last executing test programs: 5.037469708s ago: executing program 3 (id=4483): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40890) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x50, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xffec}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000001f00)={0x4, [0x3, 0x3, 0x2, 0xfff]}, &(0x7f0000001f40)=0xc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x1}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x48, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0008000000a6220400"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000000100"/28], 0x48) sendto$packet(r0, &(0x7f0000000000)='o', 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, r9, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001dc0)=0x0) sendmmsg(r8, &(0x7f0000007780)=[{{&(0x7f0000000740)=@caif, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)="dbf0a51ff44657cdb29bc5a0ead8381c393ed8aa966f939e56e642c46e1bfff3c65a0e5d1c464abdc14d686c5de061e4a5ce93dec3fe268e9fd2b42d8a4aaaf93c0fd6a314e927978ec1936c4499f099b713253b0feb45f3f6d95bb9973302aa84351b089aece98a3a1dde4581d1b153f94ef2273e7556288d28dfac0c", 0x7d}, {&(0x7f0000000840)="e268d72b68c7e67b3c98cef14e14a922603f1c0358f90a5f6a43c40aeb2f6144117e8d93bcaad34b39b1743115ed6c68e01343243ae3fd0423df701932dd2a9da3ad0f57f54e859eb0", 0x49}, {&(0x7f00000008c0)="06ff7b867fd005943ee20f94174061ccac20a28054fd646d82d9e623e014e94988d0b1a7b3bb9c8de6e42af7c4805beae574a092a34ae56c10a83db6839b3d71f47fd0ec374e0fed3b516714878375540219da3eea2705d8a4981bcefe5db11361a253edcfe0722f0d9447720270cffb286cfdd388abbc76c83c041c4402dabeb4bef94f2fcacf7c88f757e4c344c21a863c836f089a65795a6ad1625f32dd6a8f75d63383374eada7517fe46b91727ad5fc346d3c85958f3f39032c6b9df011c0dac99a1641dfb3669f4b8664e7305b84", 0xd1}], 0x3}}, {{&(0x7f0000000a00)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x4}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)="5ea09307952de8c9ee241feb8c2382406c2972163f2eaa42f9a57b1f86e7001e98c5eb0409e5ce8b6db8c1a5106d39720a8f62bc31093121c6b52a7660e66bba543480134a9aa795d70919d0865b2c269f7dbe7c0f5acfea7636cbc655401c3e2a8f956b6773e577ab9d0ad255067429498d01719bd9d7", 0x77}, {&(0x7f0000000b00)="09fc0087dce73d954c5493c3bfe9068f1acca2251a636e1c05d352b14133bf2a04d33fa1e53bd540d4eac4c3e0c50a7f89e5acf3bf58bcaee044fbe8ee082849a2f74c868f689c8e92946bf4f10e4031d3fed05b37e0da3bcf64598d65c8a3ff1fca7a5c6bd305a9ede4f49c8e36da47f75475f474c34d57d8c340", 0x7b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB="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"], 0x11c8}}, {{&(0x7f0000001e00)=@nfc={0x27, r11, 0x1, 0x1}, 0x80, &(0x7f0000003680)=[{&(0x7f0000001e80)="0ed74a8f76d21bce26d67cbcecfd5dad0b09a038ae937f2525732b4a07981fd8fe8fdb7a5a0cca50b79a98f6c347df7d8b995873b544e821446350be43f60a1c7b", 0x41}, {&(0x7f00000024c0)="bcc393bbbff834a099f08db2891e4f33c1a2a2fb1027a91a672404c50633a0e2e563cbf7e95490e78fb026c16a65fc237282322f0dd6b06cf21c22cf046972999174a8835ac5f44ebdbb1024906e5be7a770ca4e72f2a5bf13db34c78f1b130d3064f1e8b170ba64e2af6765318d4caf1ec72655464faa18fa6354c71331ed0aa2ad8c928468af7dae2d25fd6583f3f07686c572f02243168b97bd92ffea35ae3eb990148a235ad16a4c0da342ac554a40fa7f34e7d5eb1ecb684c7eb891cf95e24ef3ceb9e9a92b07db656dbffe064b4e372e09ad9c65689dac0d55c16be73891f9941e71a150076a13022e03bbc657aec83ac8ba9a93807871b5ee0ce36548b6ae3f33967d91564fd7c4069c99b46845d52084f2934de3fc5b5eebca441b91d2c5a67cc8846ce8c153243936cd18e36a326630a8d8907ffa8edcc4300db7d47488ebc9cc359125f12eeadb32c7fc3c17f515a55a40b7627170c5db1ed985b3d881d6047e1cc0c018ccdc63a5d7f29c349b3d6daa65d2f18e6d16d1a688f6666b656af134065d526b6b1f301c837cab831c30a9b90df26be7b8175dffa908bb439af9f77cb92db51759748124e1e1a0d8db85c26e61bf0723b8f6ba0434343f7677bbf1c44a3d061cb409883eeeb5f6ce278efe6cc76626885bd012fec11440254f118e8f157b4803f1ed544d724c1f3c846523272b9d07b5a625016ca489868019710dcf33a4d2f7b7bf64a1db267172d8efe8010998e661e619d2dde6292b3a60a3475b6e5039e059096af46a7cca2452eacbeff3cf7481e12c22c8124873f034831eca40cf54c7d90c675d88806d195da9302c1df4d51bfb4b659d6f83b9ffabb1d59d8fe15053fe224ffa6e0c47557a7ce72b283627e41c91e29745bad800ff9226c23b4c61a1b52f8137a2ab68e99e9577c8e5724f6e8e3b23998e1d0d202ba08b6fad5caf27f7dda8cb5b90b02c0ee86bea227841914c21039d38ee1204cac3373229c5a1b68a1e284851e453079dcd02416e633869717c1cb92bf958a35aba13661c451454ad593695f1b18bc6ebc202b1d32c06e0c083ec3f83208ad9cc98f04782fd0853c34967adc1efc981004e58e3ba52703b433677f5717108bf66a6a9d2ab34a0c2c754d8d0e4317762686951e3c1d7eee6edafcad6dca30ec3b9705c6d3ffb3987830f2fdd8e6af63b2bfd3db85dc047c57dc8194bc2d1371b58913fadbe7443acdf02e7ff52d8c88e2030a369eb72ddabb2eaec9315ffdf0cfbf7456b9810f87b0955c8b0b029240a672f3bff52ba47f07e795f8fee7720f1d46761ad590a647e58696deb96cb350335d1fbcb2610cd20ecd3fb81510e683102126788abe2900e6db0c6da90d523ad42376d9c051a530fcd5cc4b03eb74fb8718e01089ec0cea388a198a036d77d75d404742058882dcd6b0b59df9eadf525c0e33fbbdf89445f5442a8cd2123f9655f8e0751078920c14a7e4d9ce10166413df113a320c06e2544cc7466ab673f304e64137138d2bcfb93d95299e52457c674f7f9675e09dadfd442fc3c22fcdf9328dc98880b47b0dfac847bd46715ea10ac39cc715d30b7ff84e16af57233430f0b41924846a5d629c5b2e0cd287d122932678b12ba255236b41cde5710df2431f7c7e6383a0c92d9a82b1ddaf82319598d85fa7bcea68221fde6d7e8105c907d9a05947ea12f265fc9be06dd6e4fcae0b40b6f8aac7764cc423bcd698e9863e3aee93e8fbed3c7aca050470b9468d5224069f9a9e966bc083e4e93675ca7a1ee4de956e67bee2e5ddeac3b27bd44f7a9165f74227c08af24aa14d7b4704ed9040e2ccd6133201b908058dfe0bc3328c32996c13116a83faadf72c69f803408030e3f328107592ae0a16185a05f030a9aeb61cb2fb74d266a55c96f434b71eb428976a8cd9365e99b63c0817f5dadd5ac2b18241a85139b732914313dc43097ea5e051c86c3cd6bfb35fbd6db667bf2a9b6b4133e7de7679d7e9e83c4ffa0e07b93844b4ceaa80c40e67ff2bbfb1fa3dda253352634749415e8d809ab45ef5e4556cb3d573c166cffe9163199b94877e80edab252f3e4db0662b1bd58b537ddeb1058745bfc8a2316b62fcfe2696da45fdbf354d6a0b64fd0026801f735b9723c527c684c6430573a829dde82de7d987655ae96b0f1df6d87c64b97d1f3f2472d7a112a9a324a289cf7a69628c2d980db1675b47943c42f884147336fb5dfe16afb9733c64b6ab70c07a4230457d0ec7a910f47d142d5fcb2823a02bc77dd78de9f5f8123b7e41a9276aea90df14196ab25c8328756d8c43ddd0b8da2a35713343a336a2ba3a5d4e5f177b1133e2a71d4dc71a83d4732f2b0c7aa618242a6ac410ec9264b113ae3fa76d03868e9576754728deba956c487e083e2bc15b7dab2cbba3adb406de454409a64ad70c12fff0a7e223c9b88f416f0e1530ca4cdfc58832aa123f9f7c90ea1b8427ee6d6c8610f529c6a2f804fc0d8329587e0c28d9f9b27c22c8fe3328ff7fb2043f91a4f1200c24df736f3e65254205985eede6efa337be92d37df183f3745cd290620bed3fc38e99bd71296166bd7c51024c126bd2ec55505724c0b71cfd88853c8d78b0222d3f5401c2d0873f55b9a0b80abf8be3a63e8f6c3c07133db5fbd62c0006f868f3e1381fe2c6609c5a74d621a5cca45a5d7f32966a871694596bceb4ad6cb1a3ccbfb6480d4e350b458b7163147462d80140ff3b096711293124d4bc1854d4097a2d9f9dd9938a538c4e51484d9d499f0cb1b5a7f0e3f5feaa105611ac28c86dee4df54605309587e55cca171a1581a5d0f9aa80068f3f04cecb72e721fc0a60e373ddfa1e15f668c3f3b077e86b643f5939de954d78d90a657255082ff656b41ef5ce86004774878cf05cc88e8789468ccffa4344d5fe63b6b52f33f365557080e2e3c201cbb1ea1e80226de3efea9e454ad44986135adcd9ba7a7799266869821192ca5299bdb7338da8088814ac8549e3c41a44d8442f593391ce9fd446f14e9fa99e8a22ef8f927f78e55b3489c01a069aeb4485503006b3d7625f3dca65c1a8c6c6d2ad7faaa8dc92ba129b83615d3fec1b0eb8bef57587bbc6d0234c0bf8f5ce03686932494ce140ac29efe2cdff723fdb0c1b3cb1be66ef305c57080beb8fda2b157d37d3df62ea70571d5c1c1114e0af80628ee4af506dfe09b132cf6cfb8d7ef325aa4b8f64d3a7118cb01b5d85e89f1dbc45add5c77a4f0d5ed0ab6827f473f195f6e1389143a075db231267bca9c564558b8e2dc7d758db8e883128a089b2d286350c78f77f6c03c8ed881aa312834ea2b5cd6e467e9fca69f0efb81bedcc5e8220ddf63228769073101ae5a4ea90fd7b993d7937cd39ad7934b8aa19673358a9fd9634e1927fa58f777eafe16327900e1653ec750fdaf138744d5eb3b40c04b5ec1dbc57c61384cb00a6bb120feb9789ba7d332e091032d2bdb0a0a141befb85e814bf264fb6766c16e24a8861fa1a8b96e835230d50a31258d6af379212a17ca79726849884fd00b1558b2e1634b23c11913f9e2787ed08b128cbd76cfdedb57dc46020b382726c9934005c3686e6145eeb605410fc0be5963a38ed13b222980fc1fc270fc7ec56fddd5d1ddff567e794a0f18eb2efc94e4901505d02bf05f9dd60daf7eee16e5d24692ac3308032018af3c7fbdea1580e39d10be89d2099350b79c12ebe56fb3ea94a1996a13b45378c96504b3a587cf7272f10a43aead871f3163dc6004bc136bfb178a46cbc09571db45b642595e50af0085183a374e341e824e41ed2f3badbc6b988230d4a2f5f82c5c826df5f49ed3482c85dec52855540fdfadb368124df5807a474cb86973fa5415840e4ef8acd5d5571f416ec1cfa1b3967ae0858953ce262ed3a12e6a7f1acbe4afdf6e7b2c776730e41f4f8d221e6ba6dc2583a23607a1e68b7f26ba6acbaf35c2be793a5ce788229de6f9ee0185dabccb0f04adbeeb395ac78b82fcd6f49ce38db676c1ee452e96d3748f572afcb6403dc0f09fd255a5a2630fc832184ee7cc148e5e8a2912c9154b84233b5ec4d0a68ab92f03e18298766e487aaecdee2d1414b6dbbb5cbda01721e1a92c14c18c52793ebb03390098eebca799f3063f020ee052edbda4977e861f2573f423e5386abdac0295ed2930aab7416f217991f466b52aead5dbbbb8ec575ff5bcc402d88f7f0ad7fc25a081a27a2fed9de1e92ca25b814e40a5987f2210ba8143094d5ea32fab09a6f023bfd36e51bb6ea235df7ae77890981097a3116914617ac840f591611117bb2c37e21950e3d8c729caf19e876d28b1cd1212abfba66ede19ec16a19abd26dffbca0c30a9bc87a1a870082ceca11a36d24c562cd4e9b699c74f66052c160546cc049ee07736bfb2184310af22b63fc12be5e1631832eea48af594ead84cb68553bd53cfd8b4f284804d7bd6e89979ee5d44252647aa6aa42fca0df0851035a02a3a9372f4203728a65ed0a53ea73b50e7ca159dbee898f991dd4db18dcf69d390eb292bba2828940dd321b728a7c283788a3aef34894a0272312d07529b999dc0705d52566b1449358e67dd432492a66f98918be529dc75bd124c0803603d61aca1af0a69dc7a16b4e49214e5880a5956f0a9d80ea6a0ef8c2583206816b43d557c3025413eb65772f59d78fe5605b58e746368f7160b2e1b38aa9e51ef8076a64d8c59f8b310e1d96e019ab0e8b6d2b4d1222b72177d57435b06830d722a6d04f97a29cd025335b4933416e49b9131be343582ffc6c4e2d083eaedd5a65876c9cccb6de23eed586f392b56a85186126cdcdff0b5d2a3f4095b0a46e6ed4738d9969fedb2c9a74198cbad9aa6fbd123e659d066e6837761255c9f0e662e460ea58d6d79ad871ab14879a96140eb5993e5590075afdd648759de79ab7057aba3051001a838af3818f19f4541bd2d57f65b61877f330098280ac2e1e11cff27cca707864d337f1ce3b4c0212d5bf01ee2f82a28cf2fdcd09dfbed4f4fc0e81df782879b60197dc81a81818c384b53ec90f90d68878537fa7b594b841c83d6532b550f17de97e5b3ec1747db06209f2f260f26709d137af7192e37123146b98fa6f674a4917c2d85208c22d5edfc9d0a3a05a70ae43e2f7c1c76aa249527fc56be68a04d8665d88eedacc221715afe572688db78c613501c074485dbc614ce3182dd790d88ac3d734b641288f6e701231a852fc373d668636e90ffd0d9b0ac429e288439489da63690a5350cc1c4a5f071f387f085ab9b2ba4a6dc6381aef671ac503928d929a261e4d4d5b46145e94508e72b374853a35367e2fe8fcb51f2ce8130efd37c9f6a293e86da671f88574f0f96bca54535cb79adc00271aefcc5c3aecd2255e2f85871dd701da477f7836b9682bc77cfea64803a4bae88ded3e4f1ac005660bff29980300ac128c741157dc2c3e79bfd07745a71fe6450de675d01dbc7bf30d9798e90acfec04bf7b95013e5979f4cb3381d1d124610433e04b1db60b635cd4c23f586ef11132323eb2db2e433cc09459c7007aa2657607361db74fe731435707a2331f57546208cafcaa1e553ffa47fa02a95b6a66b969568116e281300599076299e1801c415b57442dd00d25d07390f618806138f22e1681d1bb93dbff4d2c499f49aded2330bd33509dd883029deabcc966b40de1b9b4e8c221f9f8618ea12fae4eb338f9936c72316b5db0156baff17cc4e9a26e8ce4ece65f59c043552cc507cc1266a64b2995558a908ce98", 0x1000}, {&(0x7f00000034c0)="dfcbbbeac915cfa22671a68365af7e237c71da91ef460c2adb4d0d88d593c08bc18af2eba245c669e124c94a35ce7d24570f311f91acce8540fa06ef8e5fb6492b8c994d100cdfd748966c3200663000379e94d3488e91f041d46d1f", 0x5c}, {&(0x7f0000003540)="1e71e03b9530a6f93f5807f44aaba12a505d1ff1015d801290018324e3b148ea723d602d877866453e719759f89121ad264b22d97c599333734c73cf1de597c0f24514c226593db2ca0046a120e46c119d4f35c835017ddfc043a494b6860822e1a03920ba9948da04b7e65695b9d61c1f18fb7ec8d5039c72a6a74e62faee53756974", 0x83}, {&(0x7f0000003600)="4ae20ac13f3a1449f36035a77183a6e8ac733e40597d8d8ae1eef7f5239e8aec12a90a02a9e230a7c1a82141b4a0704c0eff14ab0e9cdeccb952d18b5f706a5c4139dbac0c3ce00475fee9c948655a0b2b9c167878e16f8f6a9af6d21811a3ce8e7192330e1c5cd287", 0x69}], 0x5, &(0x7f0000003700)=[{0x68, 0x101, 0x6, "e402ebcab13b824d1db11c73829c422bcedfafeb044e7ba2635d71bb77011cef8f48b21585c25c8342dfc4de146cc84254bd2ad67b1e3c21797f31b759240937a6abc93ecb3992321cba5d440fd303a89d6908"}, {0x48, 0x29, 0x81, "13ab6580dd1947758c29a8625853beb7b9c926002c54d71680404648137bea0be6fb155901b1d6be66145e3e150b9abaa7a7f370"}], 0xb0}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000037c0)="ba", 0x1}], 0x1, &(0x7f0000007940)=[{0x70, 0x84, 0x361d, "ca8ff77e18725f4e7be292d4f6d296bf47b2e88bd90c0f538e3f8d8193bc0b9b9b21334a95b5c8deb336bdbeee09a02464509088a2912d36520787261a0d929a048dca37636e4d2859fa020b177c16c15cbb16b7f982765568"}, {0x1010, 0x10e, 0x7, "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"}, {0x98, 0x905d2d0264fe6537, 0x9, "b6ba7e0f74d51b2e509118133d85a98a56587ab0f39e4de62811fb52fab91e14a8e94c912d605402e5162f8cf4c532452e0bddd4acc1fda701b507f5a621fa07a454807b036b41849b07ec7b129d453370768356c77ad547d466610461297fe60fb5217746958c6fb699f39de5c1592d25fda8bb2cba07151b8db3535f1bbfc255bd6636e95d7a22"}, {0x88, 0x115, 0xc0, "e0db65672665e7a22f65c7e1f71291f77354af19bce24eaa590b80a8c39ebd7bb321694084b5eb792d683fefc9a14b648ab94fde2d7d245f48e1c92699ab63e84869202e0cea36c067e35186a4a679e1c854341eaa2fe2164fb34e4186967b387ef71f71dc6b67ea215d8c8856e7d36cb2b916d1e775"}, {0x88, 0x108, 0x9, "e80c27b4f3fb875bcead3bc879a6d060660767f38e15c9dfea6efeb3a5451d24567f8f304ac30444d3aa5050a38aebab821f459d186034e5bcb47602113ddd529db4386b6342eec5c32bcdf550dca929d79b331c7b29ba746409019ea94f8d11959ebb13718335c780adc73ca1de4715d6a6a4"}, {0x68, 0x11, 0x4, "1efb6e276d5bd187306fc0651495cb30013e4417b38802bfbe46277e3ec44bff30c6786c561e594e7b3044f182912393fcfe71de22f68f458cb654451473291f1b51dd25f81c3afdda74a9d84cab99f3c2fbd5abffab5ae1"}], 0x1290}}, {{&(0x7f0000004ac0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004b40)="e2e431380a287b79bcb0ce5e5dc80eeaec82c682bd762a3e2e5b413b8758c22b2819c2c3c183db64def0c204105d5e971952a0cf633ce7ff677c3f17b3b5605c017390d293419bd19ad860b957204797b7249de85b3c2dbc8f4d5227b9e289fc7c562c4a6cb6234eca8c9cc825815c2e777cb42d831daa87f6e0bb72e9a0a12aa10f2a8cb2f2f6487eb3f3d6d34ea5f448e3266950", 0x95}, {&(0x7f0000004c00)="d999ffd968f2f7d973ab825eab480641b35805bfedfa5c6821c2a851fe25d40121a70d0df8c6d5f2411816064aafb7203cb82b2be537121cf9e0156f05d6c9e686523b3ba01ad4aca83c20cd1ef7f3423e38dbb11066d2c0c85ebc621ddee54527fca1eb8f02a544caedc80debfc8b03c73afffec2cb7e09805c129978faf21cc4203b88ad3cf68b0e4bcba84be30fd5a217a3aa5cb664ad62e881a615472782ddc0b816392f088d792fa1541da5c27d7aa0fa37372492cbc4ec95ed5f1c9883a5068b19cf2907bd1585c0", 0xcb}], 0x2, &(0x7f0000004d40)=[{0x98, 0x0, 0x9, "83d824da85342fca1e2bf2a430181071f75666232c36c3efa41a363a021aeb642ee5e3d4dd039580332935131c706606282e9fdadf53078fa92b37b412d45539c8386eae2ba098e2ebdd2fa1f2097686239627b1529dcf238e323dabc90c3859280999c3cd87509667518ed1d02578ff9b4137041d7c2ee7e2f479a99771a2041c69a234"}, {0x38, 0xe, 0xfffffffa, "69de160ba068f80ae85020740fdf4a9f0e908802391822f551110bbfd4a2270da1190e6ea24633"}, {0xf8, 0x1, 0x7, "d7d1d078c2a355b697203a5f3d7e9547dd2cb0759fa1ff9cab4bfc7b9af51c82ae82ca58f986318bb975b0f5249f16da9554337464e8e1dd13f43fdc077d6f77fb5951c13fbeb71299fe9e469be65d61990ebae13003028eaf29c39825ca5f13352b6ce432e9ef6276ecd8bfb8761578d52f5894e28d3363081d2bc616fb160d0f97ddfb52f0969cd0d190f483db654fee636f88a554224e38ed02d8c4aacffd24c50349a5264b6a36da6852964cb6c3cfce4a5b28621f7619c0e2c2aa88fa6f480781e2cee29b8e4b16b09fc74d7d6a2cdb4d86413d8a957b4752ae41dc20fb6affbd19ad"}, {0x40, 0x116, 0xf, "cc402d64fe5a076d0aebd444a7fdd688a060aadee64d7994e10c2085430f4727150aac29d30a2777607ff7c25a5d7a"}, {0xd8, 0x10b, 0x19, "8985f2a88676bcca56bc51b0943ad1c38e9d9908f75a746efc1224d86921400b8453617f4d9e70f56c9b741cbffbe61fedb02d85e377ce73f76a320a1c295965ec43702291b0cc671b690e822e3ad96eac1792adfb7a36e3adb2b63b211ea3ebc064b841038f9b135ba15d6d2054a9b4ce090f94190c8f622cd66d32c0304469fbf0e092ecc9e03a83a74136cf64bf4c27734f4c4303f8806e44d3857d42ee829c8adb02fff132b996e1b6f1c8134f1f4ef3ed154c17b87d273347001b9ede7a609379ef"}, {0x1010, 0x109, 0x5, "e2b14aed971ecffe3523d207094b22d962242bbe6b95d9537658f07eb14aae55e92d373ca8975a3b62e630b87d505cf2eac33b9099a591496b17f5c55585180f2894823188afd5ec4c0d62bb540f74ea9c3fb31665fdbba1a1fa5ea869d96523d83938511e163298c1520c3dfa5a249e82f80bb293ec6d14f706dd5618a5f35a09c51fa45b08c5ed4cf5c8f7de30fd0ec3f228022fee9acc8f90c92f60faab692fdbb49a5550dbd113b3f66bbe9a459a2c6aa9a2d4edc0652f651d5b84c869335a0316be59ae1324730ab723a72378c23cec257c9c97db0da2a8dba3a908057eb397ea99dced84a92c7d87c35908d2fab343db79bc9f5ed24a827fee1e76a2252f909eb52342d7210fe1a4d1a256321e05a6811937f346311eac3d93eacbf6aad3d26d33404d63bcee05a3062e5012fbd2535913892ed997c5f862780a2c913813e52e3b4eb253f3084bf387ffe09a42097fc34f71b514d447547b6da629531ce773c754760fdca2ef1a8e3fb5895fa8331f604e5bca4006a3e9c96dbcf21d7efcfd8610dbe54d9db89ce6538fdd2e794db24b9561255f813efc8902c9a2be9aa8cce983779eebadf168f9ea706c7ffecbaf29520a4bbc77463073f252de88f6c8b14d207047e52a98398146b5e9b5aca37d95c78ac0c97d33f538f2fc16d09055eae89fb27f458dc3ddc9f94695c86936f59b7a35f04826079a9edb6d0ed7db0a475ce8081ecc353f7d43b03287729205c17d67955dc67f6246b00891ee7ea66e51e98511b8628b04a3297f826d688085d5d15e65f9e34573e0ceb6564e9e06e9e8a071cc07560ddfc6140156858c25b10205276d4976c9600085f723d12f7df4546d5a6d40b449f8195b85b9c802b641133133e9506352fae0983f8a64de48d66a5b08e6b506a3ecd3a147bd19e50742378e1fb56d2fb8b4ad623cd8a8ec570dcfe3d4443612ab8fa1b8dd113d8c5bd95be24f8132408ca74f1062c4d5905737040047693de47ec9526d6d4d767d0aefd363e10cde5cdd3076909aeca844bf72c221f1d050ad1672fbed1722fa2493827eec178e4d4cd51e8d0c2af4f1fef845eb8ff1ca10c15cd9fe055d76b3a90346b3ea31d6c884fb9a5cd8c8789cbacd961c80d716a8823a891a6a582c09b1ba9294cd851dedc50434e047d38887eb1c18706fae4ceaa210c3faa327bf29485149c4615c102ad9a08f5eb43278f9aabcb650b7286a456a86ab04d2274e56f03423756ea54eb472d2f635ad4651af73d588ae4671804d0d51579ee7c7909d5fb09c307ee537bf4dcb9b4f4cac744f51f8ed7073dcd208603804a835611d72eaf6d7d11f5589580b59ff0a0f5e07655974cea1b0595f5dd430a7368fc5eb247ec37798525c12a944876893c02a5f6af5790775e43ec6597b147917c91f771a219271be5782172fd1ec13fbfdb6b9e195cc5f6c0163b679fa3d3d17787c9773f0c9a76f3d9a3d8787078c4cf0583bfea971b493d35b79bcf31d351ca38eb12e495e4a2be40a97df25b530c20d666efc9907a57a337f05627b89e1fdd98e6850f12211b4eaa49e9510aaaa61d6113596045399a6ad6a7bdd5f181dd30ee7b9ea8bb07e34b74d8631c4cdcd5b0d6316ccfc5f850dfa805db040767620b52fb4b930f8ab590cac6b6492803225553d162fa449993ca24aed8ecc2c92b050a331017503faf298e02549d2c1388a9f59334cf0df4a442c8d963da203735b90c827091b9a8700d499aac2b0cf103f761a2aca6d542ed3a13812184c305b0adb7e43447237b195959aabf61230c2dc54a1c764722f6254929cb929db618ecbd90ff4463c6f2842bc8296f606a18c4e793c5227cb28cda8b7a7d82106515af9ba3dceb90999451875e03ad5992493c5b68f36f6edbb216b1db45a44f698b01dda2f6192901c859192c2cd51389916ee28ce7f6648370da1a5b5b460f1eaa8b0be4cc4de994a0684d7833300d8fa75f69b878474b722ccfe0bcef6086b4ee837b3396cc7878ff35392186d23b47457bdf33db79fd649691a0858970e74557bd64d14665e81ed0efa99b374c62f5c8b47e2c89cdbbd2b53b21b022690cf7dc50ab1eeaf23801355b9e97a420810983820a2e1779adfa349ce7255e6b814076df80706b78a7a0985acb8d9f85fe4e880a8b74fcd943d5fa8247267a30c2e17d9f73e7114b25a490081aa1bf4c483db6c9d2ae0754dbb0b11d89c1bdf6a26add81b146561d0ea43c12004c9501ca96ee51a231aa7c332100e2a573c39b6ea133c5ce52eaa58885e7979ee34e32c310a93aed49411f65ef08886f5483cc78e76b08f6abf417030f0a64b3be23c3c677d379808fa4b6e504ededae05140271d0d1618844db6ced3014eb008a2ae1cbe9c11f59e213606cf2d0927d3987ae8ac9571304b5b8da8c2e7fd53bfa7eda8b81fb651e782aa6bb21a93bb651590d4df4d309a2e9bb2288c3b600bffa233eb5e9dd9d36dc8baac8306204f39472a827f86b8ee4f569ba8938bfd557bddb97938462dc2351d355bd3134627f6a667c58c7798d04be95143983752400598b075cd66a1785171bd0491a58e2c0e405996c8f637fc6551ea90e8430be67147de8f3a37ed4e353e2fce251816625916e29d4d0579c098675f19fae4a6a3c403324ce7acef90feac921c87eab30c15a85ebf8dbfd66dbdc8da4e65863344088b3e42691ac42acbbce60d99fe985df21404428dc277f1d5d7b35507966654ba1a26d94bb0d3cda8bb44a389f46d6b6463e7a4b46ebaeb25ffb4c72254bf9beaa0eab381c3839affcbc2d6e0d088a2097407df9260d0759eab6143b6b99f6b3f991569ce5443cb22b3106a4a58396bd9f5ab9f3947d48c0dda90423b765ab367a66adff6d643ab2b07f671f1fca506ae12eb2ecfb41c7ad69c7cb649e10edfda6b6c962118be7b98e8c50e6fecea6e422b2880f39371536600953e18e65e78a750486a2f0016d9ddddecc93432117d3b58fff397a72ff454edc8aad8abc4cf3b5176c786cdad301066fc9c79a308180b670f6164c0a42e01135fec66886c5e270a6ce19afa5c004e32169659765ecf60e8f665ef4136d98f2d8dd0505a1e9d274330aeb172dc9b0b7d9ae66616c0be90f4d110ec870db8fb5213cd02036d5c9f488f18af481c8e7f37f512b8aadab4e3266878293252ee59413cf2c6861bc48545b06f5ccaf9d96fea1ab19194937fbc7fc03276e56dc819d881e36b9809420e8811693b4b3d72ae44e15f6f459e2d4be28e177468078f06b9b0b858ee5065ad9cbaa44e860504fd80072ed1dd9c74f46b3f4be351b2ed164a105149cff8e9107616871dcc66df1b21ad1845383697bfd1d3c7f0e7ef662f78867f5532878c5af5d2373ac56965118a499bbe1ed2ba75a216033e1f9df81961aa94d4cbe30eb0bbdddcc70539f69fbf18f191f4b57b9e81a034d7d1f6c25139c3ffd9655cd0163f78309cdc8f6b17bffcb2e867bc77b309e17db32a3375026a9795cb0cba84c1c340b8bddc180b658d6f9bb7b60f8304fd071dd885b5da565a855b99ebefe3402268d193ee5c1eab3f4ed5f05fe30ed88a883e31d3bbcfb0233f2247f8e94d99e3580be34ab216845e7b0bd7d9036ea5f62cc5d8f5366272630c03b32ee088cd369610dbf802065ac98f9088e19159d9b47b4d051ffba4b05ec4bee77048db0d0ad40ea0271dd5a027b45aa9833bd2dfbb1550cef25974baac64e88f9fec9e3e2ab0ca9d34931a6e25e9777cfa38369f4624a1eb573f40028e41927dccfead25e139381bfc9a36e0de6f1981be392639d93bd06f3959a0f734fd30d8f06c5ccce6ebd035eeabd49f3d03f831eae29829163210d8ccd1e459e069d45dad36f8c929d1684b605b43dcfe071038d325c5ebd024a479620a191fc479d6242414378d71dfa2173485040d6df0dfd2f8bb4fcc36875813cac8ec4c38109f2f0ffc0a5208383ab00d6ec74d4b0aa53807b77a426af44593f102ad69982b7e0f4536a3b7350fdc0df583b69a6776c4ae8ee3c4af35aec0422ee65b4797bb5616a4a5179f8923d817fef86b8eca0f56537bef055bcd3d4bf30ef037ad220a20f3b3c54a5af125509c0b6408b89b0bd32d2ecc3881cc412532a5c39ad31edd4266cc5fe5d259eb7327f15b3dc10abd136f1941f319652d1c8acee9b180f12fb9e879a84a9c5061589dd61874c1a44d43690f872c2e9faedcb82555da4d25bd582ab9773d8efb4d6dd54232e36fa27c28f33068ab9be02c0f87e85974a48692dbdc1ce2d680c8adecaab259aad937b60bcad99fb2b92ea6b7740ef7d73dd16cc9452fc9d28e44672435a336e0ab48ebf806ec87b0143486eb65e3837132e4e0d5b2f38b783d8323b222abfc673ad934e3341fc83ba1bf52e761c3cfda111fc30faf9e7223e7170742af9f4d929b966cacb5fab27ea228c754abd3cea98ecdec564f3cc989e9b3d82095a5257495292de2faf7226b4087b7fd45d26ed76bc49fbf020eb69a6e18dd1d1e35ab1e6363ae6623f826399a4ea7f09222950c9b85c8a484b8f54efded73ce43a7a38ad8354bd93d234b8805b1a12f4af74ad220268ddde255aec556df694c104c3fc3ff379d395262ef1784b29c39c415823471b035f9f5f1de8d8dd418480c211e3a53149f149916431cb0bc991c26035250dfd7678ffb37356b99a5fedca51fe3961540c99db427c7f2e8c1543ff106888fc0151c48a63ce451dae59cd14cc026606f39f519a9d7b8774962289c152dc51c2cb4af5807495656ad80616a1ce7c7dd4701ff95086bed3e5a6e701b0c778b99cbab359cbcb2040587da6278621a9b1bf49973255e06b60bf4ddf96c1197538e0dc0a73c28319ad9a05063c4f2c989083fe2894e4de6d365d01dd81f4b0591f3b51fb9c40ac910c5c2be26bfef8b8d24d6aadb1b2074be501b3a3867dd34df50ace2563e8d036ea6792b023d3baf00036e2cfaba0bae8d309297049cf1d4e613e2dd7a0406b247c2716f26c32b2052433e2ec4a41336e4f7f3bbf0a316f6d29f2b82cd888d4260df6c111537f33e7814f42c1ad19e8364640a4781b701fbfa31bcd298f3562c6556ee362e2a8223e9f7313c3e0f790ee87f3107f523baa535cbe60215d2368bae3940f74fd24f6ed79e53e2bf7a31a6fb10845437d67913be05aeb4cb44c4d13d7c83c293a5be425737e1b6a43c88436219390dc6c85ce68ccd00d46e2519ea7ff48e18901c170efe8d6741a3dc5bf16d3c98f338c588c2a49a2802f139ecc009ba7dd75f87bf98972c8922cc6ebebd48b2ed8a12d292bd341cf1c3012a57e9fda704f35bce0c03a87479d9c55136af6eaf2d30284810aa876bc80debfcc9c249fc486fb522d19df24a7690439efc2cebe210185fb9e6c12cedc806d3485d0884e1e5678a344bb981abd5775c0bacd9ca66910e41602e3e11993a810afc274d48ba437494920341bffa685a0ceb554643ea098a70f33f04575ba867363301589b76544a4f0245d8df88df8616afe879a75ef6da1475d6a1beb675bb72bbb1671295b58330ddf65caad44577527f6c8cc4263dd80284ac47d2184dfdff4a796d943cfed6df12888346fb07f6ee17fdd161c957b6b5a549dc2a2b421699ab25b2471abdfa5e55ac509fec9c2798f9a4d9fe6429eef36cff4b3162d7bfbe8820c3c3cf8d500275ed2dd928b564e95f310ef4f285fe606d655f91b5352116ed83d0880fff91f51b1299b2c64d515b39e29c281919218f00276290a86a2f554e670cf1aea036d74f4474e50398a422f3bc1c"}], 0x12f0}}, {{&(0x7f0000006040)=@l2tp6={0xa, 0x0, 0x1, @empty, 0x6}, 0x80, &(0x7f0000006140)=[{&(0x7f00000060c0)="48108566e954a1d7e25e129e9d08b4592f4e9b13914895896c0c4969e5508f3145ed65f917780b0bad0ea4f14859146f0b1107b44eb6b3e38f8c103e16cb1ddd373a32d9f08d67a7de6aa9acd2e2b25c6c", 0x51}], 0x1, &(0x7f0000008c00)=ANY=[@ANYBLOB="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"], 0x1130}}, {{&(0x7f00000072c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x4, 0x0, 0x0, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xf8f}}}, 0x80, &(0x7f0000007600)=[{&(0x7f0000007340)="6e4dfd9c64c3fb044d81944402ae098b5a07f894e310353fc7a22b5367d45bf319e51b3c9b542b2b4d28887ba166c838c65c2a8eaa7ff74da67be51c15b6bc2831d0a2f21a2b6234e5c70b7670b597936f46b2ab4608fb8ea5811397fa35bd6a1af8bc4d28123cccadd3f3bdba3b3d7bf33f7af04c996111447a209f7b10e7601136e4d2c726050791b9e2266cedecb885bccfcd4a734871f272b9791042795f23212c8373b58103012849f089408fa71df092b2fc01eb23e00e1c9848ae7a86d8cf413de7db453298fa81eac22471bfb671dc6dfc38233c543f84795edfb3adba4cbdebdcc1ecf645dcce5541ebc3fa41cddceffc2448", 0xf7}, {&(0x7f0000007440)="3d6942ad1cbfd0a438e65054c1275cac68de54817177cb6fe0ebf700df9b6be0d9343cc45c16c49972e02d3ee64cd3a4848c427434ec840b94b78a5aebf837f3e4efd0698e2dbe66dc413b64244925a95456af44205aaaf2c177a95cd2cdf8f07457b0db272ef416abfd828bc39a7d296fe3ff576032ef3c2f973f65e32b9aab1f7c7f44ad691a5ae3a7f3fbaf86fd899428b01f272b6ac9cd44e7b41d1cd38a8486c397884dbc4c19dae17d67981e5467cd6883b141cb89e7941aa0161e4053c9", 0xc1}, {&(0x7f0000007540)="8bfcf7a2d6c8c533af8425593c55ba45436b928afd840ebf1d6502030d9df2831f3d12f0ce544edab4472593e7a89efd210679115de7c70da9aab3c757c98cfd69526fcdb72a36f7e4060fc231a1f7784dd33d197e8d6dcbceab46eea74f0ff47c584c7830f39ddd243bf590159a62e6564751f8a2fe2369f4389f28a4ca8b7f767880fd1ed3ce0810e2a51bea22108321d7a1b8f8cf74c47cef9bc3", 0x9c}], 0x3, &(0x7f0000007640)=ANY=[@ANYBLOB="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"], 0x118}}], 0x7, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) 4.894329454s ago: executing program 3 (id=4485): syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x100) syz_emit_ethernet(0xce, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "2964f7", 0x98, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[@routing={0xc, 0x4, 0x1, 0xff, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote]}], "d4aaf4e236d1ab4e53f0d226f22697ac20424ad149cc670d5123112c8156a190d577c10a8f7ab508eb2f890acbc58945ebf0418ba38e47b2d1f8541eebcb626b94a16f9c39a2ba899b27ab8713c2b3354f4e0b72e8952fbd74d4c706e08e93a93e917b9ac24ccd729d4de21c56945de8"}}}}}, 0x0) (async, rerun: 64) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) (rerun: 64) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000700)="7a1405fcbabc29d38a55461c27dc8cfa24a44263024bd24bcec3711b000e23775d74f3b2307fc95a0bed548aff03ffff1b00000000001b6097c5472cd8607f9bac05a6450ec9fdba6de3fe4f3c5c19ca868256eb17989394186a40f69b05abb50dcba0e6ae6cbb6d27c9912bdc320d9e5af06517bfc7bea64c130a22691203cfec0b7dc7922c5495c037135bcb66b04ac31f30934c01ac00000030c465468012204a83c2cd5bbed8b4dc91f531e7fe94ab3592bc578ac4266cd0a455c568c647d41e62ff81fc30db51e9b1ae71eb4d60ff7bf987f2f50e3f6b1859047baf73c93781c68e93cf810a86ddd7fa1b2ce385ae589a4cc6077e5e57988e43e61b2c00000000000000537c7143fe9615d6c337395aa651d0ba5705b29379e1d32fa09eddd22d9f02843bc55e30f5d5d75b2df08a8c0637b0b4db01bb3c238e39c825253f52ee58af46b7e4aaf13cb5fef1d88540244fa5dc15f10b544455573a", 0x0}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x3}, 0x94) syz_emit_ethernet(0x90, &(0x7f0000000200)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@x25={0x805, {0x3, 0x1, 0xfd, "2a27f14db52b730c17d4668670d361b2d065f0ef93c9bd479e8b0dff3572cbfccb170f27053b07bc0b1d6a2d77dfb4308b926eee6d321588a23ae3986b72e9f3fe4b8ae0f8c289d4dc187a1e55f5de7cb118b770555ba3403e7e94b093493b45856db434019cca7e97c3bff21d9ad555d07f13b56a3fe6"}}}}, &(0x7f0000000380)={0x1, 0x4, [0x7fa, 0x46d, 0xeeb, 0x4]}) 4.734224491s ago: executing program 3 (id=4487): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f0ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00fe00ffffffc3030000f1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0xfffffffffffffe22}, 0x94) 4.597270601s ago: executing program 3 (id=4491): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001e000100810c38b15a5800000000000000000200000001"], 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r5) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="050623bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r7, r0, 0x29}, 0xc) 4.313496698s ago: executing program 1 (id=4494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f0000000380)=[{0x20, 0x5e, 0x2, 0xffdff036}, {0x5, 0x21, 0x0, 0x7f000}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xeffff012}]}) (async) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) (async) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c) (async) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000002c0)=0x8) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@set2={{0x28}, {{0x0, 0x4, 0x6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xc) r7 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0xfff) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1f, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0xfffffffffffffffe) (async) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 3.322138852s ago: executing program 1 (id=4505): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a31000000000800054000005d0f4a74f111000209000008000000000000000008000a40fffffffc0c0009800800014000000002080008400000000166bcb43f1100010000000000000000000900000a3d5d4b631294cd15cfb8e3eead666f62d6e57ae273a6cf413c05899beb0b4eeb4f61a2"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000140)='syzkaller\x00', 0x19000000, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1d, 0x1, 0xfffffffb) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r3, r3}) write$cgroup_int(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r3, 0xffffc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) 3.2820095s ago: executing program 3 (id=4508): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000080)='\xa9\x00', 0x482141, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x800]}, {0x8, 0x0, 0x55, 0x4}}, 0x7ff, &(0x7f0000000100), &(0x7f0000000200)=0x2}, {[0x40000, 0x80, 0xffffffff, 0x4]}, 0x0, 0xa3, &(0x7f0000000240)=""/163}) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) 3.08195983s ago: executing program 1 (id=4512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x7, 0x12) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2c, r8, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000041fffff900000000080000009111c8000000000095"], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r11, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r6, 0x20, 0x7800, 0x6000000, 0x4, {{0x15, 0x4, 0x3, 0x1d, 0x54, 0x66, 0x0, 0x7, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0xa, [{@multicast2, 0x5}, {@multicast2, 0x3}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x42}, 0xfffffffc}, {@remote, 0xfffffff7}]}, @rr={0x7, 0xb, 0x8d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0xd0, 0x6, "26c2e6c2"}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)={0x294, r11, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x69ee0335}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6a5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x40000000}, 0x8000) 2.66931096s ago: executing program 1 (id=4516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bf7900000000000007020000f8ffffffb703000000000000b704000000000000b5001e008200000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf0900000000000055090100000000009500000000fdff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.572656312s ago: executing program 1 (id=4518): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa4}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x1780) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0x1, &(0x7f0000000080)="ab95a4e9c49c41fe78863b081da0bd0428dc", &(0x7f00000001c0)=@tcp, 0x4}, 0x20) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x7) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021633030900000027bd6f00fbdbdf250700194e212301010200000000000000000a005e230000000400000000000000000000ecb3f3d9236303b000"/72], 0x48}}, 0x4040000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r11, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 2.43314077s ago: executing program 1 (id=4520): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0xffffffffffffffff) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.286882359s ago: executing program 0 (id=4522): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a31000000000800054000005d0f4a74f111000209000008000000000000000008000a40fffffffc0c0009800800014000000002080008400000000166bcb43f1100010000000000000000000900000a3d5d4b631294cd15cfb8e3eead666f62d6e57ae273a6cf413c05899beb0b4eeb4f61a2"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000140)='syzkaller\x00', 0x1c000000, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1d, 0x1, 0xfffffffb) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r3, r3}) write$cgroup_int(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r3, 0xffffc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) 2.066009293s ago: executing program 0 (id=4523): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0xa, 0x9) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r1, &(0x7f00000000c0)="a4062aeee9e8ec979ad444493c714b1e91e0962ab46f27ab323a3d590a2adfe1f0e9778928194e319bfce7b5e75b468045ae791f0bf67e3723884e7e46cd353450a19b57d72fc9f0cafc9c0747d77ddce8a5f5933079f29051", 0x59, 0x40000004, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x4}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x87) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r6], 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet(0x2, 0xa, 0x9) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendto(r1, &(0x7f00000000c0)="a4062aeee9e8ec979ad444493c714b1e91e0962ab46f27ab323a3d590a2adfe1f0e9778928194e319bfce7b5e75b468045ae791f0bf67e3723884e7e46cd353450a19b57d72fc9f0cafc9c0747d77ddce8a5f5933079f29051", 0x59, 0x40000004, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x4}}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0xa, 0x3, 0x87) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r6], 0xfdef) (async) 1.697659982s ago: executing program 4 (id=4526): socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) (async, rerun: 32) close(r0) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) (async, rerun: 32) bind$rds(r3, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async, rerun: 64) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf2514000000100007800c000400d800000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async) r6 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r6, &(0x7f0000000080)='\x00', 0x1, 0xd1, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$inet(r8, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91", 0x1}], 0x1}, 0x0) (async) sendmsg$rds(r8, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.660141844s ago: executing program 4 (id=4528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bf7900000000000007020000f8ffffffb703000000000000b704000000000000b5001e008200000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf0900000000000055090100000000009500000000003e0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.622101851s ago: executing program 2 (id=4529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x98ad45ccb5c69825}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 1.469961717s ago: executing program 4 (id=4530): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x2) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00'], 0x64}}, 0x4800) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e1e, 0xfffffffe, @empty, 0xffffffff}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60002, 0x0) (rerun: 64) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000a040), 0x0, 0x0, 0x0) (async) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x440d5}, 0x810) (async) r9 = socket$kcm(0x2, 0xa, 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40010) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r8, &(0x7f0000000280)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x1, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x700, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @mss={0x2, 0x4, 0x1}]}}}}}}, 0x46) 1.467255319s ago: executing program 2 (id=4531): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='^*:\x00', 0x101800, &(0x7f0000000040)={@align=0xff, {0x9, 0x3ff, 0x2, 0xff}}, 0xe6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48000400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0xb37aeb192455e53d) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="49d1c186048ca03fbb0f13ec825861d4f46999d1def8b31bb0e93f8e", 0x1c}, {&(0x7f0000000300)="c3ae41ca802c0b9b664ca910c7a817ab2adcedfe6afb33643826e90388b0ab0fef012bfc91", 0x25}, {&(0x7f0000000340)="ae3e8355e60d4213325cd62968a7a2e5141a9098558ffc9b64195d959e4f4823a2c1a6bdcb7b655ef1a5dee2620712be09300a2238d607b1cff7c510d9b87b6e9afe60df38c90a4c3315d4de3d2e4fd5107479807fb413fd", 0x58}, {&(0x7f00000003c0)="cf03a7cd0efaa17cd327b97204f6c310b7764580fd163b9420be431b952a28025ebaa62efef7a46803c0477f9873aae4962fb006bd79df25e7ba", 0x3a}, {&(0x7f0000000400)="59a2090d6b5bad2d79241dc6065dbda645cdf1ad617f114a40421a471af13d9846e1162d2b4a836d491da06af40cf11c1a64ab1f2e1c9eca463496dfac34969543d88ccfd74238", 0x47}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="e4d12d6da0a485d1fb23807ffb85ed1a8417e2d369409277d8fb15e2753a224f7ae206079822feded2703f0c9921c1e9f38bced64a06ea1208a731793616836449dfa082d7b6172dfa252ac5c20a22bed506e8ae5be19f3fce44a862e646cd7da67ac3a43bf8bef1e063ab0e9095", 0x6e}, {&(0x7f0000000540)="d1c2a4c810677278165e83c59a7d4f83b3f7b5526396352774ef0e50d9a97701d65167f255475e087666a51818baedc372efdcbe8cc31863c53d032d0272aa71480881b1e04205eb0728434e", 0x4c}], 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast2, @private}, &(0x7f00000006c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@newtclass={0x60, 0x28, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x3, 0x6}, {0x10, 0x5}, {0x5, 0xffe0}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x60}, 0x1, 0x0, 0x0, 0x30004845}, 0xc044) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000840)={0x0, 0x90, 0x1, 0x3f, 0xff, 0x3, 0xe1, 0x10001, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x7978, 0x4, 0x8e2, 0x8}}, &(0x7f0000000900)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000940)={r3, 0x2, 0x1}, 0x8) socketpair(0x2, 0x3, 0x4dc4, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipv4_getaddr={0x34, 0x16, 0x300, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x8, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000b80)=[{}, {}], 0x10, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ec0)={r0, &(0x7f0000000dc0)="97c239eceba1f0c62b16fd0ba80fd8bad8cc7a2bc50e24d8e5138593192867dd7eb8f70bb8197dde60c146df40e0f0d2abab870d7762442ebd029687b344dd373a1e88dad23fca372359c60ccba90d060f2a7e3321192efb5ee2475a1c13e82ef094541fd9500ddb9083145330e5ccb7fa3feb8c0fac3d42b0f7694751fff3d5fc5de3b8509510ee904ccaa4487980", &(0x7f0000000e80)=""/6}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f00)={'gretap0\x00', r1, 0x20, 0x700, 0x5, 0x8, {{0x1f, 0x4, 0x3, 0x9, 0x7c, 0x68, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@lsrr={0x83, 0x7, 0x4c, [@multicast2]}, @cipso={0x86, 0x52, 0x3, [{0x1, 0x10, "81cfc56062591a9710c440737631"}, {0x7, 0x9, "d734d423a88f3b"}, {0x7, 0x4, "1f7e"}, {0x0, 0x5, "a97d25"}, {0x6, 0x3, "ac"}, {0x1, 0x10, "6706e780f12a73d64e008ce71296"}, {0x1, 0x4, ',X'}, {0x1, 0x2}, {0x1, 0x11, "7b5e1aab3407defb186003b3ad530d"}]}, @generic={0x44, 0x2}, @generic={0x89, 0xd, "d8f236f4a9082e01cd6021"}]}}}}}) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28000810}, 0x4084) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x20, 0xd, 0xa, 0x400, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x68, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5a}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x4004000) sendmsg$nl_crypto(r5, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)=@del={0xf0, 0x11, 0x20, 0x70bd26, 0x25dfdbfd, {{'drbg_pr_sha1\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0xa2d2e23994330e8) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x9, [@enum={0x0, 0x8, 0x0, 0x6, 0x4, [{0x7, 0x3}, {0x8, 0x7b}, {0x5, 0x4}, {0xf, 0x7}, {0x7, 0x9}, {0x10, 0x10001}, {0x7, 0x5}, {0x10, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x30, 0x0, 0x0]}}, &(0x7f00000016c0)=""/87, 0x6d, 0x57, 0x0, 0x1, 0xa396c4a0b3ce7cd4}, 0x28) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000001780)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000017c0)={r3, 0x5, 0xfffffffd, 0x10}, 0x10) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x34, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0xc040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x94, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xe44}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)) 1.452853068s ago: executing program 4 (id=4532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b000000b75a000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000100), 0x4) unshare(0x22020400) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x78) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0), 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x4000}, 0xfffffffffffffe31) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1808, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x45, &(0x7f00000000c0), 0x4) r9 = accept4(r7, 0x0, 0x0, 0x0) poll(&(0x7f0000000380)=[{r9, 0x10}], 0x1, 0x2d) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) recvmsg(r2, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x100a}, {0x0}], 0x2}, 0x100) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) write(r1, &(0x7f0000000400)="5f78644a041d3aafb12673378982f9e815aa0978a0e2c6e20a98ac8181eefa4fd2e00624b73b7562d58032093361fc75559cb78ddfbf6b8a7e9867d509dcdebfba5404ed2b045b319f34a17cdeeb123e352e379515178482a139c14551ea881144e8eef10e0e92ef96bc8076fa4765f4531282b74393e09b278d9bc8df8ed6cf775adfe16241e46f6a069a7e8206325dab2405bb556a4da1705fe14ae71465", 0x9f) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b8030000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4800) 1.41259809s ago: executing program 2 (id=4533): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000b40)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2}, @in6={0xa, 0x4e20, 0x0, @local, 0x7}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={r3, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x8}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000200)=0x84) 1.249572272s ago: executing program 2 (id=4534): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000007400)=ANY=[@ANYBLOB="c4240000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB="d4008480440000800a0001000202020202020000140006800800030004000000080001000010000011000100b17650dcfa1ad97cb0cbc6e7f60000000a0005"], 0x24c4}}, 0xc0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b5", 0x75}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0xf9eaf000) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000007000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001800000009e70b000200000085000000c400000018160000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018450000080000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001200)='GPL\x00', 0x1, 0x61, &(0x7f0000001240)=""/97, 0x41100, 0x5, '\x00', 0x0, 0x18, r4, 0x8, &(0x7f00000012c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001300)={0x5, 0xe, 0x100, 0x3ff}, 0x10, 0x24329, r4, 0x3, 0x0, &(0x7f0000001340)=[{0x0, 0x4, 0x10, 0x8}, {0x0, 0x4, 0x1000000b}, {0x0, 0x2, 0xf, 0x7}], 0x10, 0xfffffbf8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0xfb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000940)="da7102fbb7f8839e07657d86fc817c5973c5917554c29b90ea6fee40b56d429c46b53c9dd1d147f95e5115a51624443b3fdb553648d7ba725bf7e3f8007d9b2bdb18b5fddbdfba68cc576677bcc30bba14c554e95c57689c703270443be18256ee3a01012b0a5501c1272bffce87a95b2bc9359f08e6b9b6d80ea1d1", 0x7c}, {&(0x7f0000000880)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f00000008c0)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="bc000000000000000000", 0xa}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000009c0)="d8592f96c06a5119dd86b4f9c6ec88021ab930dc3e7f2b43f40156b3860fa9ac0664b73869a17636e12a62d5d02eedcdf861813338874f9e08fa5a691b74cdd3e3aeb04e4ffb46267ddc", 0x4a}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce0359871cfd86f4df99143392327fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921", 0xbb}, {&(0x7f0000000cc0)="04460c935b32fcacfc0efac12c5249d363934b862ca5314508725c3764dbef329f34d55d89c58b25a1322684b4d3b0b5b62515dc81da1016ed5472e163e176dbab09fe260e2dd55b25c4469f875f7b90bbd69f1318b6381e638ca9158c5648f4e710754b5ff2524ce2df09db4cef0333fb38aa11490789d9da7561769d07843f439aae55c77e5c82e6e99a413d84bdcb62aa984e330ab8122d837ab75fce2e775d322b64e490f6e19eaaa36e940b9dcdbe1afd3eef0f1131ef93f7968a9c0c127d33d0e8de69def7f889161246e4fa66300369dc6afca33ac3fa31726bc2aa48f3e65dab67feb9823d7f12644f4efe42fc6d871cb496555d7db8b3e9abd41945edc16ab832ffe44ba2957a1d15d83da933a42eb02604036558274d5d6ae28801a33af737141a9e009134fef6968b35dbabb2ada271032df40974f9580858258ab5e20df34d0f228d68588b030bb4dd81daba3627916374df521a0c77977867c74575646ae911f168a70f7d70f34afa2fb7a03dd5f0c694a55aaa216ebfc8b3ac9b6387d5ee301bb4a45aa05bf639207cbe49fdd57467e80894f1e8eb470ec645ea3b68ed3f29397a5238074613a0054fd8af4170eb78f0113c3c4495b8beb59cda9a278ffbb21408e7deb240ee66199dff1643a6ca971e079469b0723dbbffdda092ae62b6b205db8778e2d5c1e9b7837c890365f0307cea6ba0dd2fc273748382d5094bddd2a2efa14930c7403de5b084dd943fd94cf848002dbf85440deadd97519c3be48fbbfc1d8b57b08163256e30be64b8a7faeb9d196a645f18895c01fd9db82aabd0ce613e79480c54499c8c1edb7c529cfd336c904a", 0x25a}], 0x7}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000b00)="00e4f7977bbda7d80fc818ee6dedfc2eecbfcbdad51b564e03ab6425e682808cdb570099f86d69e7e1a8b551587eeaffd1c2cc8f381ca93c6d16a7a2b0fddf59671039169e08477d05109d8281bd0971d02930d7baa95d23513335c48b18e871d3659b6f04a3eb41077571a899e4945bcb4f82a09a6a8224c506f3dae1d3eefa06ef7c6fe4140383acc3d62277eddb1f6965b1ca5a248af08e6f54b240a4de8df7f883b172af7fd1c3b6fdc88ef2194fd8d84a57219c455d1443cc27ab6b53924d47e0b38886abae29903ee5e2365d51d6608e9673c696f070e22273792b5bf3e6e7b220d08da51f474b2f882a8195b8d729d7af188e8fd9a0521dfe8ddd1a02621980f85364164938ff2b7c77f6cef9dbbfe5b2019bec82a672fe5d434b5c55b08e7e1f1075030c06e87c0e06be74bd597f90604b710a12ba69e20305c778fe989c7f044400a48677beeafc1c5f1b0a5201d4f69c9f49fbb37907f46a97fafa13977ff4b61c0e5105ce112ca359d0220664eb0105fafdf77d5c27ac19f85d0c049677c1a83f0761e94fe9135f92fd653ec51556215f297b51f1", 0x19a}, {&(0x7f0000000900)="11e09017", 0x4}, {&(0x7f00000004c0)="c6cba20d39fcffc1e2a98b9f7d26598382f96eae07307960b810016e182fe8e3b58a7392a86f5d4c51540aecf5367e9f8a095ad935e4a0e1cb522998a04b298e687181ea4f61e29e1c9a3726658220f30089bf49e9fd5350b5f81a818a7717a17b099eb476f521d9174e56b2746711507ded75a05c7d21c80f1cfd378e8ffc5ab43741b1b5ee0753daff8302fbfe344bd460f8f59374f2", 0x97}], 0x3}}], 0x4, 0x4000000) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2}, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000008000000000000000000711041000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.073410261s ago: executing program 2 (id=4535): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x6, 'bond_slave_1\x00', {0x4}, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001000)={'gre0\x00', &(0x7f0000000f00)={'syztnl2\x00', 0x0, 0x1, 0x100c1, 0x9, 0x9, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x66, 0x0, 0x62, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0xf}]}}}}}) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="cbac817b3f6b84dc09abe0b79677888187a470e3a77442390e47d6ecd9f61fbce6adc1e087e18a7c83f94680ba26b8603189fa8f33de80497f17c5af5ed73b51992a1e998b91760e39eeb146ba922087f6b52838f0645b3c57f7ebe4046d8c2ce8f571b7cb80ad778e34e5a4e759323656e56a81a35fc4e05097f85fc293d14e67de5e53726efd27dd6b25feb525fa97e9bf710746daae88b8bfae3c2b92d51ffaee72823b49bd569f78613b89", 0xad}, {&(0x7f0000000240)="5952ac77b9e664fee43a96e2ae0ffa0863b4fdf01039f98e7f393bdc55a91d0518c06e01fef23f883b401dd7a03642ea81cbb77121b4b405", 0x38}, {&(0x7f00000002c0)="c8f8f084d354223bbb1f660383069b3bbffe691e028955d4e7adb051c36e38efb7817ccd7196184345a5205d3e9f1ca3c218a8799e79317a4b07983eb4897ed67b8fbcbc049e23f573ba0a763af99a84b24485231c06efc4f990fde55cab03d3e91c391cb0505e35d9344f066b6eaf3f29b6350740a591d379c102c98ca8a0b6ed517edfc2", 0x85}, {&(0x7f0000000380)="89ef7f24d59187ce062a398871c47d0e6a39828ce3ba3ce49e435385c4864da51e899fffce526fe5a47a00d5dc2059c66d493facaed206091e8ca503550979f39a8fc279a7fecb81c1a8f0ef093acbc36e84e90d6768cddc393fa30c3417cfd40676842566b1", 0x66}, {&(0x7f0000000640)="c6467f6cf639eb750893f2ece18d7b64d09aac5d65eff70ddfd41ce4f5a6ab816e72b717f5fa86b477ecaaf0178ba869cd22fa3381924993471f1e112a85f5423d611bb838a4ca46299e62dbdec6aa54e2c4a2d5", 0x54}], 0x5}}, {{&(0x7f0000000780)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000840)="a57c03a6bdeb0e8c19d1ec4a7a31be1a3c3a07dbe370691bda2746eea54d67ce49ca5dfe612c9fcc11f173127622477473ac02d2d6bdf3e9f4100aece59216779020d899c874dfddae7ca5e1b43108b76ee2a4762921377e96ffa0d1186ef3d1da06772c82c33c8a5fd9fd615b550031076d54551fd2fb559f738b7785f7f978f30028eb0def2cdeacb7a4c6ebf2b4fe474dad6196f37ee6c610b63ef4f3c33049aca4fe169dc41472e54df7aa2b70fa49ffff0c4d2aaf530d7e7d00a017", 0xbe}, {&(0x7f0000000280)}, {&(0x7f00000009c0)="7c922ff57d247e", 0x7}, {&(0x7f0000000a00)="1ce8fc2d6cd53ddc2d5c66c353b99b3124a45cab3d8c6bdb15a9d204213d3f12cc8eaaea9aa2a34cebc3fd1087e95b2c859ae3006ff352d678c1b894ace67442fe72b77b37f4bfd13163b252dc55243ff2dfa3e60184e004851fd44fc0ca3015e170f8ebca276d9f3a6b95", 0x6b}, {&(0x7f0000000a80)="df416f4509bb02df9693f1cc3661cb85566d1e1293e3cc7576cbe7164722d99198ce19609f58c8898a9ffa529259a340034615940f449c452d467cad77e069ccc43c98858c920295ae1f43b2e7a1384fcf65e4f4b2f8ac1dc5c49572fb26ccf6824ce8e3b7637c4ca01511b253a9f3c3334cc9f1dd9f3e5aaebb2e118e2ebf81b8438fd408fddf2fd3f3d4e46d0aafd9d10273ea3da5a915637a8cc7579ac2d4acc6836c4fd1ceab8dccc142d1e1b257f57405a431ec8faec7324a1a47e16f9b3ae7e1a49733187d3d5e48aacf405940b66728058626", 0xd6}, {&(0x7f0000000b80)="ac95adff012857b1d27c8a647bf5692482d127e5afcab1731a56cc4f00519269fd0538f1c5e16106a54fb38edfb9fc563ba73d40d171a88813d10aa667ef", 0x3e}, {&(0x7f0000000cc0)="cdc18580b7cda95d9a69b17067e1d57f3676053080af839a111123a8bc3f6bb243d33c691b49c81d616eab809e08e8d240bd24bb03c6ae4e4b91513c1b6af49fbff6aa37f6d2e342280444dbfda507a83b11e1ad60e45b86056b65fa2304515f092d5c42a671cd11521420eb7e0fdd05f8d9d00fc014ecf8b693e07a2cdf000000000000000000", 0x87}, {&(0x7f0000000d80)="cb78f23d7ece4fe989be8c21a34df5df0fbccbaea04e392f24a01baf93a0fb4f4f2f2a342fe342697cdd0808626c8089562d77f76f8ea2081d8defe99bc468fa18b195fb2f", 0x45}, {0x0}], 0x9, &(0x7f0000001040)}}, {{&(0x7f00000010c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001100)="f5f2e056851172fd49af1a0867596a533e672b0367b4e580637d2dddb5b1f160aee12b9856d5d06bf2f6dbbaf289eaf919c18c70080c9c10b844be6af36bc45ce9a92e8de3232035db9716e773d22309d8399104d4e4144ce575b6fb3d5d4e10d68675004461273647cfd253180a1e229b8b2ca195d037e7fdd6351db3c2648db3d99cb21ce8c97948919006a1d0afd400683b4b6819d9a52def195effc35d3aba25a5421130", 0xa6}, {&(0x7f00000011c0)="b24ed3d8ca9087a2eced52", 0xb}], 0x2}}, {{&(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002480)=[{&(0x7f0000001340)="ae5e6ea9806f6cf392ab72978764ba119a3a24473734e121b877410aca2fe4a9f6af281c37c73069a81f93cc2416773b8101f02bf9d467c0f8c9faafec1fcc49ee5f2f1e544a7f95de12a48730fc5f5779241961a214f3a5bfea6204d37f0919ee1b80ed68dbe75c44eeac544b613a7429e0ea657417e85d7a97ce0de764ea285c2818cafc8981a9b61af54f052c56d7ce6d80b3573d3eed57b554268dc7", 0x9e}, {&(0x7f0000001400)="58f7a05fa2e24524bb90f3d49617811d60d1c4fcfdc970495fca37cef98fb66e63c10e397716af019ad7002b264b19ef0422c2a241b2a082406f5de653dea1bb99b52e3d424e04342fa4eb85f92bff40034c931817", 0x55}], 0x2}}], 0x4, 0x2090) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x69, 0x202, 0x9, 0x3, r2}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x20}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {}, {0x6, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) unshare(0x20400) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0df1ff0006000000040000000100000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00000a00000000e7ffffff05000b007b000000cb09189520b96f4d1d3b93c1c37908487a47abf2529ceac3a67a4c79b9fafd7561fcae02791e0fe221611daa4535e8e801569302d31e2f06f67e782a12ef87ca2a05ac050ea4c0280abf52f47298bebc19c839aafb0dd6286056c7f13c2c73e4d7ab6231b96381decb303a0fb1624b346c65"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0xbfeea3edb5431192) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) 1.070589768s ago: executing program 0 (id=4536): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x42}}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 777.637705ms ago: executing program 4 (id=4537): socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000e81e2f0075e6a09373a10000000000000000206d0600000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000540)={'IDLETIMER\x00'}, &(0x7f0000000580)=0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18400000ffffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x2, &(0x7f0000000080)=""/2, 0x0, 0x0, '\x00', r3}, 0x94) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280100001200200028bd7000fbdbdf250f0305044e204e21090000000700000070090000ffffff7fffffffff9bfe660d0000000001000080c253df384788f623bff22f224995665e363e377dd23a737a455c76b8a4283ade517f8da845e33d7757a580a67f22e53291041a1a46544ab0b0", @ANYRES32=r3, @ANYBLOB="1000000081000000130f00000100000096000100daaf9ff484132971214e440960dbfaa304ae292e5ced2ec2b1f91d0236ffe7b4560132dfc9c8e662e165ba4a276195ed5181395bbbe1cdc5e723cc2a689396edb28a9365a3baa15e5e32a13abd1cb6a8fa2ead982c89714c98780cc1e55f63c53010388fb6f884a5b6650568887cfebad626a39b828bd1f8c5497b0f7bf16a219acf6b634a07b8ca1e6b6548231afe1fa4ea000042000100302cd3daa94df128457c166fa1326ff446776f818f13beebac560ee4216d79c30cfca445837afae288605f66f0a3af8c5bc6343b876007dbd75ce0786c830000"], 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x48d0) 776.857199ms ago: executing program 0 (id=4538): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@deltaction={0x7c, 0x31, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x42}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600d1ebab412df0d100"/27, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0xfffffff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40) 493.641571ms ago: executing program 4 (id=4539): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002200000828bd7000ffdbdf250a0010007500000409000300f58f77eda20f9107cebf215e12bf58ff09483ef8a293b5a31eb732121e7a900ebbea629b019f6f3920335d60be92f6cbe600"/91], 0x1c}}, 0x28000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000200)) pwritev(r2, 0x0, 0x0, 0x5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000010000009111b2000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x3db7}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2a, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @ldst={0x2, 0x2, 0x3, 0x3, 0x0, 0x40, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @generic={0x0, 0x2, 0x2, 0xb8, 0x101}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$LINK_DETACH(0x22, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000240)=0x9c, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r6 = socket(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x2902, 0x4) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) recvfrom$unix(r6, &(0x7f0000000380)=""/64, 0x40, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) 343.41525ms ago: executing program 0 (id=4540): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f0000000340)='nv', 0x40a000, &(0x7f0000000380)={@align, {0xfff9, 0x6, 0x9, 0x9}}, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x3}, 0x2, &(0x7f00000005c0)=[{0x3, 0x9, &(0x7f0000000440)='netdevsim\x00', &(0x7f0000000480)="a0527afd7b8fd90c69d6de1a73f33d384e19f451cf537f2e0829c3705498a1d643dbd06be953c6a125d7ed8cd60cbe230645c7421a222bd14fd4c3796136f83cf029308f2a003b16c26c43bd16c685429405cdc7d10467f05bc3dca4245019faf9b96752a93d62b611e602aeb3b541d3c7dad1cd62749b716fea7ed4b9de5ec5f73cdbed920f47561ac17da46b7f1cedf0d22ec0", 0x94, 0x20}, {0x1, 0x3, &(0x7f0000000540)='0000:00:10.0\x00', &(0x7f0000000580)="dd72ab4a6b384c234e283441fd329667d8d0f66140f81ea962f3f313fc041fca5dea7de916c84d259023aaf23cab48ca2aa9cad0594f05918896846e", 0x3c, 0x22}]}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='nv', 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x21, 0x0, 0x0) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20040000030a01010000000000000000010000000900010073797a3100000000140000001100010000000000000000000000000a"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x2, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfcf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x76fc}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x8, 0xfff, 0x2}, 0x50) (async) getsockname$packet(r1, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x80000000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1d, 0xf, &(0x7f0000000780)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0xcd}], &(0x7f0000000800)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x10, '\x00', r8, @lsm=0x1b, r1, 0x8, &(0x7f00000008c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r1, 0x2, 0x0, &(0x7f0000000940)=[{0x4, 0x1, 0x4, 0x6}, {0x5, 0x2, 0x6, 0xb}], 0x10, 0x6}, 0x94) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, r7, 0x200000000000000}, 0x38) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r10, 0x1, 0x70bd2b, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x200003}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) (async) recvfrom(r0, &(0x7f0000000a40)=""/199, 0xc7, 0xe2, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x50, r10, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 127.307537ms ago: executing program 0 (id=4541): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'gre0\x00', {0x7}, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0000d20b060005005cce"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x8008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000100), 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000000340)={0xe53, 0x800, 0x5, 0x0, 0x67, 0x3, 0x0, &(0x7f00000001c0)=[{0x2, 0xfe, 0x9}, {0x10, 0x0, 0x2}, {0x1a, 0xfe, 0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 123.032774ms ago: executing program 3 (id=4542): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r7) (async) r8 = socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x2, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f0000001640)={&(0x7f00000001c0)=0x7, 0x9, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)}) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r13, 0x0, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r13, 0x89ed, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r14, {0x0, 0xf}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x200}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r15, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x18, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000300000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000002d000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) 0s ago: executing program 2 (id=4543): r0 = socket$kcm(0x29, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000003c0)=0xffffffff, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @local}, 0x87}}, 0x1, 0x9, 0x5, 0x2, 0x0, 0x1, 0xc}, &(0x7f00000000c0)=0x9c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r4, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x12, 0xffffffffffffffff, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) kernel console output (not intermixed with test programs): [ 466.703429][T12710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.736485][T12710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.777406][T17561] block nbd3: Unsupported socket: should be TCP or UNIX. [ 466.970579][T17568] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3116'. [ 467.082047][T17574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2996'. [ 467.092722][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3118'. [ 467.092771][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3118'. [ 467.220864][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3117'. [ 467.500609][ T4944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 467.519200][ T4944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.528252][ T4944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 467.541880][ T4944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 467.550194][ T4944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.705423][T10986] bridge0: entered promiscuous mode [ 467.769029][T17594] block nbd3: server does not support multiple connections per device. [ 467.780050][T17594] block nbd3: shutting down sockets [ 468.330814][ T6630] smc: removing ib device syz1 [ 468.597603][ T6630] smbdirect: ib_dev[syz1] removed [ 468.694244][T17636] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 468.720029][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3131'. [ 468.740512][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3131'. [ 468.778163][T17636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3131'. [ 469.052046][T17651] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 469.070003][T17652] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3137'. [ 469.343711][T17667] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3140'. [ 469.380964][T17667] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 469.603427][ T4944] Bluetooth: hci4: command tx timeout [ 469.645857][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'. [ 469.669367][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3142'. [ 469.703685][T17676] netlink: 'syz.2.3142': attribute type 6 has an invalid length. [ 469.731068][T17676] netlink: 'syz.2.3142': attribute type 5 has an invalid length. [ 469.827325][ T6626] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.844005][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'. [ 469.858521][ T6626] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.877558][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3142'. [ 469.888639][ T6626] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.916874][ T6626] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.934802][T17676] netlink: 'syz.2.3142': attribute type 6 has an invalid length. [ 469.975418][T17676] netlink: 'syz.2.3142': attribute type 5 has an invalid length. [ 470.054099][T17685] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3144'. [ 470.065777][T17684] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 470.153719][T17684] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 470.179347][T17684] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 470.780783][ T6638] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.790861][ T6638] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.806955][ T6638] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.824292][ T6638] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.683901][ T4944] Bluetooth: hci4: command tx timeout [ 472.422659][T17739] ip6gre2: entered promiscuous mode [ 472.430004][T17739] ip6gre2: entered allmulticast mode [ 472.437740][T17744] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 472.499706][T17743] ksmbd: Unknown IPC event: 1, ignore. [ 472.806989][T17760] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 473.219186][T17587] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.236506][T17587] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.255709][T17587] bridge_slave_0: entered allmulticast mode [ 473.272040][T17587] bridge_slave_0: entered promiscuous mode [ 473.285351][T17587] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.292613][T17587] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.330765][T17781] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 473.360888][T17587] bridge_slave_1: entered allmulticast mode [ 473.393734][T17587] bridge_slave_1: entered promiscuous mode [ 473.478140][T17783] netlink: 'syz.2.3165': attribute type 1 has an invalid length. [ 473.498427][T17791] ip6t_rpfilter: unknown options [ 473.509765][T17587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.546732][T17587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.739690][T17587] team0: Port device team_slave_0 added [ 473.751658][T17587] team0: Port device team_slave_1 added [ 473.763491][ T4944] Bluetooth: hci4: command tx timeout [ 473.797337][T17587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.805486][T17587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.832028][T17587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.846016][ T4960] block nbd2: Possible stuck request ffff888026cf0000: control (read@0,4096B). Runtime 90 seconds [ 473.874906][T17587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.883380][T17587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.916588][T17587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.021388][T17587] hsr_slave_0: entered promiscuous mode [ 474.028075][T17587] hsr_slave_1: entered promiscuous mode [ 474.036460][T17587] debugfs: 'hsr0' already exists in 'hsr' [ 474.047354][T17812] __nla_validate_parse: 8 callbacks suppressed [ 474.047373][T17812] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3173'. [ 474.063112][T17587] Cannot create hsr debugfs directory [ 474.076310][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'. [ 474.149329][T17812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'. [ 474.318752][T17822] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3178'. [ 474.344407][T17822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3178'. [ 474.558893][T17833] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3180'. [ 474.639286][T17836] geneve3: entered promiscuous mode [ 474.661821][T12710] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.675066][T17838] xt_hashlimit: size too large, truncated to 1048576 [ 474.686653][T12710] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.714120][T12710] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.755488][T17844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3185'. [ 474.779225][T17846] netlink: 'syz.4.3183': attribute type 1 has an invalid length. [ 474.798226][T17846] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3183'. [ 474.858471][T17849] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3184'. [ 474.898128][T17851] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3183'. [ 475.007044][T12710] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.061143][T17850] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 475.099360][T17850] batman_adv: batadv0: Adding interface: gretap1 [ 475.120072][T17850] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.171161][T17850] batman_adv: batadv0: Interface activated: gretap1 [ 475.437478][T17870] syzkaller1: entered promiscuous mode [ 475.456820][T17870] syzkaller1: entered allmulticast mode [ 475.844672][ T4944] Bluetooth: hci4: command tx timeout [ 476.153000][T17895] block nbd3: server does not support multiple connections per device. [ 476.167205][T17895] block nbd3: shutting down sockets [ 476.198064][T17587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.216556][T17587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.232091][T17587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.261332][T17587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.281064][T17587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.319128][T17587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.452615][T17587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.493518][T17587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.696477][T17921] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 476.740154][T17928] sctp: [Deprecated]: syz.3.3199 (pid 17928) Use of int in max_burst socket option. [ 476.740154][T17928] Use struct sctp_assoc_value instead [ 476.742384][T17921] bond1 (unregistering): Released all slaves [ 477.056426][T17587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.105627][T17587] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.128927][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.136195][ T6638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.158593][T17940] netlink: 'syz.4.3202': attribute type 2 has an invalid length. [ 477.166311][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.166463][ T6638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.211931][T17940] netlink: 'syz.4.3202': attribute type 8 has an invalid length. [ 478.071168][T17974] ip6gre1: entered promiscuous mode [ 478.086365][T17974] ip6gre1: entered allmulticast mode [ 478.165969][T17977] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 478.181879][T17977] bond1 (unregistering): Released all slaves [ 478.349246][T17980] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 478.375648][T17980] bond1 (unregistering): Released all slaves [ 478.539117][T17983] syzkaller0: entered promiscuous mode [ 478.555153][T17983] syzkaller0: entered allmulticast mode [ 478.736027][T17587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.874354][T17587] veth0_vlan: entered promiscuous mode [ 478.929409][T17587] veth1_vlan: entered promiscuous mode [ 479.025536][T17587] veth0_macvtap: entered promiscuous mode [ 479.068132][T17587] veth1_macvtap: entered promiscuous mode [ 479.152582][T17587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.181173][T18012] __nla_validate_parse: 12 callbacks suppressed [ 479.181194][T18012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.203272][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.218093][T18012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.227676][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.243694][T17995] IPVS: set_ctl: invalid protocol: 24 3.0.0.0:0 [ 479.250124][T18012] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.260589][T17995] IPVS: set_ctl: invalid protocol: 60319 48.0.0.0:0 [ 479.268239][T18016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.268286][T18012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.290461][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.305148][T18016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3220'. [ 479.327246][T17587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.372543][ T6630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.409223][ T6630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.447489][ T6630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.467917][ T6630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.486248][T18019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3222'. [ 479.759375][ T6649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.790803][ T6649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.866916][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.877259][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.309489][T18052] FAULT_INJECTION: forcing a failure. [ 480.309489][T18052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.364666][T18052] CPU: 1 UID: 0 PID: 18052 Comm: syz.0.3233 Not tainted syzkaller #0 PREEMPT(full) [ 480.364694][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.364711][T18052] Call Trace: [ 480.364719][T18052] [ 480.364731][T18052] dump_stack_lvl+0xe8/0x150 [ 480.364762][T18052] should_fail_ex+0x40c/0x560 [ 480.364801][T18052] _copy_to_user+0x31/0xb0 [ 480.364899][T18052] simple_read_from_buffer+0xe1/0x170 [ 480.364931][T18052] proc_fail_nth_read+0x1bb/0x230 [ 480.364979][T18052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.365008][T18052] ? rw_verify_area+0x24a/0x4c0 [ 480.365046][T18052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.365070][T18052] vfs_read+0x213/0xa80 [ 480.365103][T18052] ? __pfx___mutex_lock+0x10/0x10 [ 480.365162][T18052] ? __pfx_vfs_read+0x10/0x10 [ 480.365191][T18052] ? __fget_files+0x2a/0x420 [ 480.365220][T18052] ? __fget_files+0x3a2/0x420 [ 480.365243][T18052] ? __fget_files+0x2a/0x420 [ 480.365276][T18052] ksys_read+0x150/0x270 [ 480.365306][T18052] ? __pfx_ksys_read+0x10/0x10 [ 480.365342][T18052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.365365][T18052] do_syscall_64+0x174/0x580 [ 480.365386][T18052] ? trace_irq_disable+0x3b/0x140 [ 480.365416][T18052] ? clear_bhb_loop+0x40/0x90 [ 480.365441][T18052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.365461][T18052] RIP: 0033:0x7fb6e915d68e [ 480.365479][T18052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 480.365496][T18052] RSP: 002b:00007fb6ea01efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.365516][T18052] RAX: ffffffffffffffda RBX: 00007fb6ea01f6c0 RCX: 00007fb6e915d68e [ 480.365530][T18052] RDX: 000000000000000f RSI: 00007fb6ea01f0a0 RDI: 0000000000000004 [ 480.365542][T18052] RBP: 00007fb6ea01f090 R08: 0000000000000000 R09: 0000000000000000 [ 480.365554][T18052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.365565][T18052] R13: 00007fb6e9416038 R14: 00007fb6e9415fa0 R15: 00007ffe66208e68 [ 480.365597][T18052] [ 480.782309][T18049] bond1 (unregistering): Released all slaves [ 480.818402][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.828890][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.837915][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.850811][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.859958][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.076982][T18062] hsr0: entered promiscuous mode [ 481.417406][T18086] netlink: 'syz.1.3239': attribute type 12 has an invalid length. [ 481.429569][T18086] netlink: 'syz.1.3239': attribute type 11 has an invalid length. [ 481.801935][T18099] netlink: 'syz.2.3241': attribute type 1 has an invalid length. [ 481.983047][T18095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.995256][T18095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.056775][T18111] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 482.115927][T18108] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.123647][T18108] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.290105][T18095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.323738][T18095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.474503][T18122] pimreg: entered allmulticast mode [ 482.668397][T18095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.679321][T18095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.839753][T18095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.864565][T18095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.963771][ T4944] Bluetooth: hci3: command tx timeout [ 482.977614][T18136] x_tables: duplicate entry at hook 2 [ 483.067242][ T6638] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.084982][ T6638] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.146481][ T6638] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.162768][ T6638] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.246428][T18148] netlink: 'syz.3.3254': attribute type 11 has an invalid length. [ 483.258007][T12708] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.266965][T12708] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.322663][T12708] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.341186][T12708] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.370450][T18153] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 483.422728][T18149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.441838][T18149] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.457879][T18149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.527846][T18161] netlink: 'syz.1.3256': attribute type 1 has an invalid length. [ 483.540206][T18149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.550757][T18149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.566760][T18149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.584199][T18149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.602125][T18149] veth1_vlan: left promiscuous mode [ 483.613832][T18149] veth0_vlan: left promiscuous mode [ 483.620221][T18149] veth0_vlan: entered promiscuous mode [ 483.630043][T18149] veth1_vlan: entered promiscuous mode [ 483.641186][T18149] veth1_macvtap: left promiscuous mode [ 483.648505][T18149] veth0_macvtap: left promiscuous mode [ 483.655818][T18149] veth0_macvtap: entered promiscuous mode [ 483.662758][T18149] veth1_macvtap: entered promiscuous mode [ 483.693515][T18149] 8021q: adding VLAN 0 to HW filter on device eth0 [ 483.701786][T18149] 8021q: adding VLAN 0 to HW filter on device eth1 [ 483.710561][T18149] 8021q: adding VLAN 0 to HW filter on device eth2 [ 483.718908][T18149] 8021q: adding VLAN 0 to HW filter on device eth3 [ 483.728892][T18149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.764636][T18148] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 483.771725][T18148] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 483.787711][T12710] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.794926][T12710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.853310][T12710] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.860535][T12710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.927194][ T10] uyz0: Port: 1 Link ACTIVE [ 483.929125][ T6630] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.085574][T18177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.181974][ T6630] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.211778][ T6630] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.276005][ T6630] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.400678][T18192] batadv0: entered promiscuous mode [ 484.435053][T18192] __nla_validate_parse: 13 callbacks suppressed [ 484.435095][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3262'. [ 484.450811][T18192] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 484.481940][T18200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3266'. [ 484.652568][T18205] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3266'. [ 485.018349][T18219] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3271'. [ 485.053116][ T4944] Bluetooth: hci3: command tx timeout [ 485.244500][T18070] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.256978][T18070] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.265034][T18070] bridge_slave_0: entered allmulticast mode [ 485.274598][T18070] bridge_slave_0: entered promiscuous mode [ 485.288322][T18221] syzkaller0: entered promiscuous mode [ 485.295753][T18221] syzkaller0: entered allmulticast mode [ 485.305025][T18070] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.320981][T18070] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.337922][T18070] bridge_slave_1: entered allmulticast mode [ 485.354854][T18070] bridge_slave_1: entered promiscuous mode [ 485.563037][T18070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.588775][T18070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.737804][T18070] team0: Port device team_slave_0 added [ 485.750108][T18070] team0: Port device team_slave_1 added [ 485.759987][T18251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3278'. [ 485.771703][T18249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3279'. [ 485.848538][T18249] bridge2: entered promiscuous mode [ 485.912233][T18070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.919891][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.948778][T18070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.965407][T18255] netlink: 'syz.2.3280': attribute type 5 has an invalid length. [ 485.974430][T18070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.981529][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.011029][T18070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.196134][T18070] hsr_slave_0: entered promiscuous mode [ 486.213627][T18070] hsr_slave_1: entered promiscuous mode [ 486.221598][T18070] debugfs: 'hsr0' already exists in 'hsr' [ 486.239499][T18070] Cannot create hsr debugfs directory [ 486.267479][T18264] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3283'. [ 486.710029][T18280] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3287'. [ 486.802060][T18281] team0: No ports can be present during mode change [ 487.124244][ T5634] Bluetooth: hci3: command tx timeout [ 487.297489][T18070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.317948][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.337206][T18070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.374151][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.392517][T18070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.411814][T18295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3293'. [ 487.423963][T18301] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3294'. [ 487.439336][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.456293][T18070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.480448][T18070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.538137][T18295] bond1: entered promiscuous mode [ 487.544350][T18295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.664508][T18295] netlink: 'syz.0.3293': attribute type 1 has an invalid length. [ 487.878408][T18070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.956385][T18070] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.982636][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.989904][ T6638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.035377][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.042630][ T6638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.050361][T18326] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 488.094253][T18327] ip6gre1: entered promiscuous mode [ 488.102975][T18327] ip6gre1: entered allmulticast mode [ 489.031773][T18070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.209612][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 489.577364][T18353] __nla_validate_parse: 4 callbacks suppressed [ 489.577383][T18353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'. [ 489.715276][T18070] veth0_vlan: entered promiscuous mode [ 489.756025][T18070] veth1_vlan: entered promiscuous mode [ 489.860693][T18070] veth0_macvtap: entered promiscuous mode [ 489.898962][T18070] veth1_macvtap: entered promiscuous mode [ 489.945131][T18070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.989567][T18070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.050267][ T6633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.074413][ T6633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.112390][ T6633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.135822][ T6633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.408607][T18387] netlink: 'syz.3.3314': attribute type 11 has an invalid length. [ 490.423020][T18387] netlink: 180760 bytes leftover after parsing attributes in process `syz.3.3314'. [ 490.449222][T12710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.467647][T12710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.679287][ T6633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.705842][T18400] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3317'. [ 490.712681][ T6633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.946810][T18406] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3318'. [ 491.251535][T18420] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3321'. [ 491.286929][ T4944] Bluetooth: hci3: command 0x0419 tx timeout [ 491.299751][T18417] vlan2: entered promiscuous mode [ 491.305837][T18417] bridge0: entered promiscuous mode [ 491.701960][T18421] sch_fq: defrate 0 ignored. [ 492.259675][T18439] xt_bpf: check failed: parse error [ 492.465996][T18444] syzkaller0: entered promiscuous mode [ 492.486327][T18444] syzkaller0: entered allmulticast mode [ 492.570506][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 492.810891][T18453] netlink: 'syz.0.3333': attribute type 22 has an invalid length. [ 492.830184][T18453] netlink: 'syz.0.3333': attribute type 1 has an invalid length. [ 492.847209][T18453] netlink: 476 bytes leftover after parsing attributes in process `syz.0.3333'. [ 492.871722][T18453] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3333'. [ 493.096475][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 493.317520][T18472] netlink: 'syz.4.3339': attribute type 11 has an invalid length. [ 493.360790][T18474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3340'. [ 493.947905][T18494] syzkaller0: entered promiscuous mode [ 493.959190][T18494] syzkaller0: entered allmulticast mode [ 495.106331][T18510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.126528][T18510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.376037][T18539] __nla_validate_parse: 5 callbacks suppressed [ 495.376056][T18539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3358'. [ 495.405880][T18539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3358'. [ 495.421824][T18523] syzkaller1: entered promiscuous mode [ 495.446386][T18523] syzkaller1: entered allmulticast mode [ 495.459885][T12710] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.497777][T12710] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.509373][T18541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3358'. [ 495.569241][T18541] xt_hashlimit: size too large, truncated to 1048576 [ 495.594475][T18541] xt_hashlimit: invalid interval [ 495.647556][T12710] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.657539][T12710] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.828269][T18548] netlink: 'syz.4.3359': attribute type 1 has an invalid length. [ 496.334300][T18573] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3367'. [ 496.357289][T18575] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3367'. [ 496.857635][T18593] nbd4: detected capacity change from 0 to 63 [ 496.882340][ T4944] block nbd4: Receive control failed (result -104) [ 496.958687][T18602] openvswitch: netlink: IP tunnel dst address not specified [ 497.028561][T18603] netlink: 393 bytes leftover after parsing attributes in process `syz.0.3374'. [ 497.586900][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3382'. [ 497.614972][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3382'. [ 497.657124][T18636] netlink: 'syz.1.3387': attribute type 1 has an invalid length. [ 497.716511][T18642] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3387'. [ 497.723933][T18636] bond2: entered promiscuous mode [ 497.731157][T18636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.739136][T18634] syzkaller1: entered promiscuous mode [ 497.746118][T18634] syzkaller1: entered allmulticast mode [ 497.782405][T18645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3389'. [ 498.051942][T18651] syzkaller0: entered promiscuous mode [ 498.057590][T18651] syzkaller0: entered allmulticast mode [ 498.235941][T18664] netlink: 'syz.4.3396': attribute type 10 has an invalid length. [ 498.265052][T18664] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.275328][T18664] bond0: (slave team0): Enslaving as an active interface with an up link [ 498.311263][T18665] syzkaller0: entered promiscuous mode [ 498.320968][T18665] syzkaller0: entered allmulticast mode [ 498.783560][T18685] ksmbd: Unknown IPC event: 11, ignore. [ 499.606094][T18726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.713948][T18734] tipc: Started in network mode [ 499.718876][T18734] tipc: Node identity da857f735f92, cluster identity 4711 [ 499.746846][T18734] tipc: Enabled bearer , priority 0 [ 499.762071][T18734] syzkaller0: entered promiscuous mode [ 499.779488][T18734] syzkaller0: entered allmulticast mode [ 499.848555][T18734] tipc: Resetting bearer [ 499.952127][T18741] tipc: Resetting bearer [ 499.977833][T18741] tipc: Disabling bearer [ 500.456128][T18767] syzkaller1: entered promiscuous mode [ 500.468299][T18767] syzkaller1: entered allmulticast mode [ 500.502502][T18770] syzkaller0: renamed from batadv_slave_1 (while UP) [ 500.510215][T18765] netlink: ct family unspecified [ 500.523561][T18765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.539611][T18770] __nla_validate_parse: 10 callbacks suppressed [ 500.539628][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 500.564448][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3426'. [ 500.872510][T18781] xt_hashlimit: size too large, truncated to 1048576 [ 500.899803][T18781] xt_hashlimit: max too large, truncated to 1048576 [ 500.940912][T18784] nbd: must specify at least one socket [ 501.115416][T18797] netlink: 'syz.4.3431': attribute type 1 has an invalid length. [ 501.124606][T18794] can: request_module (can-proto-0) failed. [ 501.157839][T18784] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 501.275735][T18784] geneve3: left promiscuous mode [ 501.405016][T18801] batman_adv: batadv0: Adding interface: dummy0 [ 501.424349][T18801] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.461055][T18801] batman_adv: batadv0: Interface activated: dummy0 [ 501.486056][T18804] batadv0: mtu less than device minimum [ 501.493977][T18804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 501.506617][T18804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 501.518342][T18804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 501.530151][T18804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 501.541862][T18804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 501.621016][T12707] ip6gretap0: left allmulticast mode [ 501.638684][T12707] ip6gretap0: left promiscuous mode [ 501.663188][T12707] bridge0: port 3(ip6gretap0) entered disabled state [ 501.718453][T12707] bond4: left allmulticast mode [ 501.739769][T12707] bond4: left promiscuous mode [ 501.748540][T12707] bridge0: port 1(bond4) entered disabled state [ 501.780573][T12707] bridge_slave_1: left allmulticast mode [ 501.786598][T12707] bridge_slave_1: left promiscuous mode [ 501.813148][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.867512][T10986] IPVS: starting estimator thread 0... [ 501.899686][T12707] pim6reg: left allmulticast mode [ 501.907770][T12707] dummy0: left allmulticast mode [ 501.964626][T18818] IPVS: using max 28 ests per chain, 67200 per kthread [ 502.019614][T18822] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3436'. [ 502.291939][T12707] erspan0 (unregistering): left promiscuous mode [ 502.393340][T18829] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3437'. [ 502.599420][T12707] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 502.660580][T12707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.671260][T12707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.682423][T12707] bond0 (unregistering): Released all slaves [ 502.697674][T12707] bond1 (unregistering): (slave veth3): Releasing active interface [ 502.705730][T12707] batadv1: entered promiscuous mode [ 502.713151][T12707] bond1 (unregistering): (slave batadv1): Releasing active interface [ 502.722529][T12707] bond1 (unregistering): Released all slaves [ 502.744475][T12707] bond2 (unregistering): Released all slaves [ 502.766352][T12707] bond3 (unregistering): Released all slaves [ 502.782639][T12707] bond4 (unregistering): Released all slaves [ 502.809253][T12707] bond5 (unregistering): Released all slaves [ 502.828879][T12707] bond6 (unregistering): Released all slaves [ 502.850736][T12707] bond7 (unregistering): Released all slaves [ 502.866915][T12707] bond8 (unregistering): Released all slaves [ 502.894558][T12707] bond9 (unregistering): (slave bond10): Releasing active interface [ 502.904062][T12707] bond9 (unregistering): Released all slaves [ 502.925887][T12707] bond10 (unregistering): Released all slaves [ 502.951334][T12707] bond11 (unregistering): Released all slaves [ 503.158019][T18841] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3441'. [ 503.451708][T12707] tipc: Left network mode [ 503.531150][T18858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3445'. [ 503.598950][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'. [ 503.896112][T18872] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3451'. [ 503.929923][ T4960] block nbd2: Possible stuck request ffff888026cf0000: control (read@0,4096B). Runtime 120 seconds [ 504.338543][T18884] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 504.338543][T18884] 3ìUH†5rºBnœæ [ 504.633742][T18893] ip6gre1: entered promiscuous mode [ 504.666055][T18893] ip6gre1: entered allmulticast mode [ 504.705994][T18899] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3457'. [ 504.799763][T18888] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3455'. [ 505.271848][T18921] macvtap1: entered promiscuous mode [ 505.285936][T18921] macvtap1: entered allmulticast mode [ 505.298873][T18921] veth1_vlan: entered allmulticast mode [ 505.642963][T18927] sctp: [Deprecated]: syz.4.3466 (pid 18927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.642963][T18927] Use struct sctp_sack_info instead [ 505.835564][T18944] net_ratelimit: 14 callbacks suppressed [ 505.835584][T18944] openvswitch: netlink: Message has 4 unknown bytes. [ 506.209484][T18957] veth5: entered promiscuous mode [ 506.562644][T12707] dummy0: left promiscuous mode [ 506.583575][T12707] veth1_to_hsr: left promiscuous mode [ 506.594722][T12707] hsr_slave_0: left promiscuous mode [ 506.600790][T12707] hsr_slave_1: left promiscuous mode [ 506.607675][T12707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.620121][T12707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.809571][T12707] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 507.324974][T12707] IPVS: stop unused estimator thread 0... [ 508.695625][T18944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.704674][T18956] __nla_validate_parse: 1 callbacks suppressed [ 508.704693][T18956] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3471'. [ 509.052706][T18977] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3475'. [ 509.092599][T18978] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3477'. [ 509.189070][T18983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3478'. [ 509.395423][T18989] netlink: 'syz.4.3481': attribute type 1 has an invalid length. [ 509.510221][T18997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3483'. [ 509.718011][T19003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3486'. [ 509.737072][T19006] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3485'. [ 509.752263][T19009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3488'. [ 509.972618][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3489'. [ 510.152239][T19027] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3492'. [ 510.169033][T19025] netlink: 'syz.4.3494': attribute type 3 has an invalid length. [ 510.253734][T19034] netlink: 'syz.3.3495': attribute type 2 has an invalid length. [ 510.555490][T19044] tap0: tun_chr_ioctl cmd 1074025677 [ 510.573506][T19044] tap0: linktype set to 6 [ 511.484471][T19095] netlink: del zone limit has 4 unknown bytes [ 511.532283][T19097] bond2: option miimon: invalid value (18446744073709551607) [ 511.540095][T19097] bond2: option miimon: allowed values 0 - 2147483647 [ 511.549695][T19097] bond2 (unregistering): Released all slaves [ 511.965417][T19116] bridge1: entered allmulticast mode [ 512.021902][T19120] pim6reg1: entered promiscuous mode [ 512.034075][T19120] pim6reg1: entered allmulticast mode [ 512.500031][T19134] netlink: 'syz.4.3523': attribute type 16 has an invalid length. [ 512.523885][T19137] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.538960][T19137] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.558565][T19134] netlink: 'syz.4.3523': attribute type 17 has an invalid length. [ 512.805021][T19134] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.812374][T19134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.863957][T19134] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.871173][T19134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.959878][T19134] ip6gre1: left promiscuous mode [ 512.966207][T19134] ip6gre1: left allmulticast mode [ 512.974315][T19134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.020412][T19145] bond2: Unable to set down delay as MII monitoring is disabled [ 513.030514][T19145] bond2 (unregistering): Released all slaves [ 513.197689][T19156] team0 (unregistering): Port device team_slave_0 removed [ 513.259504][T19156] team0 (unregistering): Port device team_slave_1 removed [ 513.747103][T19185] netlink: 'syz.3.3537': attribute type 1 has an invalid length. [ 513.828556][T19189] __nla_validate_parse: 20 callbacks suppressed [ 513.828577][T19189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3539'. [ 513.993297][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3541'. [ 514.032917][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3541'. [ 514.051810][T19198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3541'. [ 514.076301][T19198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3541'. [ 514.184864][T19208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3544'. [ 514.246331][T19208] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3544'. [ 514.490137][T19208] xt_limit: Overflow, try lower: 268435456/134217728 [ 514.533908][T19227] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3547'. [ 514.841524][T19237] netlink: 'syz.3.3550': attribute type 2 has an invalid length. [ 514.860125][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3550'. [ 514.879819][T19241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3551'. [ 514.899098][T19237] vlan4: entered promiscuous mode [ 514.914991][T19237] bridge0: entered promiscuous mode [ 515.449596][T19259] syzkaller0: entered promiscuous mode [ 515.467425][T19259] syzkaller0: entered allmulticast mode [ 515.481728][T19259] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 515.494691][T19259] netlink: 'syz.0.3555': attribute type 142 has an invalid length. [ 516.808484][T19293] netlink: 'syz.4.3567': attribute type 8 has an invalid length. [ 517.333036][ T9419] IPVS: starting estimator thread 0... [ 517.407293][T19305] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 517.444045][T19317] IPVS: using max 27 ests per chain, 64800 per kthread [ 517.947370][T19337] syzkaller0: entered promiscuous mode [ 517.956910][T19337] syzkaller0: entered allmulticast mode [ 517.983609][T19332] syzkaller1: entered promiscuous mode [ 517.996928][T19332] syzkaller1: entered allmulticast mode [ 518.036490][T19332] syzkaller1: left promiscuous mode [ 518.041830][T19332] syzkaller1: left allmulticast mode [ 518.422393][T19359] gretap0: entered promiscuous mode [ 518.495417][T19366] Cannot find add_set index 1 as target [ 518.605298][T19366] netlink: 'syz.4.3587': attribute type 12 has an invalid length. [ 518.842206][T19375] __nla_validate_parse: 9 callbacks suppressed [ 518.842226][T19375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3590'. [ 519.031580][T19352] x_tables: duplicate underflow at hook 2 [ 519.053748][T19386] sctp: [Deprecated]: syz.0.3594 (pid 19386) Use of int in max_burst socket option. [ 519.053748][T19386] Use struct sctp_assoc_value instead [ 519.104024][T19380] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 519.146079][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3593'. [ 519.160133][T19384] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3593'. [ 519.770677][T19405] syzkaller0: entered promiscuous mode [ 519.802276][T19405] syzkaller0: entered allmulticast mode [ 522.185378][T19389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.418733][T19422] syzkaller0: entered promiscuous mode [ 522.443628][T19422] syzkaller0: entered allmulticast mode [ 522.465611][T19433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3604'. [ 522.613201][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 522.622710][T19436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3606'. [ 522.650598][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 522.745086][T19444] SET target dimension over the limit! [ 522.757120][T19444] nbd: must specify at least one socket [ 522.923186][T19449] veth1_to_batadv: entered promiscuous mode [ 522.950931][T19447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3610'. [ 523.004240][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 523.120707][T19456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3614'. [ 523.637204][T19472] netlink: 'syz.4.3618': attribute type 2 has an invalid length. [ 523.707321][T19472] batman_adv: batadv0: Interface deactivated: dummy0 [ 523.737468][T19472] batman_adv: batadv0: Removing interface: dummy0 [ 524.466895][T19505] __nla_validate_parse: 8 callbacks suppressed [ 524.466917][T19505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3627'. [ 524.635868][T19511] syzkaller0: entered promiscuous mode [ 524.650326][T19511] syzkaller0: entered allmulticast mode [ 524.715412][T19516] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3630'. [ 524.940327][T19524] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 524.968171][T19524] batman_adv: batadv0: Adding interface: gretap1 [ 524.980397][T19524] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.026343][T19524] batman_adv: batadv0: Interface activated: gretap1 [ 525.432447][T19549] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3639'. [ 525.485077][T19548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3640'. [ 525.541092][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3637'. [ 526.186864][T19585] netlink: 'syz.2.3647': attribute type 1 has an invalid length. [ 526.244224][T19585] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 526.731005][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'. [ 526.972989][ T1638] block nbd4: Possible stuck request ffff888026dce000: control (read@0,1024B). Runtime 30 seconds [ 526.983888][ T1638] block nbd4: Possible stuck request ffff888026dce1c0: control (read@1024,1024B). Runtime 30 seconds [ 526.996780][ T1638] block nbd4: Possible stuck request ffff888026dce380: control (read@2048,1024B). Runtime 30 seconds [ 527.008029][ T1638] block nbd4: Possible stuck request ffff888026dce540: control (read@3072,1024B). Runtime 30 seconds [ 527.065814][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.095163][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.102062][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.108948][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.115794][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.122656][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.129509][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.136464][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.143339][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.150171][T19630] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 527.256490][T19633] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3659'. [ 528.133023][T19653] netlink: 'syz.2.3663': attribute type 1 has an invalid length. [ 528.141756][T19653] netlink: 'syz.2.3663': attribute type 2 has an invalid length. [ 528.150532][T19653] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3663'. [ 528.630873][T19673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3672'. [ 528.643416][T19670] bridge_slave_0: left allmulticast mode [ 528.650631][T19670] bridge_slave_0: left promiscuous mode [ 528.662885][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.717670][T19670] bridge_slave_1: left allmulticast mode [ 528.736586][T19670] bridge_slave_1: left promiscuous mode [ 528.746877][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.782445][T19670] bond0: (slave bond_slave_0): Releasing backup interface [ 528.818732][T19670] bond0: (slave bond_slave_1): Releasing backup interface [ 528.829949][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3673'. [ 528.854512][T19670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.864828][T19670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.876853][T19670] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 528.885762][T19670] batman_adv: batadv0: Removing interface: syzkaller0 [ 529.061582][T19686] bond2: entered promiscuous mode [ 529.080524][T19686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.135926][T19701] netlink: 'syz.2.3679': attribute type 32 has an invalid length. [ 529.150514][T19688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.176109][T19688] bond2: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 529.199518][T19688] bond2: (slave ip6gre3): Error -95 calling set_mac_address [ 529.229308][T19692] C: renamed from veth1_to_team [ 529.245602][T19692] netlink: 'syz.1.3676': attribute type 4 has an invalid length. [ 529.270990][T19700] batadv1: entered promiscuous mode [ 529.279043][T19700] batadv1: entered allmulticast mode [ 529.391402][T19704] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.399177][T19704] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.578236][T19704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.594076][T19704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.666679][T19722] __nla_validate_parse: 2 callbacks suppressed [ 529.666700][T19722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3685'. [ 529.691648][T19722] netlink: 'syz.0.3685': attribute type 1 has an invalid length. [ 529.862414][T19722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.875624][ T6630] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.027954][ T6630] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.071638][ T6630] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.100734][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3688'. [ 530.112758][T19735] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 530.120971][ T6630] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.297902][T19735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.379958][T19743] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 530.404917][T19748] bond2: entered promiscuous mode [ 530.419224][T19748] bond2: entered allmulticast mode [ 530.448893][T19735] macvlan2: entered promiscuous mode [ 530.457761][T19735] macvlan2: entered allmulticast mode [ 530.465454][T19735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 530.521780][T19759] syzkaller0: left promiscuous mode [ 530.534746][T19759] syzkaller0: left allmulticast mode [ 531.152124][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3700'. [ 531.216735][T19800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3700'. [ 531.312167][T19793] hsr_slave_1 (unregistering): left promiscuous mode [ 531.648574][ T30] audit: type=1107 audit(1781443070.964:14): pid=19812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ùmö£æf³fãôŸLÁä}¼’w ÞvK²˜Ù‘°Fà8vg#ð]çT [ 531.648574][ T30] :0?Y‚”©šdJŽÈf¾=C/ø€@}Ù‹’W¥' [ 532.136229][T19831] netlink: 'syz.4.3711': attribute type 39 has an invalid length. [ 532.225475][T19829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3711'. [ 532.285079][T19834] Can't find ip_set type hash:ip,por [ 532.723962][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3720'. [ 532.825061][T19856] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3718'. [ 532.839384][T19863] syzkaller0: entered promiscuous mode [ 532.847528][T19863] syzkaller0: entered allmulticast mode [ 532.973950][T19872] netlink: 'syz.0.3723': attribute type 32 has an invalid length. [ 532.987825][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 533.014255][T19872] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3723'. [ 533.028916][T19872] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3723'. [ 533.505096][T19890] bridge0: port 1(vlan3) entered blocking state [ 533.553916][T19890] bridge0: port 1(vlan3) entered disabled state [ 533.579089][T19890] vlan3: entered allmulticast mode [ 533.588915][T19890] geneve0: entered allmulticast mode [ 533.605057][T19890] vlan3: entered promiscuous mode [ 533.615148][T19890] geneve0: entered promiscuous mode [ 533.704423][T19904] 0ªX¹¦À: renamed from batadv0 [ 533.761190][T19904] 0ªX¹¦À: left promiscuous mode [ 533.789200][T19904] 0ªX¹¦À: entered allmulticast mode [ 533.817102][T19904] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 533.841988][T19904] net_ratelimit: 3451 callbacks suppressed [ 533.842005][T19904] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 533.873323][T19904] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 533.914151][T19904] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 534.005095][ T4960] block nbd2: Possible stuck request ffff888026cf0000: control (read@0,4096B). Runtime 150 seconds [ 534.055522][T19904] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 534.074555][T19904] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 534.091150][T19904] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 534.102140][T19904] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 534.133287][T19904] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 534.145982][T19904] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 534.202600][T19904] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 534.229392][T19904] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 534.271468][T19904] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 534.431479][T19904] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 535.025916][T19962] syzkaller1: entered promiscuous mode [ 535.041596][T19962] syzkaller1: entered allmulticast mode [ 535.063129][T19967] __nla_validate_parse: 9 callbacks suppressed [ 535.063150][T19967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3747'. [ 535.127553][T19971] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3748'. [ 535.272199][T19979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.657925][T20010] bridge2: entered promiscuous mode [ 536.975488][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 537.113310][T20026] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3755'. [ 537.354673][T20028] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3756'. [ 537.383972][T20028] netlink: 'syz.3.3756': attribute type 2 has an invalid length. [ 537.394745][T20028] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3756'. [ 537.443891][T20028] netlink: 'syz.3.3756': attribute type 2 has an invalid length. [ 537.465289][T20031] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3757'. [ 537.754498][T20044] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3760'. [ 537.934696][T20045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3761'. [ 538.124908][T20052] syzkaller1: entered promiscuous mode [ 538.156323][T20052] syzkaller1: entered allmulticast mode [ 538.211296][T20054] xfrm1: entered promiscuous mode [ 538.341350][T20064] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3768'. [ 538.416620][T20070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3770'. [ 539.599854][T20093] hsr_slave_1 (unregistering): left promiscuous mode [ 539.627009][T20100] ip6tnl1: entered allmulticast mode [ 539.665348][T20119] netlink: 'syz.4.3784': attribute type 10 has an invalid length. [ 539.684467][T12707] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 540.626162][T20162] bridge0: entered allmulticast mode [ 540.656123][T20140] nbd3: detected capacity change from 0 to 63 [ 540.662759][T20146] nbd: nbd3 already in use [ 540.692730][ T4944] block nbd3: Receive control failed (result -104) [ 540.808714][T20162] bridge_slave_1: left allmulticast mode [ 540.814470][T20162] bridge_slave_1: left promiscuous mode [ 540.833437][T20162] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.915996][T20162] bridge_slave_0: left allmulticast mode [ 540.927501][T20162] bridge_slave_0: left promiscuous mode [ 540.933332][T20162] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.973028][T20168] block nbd5: server does not support multiple connections per device. [ 540.991121][T20168] block nbd5: shutting down sockets [ 541.357612][T20189] __nla_validate_parse: 10 callbacks suppressed [ 541.357633][T20189] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3803'. [ 541.437817][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3803'. [ 541.517484][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3803'. [ 541.718969][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3803'. [ 541.805762][T20208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 541.844723][T20208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.986420][T20215] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3812'. [ 542.108993][T20221] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 542.137412][T20221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.236786][T20221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3815'. [ 542.416361][T20238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3819'. [ 542.449758][T20240] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3820'. [ 542.725634][T20246] sctp: [Deprecated]: syz.2.3823 (pid 20246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.725634][T20246] Use struct sctp_sack_info instead [ 542.864559][T20250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3824'. [ 542.900131][T20250] ip6gre3: entered promiscuous mode [ 542.905400][T20250] ip6gre3: entered allmulticast mode [ 542.940237][T20252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.042575][T20262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.399669][T20272] netlink: 'syz.3.3833': attribute type 4 has an invalid length. [ 543.447912][T20272] netlink: 'syz.3.3833': attribute type 4 has an invalid length. [ 543.632050][T20272] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.639744][T20272] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.673749][T20278] Bluetooth: MGMT ver 1.23 [ 543.683257][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 544.329848][T20272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.355751][T20272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.650697][T20291] syzkaller1: entered promiscuous mode [ 544.665288][T20291] syzkaller1: entered allmulticast mode [ 544.682794][T12710] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.710964][T12710] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.719391][T12710] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.727774][T12710] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.749343][T10980] uyz0: Port: 1 Link DOWN [ 544.890657][T12710] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.899075][T12710] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.920387][T20308] netlink: 'syz.1.3845': attribute type 13 has an invalid length. [ 544.928350][T20308] netlink: 'syz.1.3845': attribute type 17 has an invalid length. [ 545.141336][T20308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.154388][T20308] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.166351][T20308] 0ªX¹¦À: left allmulticast mode [ 545.241540][T20308] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 545.268533][T20308] veth1_to_batadv: left promiscuous mode [ 545.276832][T20308] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 545.290405][T20308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.300957][T20308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.345212][T20308] veth1_vlan: left promiscuous mode [ 545.351892][T20308] veth0_vlan: left promiscuous mode [ 545.357785][T20308] veth0_vlan: entered promiscuous mode [ 545.366502][T20308] veth1_vlan: entered promiscuous mode [ 545.380498][T20308] veth1_macvtap: left promiscuous mode [ 545.387600][T20308] veth0_macvtap: left promiscuous mode [ 545.394674][T20308] veth0_macvtap: entered promiscuous mode [ 545.411228][T20308] veth1_macvtap: entered promiscuous mode [ 545.436812][T20308] ip6gre1: left promiscuous mode [ 545.441777][T20308] ip6gre1: left allmulticast mode [ 545.449560][T20308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.458653][T20308] bond2: left promiscuous mode [ 545.464258][T20308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.477172][T20308] 8021q: adding VLAN 0 to HW filter on device eth0 [ 545.491075][T20308] 8021q: adding VLAN 0 to HW filter on device eth1 [ 545.504374][T20308] 8021q: adding VLAN 0 to HW filter on device eth2 [ 545.517641][T20308] 8021q: adding VLAN 0 to HW filter on device eth3 [ 545.548489][T12710] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.557455][T12710] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.567637][T12710] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.631593][T12710] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.655615][T12710] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.668166][T12710] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.124236][ T6649] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.140303][ T6649] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.173639][ T6649] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.181904][ T6649] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.250411][T20344] netlink: 'syz.3.3848': attribute type 16 has an invalid length. [ 546.547950][T20349] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 546.800959][T20368] __nla_validate_parse: 7 callbacks suppressed [ 546.800979][T20368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3855'. [ 546.830987][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3856'. [ 547.696359][T20381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3859'. [ 548.118742][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3862'. [ 548.134710][T20388] ip6gre2: entered promiscuous mode [ 548.139960][T20388] ip6gre2: entered allmulticast mode [ 548.247981][T20392] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3863'. [ 548.305897][T20395] netlink: zone id is out of range [ 548.313768][T20395] netlink: zone id is out of range [ 548.318925][T20395] netlink: zone id is out of range [ 548.324096][T20395] netlink: zone id is out of range [ 548.329228][T20395] netlink: zone id is out of range [ 548.334366][T20395] netlink: zone id is out of range [ 548.398176][T20396] netlink: 'syz.4.3865': attribute type 16 has an invalid length. [ 549.211612][T20399] bond2: left promiscuous mode [ 549.217598][T20399] bond2: left allmulticast mode [ 549.226936][T20399] ip6gre2: left promiscuous mode [ 549.231914][T20399] ip6gre2: left allmulticast mode [ 549.265257][T20399] bond3: entered promiscuous mode [ 549.270694][T20399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.331564][T20403] bond4: Unable to set up delay as MII monitoring is disabled [ 549.341563][T20403] bond4 (unregistering): Released all slaves [ 549.489571][T20356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.637505][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3868'. [ 549.646926][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3868'. [ 549.656876][T20407] netlink: 58 bytes leftover after parsing attributes in process `syz.4.3868'. [ 549.700743][ T4944] Bluetooth: hci5: command 0x0406 tx timeout [ 549.741799][T20407] bond0: (slave team0): Releasing backup interface [ 549.767982][T20407] team0 (unregistering): Port device team_slave_0 removed [ 549.786832][T20407] team0 (unregistering): Port device team_slave_1 removed [ 549.860526][T20417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3872'. [ 549.981550][T20413] ip6tnl2: entered allmulticast mode [ 550.546923][T20441] xt_hashlimit: size too large, truncated to 1048576 [ 550.691815][T20444] netlink: 'syz.4.3881': attribute type 12 has an invalid length. [ 550.903465][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'. [ 550.985449][T20454] netlink: 'syz.3.3885': attribute type 1 has an invalid length. [ 551.055311][T20429] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 551.067561][T20454] bond4: entered promiscuous mode [ 551.072787][T20454] bond4: entered allmulticast mode [ 551.078291][T20454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.085787][T20429] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 551.885010][T20489] __nla_validate_parse: 2 callbacks suppressed [ 551.885028][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 551.923065][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 551.984406][T20489] FAULT_INJECTION: forcing a failure. [ 551.984406][T20489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.997507][T20489] CPU: 1 UID: 0 PID: 20489 Comm: syz.3.3896 Not tainted syzkaller #0 PREEMPT(full) [ 551.997550][T20489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.997569][T20489] Call Trace: [ 551.997577][T20489] [ 551.997586][T20489] dump_stack_lvl+0xe8/0x150 [ 551.997618][T20489] should_fail_ex+0x40c/0x560 [ 551.997661][T20489] _copy_from_user+0x2d/0xb0 [ 551.997688][T20489] kstrtouint_from_user+0xd6/0x180 [ 551.997795][T20489] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 551.997846][T20489] proc_fail_nth_write+0x8e/0x210 [ 551.997875][T20489] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 551.997908][T20489] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 551.997932][T20489] vfs_write+0x296/0xba0 [ 551.997966][T20489] ? __pfx_vfs_write+0x10/0x10 [ 551.997993][T20489] ? __fget_files+0x2a/0x420 [ 551.998021][T20489] ? __fget_files+0x3a2/0x420 [ 551.998045][T20489] ? __fget_files+0x2a/0x420 [ 551.998078][T20489] ksys_write+0x150/0x270 [ 551.998111][T20489] ? __pfx_ksys_write+0x10/0x10 [ 551.998151][T20489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.998175][T20489] do_syscall_64+0x174/0x580 [ 551.998200][T20489] ? trace_irq_disable+0x3b/0x140 [ 551.998232][T20489] ? clear_bhb_loop+0x40/0x90 [ 551.998257][T20489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.998279][T20489] RIP: 0033:0x7feb8c75d68e [ 551.998325][T20489] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 551.998344][T20489] RSP: 002b:00007feb8d6eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 551.998367][T20489] RAX: ffffffffffffffda RBX: 00007feb8d6ef6c0 RCX: 00007feb8c75d68e [ 551.998382][T20489] RDX: 0000000000000001 RSI: 00007feb8d6ef0a0 RDI: 0000000000000004 [ 551.998396][T20489] RBP: 00007feb8d6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 551.998409][T20489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.998421][T20489] R13: 00007feb8ca16038 R14: 00007feb8ca15fa0 R15: 00007ffe23825da8 [ 551.998456][T20489] [ 552.817339][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'. [ 552.933463][T20513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3901'. [ 553.120956][T20517] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3902'. [ 553.756211][T20519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3903'. [ 554.820956][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3909'. [ 554.926640][T20546] IPv6: addrconf: prefix option has invalid lifetime [ 554.979495][T20546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3910'. [ 555.081315][T20551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3912'. [ 555.132721][T20553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.378197][T20559] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 555.386255][T20559] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 555.394724][T20559] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 555.402612][T20559] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 555.410790][T20559] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 555.419130][T20559] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 555.427295][T20559] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 555.444251][T20559] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 555.560243][T20569] bond4: invalid ARP target 0.0.0.0 specified for addition [ 555.572428][T20569] bond4: option arp_ip_target: invalid value (0) [ 555.627848][T20569] bond4 (unregistering): Released all slaves [ 555.869788][T20588] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3922'. [ 555.879436][T20588] syzkaller0: entered promiscuous mode [ 555.885367][T20588] syzkaller0: entered allmulticast mode [ 556.033348][T20595] tipc: Enabling of bearer rejected, failed to enable media [ 556.153052][T20599] validate_nla: 43 callbacks suppressed [ 556.153162][T20599] netlink: 'syz.0.3921': attribute type 1 has an invalid length. [ 556.166486][T20599] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.3921'. [ 556.438804][T20605] vlan2: entered promiscuous mode [ 556.454457][T20605] bridge0: entered promiscuous mode [ 557.046884][ T1638] block nbd4: Possible stuck request ffff888026dce000: control (read@0,1024B). Runtime 60 seconds [ 557.057746][ T1638] block nbd4: Possible stuck request ffff888026dce1c0: control (read@1024,1024B). Runtime 60 seconds [ 557.068918][ T1638] block nbd4: Possible stuck request ffff888026dce380: control (read@2048,1024B). Runtime 60 seconds [ 557.080030][ T1638] block nbd4: Possible stuck request ffff888026dce540: control (read@3072,1024B). Runtime 60 seconds [ 557.772849][T20648] __nla_validate_parse: 4 callbacks suppressed [ 557.772869][T20648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3940'. [ 557.814408][T20610] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 558.174751][T20648] infiniband syz1: set down [ 558.179438][T20648] infiniband syz1: added bond0 [ 558.201434][T20648] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 558.216519][T20648] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 558.245531][T20648] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 558.297132][T20648] RDS/IB: syz1: added [ 558.320856][T20648] smc: adding ib device syz1 with port count 1 [ 558.327076][T20648] smc: ib device syz1 port 1 has no pnetid [ 558.431288][T20665] netlink: 'syz.2.3944': attribute type 9 has an invalid length. [ 558.486325][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3944'. [ 558.501823][T20667] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3943'. [ 558.581260][ T4944] Bluetooth: hci0: command 0x0401 tx timeout [ 558.754815][T20673] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3948'. [ 559.498376][T20669] batman_adv: batadv0: Interface deactivated: gretap1 [ 559.520157][T20669] veth1_vlan: left allmulticast mode [ 559.560463][T20677] žÿ: renamed from team_slave_1 [ 559.643177][ T6626] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.654976][ T6626] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.674767][ T6626] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.692984][ T6626] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.728733][ T6626] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.747361][ T6626] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.778157][ T6626] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.802982][ T6626] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.958157][T20699] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3955'. [ 559.976315][T20704] netlink: 'syz.0.3956': attribute type 8 has an invalid length. [ 560.469679][T20721] xt_ecn: cannot match TCP bits for non-tcp packets [ 560.668345][ T30] audit: type=1804 audit(1781443099.984:15): pid=20725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3960" name="/newroot/215/cgroup.controllers" dev="tmpfs" ino=1121 res=1 errno=0 [ 560.704936][T20727] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3963'. [ 560.732213][ T30] audit: type=1800 audit(1781443099.984:16): pid=20725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3960" name="cgroup.controllers" dev="tmpfs" ino=1121 res=0 errno=0 [ 561.107248][T20735] 5Ò: entered promiscuous mode [ 561.173188][T20738] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3967'. [ 561.356281][T20740] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3968'. [ 561.526754][T20746] bond2: entered promiscuous mode [ 561.903761][T20761] bond0: (slave ip6tnl0): refused to change device type [ 562.083496][T20761] ip6erspan1: entered allmulticast mode [ 562.526614][T20774] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3979'. [ 562.938919][T20782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3983'. [ 563.332363][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3990'. [ 563.456417][T20804] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3991'. [ 564.135661][T20820] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3998'. [ 564.173555][ T4960] block nbd2: Possible stuck request ffff888026cf0000: control (read@0,4096B). Runtime 180 seconds [ 564.433306][T20827] nbd: nbd0 already in use [ 564.441318][T20826] nbd: nbd0 already in use [ 564.446649][T20827] block nbd0: NBD_DISCONNECT [ 564.452832][T20827] block nbd0: Send disconnect failed -104 [ 564.458791][T20827] block nbd0: shutting down sockets [ 564.632109][T20833] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 564.687970][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 564.689931][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 564.784825][T20833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.811722][ T6649] bond7: left allmulticast mode [ 565.033385][ T6649] bond14 (unregistering): (slave geneve4): Releasing active interface [ 565.104667][ T6649] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 565.234938][ T6649] bond0 (unregistering): Released all slaves [ 565.251958][ T6649] bond1 (unregistering): Released all slaves [ 565.277617][ T6649] bond2 (unregistering): Released all slaves [ 565.303904][ T6649] bond3 (unregistering): Released all slaves [ 565.327900][ T6649] bond4 (unregistering): Released all slaves [ 565.357077][ T6649] bond5 (unregistering): Released all slaves [ 565.417199][ T6649] bond6 (unregistering): Released all slaves [ 565.445667][ T6649] bond7 (unregistering): Released all slaves [ 565.473625][T20846] netlink: 'syz.3.4004': attribute type 2 has an invalid length. [ 565.497807][T20846] netlink: 'syz.3.4004': attribute type 1 has an invalid length. [ 565.513349][ T6649] bond8 (unregistering): Released all slaves [ 565.533722][ T6649] bond9 (unregistering): Released all slaves [ 565.559646][ T6649] bond10 (unregistering): Released all slaves [ 565.574690][ T6649] bond11 (unregistering): Released all slaves [ 565.590842][ T6649] bond12 (unregistering): Released all slaves [ 565.642334][ T6649] bond13 (unregistering): Released all slaves [ 565.657795][ T6649] bond14 (unregistering): Released all slaves [ 566.009667][ T6649] tipc: Left network mode [ 566.192112][T20857] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4009'. [ 566.211218][T20859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4008'. [ 566.659407][T20875] xt_hashlimit: size too large, truncated to 1048576 [ 566.666712][ T5752] IPVS: starting estimator thread 0... [ 566.683306][T20878] sctp: [Deprecated]: syz.3.4014 (pid 20878) Use of int in max_burst socket option. [ 566.683306][T20878] Use struct sctp_assoc_value instead [ 566.711047][T20879] netlink: 'syz.2.4012': attribute type 11 has an invalid length. [ 566.718895][T20879] netlink: 'syz.2.4012': attribute type 11 has an invalid length. [ 566.726729][T20879] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4012'. [ 566.941130][T20876] IPVS: using max 29 ests per chain, 69600 per kthread [ 566.970977][T20875] netlink: 'syz.0.4015': attribute type 1 has an invalid length. [ 566.978757][T20875] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4015'. [ 567.283078][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 568.217565][T20932] __nla_validate_parse: 3 callbacks suppressed [ 568.217586][T20932] netlink: 4256 bytes leftover after parsing attributes in process `syz.1.4030'. [ 568.381097][T20932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4030'. [ 568.390114][T20932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4030'. [ 568.502771][T20939] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4032'. [ 568.622226][T20944] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4033'. [ 568.930936][T20951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4035'. [ 569.072624][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4033'. [ 569.294187][T20961] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4036'. [ 569.325129][T20961] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4036'. [ 569.347611][T20961] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4036'. [ 569.864855][ T30] audit: type=1804 audit(1781443109.184:17): pid=20976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4043" name="/newroot/173/memory.events" dev="tmpfs" ino=902 res=1 errno=0 [ 569.921160][ T30] audit: type=1800 audit(1781443109.184:18): pid=20976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4043" name="memory.events" dev="tmpfs" ino=902 res=0 errno=0 [ 569.966654][ T30] audit: type=1804 audit(1781443109.184:19): pid=20976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4043" name="/newroot/173/memory.events" dev="tmpfs" ino=902 res=1 errno=0 [ 570.080653][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 570.670655][T21000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.832260][T20999] syzkaller0: entered promiscuous mode [ 570.842986][T20999] syzkaller0: entered allmulticast mode [ 570.859304][T21006] team_slave_1: entered promiscuous mode [ 571.031869][T21015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.124872][ T1638] block nbd3: Possible stuck request ffff888026d35080: control (read@0,1024B). Runtime 30 seconds [ 571.135814][ T1638] block nbd3: Possible stuck request ffff888026d35240: control (read@1024,1024B). Runtime 30 seconds [ 571.146769][ T1638] block nbd3: Possible stuck request ffff888026d35400: control (read@2048,1024B). Runtime 30 seconds [ 571.158212][ T1638] block nbd3: Possible stuck request ffff888026d355c0: control (read@3072,1024B). Runtime 30 seconds [ 571.636804][T21023] netlink: 'syz.0.4057': attribute type 1 has an invalid length. [ 571.755303][T21023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.837570][T21027] bond4: (slave veth9): Enslaving as an active interface with a down link [ 571.876492][T21023] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 571.907151][T21023] bond4: (slave batadv1): making interface the new active one [ 571.946391][T21023] batadv1: entered promiscuous mode [ 571.952066][T21023] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 572.406563][T21054] xt_hashlimit: Unknown mode mask 1D8, kernel too old? [ 572.447129][T21054] vlan2: entered promiscuous mode [ 572.462393][T21054] hsr0: entered promiscuous mode [ 572.480201][T21054] vlan2: entered allmulticast mode [ 572.496368][T21054] hsr0: entered allmulticast mode [ 572.501445][T21054] hsr_slave_0: entered allmulticast mode [ 572.507137][T21054] hsr_slave_1: entered allmulticast mode [ 572.845784][T21069] xt_CT: No such helper "snmp_trap" [ 572.911606][T21074] syzkaller1: entered promiscuous mode [ 572.917795][T21074] syzkaller1: entered allmulticast mode [ 573.688016][T21096] __nla_validate_parse: 78 callbacks suppressed [ 573.688037][T21096] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4076'. [ 574.450182][T21115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4082'. [ 574.513360][T21111] IPVS: persistence engine module ip_vs_pe_À not found [ 574.639871][T21120] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4083'. [ 574.830845][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4084'. [ 574.894147][T21124] netlink: 50 bytes leftover after parsing attributes in process `syz.4.4084'. [ 574.939055][T21126] netlink: 169996 bytes leftover after parsing attributes in process `syz.0.4086'. [ 574.948598][T21126] netlink: Unknown conntrack attr (type=2304, max=9) [ 574.956386][T21126] netlink: 'syz.0.4086': attribute type 19 has an invalid length. [ 574.965208][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'. [ 574.985443][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'. [ 575.085895][T21134] bond3: left promiscuous mode [ 575.127174][ T4944] Bluetooth: hci0: command 0x0401 tx timeout [ 575.136098][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4088'. [ 575.205826][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4088'. [ 575.237713][T21134] syzkaller0: left promiscuous mode [ 575.243085][T21134] syzkaller0: left allmulticast mode [ 575.463069][T21137] netlink: 'syz.3.4089': attribute type 1 has an invalid length. [ 575.486307][T21137] netlink: 'syz.3.4089': attribute type 1 has an invalid length. [ 575.504664][T21137] netlink: 'syz.3.4089': attribute type 2 has an invalid length. [ 575.521207][T21137] netlink: 'syz.3.4089': attribute type 1 has an invalid length. [ 575.748699][T21146] syzkaller0: entered promiscuous mode [ 575.754645][T21146] syzkaller0: entered allmulticast mode [ 575.765551][ T6649] IPVS: stop unused estimator thread 0... [ 577.398144][T21166] netlink: 'syz.1.4096': attribute type 1 has an invalid length. [ 578.963926][ T4995] udevd[4995]: worker [6148] /devices/virtual/block/nbd2 timeout; kill it [ 578.973280][ T4995] udevd[4995]: seq 23642 '/devices/virtual/block/nbd2' killed [ 578.980821][ T4995] udevd[4995]: worker [9502] /devices/virtual/block/nbd4 is taking a long time [ 580.359879][T21166] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 580.462411][T21180] __nla_validate_parse: 2 callbacks suppressed [ 580.462430][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4100'. [ 580.505230][T21178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4100'. [ 580.561859][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4099'. [ 580.942731][T21197] macsec2: entered promiscuous mode [ 581.006861][T21205] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 581.040408][T21205] netlink: 712 bytes leftover after parsing attributes in process `syz.1.4107'. [ 581.064467][T21205] netlink: 5504 bytes leftover after parsing attributes in process `syz.1.4107'. [ 581.094760][T21205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4107'. [ 581.145429][T21207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.162670][T21210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4108'. [ 581.192145][T21207] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.235298][T21207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.324987][T21215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4110'. [ 581.366027][T21216] openvswitch: netlink: Message has 4 unknown bytes. [ 581.381313][T21216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.462413][T21207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.495235][T21207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.547808][T21207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.558201][T21207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.575427][T21207] veth1_vlan: left promiscuous mode [ 581.581814][T21207] veth0_vlan: left promiscuous mode [ 581.588034][T21207] veth0_vlan: entered promiscuous mode [ 581.596668][T21207] veth1_vlan: entered promiscuous mode [ 581.767976][T21229] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4111'. [ 581.824930][T21207] 8021q: adding VLAN 0 to HW filter on device eth0 [ 581.832427][T21207] 8021q: adding VLAN 0 to HW filter on device eth1 [ 581.874752][T21207] 8021q: adding VLAN 0 to HW filter on device eth2 [ 581.882555][T21207] 8021q: adding VLAN 0 to HW filter on device eth3 [ 581.891500][T21207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.902394][T21207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.910916][T21207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.918402][T21207] vlan4: left promiscuous mode [ 581.927378][T21207] xfrm1: left promiscuous mode [ 581.934572][T21207] bond4: left promiscuous mode [ 581.947137][T12710] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.965881][T12710] bridge0: port 1(bridge_slave_0) entered listening state [ 582.015101][T12710] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.022270][T12710] bridge0: port 2(bridge_slave_1) entered listening state [ 582.052760][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 582.073926][ T9414] uyz0: Port: 1 Link ACTIVE [ 582.085833][ T6649] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.094382][ T6649] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.102611][ T6649] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.110840][ T6649] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.139960][ T6649] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.148175][ T6649] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.205525][ T6649] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.213855][ T6649] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.258423][T21238] xt_hashlimit: size too large, truncated to 1048576 [ 582.342011][T21244] FAULT_INJECTION: forcing a failure. [ 582.342011][T21244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.371898][T21244] CPU: 1 UID: 0 PID: 21244 Comm: syz.0.4115 Not tainted syzkaller #0 PREEMPT(full) [ 582.371925][T21244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.371937][T21244] Call Trace: [ 582.371946][T21244] [ 582.371955][T21244] dump_stack_lvl+0xe8/0x150 [ 582.371985][T21244] should_fail_ex+0x40c/0x560 [ 582.372024][T21244] _copy_from_iter+0x1d3/0x1660 [ 582.372050][T21244] ? rcu_is_watching+0x15/0xb0 [ 582.372081][T21244] ? __pfx__copy_from_iter+0x10/0x10 [ 582.372099][T21244] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 582.372138][T21244] ? netlink_sendmsg+0x650/0xb40 [ 582.372164][T21244] ? skb_put+0x112/0x210 [ 582.372188][T21244] netlink_sendmsg+0x6c0/0xb40 [ 582.372221][T21244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.372247][T21244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 582.372281][T21244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.372308][T21244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.372333][T21244] ____sys_sendmsg+0x9b9/0xa20 [ 582.372355][T21244] ? __might_fault+0xaf/0x130 [ 582.372389][T21244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.372420][T21244] ? import_iovec+0x73/0xa0 [ 582.372448][T21244] ___sys_sendmsg+0x2a5/0x360 [ 582.372468][T21244] ? __lock_acquire+0x683/0x2cd0 [ 582.372495][T21244] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.372553][T21244] ? __fget_files+0x2a/0x420 [ 582.372578][T21244] ? __fget_files+0x3a2/0x420 [ 582.372615][T21244] __x64_sys_sendmsg+0x1bd/0x2a0 [ 582.372640][T21244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.372678][T21244] ? __pfx_ksys_write+0x10/0x10 [ 582.372717][T21244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.372741][T21244] do_syscall_64+0x174/0x580 [ 582.372766][T21244] ? trace_irq_disable+0x3b/0x140 [ 582.372797][T21244] ? clear_bhb_loop+0x40/0x90 [ 582.372822][T21244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.372842][T21244] RIP: 0033:0x7fb6e919ce59 [ 582.372862][T21244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.372880][T21244] RSP: 002b:00007fb6ea01f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.372902][T21244] RAX: ffffffffffffffda RBX: 00007fb6e9415fa0 RCX: 00007fb6e919ce59 [ 582.372917][T21244] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 582.372931][T21244] RBP: 00007fb6ea01f090 R08: 0000000000000000 R09: 0000000000000000 [ 582.372944][T21244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.372956][T21244] R13: 00007fb6e9416038 R14: 00007fb6e9415fa0 R15: 00007ffe66208e68 [ 582.372988][T21244] [ 582.952442][T21260] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 583.395883][T21275] FAULT_INJECTION: forcing a failure. [ 583.395883][T21275] name failslab, interval 1, probability 0, space 0, times 0 [ 583.409566][T21275] CPU: 0 UID: 0 PID: 21275 Comm: syz.2.4126 Not tainted syzkaller #0 PREEMPT(full) [ 583.409592][T21275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.409604][T21275] Call Trace: [ 583.409611][T21275] [ 583.409620][T21275] dump_stack_lvl+0xe8/0x150 [ 583.409648][T21275] should_fail_ex+0x40c/0x560 [ 583.409685][T21275] should_failslab+0xa8/0x100 [ 583.409716][T21275] ? skb_clone+0x212/0x3a0 [ 583.409738][T21275] kmem_cache_alloc_noprof+0x87/0x650 [ 583.409771][T21275] skb_clone+0x212/0x3a0 [ 583.409799][T21275] __netlink_deliver_tap+0x413/0x860 [ 583.409822][T21275] ? netlink_deliver_tap+0x2e/0x1b0 [ 583.409838][T21275] netlink_deliver_tap+0x19c/0x1b0 [ 583.409854][T21275] netlink_unicast+0x77f/0x940 [ 583.409883][T21275] netlink_sendmsg+0x813/0xb40 [ 583.409904][T21275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.409922][T21275] ? aa_sock_msg_perm+0xf1/0x1b0 [ 583.409945][T21275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 583.409963][T21275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.409979][T21275] ____sys_sendmsg+0x9b9/0xa20 [ 583.409994][T21275] ? __might_fault+0xaf/0x130 [ 583.410015][T21275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.410036][T21275] ? import_iovec+0x73/0xa0 [ 583.410055][T21275] ___sys_sendmsg+0x2a5/0x360 [ 583.410068][T21275] ? __lock_acquire+0x683/0x2cd0 [ 583.410094][T21275] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.410133][T21275] ? __fget_files+0x2a/0x420 [ 583.410150][T21275] ? __fget_files+0x3a2/0x420 [ 583.410173][T21275] __x64_sys_sendmsg+0x1bd/0x2a0 [ 583.410190][T21275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.410211][T21275] ? __pfx_ksys_write+0x10/0x10 [ 583.410237][T21275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.410253][T21275] do_syscall_64+0x174/0x580 [ 583.410269][T21275] ? trace_irq_disable+0x3b/0x140 [ 583.410289][T21275] ? clear_bhb_loop+0x40/0x90 [ 583.410307][T21275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.410320][T21275] RIP: 0033:0x7fdfdff9ce59 [ 583.410333][T21275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.410345][T21275] RSP: 002b:00007fdfe0f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.410360][T21275] RAX: ffffffffffffffda RBX: 00007fdfe0215fa0 RCX: 00007fdfdff9ce59 [ 583.410370][T21275] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 583.410379][T21275] RBP: 00007fdfe0f07090 R08: 0000000000000000 R09: 0000000000000000 [ 583.410387][T21275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.410395][T21275] R13: 00007fdfe0216038 R14: 00007fdfe0215fa0 R15: 00007ffddde67bc8 [ 583.410416][T21275] [ 584.063267][T21286] netlink: 'syz.1.4130': attribute type 2 has an invalid length. [ 584.244475][ T6645] batadv1: left promiscuous mode [ 584.290761][T21297] netlink: 'syz.1.4132': attribute type 1 has an invalid length. [ 584.891032][T21297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.907332][T21291] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.938514][T21291] bond4: (slave team0): Enslaving as a backup interface with an up link [ 585.031468][T21306] netlink: 'syz.2.4134': attribute type 4 has an invalid length. [ 585.168773][T21311] netlink: 'syz.3.4135': attribute type 4 has an invalid length. [ 585.207943][T21315] netlink: 'syz.1.4137': attribute type 1 has an invalid length. [ 585.243633][T21315] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 585.527174][T21332] __nla_validate_parse: 6 callbacks suppressed [ 585.527196][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4139'. [ 585.581515][T21332] bond5: entered promiscuous mode [ 585.587260][T21332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 585.624247][T21325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4139'. [ 585.906901][T21340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4144'. [ 585.981004][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4146'. [ 585.994754][T21344] netlink: 50 bytes leftover after parsing attributes in process `syz.4.4146'. [ 586.172257][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4147'. [ 586.193846][T21354] GUP no longer grows the stack in syz.4.4149 (21354): 200000003000-20000000a000 (200000001000) [ 586.204687][T21354] CPU: 1 UID: 0 PID: 21354 Comm: syz.4.4149 Not tainted syzkaller #0 PREEMPT(full) [ 586.204714][T21354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.204728][T21354] Call Trace: [ 586.204737][T21354] [ 586.204747][T21354] dump_stack_lvl+0xe8/0x150 [ 586.204779][T21354] __get_user_pages+0x238c/0x2720 [ 586.204845][T21354] ? down_read_killable+0x1bb/0x340 [ 586.204885][T21354] __gup_longterm_locked+0xd52/0x15c0 [ 586.204935][T21354] ? lock_acquire+0x106/0x350 [ 586.204979][T21354] gup_fast_fallback+0x1d82/0x20d0 [ 586.205005][T21354] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.205066][T21354] ? __pfx_gup_fast_fallback+0x10/0x10 [ 586.205097][T21354] ? is_valid_gup_args+0x11f/0x200 [ 586.205127][T21354] ? get_user_pages_fast+0x4d/0xb0 [ 586.205157][T21354] __iov_iter_get_pages_alloc+0x378/0xa40 [ 586.205192][T21354] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 586.205265][T21354] iov_iter_get_pages2+0x5e/0xa0 [ 586.205295][T21354] __se_sys_vmsplice+0x7b5/0x1660 [ 586.205348][T21354] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 586.205383][T21354] ? __pfx_futex_wake+0x10/0x10 [ 586.205431][T21354] ? fdget+0x148/0x1e0 [ 586.205478][T21354] ? put_files_struct+0x24f/0x350 [ 586.205503][T21354] ? 0xffffffffff600000 [ 586.205560][T21354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.205586][T21354] do_syscall_64+0x174/0x580 [ 586.205611][T21354] ? trace_irq_disable+0x3b/0x140 [ 586.205645][T21354] ? clear_bhb_loop+0x40/0x90 [ 586.205673][T21354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.205696][T21354] RIP: 0033:0x7fd6c9f9ce59 [ 586.205715][T21354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.205736][T21354] RSP: 002b:00007fd6cad8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 586.205760][T21354] RAX: ffffffffffffffda RBX: 00007fd6ca215fa0 RCX: 00007fd6c9f9ce59 [ 586.205777][T21354] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 586.205791][T21354] RBP: 00007fd6ca032d6f R08: 0000000000000000 R09: 0000000000000000 [ 586.205813][T21354] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 586.205826][T21354] R13: 00007fd6ca216038 R14: 00007fd6ca215fa0 R15: 00007fff6fe0dec8 [ 586.205863][T21354] [ 586.562450][T21360] netlink: 'syz.3.4148': attribute type 3 has an invalid length. [ 586.570730][T21360] netlink: 'syz.3.4148': attribute type 1 has an invalid length. [ 586.588618][T21360] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4148'. [ 586.651800][T21362] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4151'. [ 586.670294][T21362] netlink: 'syz.2.4151': attribute type 1 has an invalid length. [ 586.685373][T21362] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4151'. [ 587.004054][T21368] openvswitch: netlink: Message has 4 unknown bytes. [ 587.010814][T21368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.128712][ T1638] block nbd4: Possible stuck request ffff888026dce000: control (read@0,1024B). Runtime 90 seconds [ 587.139650][ T1638] block nbd4: Possible stuck request ffff888026dce1c0: control (read@1024,1024B). Runtime 90 seconds [ 587.153814][ T1638] block nbd4: Possible stuck request ffff888026dce380: control (read@2048,1024B). Runtime 90 seconds [ 587.168670][ T1638] block nbd4: Possible stuck request ffff888026dce540: control (read@3072,1024B). Runtime 90 seconds [ 587.315304][T21379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4155'. [ 587.465611][T21390] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 587.669814][T21390] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 587.924880][T21416] nbd: must specify an index to disconnect [ 588.042116][T21401] bridge2: entered promiscuous mode [ 588.047378][T21401] bridge2: entered allmulticast mode [ 588.087878][T21401] team0: Port device bridge2 added [ 589.848498][T21467] hsr_slave_0: left promiscuous mode [ 589.870504][T21467] hsr_slave_1: left promiscuous mode [ 590.247142][T21486] netlink: 'syz.2.4180': attribute type 1 has an invalid length. [ 590.379243][T21486] bond4: entered promiscuous mode [ 590.411948][T21486] bond4: entered allmulticast mode [ 590.562990][ T4944] Bluetooth: hci4: command 0x0406 tx timeout [ 590.855168][T21509] __nla_validate_parse: 6 callbacks suppressed [ 590.855186][T21509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4183'. [ 590.935196][T21509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4183'. [ 590.982010][T21509] ip6gre2: entered promiscuous mode [ 591.001619][T21509] ip6gre2: entered allmulticast mode [ 591.021841][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'. [ 591.030750][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'. [ 591.404575][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4186'. [ 591.633540][T21519] bridge4: port 1(erspan0) entered blocking state [ 591.640280][T21519] bridge4: port 1(erspan0) entered disabled state [ 591.646931][T21519] erspan0: entered allmulticast mode [ 591.683081][T21519] erspan0: entered promiscuous mode [ 591.695717][T21519] C: renamed from veth1_to_team [ 592.077713][T21529] netlink: 'syz.0.4190': attribute type 1 has an invalid length. [ 592.322971][T21519] netlink: 'syz.4.4186': attribute type 2 has an invalid length. [ 592.330765][T21519] netlink: 'syz.4.4186': attribute type 1 has an invalid length. [ 592.338526][T21519] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4186'. [ 592.347587][T21519] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 592.503668][T21535] netlink: 41 bytes leftover after parsing attributes in process `syz.1.4191'. [ 592.512749][T21535] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4191'. [ 592.567599][T21535] netlink: 41 bytes leftover after parsing attributes in process `syz.1.4191'. [ 592.778465][T21549] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4194'. [ 594.829565][ T4960] block nbd2: Possible stuck request ffff888026cf0000: control (read@0,4096B). Runtime 210 seconds [ 594.977719][T21613] rdma_rxe: rxe_newlink: failed to add syz_tun [ 595.074135][T21615] netlink: 'syz.0.4216': attribute type 13 has an invalid length. [ 595.304548][T21630] xt_connbytes: Forcing CT accounting to be enabled [ 595.313958][T21630] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 595.736904][T21646] syzkaller0: entered promiscuous mode [ 595.746710][T21646] syzkaller0: entered allmulticast mode [ 595.974212][T21659] IPVS: Scheduler module ip_vs_sip not found [ 596.017329][T21664] __nla_validate_parse: 7 callbacks suppressed [ 596.017348][T21664] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4231'. [ 596.073020][T21664] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4231'. [ 596.331913][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.340096][T21678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4237'. [ 596.344650][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.356011][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.362996][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.369906][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.376811][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.383689][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.390641][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.397543][T21674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 596.469439][T21679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 596.478838][T21679] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4236'. [ 596.488809][T21679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 596.531320][T21679] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4236'. [ 597.268833][T21689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4241'. [ 597.278213][T21690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4241'. [ 597.336739][ T6633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.345870][ T6633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.362740][T21692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.409971][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 597.418201][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 598.362257][T21714] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4249'. [ 598.384919][T21710] syzkaller1: entered promiscuous mode [ 598.390726][T21710] syzkaller1: entered allmulticast mode [ 598.646669][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 598.647446][T21729] syzkaller0: entered promiscuous mode [ 598.662431][T21692] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 598.671253][T21729] syzkaller0: entered allmulticast mode [ 599.257250][T21755] netlink: 'syz.3.4266': attribute type 1 has an invalid length. [ 599.266551][T21755] netlink: 'syz.3.4266': attribute type 3 has an invalid length. [ 599.363047][T21760] netlink: 'syz.3.4270': attribute type 1 has an invalid length. [ 599.442943][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 599.586628][T21760] bond6: (slave bridge3): Enslaving as a backup interface with an up link [ 600.776830][T21818] veth5: entered allmulticast mode [ 601.091984][T21839] tipc: Started in network mode [ 601.100169][T21839] tipc: Node identity 664948c09834, cluster identity 4711 [ 601.112616][T21839] tipc: Enabled bearer , priority 0 [ 601.129422][T21839] tipc: Resetting bearer [ 601.204286][ T1638] block nbd3: Possible stuck request ffff888026d35080: control (read@0,1024B). Runtime 60 seconds [ 601.215119][ T1638] block nbd3: Possible stuck request ffff888026d35240: control (read@1024,1024B). Runtime 60 seconds [ 601.227852][ T1638] block nbd3: Possible stuck request ffff888026d35400: control (read@2048,1024B). Runtime 60 seconds [ 601.239114][ T1638] block nbd3: Possible stuck request ffff888026d355c0: control (read@3072,1024B). Runtime 60 seconds [ 601.314814][T21844] netlink: 'syz.4.4285': attribute type 11 has an invalid length. [ 601.535354][T21853] xt_hashlimit: size too large, truncated to 1048576 [ 601.566001][T21856] __nla_validate_parse: 50 callbacks suppressed [ 601.566021][T21856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4289'. [ 601.937187][T21873] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4294'. [ 602.112972][ T9414] tipc: Node number set to 4269623488 [ 602.430104][T21893] IPVS: Error connecting to the multicast addr [ 602.445539][T21893] syzkaller1: entered promiscuous mode [ 602.451061][T21893] syzkaller1: entered allmulticast mode [ 602.481354][T21896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4300'. [ 602.621036][T21904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4301'. [ 602.855677][T21912] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4304'. [ 602.893641][T21917] netlink: 'syz.3.4305': attribute type 13 has an invalid length. [ 602.950674][T21920] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4306'. [ 603.056731][T21924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4307'. [ 603.234201][T21938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4312'. [ 603.255240][T21939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4311'. [ 603.285208][T21939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4311'. [ 603.446918][T21945] can: request_module (can-proto-0) failed. [ 603.465485][T21945] netlink: 'syz.3.4314': attribute type 1 has an invalid length. [ 603.503935][T21945] batman_adv: batadv0: Adding interface: dummy0 [ 603.510224][T21945] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.536658][T21945] batman_adv: batadv0: Interface activated: dummy0 [ 603.552522][T21945] net_ratelimit: 3321 callbacks suppressed [ 603.552537][T21945] batadv0: mtu less than device minimum [ 603.565218][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.576826][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.588640][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.610004][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.621684][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.633335][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.644980][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.656289][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.668037][T21945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.791003][T21956] netlink: 'syz.2.4317': attribute type 1 has an invalid length. [ 604.247489][T21974] macvtap2: entered promiscuous mode [ 604.261647][T21974] macvtap2: entered allmulticast mode [ 604.277540][T21974] veth1_vlan: entered allmulticast mode [ 604.326754][T21977] macvtap3: entered promiscuous mode [ 604.332106][T21977] macvtap3: entered allmulticast mode [ 604.359006][T21981] netlink: 'syz.2.4325': attribute type 89 has an invalid length. [ 604.376750][T21981] netlink: 'syz.2.4325': attribute type 266 has an invalid length. [ 604.671349][T21993] syzkaller0: entered promiscuous mode [ 604.683132][T21993] syzkaller0: entered allmulticast mode [ 605.919758][T22039] netlink: 'syz.2.4343': attribute type 10 has an invalid length. [ 606.752102][T22083] __nla_validate_parse: 7 callbacks suppressed [ 606.752123][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'. [ 607.121177][T22098] Dropped outbound packet type=8864 [ 607.173049][T22101] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 607.173924][T22103] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 607.263447][T22105] bridge4: entered promiscuous mode [ 607.293644][T22105] bridge4: entered allmulticast mode [ 607.320967][T22105] team0: Port device bridge4 added [ 607.361202][T22113] sctp: [Deprecated]: syz.4.4363 (pid 22113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.361202][T22113] Use struct sctp_sack_info instead [ 607.489422][T22117] netlink: 'syz.1.4364': attribute type 1 has an invalid length. [ 607.510468][T22117] netlink: 'syz.1.4364': attribute type 2 has an invalid length. [ 607.658501][T22125] dummy0: entered promiscuous mode [ 607.677114][T22125] dummy0: left promiscuous mode [ 607.844686][T22139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4368'. [ 607.918429][T22143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4370'. [ 607.979992][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 608.057133][T22152] netlink: 'syz.1.4372': attribute type 32 has an invalid length. [ 608.242125][T22160] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4374'. [ 608.424432][T22168] syzkaller0: entered promiscuous mode [ 608.438945][T22168] syzkaller0: entered allmulticast mode [ 608.745312][T22186] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4382'. [ 608.771248][T22186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4382'. [ 609.118315][T22203] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4387'. [ 609.206379][T22213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4388'. [ 609.730021][T22231] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.4393'. [ 609.751985][T22226] net_ratelimit: 14 callbacks suppressed [ 609.752003][T22226] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 610.249970][T22249] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 610.287393][T22248] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 610.818409][T22266] netlink: 'syz.0.4399': attribute type 1 has an invalid length. [ 611.998563][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058d45c00: rx timeout, send abort [ 612.377436][T22269] ip6erspan0: entered allmulticast mode [ 612.555013][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058d45c00: abort rx timeout. Force session deactivation [ 612.730038][T22285] sctp: [Deprecated]: syz.4.4404 (pid 22285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.730038][T22285] Use struct sctp_sack_info instead [ 612.776460][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.783793][ C1] bridge0: topology change detected, propagating [ 612.790631][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.797866][ C1] bridge0: topology change detected, propagating [ 612.866119][T22300] __nla_validate_parse: 4 callbacks suppressed [ 612.866137][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4406'. [ 613.048666][T22306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 613.236933][T22311] can: request_module (can-proto-0) failed. [ 613.475189][T22326] netlink: 840 bytes leftover after parsing attributes in process `syz.1.4410'. [ 613.532567][T22306] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 613.730852][T22334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4412'. [ 613.803735][T22338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4413'. [ 614.037792][T22343] smc: net device hsr0 applied user defined pnetid SYZ2 [ 614.063554][T22346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.163248][T22352] syzkaller1: entered promiscuous mode [ 614.168791][T22352] syzkaller1: entered allmulticast mode [ 614.375853][T22365] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4420'. [ 614.397979][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4421'. [ 614.607578][T22369] netlink: zone id is out of range [ 614.612752][T22369] netlink: zone id is out of range [ 614.618080][T22369] netlink: zone id is out of range [ 614.623583][T22369] netlink: zone id is out of range [ 614.628723][T22369] netlink: zone id is out of range [ 614.633859][T22369] netlink: zone id is out of range [ 614.638997][T22369] netlink: zone id is out of range [ 614.901176][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4428'. [ 615.079079][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'. [ 615.088286][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'. [ 615.244609][T22413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4434'. [ 616.823411][ T5290] veth0_vlan: left promiscuous mode [ 616.834069][ T5290] veth0_vlan: entered promiscuous mode [ 616.861199][T22477] pimreg: entered allmulticast mode [ 617.203847][ T1638] block nbd4: Possible stuck request ffff888026dce000: control (read@0,1024B). Runtime 120 seconds [ 617.215024][ T1638] block nbd4: Possible stuck request ffff888026dce1c0: control (read@1024,1024B). Runtime 120 seconds [ 617.226490][ T1638] block nbd4: Possible stuck request ffff888026dce380: control (read@2048,1024B). Runtime 120 seconds [ 617.237855][ T1638] block nbd4: Possible stuck request ffff888026dce540: control (read@3072,1024B). Runtime 120 seconds [ 618.300159][T22512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.319250][T22529] __nla_validate_parse: 4 callbacks suppressed [ 618.319270][T22529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 618.509414][T22554] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4469'. [ 618.551523][T22559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4470'. [ 618.570642][T22559] erspan0: entered promiscuous mode [ 618.578180][T22559] erspan0: left promiscuous mode [ 618.627545][T22552] ip6gretap0: entered promiscuous mode [ 618.687294][T22565] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4472'. [ 618.791012][T22567] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4473'. [ 618.906726][T22571] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4475'. [ 619.056148][T22578] tipc: Enabling of bearer rejected, already enabled [ 619.160005][T22581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4479'. [ 619.169949][T22581] netlink: 'syz.3.4479': attribute type 58 has an invalid length. [ 619.180506][T22582] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 619.281211][T22584] netlink: 'syz.2.4480': attribute type 6 has an invalid length. [ 619.524973][ T6649] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 619.778977][T22600] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4483'. [ 620.185921][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4491'. [ 620.251633][T22620] syzkaller0: left promiscuous mode [ 620.257154][T22620] syzkaller0: left allmulticast mode [ 620.263225][T22627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.270666][T22627] net_ratelimit: 408 callbacks suppressed [ 620.270683][T22627] batadv0: mtu less than device minimum [ 620.285230][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.297197][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.320541][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.332100][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.343779][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.355347][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.366909][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.378587][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.390279][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 620.462168][T22621] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4488'. [ 620.512369][T22627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.530234][T22627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.572057][T22627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.586406][T22627] batman_adv: batadv0: Interface deactivated: dummy0 [ 620.593563][T22627] batman_adv: batadv0: Removing interface: dummy0 [ 621.757747][T22697] team0: No ports can be present during mode change [ 621.766888][T22699] netlink: 'syz.2.4511': attribute type 4 has an invalid length. [ 621.820381][T22701] netlink: 'syz.2.4511': attribute type 4 has an invalid length. [ 622.331790][T22725] bridge0: port 2(syz_tun) entered blocking state [ 622.338386][T22725] bridge0: port 2(syz_tun) entered disabled state [ 622.345019][T22725] syz_tun: entered allmulticast mode [ 622.355439][T22725] syz_tun: entered promiscuous mode [ 622.361238][T22725] bridge0: port 2(syz_tun) entered blocking state [ 622.367780][T22725] bridge0: port 2(syz_tun) entered forwarding state [ 622.556703][T22728] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.566745][T22728] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.644962][T22741] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 622.820375][T22744] xt_hl: Unknown Hop Limit match mode: 206 [ 622.857186][T22750] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 622.951163][T22747] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 623.171284][T22728] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.184101][T22728] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.294855][T22774] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 623.791466][T22728] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.801271][T22728] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.014408][T22793] __nla_validate_parse: 10 callbacks suppressed [ 624.014427][T22793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4538'. [ 624.074221][T22793] bond5: option lp_interval: invalid value (18446744073709551607) [ 624.082085][T22793] bond5: option lp_interval: allowed values 1 - 2147483647 [ 624.106145][T22793] bond5 (unregistering): Released all slaves [ 624.194060][T22728] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.215712][T22728] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.439229][T12710] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.456648][T12710] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.486268][T12710] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.494842][T12710] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.546306][ T6630] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.607504][ T6630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.664175][ T6630] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.686995][ T6630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.709577][T22729] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.724781][T22729] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.740516][ T6630] ================================================================== [ 624.748691][ T6630] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1590 [ 624.756372][ T6630] Read of size 8 at addr ffff8880655a98a8 by task kworker/u8:12/6630 [ 624.764501][ T6630] [ 624.766874][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 624.766905][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.766918][ T6630] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 624.767022][ T6630] Call Trace: [ 624.767029][ T6630] [ 624.767037][ T6630] dump_stack_lvl+0xe8/0x150 [ 624.767059][ T6630] print_address_description+0x55/0x1e0 [ 624.767084][ T6630] ? __mutex_lock+0x154/0x1590 [ 624.767104][ T6630] print_report+0x58/0x70 [ 624.767120][ T6630] kasan_report+0x117/0x150 [ 624.767149][ T6630] ? __mutex_lock+0x154/0x1590 [ 624.767173][ T6630] __mutex_lock+0x154/0x1590 [ 624.767195][ T6630] ? __mutex_lock+0x5c5/0x1590 [ 624.767217][ T6630] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 624.767246][ T6630] ? __pfx___mutex_lock+0x10/0x10 [ 624.767267][ T6630] ? do_raw_spin_lock+0x12b/0x2f0 [ 624.767293][ T6630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 624.767319][ T6630] ? process_scheduled_works+0xa20/0x14e0 [ 624.767344][ T6630] ? process_scheduled_works+0xa20/0x14e0 [ 624.767360][ T6630] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 624.767390][ T6630] ? rcu_is_watching+0x15/0xb0 [ 624.767412][ T6630] ? process_scheduled_works+0xa20/0x14e0 [ 624.767428][ T6630] process_scheduled_works+0xa8e/0x14e0 [ 624.767459][ T6630] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.767479][ T6630] ? assign_work+0x3cf/0x5d0 [ 624.767496][ T6630] worker_thread+0xa47/0xfb0 [ 624.767526][ T6630] kthread+0x389/0x470 [ 624.767548][ T6630] ? __pfx_worker_thread+0x10/0x10 [ 624.767564][ T6630] ? __pfx_kthread+0x10/0x10 [ 624.767586][ T6630] ret_from_fork+0x514/0xb70 [ 624.767619][ T6630] ? __pfx_ret_from_fork+0x10/0x10 [ 624.767636][ T6630] ? __switch_to+0xc89/0x1420 [ 624.767662][ T6630] ? __pfx_kthread+0x10/0x10 [ 624.767695][ T6630] ret_from_fork_asm+0x1a/0x30 [ 624.767721][ T6630] [ 624.767727][ T6630] [ 624.951791][ T6630] Allocated by task 22728: [ 624.956297][ T6630] kasan_save_track+0x3e/0x80 [ 624.961017][ T6630] __kasan_kmalloc+0x93/0xb0 [ 624.965627][ T6630] __kmalloc_noprof+0x358/0x750 [ 624.970494][ T6630] udp_tunnel_nic_netdevice_event+0x4e9/0x1850 [ 624.976668][ T6630] notifier_call_chain+0x1a5/0x3d0 [ 624.981790][ T6630] register_netdevice+0x18db/0x1f00 [ 624.987060][ T6630] nsim_create+0xbd7/0x1140 [ 624.991663][ T6630] __nsim_dev_port_add+0x7f8/0xcd0 [ 624.996791][ T6630] nsim_dev_port_add_all+0x37/0xf0 [ 625.001922][ T6630] nsim_dev_reload_up+0x4dd/0x880 [ 625.006957][ T6630] devlink_reload+0x4b2/0x890 [ 625.011716][ T6630] devlink_nl_reload_doit+0xa9c/0xc80 [ 625.017107][ T6630] genl_family_rcv_msg_doit+0x233/0x340 [ 625.022668][ T6630] genl_rcv_msg+0x614/0x7a0 [ 625.027205][ T6630] netlink_rcv_skb+0x226/0x4a0 [ 625.031982][ T6630] genl_rcv+0x28/0x40 [ 625.035977][ T6630] netlink_unicast+0x7bb/0x940 [ 625.040782][ T6630] netlink_sendmsg+0x813/0xb40 [ 625.045558][ T6630] ____sys_sendmsg+0x9b9/0xa20 [ 625.050333][ T6630] ___sys_sendmsg+0x2a5/0x360 [ 625.055026][ T6630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 625.059988][ T6630] do_syscall_64+0x174/0x580 [ 625.064600][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.070535][ T6630] [ 625.072882][ T6630] Freed by task 22729: [ 625.076973][ T6630] kasan_save_track+0x3e/0x80 [ 625.081677][ T6630] kasan_save_free_info+0x40/0x50 [ 625.086724][ T6630] __kasan_slab_free+0x5c/0x80 [ 625.091521][ T6630] kfree+0x1c5/0x640 [ 625.095432][ T6630] udp_tunnel_nic_netdevice_event+0x1236/0x1850 [ 625.101700][ T6630] notifier_call_chain+0x1a5/0x3d0 [ 625.106823][ T6630] unregister_netdevice_many_notify+0x17de/0x2150 [ 625.113267][ T6630] unregister_netdevice_queue+0x2f5/0x340 [ 625.119008][ T6630] nsim_destroy+0x26d/0x800 [ 625.123554][ T6630] __nsim_dev_port_del+0x14e/0x200 [ 625.128677][ T6630] nsim_dev_reload_destroy+0x288/0x490 [ 625.134190][ T6630] nsim_dev_reload_down+0x8a/0xc0 [ 625.139240][ T6630] devlink_reload+0x1c5/0x890 [ 625.143937][ T6630] devlink_nl_reload_doit+0xa9c/0xc80 [ 625.149331][ T6630] genl_family_rcv_msg_doit+0x233/0x340 [ 625.154899][ T6630] genl_rcv_msg+0x614/0x7a0 [ 625.159428][ T6630] netlink_rcv_skb+0x226/0x4a0 [ 625.164204][ T6630] genl_rcv+0x28/0x40 [ 625.168201][ T6630] netlink_unicast+0x7bb/0x940 [ 625.172990][ T6630] netlink_sendmsg+0x813/0xb40 [ 625.177767][ T6630] ____sys_sendmsg+0x9b9/0xa20 [ 625.182541][ T6630] ___sys_sendmsg+0x2a5/0x360 [ 625.187236][ T6630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 625.192222][ T6630] do_syscall_64+0x174/0x580 [ 625.196840][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.202760][ T6630] [ 625.205115][ T6630] Last potentially related work creation: [ 625.210846][ T6630] kasan_save_stack+0x3e/0x60 [ 625.215566][ T6630] kasan_record_aux_stack+0xbd/0xd0 [ 625.220789][ T6630] insert_work+0x3d/0x330 [ 625.225171][ T6630] __queue_work+0xb7c/0xff0 [ 625.229696][ T6630] queue_work_on+0x106/0x1d0 [ 625.234302][ T6630] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 625.239960][ T6630] udp_tunnel_push_rx_port+0x169/0x1f0 [ 625.245481][ T6630] geneve_offload_rx_ports+0xc7/0x150 [ 625.250958][ T6630] geneve_netdevice_event+0x6a/0x80 [ 625.256170][ T6630] notifier_call_chain+0x1a5/0x3d0 [ 625.261325][ T6630] call_netdevice_notifiers+0x90/0xd0 [ 625.266798][ T6630] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 625.272980][ T6630] notifier_call_chain+0x1a5/0x3d0 [ 625.278115][ T6630] register_netdevice+0x18db/0x1f00 [ 625.283331][ T6630] nsim_create+0xbd7/0x1140 [ 625.287863][ T6630] __nsim_dev_port_add+0x7f8/0xcd0 [ 625.292992][ T6630] nsim_dev_port_add_all+0x37/0xf0 [ 625.298132][ T6630] nsim_dev_reload_up+0x4dd/0x880 [ 625.303173][ T6630] devlink_reload+0x4b2/0x890 [ 625.307879][ T6630] devlink_nl_reload_doit+0xa9c/0xc80 [ 625.313279][ T6630] genl_family_rcv_msg_doit+0x233/0x340 [ 625.318861][ T6630] genl_rcv_msg+0x614/0x7a0 [ 625.323400][ T6630] netlink_rcv_skb+0x226/0x4a0 [ 625.328194][ T6630] genl_rcv+0x28/0x40 [ 625.332212][ T6630] netlink_unicast+0x7bb/0x940 [ 625.337028][ T6630] netlink_sendmsg+0x813/0xb40 [ 625.341815][ T6630] ____sys_sendmsg+0x9b9/0xa20 [ 625.346616][ T6630] ___sys_sendmsg+0x2a5/0x360 [ 625.351329][ T6630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 625.356284][ T6630] do_syscall_64+0x174/0x580 [ 625.360885][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.366794][ T6630] [ 625.369129][ T6630] Second to last potentially related work creation: [ 625.375716][ T6630] kasan_save_stack+0x3e/0x60 [ 625.380407][ T6630] kasan_record_aux_stack+0xbd/0xd0 [ 625.385619][ T6630] insert_work+0x3d/0x330 [ 625.389970][ T6630] __queue_work+0xcb6/0xff0 [ 625.394499][ T6630] queue_work_on+0x106/0x1d0 [ 625.399098][ T6630] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 625.404754][ T6630] udp_tunnel_push_rx_port+0x169/0x1f0 [ 625.410233][ T6630] vxlan_offload_rx_ports+0x129/0x1f0 [ 625.415694][ T6630] vxlan_netdevice_event+0x111/0x490 [ 625.421018][ T6630] notifier_call_chain+0x1a5/0x3d0 [ 625.426137][ T6630] call_netdevice_notifiers+0x90/0xd0 [ 625.431528][ T6630] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 625.437699][ T6630] notifier_call_chain+0x1a5/0x3d0 [ 625.442831][ T6630] register_netdevice+0x18db/0x1f00 [ 625.448074][ T6630] nsim_create+0xbd7/0x1140 [ 625.452594][ T6630] __nsim_dev_port_add+0x7f8/0xcd0 [ 625.457718][ T6630] nsim_dev_port_add_all+0x37/0xf0 [ 625.462872][ T6630] nsim_dev_reload_up+0x4dd/0x880 [ 625.467931][ T6630] devlink_reload+0x4b2/0x890 [ 625.472636][ T6630] devlink_nl_reload_doit+0xa9c/0xc80 [ 625.478034][ T6630] genl_family_rcv_msg_doit+0x233/0x340 [ 625.483606][ T6630] genl_rcv_msg+0x614/0x7a0 [ 625.488139][ T6630] netlink_rcv_skb+0x226/0x4a0 [ 625.492918][ T6630] genl_rcv+0x28/0x40 [ 625.496939][ T6630] netlink_unicast+0x7bb/0x940 [ 625.501721][ T6630] netlink_sendmsg+0x813/0xb40 [ 625.506502][ T6630] ____sys_sendmsg+0x9b9/0xa20 [ 625.511274][ T6630] ___sys_sendmsg+0x2a5/0x360 [ 625.515963][ T6630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 625.520911][ T6630] do_syscall_64+0x174/0x580 [ 625.525513][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.531426][ T6630] [ 625.533757][ T6630] The buggy address belongs to the object at ffff8880655a9800 [ 625.533757][ T6630] which belongs to the cache kmalloc-256 of size 256 [ 625.547919][ T6630] The buggy address is located 168 bytes inside of [ 625.547919][ T6630] freed 256-byte region [ffff8880655a9800, ffff8880655a9900) [ 625.561727][ T6630] [ 625.564070][ T6630] The buggy address belongs to the physical page: [ 625.570502][ T6630] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x655a8 [ 625.579275][ T6630] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 625.587787][ T6630] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 625.595354][ T6630] page_type: f5(slab) [ 625.599394][ T6630] raw: 00fff00000000040 ffff88813fe17b40 dead000000000122 0000000000000000 [ 625.608033][ T6630] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 625.616638][ T6630] head: 00fff00000000040 ffff88813fe17b40 dead000000000122 0000000000000000 [ 625.625329][ T6630] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 625.634009][ T6630] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 625.642692][ T6630] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 625.651373][ T6630] page dumped because: kasan: bad access detected [ 625.657802][ T6630] page_owner tracks the page as allocated [ 625.663532][ T6630] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, tgid 9 (kworker/0:0), ts 622963495036, free_ts 622945430939 [ 625.684471][ T6630] post_alloc_hook+0x22d/0x280 [ 625.689259][ T6630] get_page_from_freelist+0x24ae/0x2530 [ 625.694847][ T6630] __alloc_frozen_pages_noprof+0x18d/0x380 [ 625.700678][ T6630] allocate_slab+0x77/0x660 [ 625.705185][ T6630] refill_objects+0x336/0x3d0 [ 625.709889][ T6630] __pcs_replace_empty_main+0x320/0x720 [ 625.715473][ T6630] __kmalloc_noprof+0x464/0x750 [ 625.720333][ T6630] ovs_flow_masks_rebalance+0xf4/0xc70 [ 625.725906][ T6630] ovs_dp_masks_rebalance+0x56/0xe0 [ 625.731167][ T6630] process_scheduled_works+0xa8e/0x14e0 [ 625.736731][ T6630] worker_thread+0xa47/0xfb0 [ 625.741350][ T6630] kthread+0x389/0x470 [ 625.745465][ T6630] ret_from_fork+0x514/0xb70 [ 625.750108][ T6630] ret_from_fork_asm+0x1a/0x30 [ 625.754918][ T6630] page last free pid 15 tgid 15 stack trace: [ 625.760931][ T6630] __free_frozen_pages+0xc0d/0xd20 [ 625.766093][ T6630] rcu_core+0x78b/0x10a0 [ 625.770350][ T6630] handle_softirqs+0x225/0x840 [ 625.775124][ T6630] run_ksoftirqd+0x36/0x60 [ 625.779550][ T6630] smpboot_thread_fn+0x57c/0xa80 [ 625.784513][ T6630] kthread+0x389/0x470 [ 625.788599][ T6630] ret_from_fork+0x514/0xb70 [ 625.793203][ T6630] ret_from_fork_asm+0x1a/0x30 [ 625.797979][ T6630] [ 625.800316][ T6630] Memory state around the buggy address: [ 625.805952][ T6630] ffff8880655a9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 625.814024][ T6630] ffff8880655a9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 625.822159][ T6630] >ffff8880655a9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 625.830240][ T6630] ^ [ 625.835619][ T6630] ffff8880655a9900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 625.843693][ T6630] ffff8880655a9980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 625.851761][ T6630] ================================================================== [ 625.888760][ T4960] block nbd2: Possible stuck request ffff888026cf0000: control (read@0,4096B). Runtime 240 seconds [ 625.899599][ T6630] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 625.906839][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 625.916408][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.926477][ T6630] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 625.933788][ T6630] Call Trace: [ 625.937077][ T6630] [ 625.940018][ T6630] vpanic+0x56c/0xa60 [ 625.944021][ T6630] ? __pfx_vpanic+0x10/0x10 [ 625.948546][ T6630] panic+0xc5/0xd0 [ 625.952281][ T6630] ? __pfx_panic+0x10/0x10 [ 625.956714][ T6630] ? preempt_schedule_thunk+0x16/0x30 [ 625.962104][ T6630] ? __mutex_lock+0x154/0x1590 [ 625.966978][ T6630] ? preempt_schedule_thunk+0x16/0x30 [ 625.972383][ T6630] ? __mutex_lock+0x154/0x1590 [ 625.977159][ T6630] check_panic_on_warn+0x89/0xb0 [ 625.982121][ T6630] ? __mutex_lock+0x154/0x1590 [ 625.986902][ T6630] end_report+0x73/0x170 [ 625.991168][ T6630] ? __mutex_lock+0x154/0x1590 [ 625.995949][ T6630] kasan_report+0x128/0x150 [ 626.000476][ T6630] ? __mutex_lock+0x154/0x1590 [ 626.005269][ T6630] __mutex_lock+0x154/0x1590 [ 626.009881][ T6630] ? __mutex_lock+0x5c5/0x1590 [ 626.014668][ T6630] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 626.020930][ T6630] ? __pfx___mutex_lock+0x10/0x10 [ 626.025994][ T6630] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.031042][ T6630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 626.036452][ T6630] ? process_scheduled_works+0xa20/0x14e0 [ 626.042200][ T6630] ? process_scheduled_works+0xa20/0x14e0 [ 626.047941][ T6630] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 626.054049][ T6630] ? rcu_is_watching+0x15/0xb0 [ 626.058834][ T6630] ? process_scheduled_works+0xa20/0x14e0 [ 626.064570][ T6630] process_scheduled_works+0xa8e/0x14e0 [ 626.070136][ T6630] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.076141][ T6630] ? assign_work+0x3cf/0x5d0 [ 626.080740][ T6630] worker_thread+0xa47/0xfb0 [ 626.085360][ T6630] kthread+0x389/0x470 [ 626.089444][ T6630] ? __pfx_worker_thread+0x10/0x10 [ 626.094568][ T6630] ? __pfx_kthread+0x10/0x10 [ 626.099175][ T6630] ret_from_fork+0x514/0xb70 [ 626.103781][ T6630] ? __pfx_ret_from_fork+0x10/0x10 [ 626.108908][ T6630] ? __switch_to+0xc89/0x1420 [ 626.113611][ T6630] ? __pfx_kthread+0x10/0x10 [ 626.118220][ T6630] ret_from_fork_asm+0x1a/0x30 [ 626.123006][ T6630] [ 626.126235][ T6630] Kernel Offset: disabled [ 626.130566][ T6630] Rebooting in 86400 seconds..