tipc: Resetting bearer [ 384.354807][T15222] tipc: Resetting bearer [ 384.431374][T15222] tipc: Disabling bearer [ 384.446530][T15241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.699320][T15254] syz.2.2480: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 384.739924][T15254] CPU: 0 UID: 0 PID: 15254 Comm: syz.2.2480 Not tainted syzkaller #0 PREEMPT(full) [ 384.739955][T15254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.739973][T15254] Call Trace: [ 384.739982][T15254] [ 384.739992][T15254] dump_stack_lvl+0x189/0x250 [ 384.740028][T15254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.740055][T15254] ? __pfx__printk+0x10/0x10 [ 384.740085][T15254] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.740110][T15254] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.740137][T15254] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 384.740165][T15254] warn_alloc+0x214/0x310 [ 384.740199][T15254] ? stack_depot_save_flags+0x40/0x860 [ 384.740230][T15254] ? __pfx_warn_alloc+0x10/0x10 [ 384.740264][T15254] ? kasan_save_track+0x4f/0x80 [ 384.740292][T15254] ? xskq_create+0x56/0x170 [ 384.740319][T15254] ? xsk_init_queue+0xb0/0x110 [ 384.740343][T15254] ? xsk_setsockopt+0x4dc/0x8d0 [ 384.740367][T15254] ? do_sock_setsockopt+0x179/0x1b0 [ 384.740387][T15254] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 384.740405][T15254] ? do_syscall_64+0xfa/0x3b0 [ 384.740422][T15254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.740452][T15254] __vmalloc_node_range_noprof+0x125/0x12f0 [ 384.740517][T15254] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.740556][T15254] ? __kasan_kmalloc+0x93/0xb0 [ 384.740587][T15254] vmalloc_user_noprof+0xad/0xf0 [ 384.740616][T15254] ? xskq_create+0xbf/0x170 [ 384.740644][T15254] xskq_create+0xbf/0x170 [ 384.740688][T15254] xsk_init_queue+0xb0/0x110 [ 384.740719][T15254] xsk_setsockopt+0x4dc/0x8d0 [ 384.740751][T15254] ? __pfx_xsk_setsockopt+0x10/0x10 [ 384.740778][T15254] ? __pfx_aa_sk_perm+0x10/0x10 [ 384.740814][T15254] ? aa_sock_opt_perm+0xff/0x1b0 [ 384.740838][T15254] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 384.740861][T15254] ? __pfx_xsk_setsockopt+0x10/0x10 [ 384.740889][T15254] do_sock_setsockopt+0x179/0x1b0 [ 384.740916][T15254] __x64_sys_setsockopt+0x13f/0x1b0 [ 384.740944][T15254] do_syscall_64+0xfa/0x3b0 [ 384.740961][T15254] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.740989][T15254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.741009][T15254] ? clear_bhb_loop+0x60/0xb0 [ 384.741034][T15254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.741061][T15254] RIP: 0033:0x7fb913f8ebe9 [ 384.741081][T15254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.741099][T15254] RSP: 002b:00007fb914e06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.741122][T15254] RAX: ffffffffffffffda RBX: 00007fb9141c5fa0 RCX: 00007fb913f8ebe9 [ 384.741137][T15254] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 384.741150][T15254] RBP: 00007fb914011e19 R08: 0000000000000004 R09: 0000000000000000 [ 384.741162][T15254] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.741176][T15254] R13: 00007fb9141c6038 R14: 00007fb9141c5fa0 R15: 00007fffe750c558 [ 384.741211][T15254] [ 384.741224][T15254] Mem-Info: [ 384.938189][T15258] syzkaller1: entered promiscuous mode [ 385.031623][T15254] active_anon:4648 inactive_anon:0 isolated_anon:0 [ 385.031623][T15254] active_file:3275 inactive_file:39950 isolated_file:0 [ 385.031623][T15254] unevictable:768 dirty:124 writeback:0 [ 385.031623][T15254] slab_reclaimable:11613 slab_unreclaimable:104907 [ 385.031623][T15254] mapped:29084 shmem:1375 pagetables:1099 [ 385.031623][T15254] sec_pagetables:0 bounce:0 [ 385.031623][T15254] kernel_misc_reclaimable:0 [ 385.031623][T15254] free:1317485 free_pcp:10448 free_cma:0 [ 385.041213][T15265] __nla_validate_parse: 3 callbacks suppressed [ 385.041235][T15265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 385.116247][T15254] Node 0 active_anon:18760kB inactive_anon:0kB active_file:13100kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117296kB dirty:556kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13712kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.145045][T15258] syzkaller1: entered allmulticast mode [ 385.203090][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.203341][T15254] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.256719][T15254] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.263706][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.289880][T15254] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 385.289943][T15254] Node 0 DMA32 free:1358352kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19308kB inactive_anon:0kB active_file:13100kB inactive_file:158032kB unevictable:1536kB writepending:552kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:23904kB local_pcp:17676kB free_cma:0kB [ 385.290007][T15254] lowmem_reserve[]: 0 0 1 1 1 [ 385.290054][T15254] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 385.290114][T15254] lowmem_reserve[]: 0 0 0 0 0 [ 385.290160][T15254] Node 1 Normal free:3895684kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17608kB local_pcp:9040kB free_cma:0kB [ 385.290221][T15254] lowmem_reserve[]: 0 0 0 0 0 [ 385.290267][T15254] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 385.290413][T15254] Node 0 DMA32: 1375*4kB (UME) 692*8kB (UME) 336*16kB [ 385.386901][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.411519][T15254] (UME) [ 385.420115][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.457518][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.476558][T15254] 144*32kB (ME) 513*64kB (UME) 347*128kB (UME) 124*256kB (UME) 49*512kB (UME) 31*1024kB (UE) 2*2048kB (UE) 285*4096kB (UM) = 1358300kB [ 385.496059][T15254] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 385.508556][T15254] Node 1 Normal: 199*4kB (UE) 67*8kB (UME) 49*16kB (UME) 80*32kB (UME) 27*64kB (UME) 5*128kB (UME) 4*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895684kB [ 385.528771][T15254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.539108][T15254] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.548617][T15254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.565184][T15254] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.586663][T15254] 44650 total pagecache pages [ 385.591424][T15254] 0 pages in swap cache [ 385.604593][T15254] Free swap = 124996kB [ 385.613833][T15254] Total swap = 124996kB [ 385.620793][T15254] 2097051 pages RAM [ 385.624672][T15254] 0 pages HighMem/MovableOnly [ 385.643821][T15254] 425662 pages reserved [ 385.649408][T15254] 0 pages cma reserved [ 385.739534][T15267] wg1 speed is unknown, defaulting to 1000 [ 385.836862][T15287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2490'. [ 386.131424][T15308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2493'. [ 386.227744][T15267] chnl_net:caif_netlink_parms(): no params data found [ 386.333418][T15267] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.341090][T15267] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.349032][T15267] bridge_slave_0: entered allmulticast mode [ 386.358014][T15267] bridge_slave_0: entered promiscuous mode [ 386.367648][T15267] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.378995][T15267] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.386473][T15267] bridge_slave_1: entered allmulticast mode [ 386.394081][T15267] bridge_slave_1: entered promiscuous mode [ 386.441241][T15267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.454303][T15267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.521244][T15267] team0: Port device team_slave_0 added [ 386.531860][T15267] team0: Port device team_slave_1 added [ 386.583553][T15267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.591166][T15267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.619939][T15267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.633991][T15267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.643399][T15267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.670731][T15267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.864225][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2498'. [ 387.076652][T15267] hsr_slave_0: entered promiscuous mode [ 387.096793][T15267] hsr_slave_1: entered promiscuous mode [ 387.162318][T15345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2498'. [ 387.454454][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2504'. [ 387.535589][ T5184] Bluetooth: hci2: command tx timeout [ 387.578873][T15363] dummy0 (unregistering): left promiscuous mode [ 388.053918][T15267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.088740][T15383] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 388.118626][T15267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.205933][T15267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.240005][T15392] netlink: 'syz.4.2514': attribute type 33 has an invalid length. [ 388.262883][T15267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.546919][T15412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 388.565324][T15414] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 388.607953][T15412] netlink: 'syz.0.2518': attribute type 13 has an invalid length. [ 388.618145][T15414] netlink: 'syz.0.2518': attribute type 13 has an invalid length. [ 388.660393][T15267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.744378][T15267] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.759854][T15416] netlink: 'syz.4.2520': attribute type 12 has an invalid length. [ 388.780573][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.787898][ T7964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.831057][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.838319][ T7964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.859946][T15421] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 388.903900][T15421] 8021q: adding VLAN 0 to HW filter on device bond11 [ 389.013492][T15421] bond11: (slave gretap4): making interface the new active one [ 389.023059][T15421] bond11: (slave gretap4): Enslaving as an active interface with an up link [ 389.269778][T15433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2525'. [ 389.317573][T15433] netlink: 'syz.0.2525': attribute type 4 has an invalid length. [ 389.615267][ T5184] Bluetooth: hci2: command tx timeout [ 389.661115][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'. [ 389.662200][T15442] syzkaller0: entered promiscuous mode [ 389.678402][T15442] syzkaller0: entered allmulticast mode [ 389.687538][T15449] netlink: 'syz.0.2530': attribute type 1 has an invalid length. [ 389.700221][T15449] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2530'. [ 389.711439][T15448] bond7: left promiscuous mode [ 389.727750][T15448] bridge0: port 3(bond7) entered disabled state [ 389.748209][T15448] bridge_slave_1: left allmulticast mode [ 389.754828][T15448] bridge_slave_1: left promiscuous mode [ 389.770403][T15448] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.786960][T15448] bridge_slave_0: left allmulticast mode [ 389.793186][T15448] bridge_slave_0: left promiscuous mode [ 389.800564][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2530'. [ 389.803623][T15448] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.935894][T15267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.696029][ T5184] Bluetooth: hci2: command tx timeout [ 392.450438][T15466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2533'. [ 392.690614][T15479] tipc: Enabling of bearer rejected, failed to enable media [ 392.878773][T15487] netlink: 'syz.3.2538': attribute type 11 has an invalid length. [ 392.934452][T15489] tipc: Enabled bearer , priority 0 [ 392.970301][T15494] netlink: 'syz.4.2540': attribute type 11 has an invalid length. [ 392.988010][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2540'. [ 393.016638][T15488] tipc: Disabling bearer [ 393.100112][T15499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2542'. [ 393.169633][T15267] veth0_vlan: entered promiscuous mode [ 393.189148][T15267] veth1_vlan: entered promiscuous mode [ 393.210757][T15502] tipc: Enabling of bearer rejected, failed to enable media [ 393.232087][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 393.280460][T15267] veth0_macvtap: entered promiscuous mode [ 393.307087][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 393.319415][T15267] veth1_macvtap: entered promiscuous mode [ 393.359467][T15267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.396065][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 393.406121][T15267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.423280][ T7960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.437815][ T7960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.450327][ T7964] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.481463][ T7964] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.511620][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 393.591481][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 393.637746][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 393.690829][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 393.776447][ T5184] Bluetooth: hci2: command tx timeout [ 393.883632][ T7964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.908090][ T7964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.287748][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.313872][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.422492][T15532] gre0: entered promiscuous mode [ 394.446520][T15531] tipc: Enabling of bearer rejected, failed to enable media [ 394.489263][T15532] netlink: 'syz.0.2550': attribute type 4 has an invalid length. [ 395.298650][T15566] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 395.644306][T15587] netlink: 'syz.5.2565': attribute type 10 has an invalid length. [ 395.680298][T15587] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 395.734064][T15587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.793184][T15602] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 395.805795][T15602] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 396.174546][T15622] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 396.185578][T15622] netlink: 'syz.0.2576': attribute type 2 has an invalid length. [ 397.425409][T15681] netlink: 'syz.3.2595': attribute type 1 has an invalid length. [ 397.901686][T15701] netlink: 'syz.5.2601': attribute type 10 has an invalid length. [ 397.926287][T15701] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.940254][T15701] bridge_slave_1: left allmulticast mode [ 397.946852][T15701] bridge_slave_1: left promiscuous mode [ 397.952908][T15701] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.006841][T15701] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 398.220583][T15722] __nla_validate_parse: 14 callbacks suppressed [ 398.220604][T15722] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2606'. [ 399.019878][T15729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.188518][T15739] netlink: 'syz.2.2612': attribute type 10 has an invalid length. [ 399.249893][T15739] team0: Port device dummy0 added [ 399.254192][T15744] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2614'. [ 399.489183][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2616'. [ 400.522868][T15772] ipvlan0: left promiscuous mode [ 400.533817][T15772] ipvlan1: left promiscuous mode [ 400.634223][T15772] bridge1: left promiscuous mode [ 400.658147][T15772] bond4: left promiscuous mode [ 400.673142][T15772] bond8: left promiscuous mode [ 400.683625][T15772] veth13: left promiscuous mode [ 400.693898][T15772] vlan0: left allmulticast mode [ 400.699798][T15772] vlan0: left promiscuous mode [ 400.710785][T15772] macvtap1: left promiscuous mode [ 400.802030][ T7962] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.832914][ T7962] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.858564][ T7962] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.869917][ T7962] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.912692][ T7962] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.932342][ T7962] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.942770][ T7962] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.954159][ T7962] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.458806][T15825] netlink: 'syz.5.2635': attribute type 15 has an invalid length. [ 401.694562][T15836] sctp: [Deprecated]: syz.5.2639 (pid 15836) Use of int in max_burst socket option deprecated. [ 401.694562][T15836] Use struct sctp_assoc_value instead [ 401.837861][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2641'. [ 402.060749][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2644'. [ 402.457823][T15879] raw_sendmsg: syz.3.2649 forgot to set AF_INET. Fix it! [ 402.525596][T15883] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2653'. [ 402.542111][T15883] netlink: zone id is out of range [ 402.548393][T15883] netlink: get zone limit has 8 unknown bytes [ 402.860444][T15900] pim6reg1: entered promiscuous mode [ 402.874010][T15900] pim6reg1: entered allmulticast mode [ 402.924285][T15886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.987095][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2656'. [ 403.178873][ T4611] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.224310][ T4611] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.254545][ T4611] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.279113][ T4611] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.398963][T15921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2662'. [ 403.421307][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2664'. [ 403.493374][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2664'. [ 403.953914][T15952] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 404.073150][T15954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2672'. [ 404.534659][T15980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'. [ 404.585896][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'. [ 405.066627][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'. [ 405.079870][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'. [ 405.103624][T16001] "syz.0.2686" (16001) uses obsolete ecb(arc4) skcipher [ 405.218686][T15999] macvtap2: entered promiscuous mode [ 405.233104][T15999] vlan0: entered promiscuous mode [ 405.257977][T15999] macvtap2: entered allmulticast mode [ 405.277334][T15999] vlan0: entered allmulticast mode [ 405.644667][T16014] bridge6: entered promiscuous mode [ 405.685333][T16014] bridge6: entered allmulticast mode [ 405.809073][T16022] tc_dump_action: action bad kind [ 405.901678][T16030] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 406.292583][T16051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2701'. [ 406.368859][T16057] tipc: Enabled bearer , priority 0 [ 406.376213][T16053] syzkaller0: entered promiscuous mode [ 406.398176][T16053] syzkaller0: entered allmulticast mode [ 406.445357][T16057] tipc: Resetting bearer [ 406.451623][T16051] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 406.650923][T16077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2705'. [ 406.783878][T16066] netlink: 'syz.2.2707': attribute type 23 has an invalid length. [ 406.827326][T16050] tipc: Resetting bearer [ 406.862303][T16050] tipc: Disabling bearer [ 406.953749][T16085] netlink: 'syz.0.2710': attribute type 30 has an invalid length. [ 407.239974][T16093] team_slave_1 (unregistering): left allmulticast mode [ 407.248846][T16093] team0: Port device team_slave_1 removed [ 407.260537][T16095] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 407.402424][T16107] veth0_to_bond: entered allmulticast mode [ 408.043627][T16141] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 408.109121][T16141] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 408.409632][T16162] __nla_validate_parse: 5 callbacks suppressed [ 408.409650][T16162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2734'. [ 408.490595][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2734'. [ 409.913557][T16231] netlink: 'syz.4.2753': attribute type 15 has an invalid length. [ 410.228050][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 410.431619][T16244] bond5: entered promiscuous mode [ 410.460215][T16244] bond5: entered allmulticast mode [ 410.483776][T16244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.730345][T16262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2760'. [ 410.762989][T16244] bond5 (unregistering): Released all slaves [ 410.771748][T16262] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2760'. [ 411.077005][T16269] wg1 speed is unknown, defaulting to 1000 [ 411.090507][T16273] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2763'. [ 411.183064][T16281] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2766'. [ 411.528208][T16289] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 411.673744][T16298] delete_channel: no stack [ 411.755629][T16303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2774'. [ 411.808997][T16303] openvswitch: netlink: Key type 31 is not supported [ 411.836394][T16305] netlink: 'syz.2.2776': attribute type 4 has an invalid length. [ 412.181278][T16334] netlink: 'syz.3.2783': attribute type 11 has an invalid length. [ 412.193705][T16337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2786'. [ 412.253642][T16339] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2784'. [ 412.505916][T16348] IPVS: set_ctl: invalid protocol: 59 172.30.0.6:20002 [ 412.648408][T16356] syzkaller0: entered promiscuous mode [ 412.670409][T16356] syzkaller0: entered allmulticast mode [ 413.040776][T16373] syz_tun: entered allmulticast mode [ 413.102725][T16379] syz_tun: left allmulticast mode [ 413.266499][T16389] pim6reg: entered allmulticast mode [ 413.318222][T16389] pim6reg: left allmulticast mode [ 413.416648][T16401] netlink: 'syz.5.2800': attribute type 2 has an invalid length. [ 413.464091][T16401] syzkaller0: entered promiscuous mode [ 413.470368][T16401] syzkaller0: entered allmulticast mode [ 413.559898][T16389] __nla_validate_parse: 3 callbacks suppressed [ 413.559921][T16389] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2798'. [ 413.802975][T16410] sctp: [Deprecated]: syz.5.2804 (pid 16410) Use of int in maxseg socket option. [ 413.802975][T16410] Use struct sctp_assoc_value instead [ 414.281541][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'. [ 414.393467][T16435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2812'. [ 414.511858][T16439] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 414.619049][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2815'. [ 414.651409][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2815'. [ 414.737316][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'. [ 414.886862][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2821'. [ 414.944302][T16459] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 414.968017][ T4611] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.003979][ T4611] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.027661][ T4611] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.081699][T16459] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 415.118267][ T4611] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.179906][T16475] netlink: 'syz.2.2824': attribute type 21 has an invalid length. [ 415.221377][T16475] netlink: 'syz.2.2824': attribute type 6 has an invalid length. [ 415.285945][T16477] netlink: 'syz.2.2824': attribute type 21 has an invalid length. [ 415.306800][T16475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2824'. [ 415.323192][T16477] netlink: 'syz.2.2824': attribute type 6 has an invalid length. [ 415.331538][T16477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2824'. [ 415.576995][T16487] wg1 speed is unknown, defaulting to 1000 [ 416.139121][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.160100][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.178718][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.188058][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'. [ 416.198252][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.210674][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.512707][T16513] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 416.538097][T16515] 8021q: VLANs not supported on ip_vti0 [ 416.568364][T16521] bridge1: entered allmulticast mode [ 416.587151][T16529] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 416.616152][T16529] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 416.812526][T16510] wg1 speed is unknown, defaulting to 1000 [ 416.976574][T16537] tipc: Enabled bearer , priority 0 [ 417.046742][T16537] syzkaller0: entered promiscuous mode [ 417.052677][T16537] syzkaller0: entered allmulticast mode [ 417.091071][T16537] tipc: Resetting bearer [ 417.098657][T16546] netlink: 'syz.4.2847': attribute type 16 has an invalid length. [ 417.133469][T16536] tipc: Resetting bearer [ 417.144404][ T30] audit: type=1804 audit(1756576470.623:10): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2848" name="/newroot/58/memory.events" dev="tmpfs" ino=313 res=1 errno=0 [ 417.168128][ T30] audit: type=1800 audit(1756576470.623:11): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2848" name="memory.events" dev="tmpfs" ino=313 res=0 errno=0 [ 417.192604][ T30] audit: type=1804 audit(1756576470.623:12): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2848" name="/newroot/58/memory.events" dev="tmpfs" ino=313 res=1 errno=0 [ 417.238845][T16536] tipc: Disabling bearer [ 418.054736][T16584] sch_tbf: burst 4398 is lower than device lo mtu (65499) ! [ 418.131351][T16510] chnl_net:caif_netlink_parms(): no params data found [ 418.255179][ T5184] Bluetooth: hci5: command tx timeout [ 418.323956][T16593] netlink: 'syz.4.2863': attribute type 5 has an invalid length. [ 418.413927][T16598] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 419.141274][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.159195][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.174597][T16510] bridge_slave_0: entered allmulticast mode [ 419.191968][T16510] bridge_slave_0: entered promiscuous mode [ 419.215414][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.222707][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.230281][T16510] bridge_slave_1: entered allmulticast mode [ 419.238716][T16510] bridge_slave_1: entered promiscuous mode [ 419.369089][T16510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.433165][T16510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.573333][T16631] openvswitch: netlink: Flow key attribute not present in set flow. [ 419.589484][T16631] __nla_validate_parse: 7 callbacks suppressed [ 419.589506][T16631] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2869'. [ 419.590217][T16510] team0: Port device team_slave_0 added [ 419.649435][T16510] team0: Port device team_slave_1 added [ 419.654581][T16637] netlink: 'syz.2.2872': attribute type 11 has an invalid length. [ 419.680287][T16637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2872'. [ 419.748772][T16641] netlink: 'syz.3.2874': attribute type 10 has an invalid length. [ 419.784272][T16641] !: entered allmulticast mode [ 419.796363][T16641] team0: Port device 0! added [ 419.806452][T16510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.809468][T16641] netlink: 'syz.3.2874': attribute type 10 has an invalid length. [ 419.823808][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.853621][T16510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.875332][T16641] !: left allmulticast mode [ 419.884427][T16641] team0: Port device 0! removed [ 419.899635][T16510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.907380][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.938313][T16510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.101777][T16510] hsr_slave_0: entered promiscuous mode [ 420.116789][T16510] hsr_slave_1: entered promiscuous mode [ 420.133632][T16510] debugfs: 'hsr0' already exists in 'hsr' [ 420.156208][T16510] Cannot create hsr debugfs directory [ 420.337026][ T5184] Bluetooth: hci5: command tx timeout [ 420.678196][T16684] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2886'. [ 420.961476][T16700] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2891'. [ 420.985831][T16701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'. [ 421.013779][T16706] "syz.3.2892" (16706) uses obsolete ecb(arc4) skcipher [ 421.249643][T16510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.295890][T16510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.314992][T16510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.342445][T16510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.553642][T16510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.597179][T16510] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.631722][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.639026][ T7968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.748092][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.755478][ T7962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.415445][ T5877] Bluetooth: hci5: command tx timeout [ 422.681948][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.874562][T16742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.907648][T16742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.205625][ T7962] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.243077][ T7962] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.285151][ T7962] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.306569][ T7962] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.325754][ T7962] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.344693][ T7962] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.444610][ T7962] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.492979][ T7962] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.502775][ T7962] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.543547][T16793] vlan1: entered allmulticast mode [ 423.558830][ T6591] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.593826][ T6591] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.617020][ T6591] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.646594][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 423.654689][T16510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.942242][T16510] veth0_vlan: entered promiscuous mode [ 423.997118][T16510] veth1_vlan: entered promiscuous mode [ 424.094556][T16510] veth0_macvtap: entered promiscuous mode [ 424.123568][T16510] veth1_macvtap: entered promiscuous mode [ 424.197455][T16510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.227747][T16510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.290028][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2928'. [ 424.308245][ T7964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.323950][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2928'. [ 424.326198][ T7964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.381020][ T7964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.418689][ T7964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.497169][ T5877] Bluetooth: hci5: command tx timeout [ 424.583837][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.612789][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.632035][T16848] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 424.701673][T16848] netlink: 'syz.2.2933': attribute type 1 has an invalid length. [ 424.706483][ T7968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.730218][ T7968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.735456][T16848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2933'. [ 424.762205][T16848] block nbd1: not configured, cannot reconfigure [ 424.826401][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 424.842884][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2936'. [ 424.871266][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2936'. [ 424.899238][T16859] netlink: 'syz.0.2828': attribute type 23 has an invalid length. [ 425.112966][T16873] sctp: [Deprecated]: syz.0.2940 (pid 16873) Use of int in max_burst socket option. [ 425.112966][T16873] Use struct sctp_assoc_value instead [ 426.200843][T16907] bond5: entered allmulticast mode [ 426.212645][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.224286][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.237840][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.247494][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.257405][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.272676][T16907] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.371130][T16919] wg1 speed is unknown, defaulting to 1000 [ 426.380921][T16922] netlink: 'syz.3.2952': attribute type 8 has an invalid length. [ 426.439104][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2953'. [ 426.498081][T16924] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2953'. [ 426.862487][T16919] chnl_net:caif_netlink_parms(): no params data found [ 427.107625][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2962'. [ 427.126581][T16969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2962'. [ 427.139924][T16919] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.147443][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.154741][T16919] bridge_slave_0: entered allmulticast mode [ 427.174294][T16919] bridge_slave_0: entered promiscuous mode [ 427.198284][T16975] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2962'. [ 427.221469][T16919] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.240261][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.258493][T16919] bridge_slave_1: entered allmulticast mode [ 427.272286][T16919] bridge_slave_1: entered promiscuous mode [ 427.520652][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.541820][T16982] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2965'. [ 427.583060][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.593584][ T24] IPVS: starting estimator thread 0... [ 427.599597][T16989] openvswitch: netlink: Missing key (keys=40, expected=100) [ 427.695076][T16990] IPVS: using max 26 ests per chain, 62400 per kthread [ 427.777771][T16919] team0: Port device team_slave_0 added [ 427.827062][T16919] team0: Port device team_slave_1 added [ 427.963784][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.974446][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.024908][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.046274][T17011] veth0: entered promiscuous mode [ 428.063987][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.081357][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.128681][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.151029][T17020] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 428.189133][T17010] bridge0: port 1(bridge_slave_0) entered learning state [ 428.335601][ T5877] Bluetooth: hci0: command tx timeout [ 428.366837][T16919] hsr_slave_0: entered promiscuous mode [ 428.383501][T16919] hsr_slave_1: entered promiscuous mode [ 428.400645][T16919] debugfs: 'hsr0' already exists in 'hsr' [ 428.410519][T16919] Cannot create hsr debugfs directory [ 428.753932][T17039] bond6: entered allmulticast mode [ 428.759997][T17039] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.786838][T17006] veth0: left promiscuous mode [ 429.088765][T17061] netlink: 'syz.4.2984': attribute type 1 has an invalid length. [ 429.141425][T16919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.166277][T16919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.177473][T16919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 429.207060][ T7968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.229057][ T7968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.334306][T16919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.345715][T16919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.361479][T16919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 429.485510][T16919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.499132][T16919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.512440][T16919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 429.649961][T16919] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.662788][T16919] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.676670][T16919] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 429.924152][T17080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.985778][T16919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 430.032590][T16919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 430.080798][T16919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 430.113396][T16919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 430.143922][T17096] syzkaller1: entered promiscuous mode [ 430.182748][T17096] syzkaller1: entered allmulticast mode [ 430.321323][T17109] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 430.415215][ T5877] Bluetooth: hci0: command tx timeout [ 430.551991][T16919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.620542][T16919] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.653767][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.661366][ T7960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.693019][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.701050][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.809484][T17123] __nla_validate_parse: 3 callbacks suppressed [ 430.809506][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2998'. [ 430.936060][T17128] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3001'. [ 430.967605][T17128] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3001'. [ 431.063928][T17133] veth1_macvtap: left promiscuous mode [ 431.078876][T17133] macsec0: entered promiscuous mode [ 431.084279][T17133] macsec0: entered allmulticast mode [ 431.271836][T17137] tipc: Enabled bearer , priority 0 [ 431.281759][T17137] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 431.293621][T17137] tipc: Resetting bearer [ 431.417475][T17136] tipc: Disabling bearer [ 431.678405][T16919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.834346][T16919] veth0_vlan: entered promiscuous mode [ 431.868346][T16919] veth1_vlan: entered promiscuous mode [ 431.898449][T17160] delete_channel: no stack [ 432.027345][T16919] veth0_macvtap: entered promiscuous mode [ 432.058815][T16919] veth1_macvtap: entered promiscuous mode [ 432.133400][T16919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.174592][T17162] tipc: Enabling not permitted [ 432.206418][T17162] tipc: Enabling of bearer rejected, failed to enable media [ 432.283313][T16919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.356312][ T1152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.378022][ T7968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.389480][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 432.472284][ T7968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.488855][ T7968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.491158][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3012'. [ 432.496808][ T5877] Bluetooth: hci0: command tx timeout [ 432.702889][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 432.732905][ T6591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.784818][ T6591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.859115][T17194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.019925][ T4611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.061033][ T4611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.087659][T17210] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3023'. [ 433.118634][T17210] gretap0: entered promiscuous mode [ 433.151025][T17210] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3023'. [ 433.223567][T17210] 0ªî{X¹¦: renamed from gretap0 [ 433.238260][T17210] 0ªî{X¹¦: left promiscuous mode [ 433.245924][T17210] 0ªî{X¹¦: entered allmulticast mode [ 433.259578][T17210] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 433.476386][T17224] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3027'. [ 433.538331][T17224] gretap0: entered promiscuous mode [ 433.649741][T17232] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3028'. [ 434.323626][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.335685][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.364446][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.378693][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.389016][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.450726][T17261] wg1 speed is unknown, defaulting to 1000 [ 434.575155][ T5877] Bluetooth: hci0: command tx timeout [ 434.617247][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.649831][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.711665][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.750828][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.770595][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.789297][T17261] chnl_net:caif_netlink_parms(): no params data found [ 434.805148][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.821327][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.830205][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.838901][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 434.852431][T17276] netlink: 'syz.2.3040': attribute type 1 has an invalid length. [ 435.048557][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.062295][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.093076][T17261] bridge_slave_0: entered allmulticast mode [ 435.109840][T17261] bridge_slave_0: entered promiscuous mode [ 435.145413][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.165395][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.180942][T17261] bridge_slave_1: entered allmulticast mode [ 435.204565][T17261] bridge_slave_1: entered promiscuous mode [ 435.319994][T17261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.382843][T17261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.522318][T17261] team0: Port device team_slave_0 added [ 435.543736][T17261] team0: Port device team_slave_1 added [ 435.745483][T17325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.747045][T17261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.809734][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.841568][T17331] __nla_validate_parse: 39 callbacks suppressed [ 435.841593][T17331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3058'. [ 435.867363][T17261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.094459][T17261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.113107][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.141284][T17348] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3064'. [ 436.152988][T17261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.166355][T17348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3064'. [ 436.176723][T17343] FAULT_INJECTION: forcing a failure. [ 436.176723][T17343] name failslab, interval 1, probability 0, space 0, times 0 [ 436.200138][T17343] CPU: 1 UID: 0 PID: 17343 Comm: syz.2.3062 Not tainted syzkaller #0 PREEMPT(full) [ 436.200167][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.200180][T17343] Call Trace: [ 436.200189][T17343] [ 436.200198][T17343] dump_stack_lvl+0x189/0x250 [ 436.200228][T17343] ? __pfx____ratelimit+0x10/0x10 [ 436.200259][T17343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.200283][T17343] ? __pfx__printk+0x10/0x10 [ 436.200317][T17343] ? __pfx___might_resched+0x10/0x10 [ 436.200336][T17343] ? fs_reclaim_acquire+0x7d/0x100 [ 436.200374][T17343] should_fail_ex+0x414/0x560 [ 436.200409][T17343] should_failslab+0xa8/0x100 [ 436.200440][T17343] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 436.200469][T17343] ? __alloc_skb+0x112/0x2d0 [ 436.200494][T17343] __alloc_skb+0x112/0x2d0 [ 436.200517][T17343] netlink_ack+0x146/0xa50 [ 436.200544][T17343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.200566][T17343] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 436.200589][T17343] ? __pfx_nl80211_post_doit+0x10/0x10 [ 436.200615][T17343] ? __asan_memcpy+0x40/0x70 [ 436.200637][T17343] ? __pfx_ref_tracker_free+0x10/0x10 [ 436.200675][T17343] netlink_rcv_skb+0x28c/0x470 [ 436.200702][T17343] ? __lock_acquire+0xab9/0xd20 [ 436.200732][T17343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.200758][T17343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.200811][T17343] ? down_read+0x1ad/0x2e0 [ 436.200834][T17343] genl_rcv+0x28/0x40 [ 436.200855][T17343] netlink_unicast+0x82f/0x9e0 [ 436.200893][T17343] ? __pfx_netlink_unicast+0x10/0x10 [ 436.200924][T17343] ? netlink_sendmsg+0x642/0xb30 [ 436.200939][T17343] ? skb_put+0x11b/0x210 [ 436.200964][T17343] netlink_sendmsg+0x805/0xb30 [ 436.200993][T17343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.201016][T17343] ? aa_sock_msg_perm+0xf1/0x1d0 [ 436.201038][T17343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.201060][T17343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.201079][T17343] __sock_sendmsg+0x219/0x270 [ 436.201117][T17343] ____sys_sendmsg+0x505/0x830 [ 436.201153][T17343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.201186][T17343] ? import_iovec+0x74/0xa0 [ 436.201215][T17343] ___sys_sendmsg+0x21f/0x2a0 [ 436.201240][T17343] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.201306][T17343] ? __fget_files+0x2a/0x420 [ 436.201334][T17343] ? __fget_files+0x3a0/0x420 [ 436.201378][T17343] __x64_sys_sendmsg+0x19b/0x260 [ 436.201404][T17343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.201438][T17343] ? __pfx_ksys_write+0x10/0x10 [ 436.201462][T17343] ? rcu_is_watching+0x15/0xb0 [ 436.201489][T17343] ? do_syscall_64+0xbe/0x3b0 [ 436.201512][T17343] do_syscall_64+0xfa/0x3b0 [ 436.201529][T17343] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.201556][T17343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.201576][T17343] ? clear_bhb_loop+0x60/0xb0 [ 436.201601][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.201621][T17343] RIP: 0033:0x7fd0add8ebe9 [ 436.201639][T17343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.201656][T17343] RSP: 002b:00007fd0aebeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.201677][T17343] RAX: ffffffffffffffda RBX: 00007fd0adfc5fa0 RCX: 00007fd0add8ebe9 [ 436.201691][T17343] RDX: 0000000000008000 RSI: 0000200000000340 RDI: 0000000000000004 [ 436.201704][T17343] RBP: 00007fd0aebeb090 R08: 0000000000000000 R09: 0000000000000000 [ 436.201716][T17343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.201727][T17343] R13: 00007fd0adfc6038 R14: 00007fd0adfc5fa0 R15: 00007ffdfd3835e8 [ 436.201760][T17343] [ 436.563840][ T5877] Bluetooth: hci1: command tx timeout [ 436.693654][ T30] audit: type=1107 audit(1756576490.163:13): pid=17359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 436.733219][T17261] hsr_slave_0: entered promiscuous mode [ 436.833299][T17261] hsr_slave_1: entered promiscuous mode [ 436.840807][T17261] debugfs: 'hsr0' already exists in 'hsr' [ 436.847338][T17261] Cannot create hsr debugfs directory [ 436.977705][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.417205][T17391] FAULT_INJECTION: forcing a failure. [ 437.417205][T17391] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 437.426614][T17378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3071'. [ 437.450218][T17391] CPU: 1 UID: 0 PID: 17391 Comm: syz.5.3075 Not tainted syzkaller #0 PREEMPT(full) [ 437.450249][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 437.450261][T17391] Call Trace: [ 437.450270][T17391] [ 437.450278][T17391] dump_stack_lvl+0x189/0x250 [ 437.450309][T17391] ? __pfx____ratelimit+0x10/0x10 [ 437.450339][T17391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.450364][T17391] ? __pfx__printk+0x10/0x10 [ 437.450406][T17391] should_fail_ex+0x414/0x560 [ 437.450439][T17391] _copy_to_user+0x31/0xb0 [ 437.450466][T17391] simple_read_from_buffer+0xe1/0x170 [ 437.450501][T17391] proc_fail_nth_read+0x1b3/0x220 [ 437.450528][T17391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.450555][T17391] ? rw_verify_area+0x2a6/0x4d0 [ 437.450579][T17391] ? __lock_acquire+0xab9/0xd20 [ 437.450606][T17391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.450631][T17391] vfs_read+0x1fd/0xa30 [ 437.450656][T17391] ? fdget_pos+0x247/0x320 [ 437.450679][T17391] ? __pfx___mutex_lock+0x10/0x10 [ 437.450710][T17391] ? __pfx_vfs_read+0x10/0x10 [ 437.450738][T17391] ? __fget_files+0x2a/0x420 [ 437.450779][T17391] ? __fget_files+0x3a0/0x420 [ 437.450807][T17391] ? __fget_files+0x2a/0x420 [ 437.450848][T17391] ksys_read+0x145/0x250 [ 437.450877][T17391] ? __pfx_ksys_read+0x10/0x10 [ 437.450900][T17391] ? rcu_is_watching+0x15/0xb0 [ 437.450927][T17391] ? do_syscall_64+0xbe/0x3b0 [ 437.450950][T17391] do_syscall_64+0xfa/0x3b0 [ 437.450967][T17391] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.451002][T17391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.451022][T17391] ? clear_bhb_loop+0x60/0xb0 [ 437.451047][T17391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.451066][T17391] RIP: 0033:0x7f024e78d5fc [ 437.451085][T17391] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 437.451102][T17391] RSP: 002b:00007f024f5ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.451124][T17391] RAX: ffffffffffffffda RBX: 00007f024e9c5fa0 RCX: 00007f024e78d5fc [ 437.451138][T17391] RDX: 000000000000000f RSI: 00007f024f5ce0a0 RDI: 0000000000000005 [ 437.451151][T17391] RBP: 00007f024f5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 437.451163][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.451175][T17391] R13: 00007f024e9c6038 R14: 00007f024e9c5fa0 R15: 00007ffd6910e0e8 [ 437.451209][T17391] [ 437.706585][T17387] wg1 speed is unknown, defaulting to 1000 [ 437.719937][T17378] ip6gre0: entered promiscuous mode [ 437.731091][T17378] ip6gre0: entered allmulticast mode [ 438.083407][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 438.192526][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 438.203252][ T7960] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.233988][ T7960] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.254722][ T7960] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.279753][T17421] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3084'. [ 438.291471][ T7960] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.312382][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 438.324591][T17424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3083'. [ 438.575743][ T5871] Bluetooth: hci1: command tx timeout [ 438.679468][T17261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.718811][T17261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.743210][T17261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.782516][T17261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.210982][T17261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.329216][T17261] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.356726][T17485] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3096'. [ 439.388906][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.396177][ T7968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.513241][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.520484][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.909561][T17513] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.218176][T17533] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 440.339585][T17261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.446634][T17542] atomic_op ffff888023d4f198 conn xmit_atomic 0000000000000000 [ 440.516307][T17261] veth0_vlan: entered promiscuous mode [ 440.558595][T17261] veth1_vlan: entered promiscuous mode [ 440.631370][T17261] veth0_macvtap: entered promiscuous mode [ 440.646770][T17261] veth1_macvtap: entered promiscuous mode [ 440.665317][ T5871] Bluetooth: hci1: command tx timeout [ 440.680533][T17261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.711922][T17261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.723057][T17555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.754386][ T1152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.764478][ T1152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.790268][ T1152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.820374][ T1152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.932955][ T7968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.954519][ T7968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.005380][ T4611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.018784][ T4611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.152393][T17570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.392918][T17587] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 441.633167][T17603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3129'. [ 441.773850][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 441.797405][T17609] validate_nla: 29 callbacks suppressed [ 441.797425][T17609] netlink: 'syz.5.3131': attribute type 26 has an invalid length. [ 442.304706][T17638] netlink: 'syz.0.3136': attribute type 1 has an invalid length. [ 442.640597][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'. [ 442.735491][ T5871] Bluetooth: hci1: command tx timeout [ 442.924209][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 442.973428][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3150'. [ 443.001212][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3149'. [ 443.230812][T17691] veth0: entered promiscuous mode [ 443.239042][T17691] veth0: entered allmulticast mode [ 443.270304][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 443.280410][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 443.333388][T17693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3155'. [ 443.383825][T17695] Bluetooth: MGMT ver 1.23 [ 443.467426][T17700] Bluetooth: MGMT ver 1.23 [ 443.664499][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3160'. [ 444.202807][T17733] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 444.232582][T17733] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 444.850560][T17772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.897617][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 445.308654][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 445.786590][T13868] IPVS: starting estimator thread 0... [ 445.812129][T17814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.877111][T17816] IPVS: using max 26 ests per chain, 62400 per kthread [ 446.189600][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.222170][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.252541][T17826] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 446.286700][T17826] bond0 (unregistering): Released all slaves [ 446.652937][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.675794][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.029597][T17865] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 447.163650][T17872] __nla_validate_parse: 10 callbacks suppressed [ 447.163674][T17872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3204'. [ 447.202809][T17872] netlink: 'syz.0.3204': attribute type 7 has an invalid length. [ 447.225447][T17872] netlink: 'syz.0.3204': attribute type 8 has an invalid length. [ 447.243942][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 447.439171][T17884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.450285][T17884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.463361][T17884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.488470][T17884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.507181][T17889] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3212'. [ 447.725704][T17898] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3214'. [ 448.182631][T17922] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3222'. [ 448.262839][T17934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3223'. [ 448.596206][T17955] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3232'. [ 448.688499][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3234'. [ 448.698142][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 448.903706][T17963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3237'. [ 449.245216][T17984] netlink: 'syz.5.3241': attribute type 18 has an invalid length. [ 449.283002][T17984] netlink: 'syz.5.3241': attribute type 18 has an invalid length. [ 449.316300][ T7964] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.329373][ T7964] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.339332][ T7964] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.373613][ T7964] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.858595][T18016] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 449.879044][T18016] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 449.978348][T18029] netlink: 'syz.0.3259': attribute type 12 has an invalid length. [ 450.061022][T18029] netlink: 'syz.0.3259': attribute type 11 has an invalid length. [ 450.389872][T18042] veth5: entered promiscuous mode [ 450.471772][T18050] netlink: 'syz.2.3264': attribute type 5 has an invalid length. [ 450.503518][T18051] veth0: entered promiscuous mode [ 450.522476][T18051] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 450.614273][T18058] veth0: left promiscuous mode [ 450.691912][T18064] netlink: 'syz.5.3268': attribute type 11 has an invalid length. [ 450.701112][T18068] netlink: 'syz.3.3267': attribute type 21 has an invalid length. [ 451.106212][T18101] sctp: [Deprecated]: syz.2.3280 (pid 18101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.106212][T18101] Use struct sctp_sack_info instead [ 451.667157][T18132] netlink: 'syz.4.3292': attribute type 1 has an invalid length. [ 451.745673][T18132] 8021q: adding VLAN 0 to HW filter on device bond7 [ 451.775738][T18136] bond7: (slave veth7): Enslaving as an active interface with a down link [ 451.823065][T18128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.834780][T18128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.884587][T18132] vlan0: entered allmulticast mode [ 451.891241][T18132] bridge0: entered allmulticast mode [ 451.898845][T18132] bond7: (slave vlan0): Opening slave failed [ 451.941870][T18141] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 452.060772][T18128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.073743][T18128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.197607][T18128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.215663][T18156] __nla_validate_parse: 27 callbacks suppressed [ 452.215682][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 452.218330][T18128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.263426][T18156] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3299'. [ 452.352047][T18128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.383582][T18128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.559478][ T7968] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.581002][ T7968] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.611844][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3302'. [ 452.623351][ T7968] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.625523][T18170] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 452.651180][ T7968] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.683285][ T79] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.714519][ T79] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.802119][ T4611] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.813352][ T4611] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.832569][T18133] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.853745][T18133] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.874286][ T4611] ================================================================== [ 452.882401][ T4611] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 452.889977][ T4611] Read of size 8 at addr ffff8880241db2b0 by task kworker/u8:8/4611 [ 452.897982][ T4611] [ 452.900323][ T4611] CPU: 0 UID: 0 PID: 4611 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 452.900344][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.900356][ T4611] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 452.900386][ T4611] Call Trace: [ 452.900393][ T4611] [ 452.900401][ T4611] dump_stack_lvl+0x189/0x250 [ 452.900422][ T4611] ? __kasan_check_byte+0x12/0x40 [ 452.900446][ T4611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.900465][ T4611] ? lock_release+0x4b/0x3e0 [ 452.900493][ T4611] ? __virt_addr_valid+0x4a5/0x5c0 [ 452.900515][ T4611] print_report+0xca/0x240 [ 452.900531][ T4611] ? __mutex_lock+0x147/0x1350 [ 452.900555][ T4611] kasan_report+0x118/0x150 [ 452.900576][ T4611] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 452.900599][ T4611] ? __mutex_lock+0x147/0x1350 [ 452.900627][ T4611] __mutex_lock+0x147/0x1350 [ 452.900653][ T4611] ? __mutex_lock+0x5bb/0x1350 [ 452.900684][ T4611] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 452.900710][ T4611] ? __pfx___mutex_lock+0x10/0x10 [ 452.900737][ T4611] ? __lock_acquire+0xab9/0xd20 [ 452.900765][ T4611] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 452.900793][ T4611] ? process_scheduled_works+0x9ef/0x17b0 [ 452.900808][ T4611] ? process_scheduled_works+0x9ef/0x17b0 [ 452.900824][ T4611] process_scheduled_works+0xae1/0x17b0 [ 452.900853][ T4611] ? __pfx_process_scheduled_works+0x10/0x10 [ 452.900876][ T4611] worker_thread+0x8a0/0xda0 [ 452.900894][ T4611] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.900921][ T4611] ? __kthread_parkme+0x7b/0x200 [ 452.900943][ T4611] kthread+0x70e/0x8a0 [ 452.900964][ T4611] ? __pfx_worker_thread+0x10/0x10 [ 452.900980][ T4611] ? __pfx_kthread+0x10/0x10 [ 452.901000][ T4611] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.901021][ T4611] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.901044][ T4611] ? __pfx_kthread+0x10/0x10 [ 452.901063][ T4611] ret_from_fork+0x3f9/0x770 [ 452.901081][ T4611] ? __pfx_ret_from_fork+0x10/0x10 [ 452.901099][ T4611] ? __switch_to_asm+0x39/0x70 [ 452.901120][ T4611] ? __switch_to_asm+0x33/0x70 [ 452.901140][ T4611] ? __pfx_kthread+0x10/0x10 [ 452.901160][ T4611] ret_from_fork_asm+0x1a/0x30 [ 452.901189][ T4611] [ 452.901194][ T4611] [ 453.115990][ T4611] Allocated by task 18128: [ 453.120418][ T4611] kasan_save_track+0x3e/0x80 [ 453.125121][ T4611] __kasan_kmalloc+0x93/0xb0 [ 453.129833][ T4611] __kmalloc_noprof+0x27a/0x4f0 [ 453.134696][ T4611] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 453.140869][ T4611] notifier_call_chain+0x1b6/0x3e0 [ 453.145994][ T4611] register_netdevice+0x1608/0x1ae0 [ 453.151205][ T4611] nsim_create+0xae8/0xf10 [ 453.155629][ T4611] __nsim_dev_port_add+0x6b6/0xb10 [ 453.160802][ T4611] nsim_dev_port_add_all+0x37/0xf0 [ 453.165930][ T4611] nsim_dev_reload_up+0x451/0x780 [ 453.170968][ T4611] devlink_reload+0x4ec/0x8d0 [ 453.175738][ T4611] devlink_nl_reload_doit+0xb35/0xd50 [ 453.181117][ T4611] genl_family_rcv_msg_doit+0x212/0x300 [ 453.186675][ T4611] genl_rcv_msg+0x60e/0x790 [ 453.191184][ T4611] netlink_rcv_skb+0x208/0x470 [ 453.195963][ T4611] genl_rcv+0x28/0x40 [ 453.199954][ T4611] netlink_unicast+0x82f/0x9e0 [ 453.204727][ T4611] netlink_sendmsg+0x805/0xb30 [ 453.209495][ T4611] __sock_sendmsg+0x219/0x270 [ 453.214177][ T4611] ____sys_sendmsg+0x505/0x830 [ 453.218942][ T4611] ___sys_sendmsg+0x21f/0x2a0 [ 453.223630][ T4611] __x64_sys_sendmsg+0x19b/0x260 [ 453.228578][ T4611] do_syscall_64+0xfa/0x3b0 [ 453.233089][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.239076][ T4611] [ 453.241403][ T4611] Freed by task 18133: [ 453.245471][ T4611] kasan_save_track+0x3e/0x80 [ 453.250157][ T4611] kasan_save_free_info+0x46/0x50 [ 453.255189][ T4611] __kasan_slab_free+0x5b/0x80 [ 453.259964][ T4611] kfree+0x18e/0x440 [ 453.263869][ T4611] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 453.270126][ T4611] notifier_call_chain+0x1b6/0x3e0 [ 453.275248][ T4611] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 453.281673][ T4611] unregister_netdevice_queue+0x33c/0x380 [ 453.287406][ T4611] nsim_destroy+0x1dd/0x670 [ 453.291918][ T4611] __nsim_dev_port_del+0x14d/0x1b0 [ 453.297042][ T4611] nsim_dev_reload_destroy+0x288/0x490 [ 453.302513][ T4611] nsim_dev_reload_down+0x8a/0xc0 [ 453.307551][ T4611] devlink_reload+0x1b6/0x8d0 [ 453.312237][ T4611] devlink_nl_reload_doit+0xb35/0xd50 [ 453.317615][ T4611] genl_family_rcv_msg_doit+0x212/0x300 [ 453.323174][ T4611] genl_rcv_msg+0x60e/0x790 [ 453.327686][ T4611] netlink_rcv_skb+0x208/0x470 [ 453.332464][ T4611] genl_rcv+0x28/0x40 [ 453.336453][ T4611] netlink_unicast+0x82f/0x9e0 [ 453.341228][ T4611] netlink_sendmsg+0x805/0xb30 [ 453.345996][ T4611] __sock_sendmsg+0x219/0x270 [ 453.350698][ T4611] ____sys_sendmsg+0x505/0x830 [ 453.355469][ T4611] ___sys_sendmsg+0x21f/0x2a0 [ 453.360150][ T4611] __x64_sys_sendmsg+0x19b/0x260 [ 453.365095][ T4611] do_syscall_64+0xfa/0x3b0 [ 453.369618][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.375524][ T4611] [ 453.377855][ T4611] Last potentially related work creation: [ 453.383576][ T4611] kasan_save_stack+0x3e/0x60 [ 453.388278][ T4611] kasan_record_aux_stack+0xbd/0xd0 [ 453.393482][ T4611] insert_work+0x3d/0x330 [ 453.397823][ T4611] __queue_work+0xbaf/0xfb0 [ 453.402338][ T4611] queue_work_on+0x181/0x270 [ 453.406937][ T4611] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 453.412591][ T4611] udp_tunnel_push_rx_port+0x180/0x200 [ 453.418064][ T4611] geneve_offload_rx_ports+0xd7/0x160 [ 453.423447][ T4611] geneve_netdevice_event+0x6a/0x80 [ 453.428663][ T4611] notifier_call_chain+0x1b6/0x3e0 [ 453.433794][ T4611] call_netdevice_notifiers+0x88/0xc0 [ 453.439187][ T4611] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 453.445458][ T4611] notifier_call_chain+0x1b6/0x3e0 [ 453.450593][ T4611] register_netdevice+0x1608/0x1ae0 [ 453.455806][ T4611] nsim_create+0xae8/0xf10 [ 453.460235][ T4611] __nsim_dev_port_add+0x6b6/0xb10 [ 453.465361][ T4611] nsim_dev_port_add_all+0x37/0xf0 [ 453.470484][ T4611] nsim_dev_reload_up+0x451/0x780 [ 453.475524][ T4611] devlink_reload+0x4ec/0x8d0 [ 453.480217][ T4611] devlink_nl_reload_doit+0xb35/0xd50 [ 453.485597][ T4611] genl_family_rcv_msg_doit+0x212/0x300 [ 453.491167][ T4611] genl_rcv_msg+0x60e/0x790 [ 453.495688][ T4611] netlink_rcv_skb+0x208/0x470 [ 453.500560][ T4611] genl_rcv+0x28/0x40 [ 453.504564][ T4611] netlink_unicast+0x82f/0x9e0 [ 453.509404][ T4611] netlink_sendmsg+0x805/0xb30 [ 453.514183][ T4611] __sock_sendmsg+0x219/0x270 [ 453.518880][ T4611] ____sys_sendmsg+0x505/0x830 [ 453.523658][ T4611] ___sys_sendmsg+0x21f/0x2a0 [ 453.528348][ T4611] __x64_sys_sendmsg+0x19b/0x260 [ 453.533291][ T4611] do_syscall_64+0xfa/0x3b0 [ 453.537798][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.543701][ T4611] [ 453.546028][ T4611] Second to last potentially related work creation: [ 453.552614][ T4611] kasan_save_stack+0x3e/0x60 [ 453.557310][ T4611] kasan_record_aux_stack+0xbd/0xd0 [ 453.562530][ T4611] insert_work+0x3d/0x330 [ 453.566895][ T4611] __queue_work+0xcd2/0xfb0 [ 453.571405][ T4611] queue_work_on+0x181/0x270 [ 453.576001][ T4611] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 453.581665][ T4611] udp_tunnel_push_rx_port+0x180/0x200 [ 453.587139][ T4611] vxlan_offload_rx_ports+0x139/0x200 [ 453.592527][ T4611] vxlan_netdevice_event+0x111/0x470 [ 453.597831][ T4611] notifier_call_chain+0x1b6/0x3e0 [ 453.602964][ T4611] call_netdevice_notifiers+0x88/0xc0 [ 453.608348][ T4611] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 453.614603][ T4611] notifier_call_chain+0x1b6/0x3e0 [ 453.619729][ T4611] register_netdevice+0x1608/0x1ae0 [ 453.624945][ T4611] nsim_create+0xae8/0xf10 [ 453.629379][ T4611] __nsim_dev_port_add+0x6b6/0xb10 [ 453.634503][ T4611] nsim_dev_port_add_all+0x37/0xf0 [ 453.639644][ T4611] nsim_dev_reload_up+0x451/0x780 [ 453.644701][ T4611] devlink_reload+0x4ec/0x8d0 [ 453.649403][ T4611] devlink_nl_reload_doit+0xb35/0xd50 [ 453.654790][ T4611] genl_family_rcv_msg_doit+0x212/0x300 [ 453.660353][ T4611] genl_rcv_msg+0x60e/0x790 [ 453.664889][ T4611] netlink_rcv_skb+0x208/0x470 [ 453.669678][ T4611] genl_rcv+0x28/0x40 [ 453.673667][ T4611] netlink_unicast+0x82f/0x9e0 [ 453.678441][ T4611] netlink_sendmsg+0x805/0xb30 [ 453.683206][ T4611] __sock_sendmsg+0x219/0x270 [ 453.687894][ T4611] ____sys_sendmsg+0x505/0x830 [ 453.692664][ T4611] ___sys_sendmsg+0x21f/0x2a0 [ 453.697343][ T4611] __x64_sys_sendmsg+0x19b/0x260 [ 453.702288][ T4611] do_syscall_64+0xfa/0x3b0 [ 453.706809][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.712710][ T4611] [ 453.715036][ T4611] The buggy address belongs to the object at ffff8880241db200 [ 453.715036][ T4611] which belongs to the cache kmalloc-256 of size 256 [ 453.729094][ T4611] The buggy address is located 176 bytes inside of [ 453.729094][ T4611] freed 256-byte region [ffff8880241db200, ffff8880241db300) [ 453.742902][ T4611] [ 453.745234][ T4611] The buggy address belongs to the physical page: [ 453.751673][ T4611] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x241da [ 453.760449][ T4611] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 453.768957][ T4611] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 453.776950][ T4611] page_type: f5(slab) [ 453.780942][ T4611] raw: 00fff00000000040 ffff88801a441b40 0000000000000000 dead000000000001 [ 453.789545][ T4611] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 453.798138][ T4611] head: 00fff00000000040 ffff88801a441b40 0000000000000000 dead000000000001 [ 453.806819][ T4611] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 453.815496][ T4611] head: 00fff00000000001 ffffea0000907681 00000000ffffffff 00000000ffffffff [ 453.824171][ T4611] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 453.832842][ T4611] page dumped because: kasan: bad access detected [ 453.839273][ T4611] page_owner tracks the page as allocated [ 453.844996][ T4611] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16870, tgid 16868 (syz.5.2939), ts 425060106808, free_ts 424841600045 [ 453.866546][ T4611] post_alloc_hook+0x240/0x2a0 [ 453.871336][ T4611] get_page_from_freelist+0x21e4/0x22c0 [ 453.876891][ T4611] __alloc_frozen_pages_noprof+0x181/0x370 [ 453.882705][ T4611] alloc_pages_mpol+0x232/0x4a0 [ 453.887573][ T4611] allocate_slab+0x8a/0x370 [ 453.892097][ T4611] ___slab_alloc+0xbeb/0x1410 [ 453.896789][ T4611] __kmalloc_noprof+0x305/0x4f0 [ 453.901653][ T4611] __register_sysctl_table+0xba1/0x1340 [ 453.907215][ T4611] neigh_sysctl_register+0x9a2/0xa80 [ 453.912512][ T4611] addrconf_sysctl_register+0xb3/0x1c0 [ 453.917990][ T4611] ipv6_add_dev+0xd46/0x1370 [ 453.922596][ T4611] addrconf_notify+0x794/0x1010 [ 453.927463][ T4611] notifier_call_chain+0x1b6/0x3e0 [ 453.932590][ T4611] register_netdevice+0x1608/0x1ae0 [ 453.937800][ T4611] tun_set_iff+0x844/0xef0 [ 453.942226][ T4611] __tun_chr_ioctl+0x788/0x1df0 [ 453.947085][ T4611] page last free pid 16847 tgid 16847 stack trace: [ 453.953597][ T4611] __free_frozen_pages+0xbc4/0xd30 [ 453.958722][ T4611] pagetable_dtor_free+0x2d2/0x3b0 [ 453.963848][ T4611] __mmdrop+0xb5/0x580 [ 453.967921][ T4611] exit_mm+0x1da/0x2c0 [ 453.972008][ T4611] do_exit+0x648/0x2300 [ 453.976173][ T4611] do_group_exit+0x21c/0x2d0 [ 453.980774][ T4611] __x64_sys_exit_group+0x3f/0x40 [ 453.985810][ T4611] x64_sys_call+0x21f7/0x2200 [ 453.990504][ T4611] do_syscall_64+0xfa/0x3b0 [ 453.995024][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.000936][ T4611] [ 454.003279][ T4611] Memory state around the buggy address: [ 454.008913][ T4611] ffff8880241db180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.016980][ T4611] ffff8880241db200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 454.025052][ T4611] >ffff8880241db280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 454.033126][ T4611] ^ [ 454.038775][ T4611] ffff8880241db300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.046842][ T4611] ffff8880241db380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.054908][ T4611] ================================================================== [ 454.069065][ T4611] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 454.076320][ T4611] CPU: 1 UID: 0 PID: 4611 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 454.085807][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.095872][ T4611] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 454.103179][ T4611] Call Trace: [ 454.106470][ T4611] [ 454.109407][ T4611] dump_stack_lvl+0x99/0x250 [ 454.114010][ T4611] ? __asan_memcpy+0x40/0x70 [ 454.118644][ T4611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.123856][ T4611] ? __pfx__printk+0x10/0x10 [ 454.128464][ T4611] vpanic+0x281/0x750 [ 454.132466][ T4611] ? preempt_schedule+0xae/0xc0 [ 454.137329][ T4611] ? __pfx_vpanic+0x10/0x10 [ 454.141843][ T4611] ? preempt_schedule_common+0x83/0xd0 [ 454.147315][ T4611] ? preempt_schedule+0xae/0xc0 [ 454.152272][ T4611] ? __pfx_preempt_schedule+0x10/0x10 [ 454.157660][ T4611] panic+0xb9/0xc0 [ 454.161392][ T4611] ? __pfx_panic+0x10/0x10 [ 454.165830][ T4611] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 454.171757][ T4611] ? __mutex_lock+0x147/0x1350 [ 454.176549][ T4611] check_panic_on_warn+0x89/0xb0 [ 454.181507][ T4611] ? __mutex_lock+0x147/0x1350 [ 454.186296][ T4611] end_report+0x78/0x160 [ 454.190554][ T4611] kasan_report+0x129/0x150 [ 454.195164][ T4611] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 454.201157][ T4611] ? __mutex_lock+0x147/0x1350 [ 454.205941][ T4611] __mutex_lock+0x147/0x1350 [ 454.210556][ T4611] ? __mutex_lock+0x5bb/0x1350 [ 454.215339][ T4611] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 454.221609][ T4611] ? __pfx___mutex_lock+0x10/0x10 [ 454.226658][ T4611] ? __lock_acquire+0xab9/0xd20 [ 454.231541][ T4611] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 454.237628][ T4611] ? process_scheduled_works+0x9ef/0x17b0 [ 454.243354][ T4611] ? process_scheduled_works+0x9ef/0x17b0 [ 454.249078][ T4611] process_scheduled_works+0xae1/0x17b0 [ 454.254646][ T4611] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.260661][ T4611] worker_thread+0x8a0/0xda0 [ 454.265299][ T4611] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 454.271665][ T4611] ? __kthread_parkme+0x7b/0x200 [ 454.276632][ T4611] kthread+0x70e/0x8a0 [ 454.280764][ T4611] ? __pfx_worker_thread+0x10/0x10 [ 454.285905][ T4611] ? __pfx_kthread+0x10/0x10 [ 454.290523][ T4611] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.295742][ T4611] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.300961][ T4611] ? __pfx_kthread+0x10/0x10 [ 454.305564][ T4611] ret_from_fork+0x3f9/0x770 [ 454.310166][ T4611] ? __pfx_ret_from_fork+0x10/0x10 [ 454.315286][ T4611] ? __switch_to_asm+0x39/0x70 [ 454.320069][ T4611] ? __switch_to_asm+0x33/0x70 [ 454.324853][ T4611] ? __pfx_kthread+0x10/0x10 [ 454.329465][ T4611] ret_from_fork_asm+0x1a/0x30 [ 454.334263][ T4611] [ 454.337627][ T4611] Kernel Offset: disabled [ 454.341965][ T4611] Rebooting in 86400 seconds..