last executing test programs: 2m10.03172943s ago: executing program 0 (id=531): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x3, 0x3, 0x301}, 0x14}}, 0x0) epoll_create1(0x0) r5 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x1, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 2m9.820530411s ago: executing program 0 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@private, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x5, 0x10, 0x3}) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_newneigh={0x34, 0x1c, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x20, 0x30, 0x8}, [@NDA_VNI={0x8, 0x7, 0x3}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}, @NDA_NH_ID={0x8, 0xd, 0x19e}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8200244}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@getchain={0x34, 0x66, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0xa, 0xfff2}, {0x10, 0xffe0}}, [{0x8, 0xb, 0x80}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x8041) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000580)=0x2, 0x4) getsockname$packet(r4, &(0x7f00000005c0), &(0x7f0000000600)=0x14) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x150, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7fff}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xc0, 0xa9, @random="58ea22d6c1086fa8b6a4121b66d8ed1a55665782acd3e0272cd00b1f3fb87d263c0853607a2d04dedd7d8d8409b7a6d9e619698411f3ff9a840c2db7216231b497bcc75ff7fea5e24a99d8eb46fdda15a434a6209a1616f2f73b17a3f453bac64b0b7773e1ca9ce21777c0cc42298a58d20644282c1914da2bcfa032e4138a514e0ffd435d9f2dafce04f9f6f34d584c7b14f0e329d6f05a260e658110dfc549c7745c48b6d77b89cfbaeba951240a1c53ecfc49cc1ffd2d424d2b5e"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x19, 0xa9, @random="47a87ec5660500539906c1fc3d07a560dfe1e3021f"}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000880), 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x104, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x26}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b21b534451"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "313a37f3d5"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4d16a37bc6"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "172d3a9aa3"}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r4) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) close(r4) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000001140)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f0000000cc0)={0x440, 0x3f3, 0x400, 0x70bd26, 0x25dfdbfb, {0x4, 0x0, 0x1d, [0x4, 0x9, 0x800, 0x8, 0x26e9, 0x3, 0x2a, 0x9, 0x9, 0xfffffffb, 0x22f8, 0x8, 0x81, 0x7fffffff, 0x0, 0x40, 0xd45, 0x4, 0xc776, 0x8, 0x9c7e, 0x7, 0x9, 0x0, 0x400, 0x6, 0x3, 0x4, 0x6, 0x1ff, 0x8, 0xffff, 0x200, 0x2, 0x5, 0x0, 0x60000, 0x100, 0x1, 0x5, 0x7, 0x5, 0x6, 0x9, 0x5, 0xffffffff, 0x2, 0x4, 0xdd, 0x3f4c, 0x1ff, 0x7, 0x8, 0x4a8, 0x1, 0x5e4e, 0x60000000, 0x49, 0x6d9c48f5, 0x4, 0x6e, 0xffffff2e, 0x6, 0x6f], [0x1, 0x101, 0xb, 0x9, 0xf, 0x7, 0x7f80, 0x24, 0x3, 0x1, 0x2, 0x7f, 0x6, 0x3, 0x7fff, 0x7fff, 0x80000000, 0x2, 0x5de, 0x5, 0x7fe938de, 0x1, 0x8, 0x1, 0x9, 0x81, 0x7ff, 0x1d9d, 0xa4, 0x7, 0x0, 0x0, 0xd600, 0xfffffffe, 0x10000, 0x9, 0x0, 0xf9, 0x6, 0x0, 0x7, 0x0, 0x0, 0xd7, 0x0, 0x8001, 0x7ff, 0xfffffc01, 0x8, 0xffffffff, 0x1, 0x80000000, 0x7f, 0x8, 0xfe, 0xf, 0x5d97, 0x2, 0x62a3, 0xd, 0x8, 0x6044, 0x2, 0x400], [0x0, 0x5, 0x9, 0x0, 0x3, 0x2, 0x3, 0x5, 0x3, 0x80000001, 0x9, 0x3, 0x7f, 0x10000, 0x4, 0x7, 0x5, 0x3, 0x2, 0xa, 0x3ff, 0xffffff81, 0x7000, 0x2, 0x7, 0x2, 0xfff, 0x4, 0x70, 0x94, 0x4, 0x3, 0x80000000, 0x3, 0x1, 0x9, 0x6, 0xe, 0x5, 0x3, 0xffffa0e7, 0x4, 0x9, 0xffff, 0x0, 0x9, 0x5, 0x2, 0x5, 0x0, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0xaf, 0x6, 0x81, 0x7fffffff, 0x3, 0x9, 0x2, 0x769, 0xa1de], [0xfffffffe, 0x8, 0x0, 0x7c5, 0xfffffff9, 0x70, 0x3ff, 0x40, 0xe, 0xffff, 0x100, 0x8001, 0xf69, 0xe1ef, 0x6, 0x40, 0x0, 0x88, 0x0, 0xfffffffd, 0x8, 0x9, 0xffffffff, 0x80000000, 0x10001, 0x3, 0x9, 0xffff, 0xf9a5, 0x8001, 0xf78e, 0x3, 0x2, 0x2, 0x5, 0x590fe365, 0x0, 0x80, 0x5, 0xfffffff9, 0x8, 0x0, 0x5, 0x6, 0xc9, 0x1, 0x8, 0x7, 0x9, 0x5, 0xfffffffb, 0x1, 0xe4c9, 0x3, 0x5, 0x1, 0x1, 0x1, 0x800, 0xccc5, 0x8, 0x5, 0x1, 0x6], 0x1e, ['0000:00:10.0\x00', 'pci\x00', '\\\x00', '\x00', 'firstname\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x40000000}, 0x28000005) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000001180)={0x1, 0x8000000000000001, 0x4}) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x68, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7e56}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x7}}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x40080) getsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000001300), &(0x7f0000001340)=0x4) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc085}, 0x800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001480)={0x0, 0x6}, &(0x7f00000014c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001500)={r8, 0x6}, &(0x7f0000001540)=0x8) socket$isdn(0x22, 0x3, 0x4) connect$inet6(r4, &(0x7f0000001580)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7f}, 0x1c) 2m8.977328929s ago: executing program 0 (id=540): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="00200000ffffffffffffaaaaaaaaaabb08004500003e0000000000299078ac1e0001e000000103000000002a907802002a0000000000ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bdac95e1e51abdf1a85f8456915c6b01a5224d0f11a13f23e3b7d57402a6aa02c99009be37a6c7db020665c30afcec815c79d74950624ef55ad5e9aa27456be87fb089f3c6b789467fa2cc1028538d27fc35076b9679259c0ed23d07505105c3cc593a03464f80675b015f5156db5349ffabfd8e3140c5085"], 0x50) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="01000000000007ca1e638c5773e608000300", @ANYRES32=r1], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000100029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c0002800500090089000000e680e87dbcfb56"], 0xffffffffffffff49}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES16=r10, @ANYRES64=r7], 0x14}, 0x1, 0x0, 0x0, 0x24000081}, 0x40180e5) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012cbd7000fe9bdf251000000008af3b000500000008003200ffffff7f"], 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x90) bind$xdp(r6, &(0x7f0000000300)={0x2c, 0x2, r9}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r0, 0x2, 0x8001, &(0x7f00000000c0)=""/141, &(0x7f0000000180)=0x8d) 2m8.951357723s ago: executing program 0 (id=548): r0 = socket$nl_crypto(0x10, 0x3, 0x15) read(r0, &(0x7f0000000000)=""/208, 0xd0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000100)=""/179, 0xb3, 0x5, 0x4}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000200)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x191800, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000280)=""/77, 0x4d}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0xfffffffa}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x6}, &(0x7f0000000400)=0x8) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000440)={0xf45, 0x7f, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000017300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000017340)) ioctl$FIBMAP(r2, 0x1, &(0x7f0000017380)=0x9) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000017400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000174c0)={&(0x7f00000173c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000017480)={&(0x7f0000017440)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000017500)) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000017540)='ns/mnt\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000017580)={0x1, 0x200, 0x3, 0xf23, r4}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000175c0)={{r1}, "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"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000185c0)={{0x0, 0x4, 0x8, 0x7fffffffffffffff, 0x10, 0x1a5, 0x10001, 0xffffffff, 0x7, 0x8, 0xff, 0x5, 0x5, 0x6, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000195c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "a830f70bc91047"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000001a5c0)={{0x0, 0x897b, 0x1, 0x1, 0x0, 0x9, 0x3, 0x2480, 0x7, 0x1, 0x2b0, 0x10001, 0x4, 0x9, 0x18c98925}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f000001b5c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "c0b6778adcc96a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f000001c5c0)={{0x0, 0x4, 0x0, 0x10, 0x0, 0xe, 0x1, 0x3ff, 0xfffffffc, 0x4, 0x0, 0x4, 0x7000000000000, 0x8, 0x10}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000001c680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000001c880)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f000001ca80)={0x0, 0x0, "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", "b05628051ae7ccdc7e81f67e4c2f8d50e405a5b28222de44af4fa8f0e247d43289bd0d82db864ad2b9a19e193dd36f32a92572c6bd1bf816a1b93686e00eb8049bbb92be9f325d98c9aecc117f681cf6fc29c68faeb6f36593f729af560f8ca5834d3c413a8c3582ecc0512d67e65fe9a148f6ae1ab8cee16c1f124b1e8499b250895aeaa0849ee0b592424eeab6b7621f33c4f67534ffb4e765fe4cd21d05cae8367c50de3b26f04eca399ebd81371868aab438046146025610f65d52f6a581492ad34457f96a3dd9119ac0d90b6ef82aa4d1593a080d6cc0f0f1815e584bff7e3446c3f157884ccf0e63ee19297a0ab7591d74ce980bd13c436796222ee90086eb7e282c4ca13680afd73d80a40d3a76ba67fbca6f5a6eeec8f55f43735c37e822ba9ffb70c9db4bbdd61d819c2066d293aeca54920217b09a0107e23757d36fb7e3a08b84416b5d6e5c858e0903b6bfb58bdf5b85fc02390fc78a8301adfecbf7f3a483f1a26b91a62f95615d7435cc611903e2a6bf4f874b526b59e59078ace36da92ef5ecbec08e444d3cc810e5a1a19de6017d595510f3fdc588757daa47e988a4b64c5022bbe074c8c72b4a46fd8dbda9c053192f9ff0b620309387face30daea133ac589a7006ec47e7a6965712211972c0df235e300dbe79b7269294f711be8eb466c3fa5151eba67591dcdc69f9a8b35d014bdb37476b45c354f0bda0b2d1657b79c0d60562d631c605088cddca941e15a73ff45948645bb41bd626d456fd294f0f43221627c5af96f42a75ecde5066839ed8bbba5e4792042f97c866e05e3550ee345e6ce81f9d10fcb1b140113fae18f644bf6aee54f993f28b30de7baa5c627627a83308d13b91151910470a975c7623651ba3a9712dd358ffef3d9e4f4892d7878f12664903fc817399e1fa92bc5260c8e77f614245cf5ccaca034603c185f162203dc057c2ea46c7ad30d79375baab1e31ae58fcad853d1cd933acef736f5d605f0f01d1d07907d2843c4dff4a2e21b32a8ba4b8c49172dbaefcb0db11ccaeda8c8264fc59e53d4885c1468911ceafb53a5a362f1d76d24060342f079c75cc16388ec123335944eb7b58e4332779db9f31d57b37f59c1e29ab2a121013b4c974d11e0555f51293ae7073f9eaadaa15db42313e3dbb2456fc0dba590d75df185bc9a1f93fda29b4db0d5a4e3d37c61df20894d65a428bb0f5106932a404782c6e4fbceec66f4a67a9e6e74e3851521955043798fd08615483ab3bf10a5e5903d810f915718aefd9c6292a1a438878b442912f22e47c7979c87f181bf35af069169fcd37ca22d5fac8b622c13bbc115624f32ca66887edba33771c6b2fd29fe15428a497bf0284d889d2fad3db19df5455d51435c77039708290bb06e0dea8fa1dcc0ed0888555afdcf5c8cb20f2f751ffd9cc5ebd83b1cfe1c72e5b81edd6c0cb633196c291c21b32194c0ecb0cce08c60533f0d42c7bd8f1ce78f78576c3c2761f38b1b32fac32753bcc3384d0e2d817b4eecc8f0d2ba538959232789f046e102ca42cd4b34cf1236607530c6a772af393010d4f033f1a627bc03ba3a8b196e4076b6b181057843dd2db0d50b9aba820b798213a7a8b108e7e3de4677760954b7b2c0d38940c9bca70799c578ded21cf927f30a785ba77923d19785f9476bd12af894ecff5692b2b188047ca0c514528817e22315e25513b9731dd2d9e3248fe57fbfde2099d06ca8a81b3c795f5f50d07d215b5826b74b7b7714a1c7de166e3684b6d39c401ad1a648b5dc3333f71d19d3d511647e21069e03bcc8cb6e459823d9a142197ca796d22aec1d14c98e50279cc3e4447deeef475c62b822a6a3e67c51715c14d244e5d2e1c6841b3a886fd01b3f18644a287e161fc9755518fcd649a19db26644a743b09dc1b54374ec9986a62d33a5b959d6167851eef72269d5372543440a8582a95bb6003631d7440c8c972a360b43e712f67e4fb11057320793eccee164d1e299102782882019d3be77ca969b85ceaf89974c9770226a648fb619baf1ac13a9584fc7b46b015b268b5a785d3914ba65e3b944b245c4238bf94d56034917bb5df4812d56a2e7fb7874d35f0f906535e20a2067b8c0210a9ce16061d53a0a55c319dd1d1b4d2953223f8029b2fd9b34dca2c22808eb8c39c5601aed4f783fc42aad69ca16788ae0d194caee402ac0f51fdf0898dce94712dfd1da7117b40c91068b1ff499135617eb0037c0aee85fabdb6ef1834fd46faadb6430bd24c86dbe48f7daa3d2d9a4ca37f9720f8d75ee8242c3b69656e092b081a3cda0125750c76c7a6ad66501bbd8aec9297633850bc7149e91eb2f58a26effa60018b25c31cf6a3bcfbab79cc03ed8ad5580b4bfb31f246bf3334e0c7966fbd688b998e2d055e1e6ea0d7d5d1895199dc0c7edab259ebad0145381eff61ac96701112ade3e8cfe43116a19bedf7ea59772cf6aabf1c9c444d85f73ce18f04f2f27933298d02ef28a11b92c319ff4269608536b4d95b1cfe6ea75a2159494254d371515b2542ee68e2ac6a5a9b0a08c4d78fd10655b94d7e321869cf05bae70b6148acc60c39162c78723d55649a762af4ffbcc6fdac3dd8102339661f26c852285ed944b287a7d82b7a760820866c8f43705ce89468fc5e6fb976c9d47ea625ad31351a7f2961814eda2b36aa92100a83f918457d43eb6b4d6cd8f87a75ebe2b1b9ad3475850ade780586f4a922bddcfc2403017a7594d815b99300cb4bc14224ff3331a035a62d509b4e892806500827cb5ed3d9b292bf85f3bfb7580816b51c3030bf730a74715871589b3c63b2755fe2b473522259ff5c1611b2a151186388340b1ce7dd463d46c5ae793e8ecaec6fabe2eb86780b889d6a9294f9b0484ddafc24518613e091ead9fe0a470bb1f7fc5944e2a6cba12a0d2dd0b69cc3c99daa47c462821b8895910782983ebd3234315231a3196a69c822f3fe4f660e688c2102435d7c59dddbb9f1e80bfb514ac064c37eb307f051c3fabbf92ecbccdc7e2e1877e0d4d703d2eb0110ff67e187f2d48133e129c127521adca8cfb7d88f3db19564591e8dacad6a970e0e59e935ff6ebc98333f334be9f6bcf2cdff56d900e8ce6089ed6ef5128242d72d5d6ecb58731dc69219c461e186b5f957b430209ce228f0c3d0408a396cec43db74d2f4a94c8f68917bf4446d901b66d2c21c5e1276db18878058c616eaf79fddc68eebfdcb9370064eea23f5608ba6761fae3c2378092a0fe0d4966a397530742e4b5a244a49d6d6ab71b0f1e712f8ed6be3a222191f0738db76bfd240aec9bebe872d30baa0e2738f2e6fd61b8834742743b034ad748bceb608830ae3b5b7084eb877c91167c71cb889483c83041331454da62e41c62e93f5e669347055069438c481b3fe0f2edd9a225535eb54d026aa5eecf93b7157402a3fed9fd458220d5a2e03842d7e6c61f55c55ccc093fd2d35224b6e4e38014acae70b67546cb513445bd62c7145b6f4e2e9bd64cbf90cbb9bf3947899b82845bb7b55b0bbb1fca3f9d44aa485fa7e6e17cbbbc7a635e4be4150c5a662f9b3ee1676c2cc6317101ff57ff95a3689ec930d2530ebc07df85b2987d110fd0ec5204bf5077490bf14de8c7fa653eec6ed03c273941c5de93c987c350066648af949e12ff319733fae25512e68f214cd82695b25660bf852617b1fd6faa574c5bdda50c56bb69bca0172f2e2202fe080500246c1812075765ab0c896f642c545c94d30a92b3316810e5a3cf735a27786a8c56f97006662511b9357f2622bfbb261a0e922b7e64d7ded0ee3ec932e5b7d2470aa83f81083c2a7981bb2ba248660cbd8bbd3380fbea8aff87e7fe2b021cceb093b1cbaf6134d9b70e020da0444f9268bcbf6cca865ece8749d23e66909dd995206d2cd708d5471a47c8901fc49fa439cfbc469165eb4443ea777502462fb2cf3115250b97955d50f66de70d2189703d9f20237b33ea79b45c9e4e0442eb390def4add69e3a9a16c90ead0c888cef9acd544cbcf108a1b4a16b70ee4ce5dd1c653e258d8324ea127041bf30efdd3d5512b2214c4103883027f9fbd4c648f4dc0cb474cadc32423011113f0598291a9030e6dd2bba95b5fa790c12cb408c9c2c74cee1ab12461f6e7a4ddf294eb18ecf843c1f6951152c1fda2a75232cccde35e0df48f8d36e81e2045294213092e74bda792d9eebd64adae650937bcb9c5d8d8462041fbb13d1e9e546249e24765050e0efa4413b5b19d1c44571d4c80363c6c0be213cb7fd460392d38a2d21da511db381f472a1c8bf61dbd2700d3f6ab65c48e9418139ba5bd17950f2d59e6c6445f7ea2cc9a5262e79296b4d0af217cf8bf6b3bf66f3bc3b6337496e5d8a0c57095c5a5a5e9250273e009d495182830b4da28900146326ed50060221174146a9bb32dc00e1f09a44fa17e03b097769c9c06237f30d0cbefbe359bfdb0cc1c50e1517f1cbe95b9b4710bc90c792f46f061e52b47af989a3c24e76be0c892fcb85e60d94b20b1e51f434cf98a6d13e1c33e81aa9a22b51a376972fa1152aa7e28aa886a63aff949d7004e4f672c401c0e2f9829c0a5e145220fba38d46d6310165aabe3d9d37364c122c16ec7bc715bb2f25c077f01ab38c76bd39b6b7adc08a6514afe376078a25ea54f78f66a888aefec1c8478a15067460577d8e8ca49390368f181c11514fe25a545ff943a3076b577d81049512dcf2b1af694a35414feb4e5b57ed8057ccd0a4bff06b2fc7575795a9103f27caebe6d1dbaa89af45ab7cc6983976f22663176b2c078d52558a4c73acdc852cca6b466f4460e6611d121e6d93b2647fa64bb45a41bd3ea02f3b8565ed09c5d86a13e5a2102f699d502fd409c372af716bf22b6863b9e79c496efce7eb242312352ff86464767ec996be6b7156aa4bf5e32ee9d3ae912b75db639cce876d0b611731d6dd911613fc1aed2c6123d06fc7c4e3ca5caa07b6489762dd2dda69afd8af8d45aa9c69f605ca78947aa351efd1412fdf9c40e7bee9d47aaec055e3f8ec49760c07fea79ba0a74b6fead94af5d665eb514f56a8010a4840e12dcaf11c2bdc7511cc4f9a7487781957bc385d2555d07df6d475f4db1efd54a3b21f09792a385512e437838a8841a1b875493b04b1c9839b58adae2a96deb051d91f718af82be0cef8e47cfa52f0b1ee826b86f94ed1e099cf98afadf15334e19a645761cb73528717818b1b9c2a2b928ec23764146aba4b13a2bd78bb2fd32b21bc5c82b3d482ef8b6e75dafeed9018b81ac7251502cf74f27c54b17840f0783bd39e9d58f2a22add2d6e7c2837a071a1d68928e4cca278f78a21dda6f089f33ac3e84b694168b618c368044f7862e8b32b6f1baaf701818"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000013bd40)={0x2, [{r9, r10}, {r11, r12}, {r13, r14}, {r15, r16}], 0x4, "38c461653e89b1"}) 2m7.993239704s ago: executing program 0 (id=566): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa030390780100000047000000000000000011000000000000ac1e0101440c1001ac1414bb4e210000443c0001e0000001000000000000000000000000ac141400000000000000000000000e000000000000000000ac1e000100000000ac14140000000000181389e1e0ff7a8953cc39aece9586a2c1a463f209436d613774d45f3dc39f504a489f4aed4f930134534b5ab4adbb76566a558fa303ce34000000000000"], 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x8, 0x0, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20004000) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@private, @remote}, &(0x7f0000000100)=0xc) socket$inet6(0xa, 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa030390780100000047000000000000000011000000000000ac1e0101440c1001ac1414bb4e210000443c0001e0000001000000000000000000000000ac141400000000000000000000000e000000000000000000ac1e000100000000ac14140000000000181389e1e0ff7a8953cc39aece9586a2c1a463f209436d613774d45f3dc39f504a489f4aed4f930134534b5ab4adbb76566a558fa303ce34000000000000"], 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x8, 0x0, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20004000) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@private, @remote}, &(0x7f0000000100)=0xc) (async) 2m6.183609946s ago: executing program 0 (id=581): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m5.810014795s ago: executing program 32 (id=581): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.920544306s ago: executing program 3 (id=2308): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154, &(0x7f0000000080)=0x80, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x40, 0xb, 0x6, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x66, 0x0, 0x2, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x8e, 0x3, 0x3, [{@private=0xa010102}, {@remote, 0x89}, {@empty, 0x9}, {@local, 0x4f3e561c}]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0xfffffc00, 0xd156, {{0x2e, 0x4, 0x2, 0x21, 0xb8, 0x64, 0x0, 0x6, 0x29, 0x0, @remote, @private=0xa010102, {[@noop, @cipso={0x86, 0x47, 0x3, [{0x6, 0x11, "eeaaac286f6f40766d103c2aea240c"}, {0x2, 0x12, "04f9c57b0f90ce4c37e2ac3efbf70cfe"}, {0x1, 0xa, "050fb8d235073a2b"}, {0x1, 0x3, 'y'}, {0x2, 0x11, "20684cff7bf701d9849c77a5cfae06"}]}, @end, @rr={0x7, 0x17, 0xc8, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @cipso={0x86, 0xb, 0x2, [{0x2, 0x5, "4f15fb"}]}, @timestamp_addr={0x44, 0x14, 0xdd, 0x1, 0x6, [{@empty}, {@multicast2, 0x5}]}, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0x5, "0c73c8"}, {0x2, 0x8, "2829c34ab63e"}, {0x7, 0xf, "4e28019480da2d38aacbc2fd84"}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x8017, 0x20, 0x5, 0xfff, {{0xc, 0x4, 0x1, 0x21, 0x30, 0x68, 0x0, 0x9, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x48, 0x3, 0x9, [{@multicast1, 0x1}, {@loopback, 0x7}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x118, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4001}, 0xc000) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv4_getnetconf={0x4c, 0x52, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_FORWARDING={0x8, 0x2, 0xc}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x81}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xb667}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x84f9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0xffffffffffffffff, 0x404c885) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000780)={0x7, &(0x7f0000000740)=[{0xa, 0x5, 0x1, 0x10000}, {0x9, 0x0, 0x1, 0x735}, {0x7, 0x7d, 0x43, 0x6}, {0x3, 0xc, 0x5, 0xd}, {0x5, 0x5, 0x5, 0x1}, {0xd, 0xff, 0xfb, 0xe5}, {0x2, 0x2, 0xa, 0x7fffffff}]}, 0x10) (async) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000007c0), &(0x7f0000000800)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000840)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a40)={{r7, 0x603, 0x10000, 0xd, 0x5, 0x7, 0x3, 0x101, 0x8, 0xbee6, 0x0, 0x7fffffff, 0x8, 0x101, 0x400}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (rerun: 64) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000c40)=0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000cc0)={'erspan0\x00', &(0x7f0000000c80)={'gretap0\x00', r4, 0x1, 0x7800, 0x0, 0xc, {{0x6, 0x4, 0x2, 0x1e, 0x18, 0x68, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@end]}}}}}) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r10, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r8) (rerun: 64) sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f0000001200)={&(0x7f0000000f80), 0xc, &(0x7f00000011c0)={&(0x7f0000001000)={0x1b8, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf08}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3b35}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43de}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc75b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x436}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ea00000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4004}, 0x800) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000001280), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000012c0)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001300)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, r14, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40051}, 0x24040014) 3.587397796s ago: executing program 3 (id=2311): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8084) 3.407842245s ago: executing program 3 (id=2314): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4, @ANYRES16=r3, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (fail_nth: 6) 2.763027601s ago: executing program 4 (id=2318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x35, 0xffffffffffffffff}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00'/16, @ANYRESHEX=r2, @ANYRES32], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a697000113bc98238f75dbdb98bd61e6b443b41b1fc9a3246a1d8393029ca5f628f6eb9f7c9095e61a1ebafbfc55e0a5a84135e999ea5d49e5071f25bcd47c2488a1596a33facf42eb63144b2bb696c1d3a3229095072f64cd59e6e40a88d249168db571728f48a0b52e6cd2e6a89a3a11c237ddfa1a4dc971aae1f76beb3a897ea3437bfcfd3aa1954"], 0x50}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r8, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x88}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}]}, 0x2c}}, 0xc0) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 2.507619295s ago: executing program 5 (id=2323): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f7, &(0x7f0000003200)={'ip6gre0\x00', 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xbe3) pipe(&(0x7f0000000040)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f7, &(0x7f0000003200)={'ip6gre0\x00', 0x0}) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xbe3) (async) 2.488078612s ago: executing program 3 (id=2324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb1}, 0x94) 2.339287624s ago: executing program 5 (id=2325): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0800a183437ff10008009f0004000000080026006c09"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fcdbdf251100000008000300", @ANYRES32=r3, @ANYBLOB="0500e400c98102000000539544f4321f382318b7430600001bd11400", @ANYRES32=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x484) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f00000000c0)="555e7233e03edb176200462c99536413ef27987fa129624b18929b424f8986c49a83882a6d4cce7a0f", 0x29) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="3f03", 0x2, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d87"], 0xa0}}, 0x0) 2.254419403s ago: executing program 3 (id=2326): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) 2.184692049s ago: executing program 4 (id=2327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, r0, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.955113657s ago: executing program 5 (id=2328): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d'], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r1, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400"], 0x68}}, 0x24040800) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r6, 0x7, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 1.922061497s ago: executing program 3 (id=2329): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r4, 0x29, 0x7, 0x0, &(0x7f0000000180)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000068000010090a010400000000000000000700000308000a40080000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028013130f269f194ea8c07238dc00000120140000001000010000000000000000000084000a"], 0xb0}}, 0x20050800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 1.83537993s ago: executing program 1 (id=2330): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) listen(r2, 0x7ff) poll(&(0x7f0000000200)=[{r1, 0x401}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001"], 0x114}], 0x1}, 0x0) (async) pwrite64(r0, &(0x7f0000000480)="4881c4671cf7f58551fb944fa9f1461ec7e533a4a32d3e73fe18a628f3262778cf7a10f8b0f5dffc8990d15dc66bdef640d77982dd164639f08504c06b3c2c5ad87c37b3def3a37ee7f4cf8c42f30fd9215cb04a3807876a7ad1c5701fe6c089c00d59d422fa27b55e7575", 0x6b, 0x77) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x890c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) (async) socket$netlink(0x10, 0x3, 0x14) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x26c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xae8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2525}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7e}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7ff, @local, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @local, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x36, 0x3, "32ad702ed17b116e9e9c0902c854eaf12bb44331193a963192ab9ad752ff1ca5d2be2ea31c620b75b8c1b64c77c03a8a07f8"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x98, 0x3, "ea6b044a3d05e9685215d83bec1447ebf094017eb2413614cdf10ce8027d1ca04dea1e0df1465a1eb191df17e523a2d08a19dcbc5306dfa87a6132939c1901ca862b3373e9c2d8c4440ad9e31dc24f0fa6c1498b27909399fa781425dd17b593d2c676d9db0b7fac198885809390f32a401e6b82d24e40beabc70186a2838848bd6531d0435141b47ced27db778e52b89d767208"}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4048) r8 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c5240e1", @ANYRES16=r11, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x50}, 0x95) (async) write$cgroup_subtree(r8, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) 1.662404795s ago: executing program 4 (id=2332): unshare(0x2020000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9416}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000280)={0x3a, @empty, 0x4e20, 0x0, 'sed\x00', 0x0, 0x0, 0x11}, 0x2c) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 1.542298806s ago: executing program 1 (id=2333): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x23, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x7}, 0x14) 1.528453771s ago: executing program 5 (id=2334): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4, @ANYRES16=r3, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (fail_nth: 7) 1.503455993s ago: executing program 2 (id=2335): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) bind$bt_hci(r1, &(0x7f0000000000)={0x2, 0x1, 0x1}, 0x6) syz_emit_ethernet(0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="fffffffffff70000000000000004aa0097deb4a80000"], 0x0) 1.347330322s ago: executing program 4 (id=2336): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x3, 0x2000000, @private1, 0x7}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'macvlan0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x9, 0x10}}) 939.519244ms ago: executing program 2 (id=2337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 830.000643ms ago: executing program 1 (id=2338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x761186c8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0x70bd2a, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) 747.594787ms ago: executing program 2 (id=2339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x39, 0x0, "35390074218cc2d7d9c95462b94557b3f418a0f841348673881609e8b07aa66a4101aa94603f4146d4abf6679647e756c1c4caceea144840b3092a4d9904e79cd43da7cd11c93f914ee8406f3b1d6246"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x42, 0x0, "d69a3fe82d45168edef382d0f6875446970bbdea805f0af95ba18fa21f8c55f4c3aeab6e4d5094c73e412345479d238cdb2cc09829eb51f757bb3c515ac5916967379715421571786d599acc198d4e88"}, 0xd8) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) 587.399456ms ago: executing program 2 (id=2340): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r5, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) syz_emit_ethernet(0xe, &(0x7f00000018c0)={@random="a581e4cba1fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@generic={0x88f7}}}, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r3, 0x34da2000) 580.506394ms ago: executing program 1 (id=2341): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x2}}, 0x10, 0x0}, 0x44001) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) 546.903596ms ago: executing program 5 (id=2342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@end]}}, {0x4e20, 0x4e21, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28860}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 407.130315ms ago: executing program 4 (id=2343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000240)={0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r7, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100003063cb7a60000000064f0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004800128044000100697036677265"], 0x74}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c000004", @ANYRES16=r5, @ANYBLOB="020027bd7000fcdbdf251200000068000780080002000700000008000200ff7f00000800020007000000080002000b0000000c000300000000000000000008000100cf0d00000c00040006000000000000000c000300faffffffffffffff0c00030002000000000000000c000300ff7f000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x404c010}, 0x800) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0xfffffffb) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00'}) write(r4, &(0x7f0000000240)="cc2badd94369dc6d26b6e6cac20c81c0baef330430c6de2a6f7a228734b03543948408bf83daa217a883129633d65fb51b06aade99b5f9150dcbfe7a0be23fb5d15e373b658ca22cc896ee4dbdc4460543d19a624b30edceabbd445cc2632d3ce6f48ec0d0daf2b7a24f872b8d394afee0faf23ccf418ed59d680cc8cf1d6295cd234c81a0c7cfc7d3dfd091c73feb52d507", 0x92) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 406.761182ms ago: executing program 1 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3d, 0x107, 0x8000, 0x8, {0x3, 0x7c}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 341.031548ms ago: executing program 2 (id=2345): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x2, 0x6, "f7b6fe"}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4, @ANYRES16=r3, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 165.466724ms ago: executing program 5 (id=2346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)=ANY=[@ANYBLOB="680300002400010026bd7000fedbdf25550300800c0001000200000000000000650264808d002180d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d38880800fa00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="040030800000000c005600120600000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c021000000087f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a404fd80a904875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x368}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"/1240], 0x4d8}}, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x8917, 0x0) close(r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRESHEX=r3], 0x14}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003b2000/0x2000)=nil, 0x2000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00003b2000/0x2000)=nil, 0x2000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x32, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x8, 0x4f}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'none\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x12002, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x3}, {0x7, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x9, 0x7c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x3}, {0x7, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x9, 0x7c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000aca1", @ANYRES16=r7, @ANYBLOB="020026bd7000fbdbdf25030000000f000a004e4c424c5f554e4c424c00000c00030002000000000000000c0004000d000000000000000c0002000300000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c00060001000000000000000c0004000900000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20040091) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000aca1", @ANYRES16=r7, @ANYBLOB="020026bd7000fbdbdf25030000000f000a004e4c424c5f554e4c424c00000c00030002000000000000000c0004000d000000000000000c0002000300000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c00060001000000000000000c0004000900000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20040091) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000009000000000000000900000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 107.267661ms ago: executing program 1 (id=2347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5218) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x14) shutdown(r3, 0x1) pwrite64(r0, &(0x7f0000000040)="97ccbd4a13b82631a0869ccd454ff3c12c06eb8ca96d70d098504eedfb955fe18a3e515dce9bdab40a077d36486d90df8cd92b59721337ad8fc6f4b8f6fe7a7414af70e6e5c933cb3280d40a309ca3d2b5b77e82dcaa3c780de8339e220394eda6610ba8d48399", 0x67, 0xe3e) 33.296277ms ago: executing program 2 (id=2348): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x23, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x7}, 0x14) 0s ago: executing program 4 (id=2349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) kernel console output (not intermixed with test programs): es in process `syz.3.619'. [ 153.614127][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.719880][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.925137][ T8200] net_ratelimit: 11 callbacks suppressed [ 153.925167][ T8200] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 153.970410][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.089918][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.623'. [ 154.169560][ T8210] IPVS: Error connecting to the multicast addr [ 154.267623][ T8086] team0: Port device team_slave_0 added [ 154.293410][ T8086] team0: Port device team_slave_1 added [ 154.329067][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.626'. [ 154.419949][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.441671][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.490603][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.514156][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.529311][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.619415][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.834288][ T8086] hsr_slave_0: entered promiscuous mode [ 154.848454][ T8241] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 154.852845][ T8086] hsr_slave_1: entered promiscuous mode [ 154.856851][ T8241] netlink: 224 bytes leftover after parsing attributes in process `syz.4.631'. [ 154.877692][ T8086] debugfs: 'hsr0' already exists in 'hsr' [ 154.885529][ T8086] Cannot create hsr debugfs directory [ 154.910572][ T8242] vlan2: entered promiscuous mode [ 154.923597][ T8242] vlan2: entered allmulticast mode [ 154.928762][ T8242] hsr_slave_1: entered allmulticast mode [ 155.094446][ T51] Bluetooth: hci2: command tx timeout [ 155.288174][ T8259] netlink: 'syz.3.637': attribute type 22 has an invalid length. [ 155.322727][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 155.362311][ T8258] netlink: 'syz.3.637': attribute type 22 has an invalid length. [ 155.376084][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 155.399451][ T8259] netlink: 'syz.3.637': attribute type 22 has an invalid length. [ 155.399933][ T8258] netlink: 'syz.3.637': attribute type 22 has an invalid length. [ 155.407856][ T3558] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.442503][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 155.442636][ T3558] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.453809][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 155.508936][ T3558] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.560241][ T3558] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.583965][ T8086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.604200][ T8086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.628246][ T8269] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 155.641260][ T8086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.657234][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 155.663918][ T8273] netlink: 52 bytes leftover after parsing attributes in process `syz.4.642'. [ 155.673164][ T8086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.802630][ T8280] veth3: entered promiscuous mode [ 155.807930][ T8280] veth3: entered allmulticast mode [ 155.997529][ T8288] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 156.078190][ T8294] netlink: 'syz.3.649': attribute type 8 has an invalid length. [ 156.121863][ T8297] netlink: 'syz.4.648': attribute type 2 has an invalid length. [ 156.124067][ T8290] Bluetooth: MGMT ver 1.23 [ 156.175578][ T8086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.288924][ T8086] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.344066][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.351522][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.379840][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.387138][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.715177][ T8320] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 156.766894][ T8320] bond2: entered promiscuous mode [ 156.779542][ T8320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.830326][ T8324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.839996][ T8320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.851978][ T8324] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 156.867754][ T8324] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 156.894994][ T8324] bond2: (slave wireguard0): making interface the new active one [ 156.904778][ T8324] wireguard0: entered promiscuous mode [ 156.919229][ T8324] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 156.985733][ T8086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.993520][ T8331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.005148][ T8331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.028754][ T8331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.052464][ T8331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.172610][ T51] Bluetooth: hci2: command tx timeout [ 157.884581][ T8086] veth0_vlan: entered promiscuous mode [ 157.933144][ T8086] veth1_vlan: entered promiscuous mode [ 158.032475][ T8376] netlink: 'syz.4.669': attribute type 12 has an invalid length. [ 158.045049][ T8086] veth0_macvtap: entered promiscuous mode [ 158.059970][ T8086] veth1_macvtap: entered promiscuous mode [ 158.102345][ T8086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.116037][ T8086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.137517][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.167188][ T8348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.193082][ T3558] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.207042][ T8390] netlink: 'syz.1.671': attribute type 4 has an invalid length. [ 158.287981][ T3558] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.305553][ T3558] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.334532][ T8395] netlink: 'syz.1.671': attribute type 4 has an invalid length. [ 158.621397][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.629378][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.738476][ T8410] __nla_validate_parse: 8 callbacks suppressed [ 158.738497][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 158.795722][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.820872][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.217729][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 159.218397][ T8430] sch_fq: defrate 0 ignored. [ 159.232622][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 159.255352][ T51] Bluetooth: hci2: command tx timeout [ 159.438100][ T8446] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.686'. [ 159.488192][ T8446] macsec0: entered promiscuous mode [ 159.493871][ T8446] macsec0: entered allmulticast mode [ 159.517149][ T8446] veth1_macvtap: entered promiscuous mode [ 159.518431][ T8450] sctp: [Deprecated]: syz.1.688 (pid 8450) Use of int in maxseg socket option. [ 159.518431][ T8450] Use struct sctp_assoc_value instead [ 159.537740][ T8446] veth1_macvtap: entered allmulticast mode [ 159.548191][ T8446] macsec0: left promiscuous mode [ 159.561626][ T8446] macsec0: left allmulticast mode [ 159.574265][ T8446] veth1_macvtap: left allmulticast mode [ 159.606943][ T8453] tipc: Enabled bearer , priority 0 [ 159.736218][ T8453] syzkaller0: entered promiscuous mode [ 159.742148][ T8453] syzkaller0: entered allmulticast mode [ 159.748306][ T8453] tipc: Resetting bearer [ 159.759711][ T8451] tipc: Resetting bearer [ 159.780076][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.692'. [ 161.135667][ T8451] tipc: Disabling bearer [ 161.567941][ T8496] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 161.727377][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 161.752091][ T8499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.702'. [ 161.805260][ T8496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 161.851787][ T8496] gretap1: entered promiscuous mode [ 161.900469][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 162.069222][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 162.099934][ T8522] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 162.187774][ T8517] macvtap1: entered promiscuous mode [ 162.194247][ T8517] macvtap1: entered allmulticast mode [ 162.199921][ T8517] vlan0: entered allmulticast mode [ 162.205467][ T8517] veth0_vlan: entered allmulticast mode [ 162.257765][ T8518] macvtap2: entered promiscuous mode [ 162.263851][ T8518] macvtap2: entered allmulticast mode [ 162.987989][ T8570] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 163.112331][ T8570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.560400][ T8593] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 163.733067][ T8608] tipc: Can't bind to reserved service type 2 [ 163.842803][ T8616] __nla_validate_parse: 7 callbacks suppressed [ 163.842826][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 163.880480][ T8616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.975800][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 164.032599][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.736'. [ 164.051211][ T8623] team0: Port device team_slave_0 removed [ 164.335489][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.742'. [ 164.370895][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 164.400151][ T8648] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 164.437558][ T8648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.751501][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 164.917567][ T8679] netlink: 76 bytes leftover after parsing attributes in process `syz.5.755'. [ 165.186737][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.761'. [ 165.241010][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.761'. [ 165.353753][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.763'. [ 165.896777][ T8734] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 166.060359][ T8746] bond4: (slave gretap1): making interface the new active one [ 166.086315][ T8746] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 166.415984][ T8759] netlink: 'syz.5.781': attribute type 142 has an invalid length. [ 166.692563][ T8780] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 166.709865][ T8777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.794714][ T8780] smc: adding net device bond0 with user defined pnetid SYZ2 [ 166.838810][ T8789] gretap0: entered promiscuous mode [ 167.651039][ T8835] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.839043][ T8851] netlink: 'syz.5.805': attribute type 11 has an invalid length. [ 167.857559][ T8851] netlink: 'syz.5.805': attribute type 11 has an invalid length. [ 167.909396][ T8856] netlink: 'syz.2.807': attribute type 5 has an invalid length. [ 167.928323][ T8860] netlink: 'syz.3.808': attribute type 21 has an invalid length. [ 167.957041][ T8860] netlink: 'syz.3.808': attribute type 6 has an invalid length. [ 168.480434][ T8889] netlink: 'syz.5.817': attribute type 1 has an invalid length. [ 168.638531][ T8904] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 168.671397][ T8905] 8021q: VLANs not supported on lo [ 168.691795][ T5888] Bluetooth: hci2: command 0x0405 tx timeout [ 168.729199][ T8908] chnl_net:caif_netlink_parms(): no params data found [ 168.748982][ T8912] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 168.762664][ T8912] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 169.017289][ T8924] veth0_macvtap: left promiscuous mode [ 169.044967][ T8924] macvtap0: entered allmulticast mode [ 169.406195][ T8939] openvswitch: netlink: IPv4 tun info is not correct [ 170.084236][ T8963] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 170.749000][ T8998] __nla_validate_parse: 18 callbacks suppressed [ 170.749024][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 171.015240][ T9001] veth3: entered allmulticast mode [ 171.068193][ T9011] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 171.146760][ T9011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.169064][ T9019] netlink: 248 bytes leftover after parsing attributes in process `syz.1.853'. [ 171.214892][ T9020] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 171.363831][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 171.400547][ T9029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.440878][ T9029] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 171.591715][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.864'. [ 171.619527][ T9039] netlink: 32 bytes leftover after parsing attributes in process `syz.5.864'. [ 171.633125][ T9039] netlink: 68 bytes leftover after parsing attributes in process `syz.5.864'. [ 171.702355][ T9046] netlink: 84 bytes leftover after parsing attributes in process `syz.4.865'. [ 172.130244][ T9073] tipc: Enabled bearer , priority 0 [ 172.151652][ T9073] syzkaller0: entered promiscuous mode [ 172.157179][ T9073] syzkaller0: entered allmulticast mode [ 172.243851][ T9072] tipc: Resetting bearer [ 172.316689][ T9072] tipc: Disabling bearer [ 172.482421][ T9081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.653843][ T9089] syzkaller1: entered promiscuous mode [ 172.656325][ T9088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'. [ 172.659469][ T9089] syzkaller1: entered allmulticast mode [ 172.845774][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.880'. [ 172.866231][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'. [ 172.889660][ T9096] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.248113][ T9116] netlink: 'syz.5.884': attribute type 10 has an invalid length. [ 173.320782][ T9116] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.353921][ T9125] netlink: 'syz.2.887': attribute type 178 has an invalid length. [ 173.469815][ T9132] tipc: Started in network mode [ 173.476896][ T9132] tipc: Node identity 080211000001, cluster identity 4711 [ 173.490338][ T9132] tipc: Enabled bearer , priority 0 [ 173.512447][ T9132] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 173.522652][ T9132] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 173.608613][ T9130] bond5: entered promiscuous mode [ 173.615207][ T9130] bond5: entered allmulticast mode [ 173.623538][ T9130] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.694318][ T9143] openvswitch: netlink: Message has 5 unknown bytes. [ 173.772806][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.259710][ T9176] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 174.617560][ T850] tipc: Node number set to 134418688 [ 175.116707][ T9230] netlink: 'syz.2.919': attribute type 58 has an invalid length. [ 176.040592][ T9273] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 176.075125][ T9275] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 176.256491][ T9286] __nla_validate_parse: 8 callbacks suppressed [ 176.256514][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 176.257739][ T9284] bridge_slave_0: left allmulticast mode [ 176.283941][ T9284] bridge_slave_0: left promiscuous mode [ 176.290516][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.319929][ T9284] bridge_slave_1: left allmulticast mode [ 176.340914][ T9284] bridge_slave_1: left promiscuous mode [ 176.350074][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.375075][ T9294] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 176.388571][ T9284] bond0: (slave bond_slave_0): Releasing backup interface [ 176.398978][ T9294] netlink: 'syz.1.938': attribute type 6 has an invalid length. [ 176.419803][ T9284] bond0: (slave bond_slave_1): Releasing backup interface [ 176.448476][ T9284] team0: Port device team_slave_1 removed [ 176.459142][ T9284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.484375][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.523515][ T9284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.537473][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.599217][ T9284] bond0: (slave wlan1): Releasing backup interface [ 176.623210][ T9307] netlink: 224 bytes leftover after parsing attributes in process `syz.1.940'. [ 176.664775][ T9291] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 176.977126][ T9318] netlink: 196 bytes leftover after parsing attributes in process `syz.3.944'. [ 176.987213][ T9318] netlink: 196 bytes leftover after parsing attributes in process `syz.3.944'. [ 177.019641][ T9318] netlink: 19 bytes leftover after parsing attributes in process `syz.3.944'. [ 177.055008][ T9327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.271262][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 177.280113][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 177.296792][ T9336] netlink: 'syz.2.947': attribute type 21 has an invalid length. [ 177.321250][ T9336] netlink: 128 bytes leftover after parsing attributes in process `syz.2.947'. [ 177.362950][ T9336] netlink: 'syz.2.947': attribute type 5 has an invalid length. [ 177.381462][ T9336] netlink: 3 bytes leftover after parsing attributes in process `syz.2.947'. [ 177.559773][ T9349] netlink: 'syz.1.950': attribute type 11 has an invalid length. [ 177.586652][ T9349] netlink: 'syz.1.950': attribute type 4 has an invalid length. [ 177.602062][ T9349] netlink: 224 bytes leftover after parsing attributes in process `syz.1.950'. [ 177.904944][ T9368] net veth1_virt_wifi .: renamed from virt_wifi0 [ 178.344435][ T9395] can: request_module (can-proto-4) failed. [ 178.412011][ T9388] netlink: 'syz.5.963': attribute type 29 has an invalid length. [ 178.598856][ T9406] netlink: 'syz.5.968': attribute type 1 has an invalid length. [ 178.738289][ T9406] bond1: (slave gretap1): making interface the new active one [ 178.747549][ T9406] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 178.893459][ T9428] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 179.084823][ T9438] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 179.155515][ T9438] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 179.172353][ T9438] gretap1: entered promiscuous mode [ 179.181711][ T9438] gretap1: entered allmulticast mode [ 179.227515][ T9441] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 179.558234][ T9466] netlink: 'syz.4.985': attribute type 1 has an invalid length. [ 179.668379][ T9466] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.777678][ T9478] netlink: 'syz.5.988': attribute type 1 has an invalid length. [ 180.140798][ T9497] netlink: 'syz.4.993': attribute type 10 has an invalid length. [ 180.171554][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.196100][ T9497] bridge_slave_1: left allmulticast mode [ 180.231569][ T9497] bridge_slave_1: left promiscuous mode [ 180.237534][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.280306][ T9497] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 180.761582][ T9530] nbd0: detected capacity change from 0 to 127 [ 180.762242][ T9538] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 180.795507][ T51] block nbd0: Receive control failed (result -32) [ 180.837463][ T9543] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 181.158001][ T9561] ieee802154 phy1 wpan1: encryption failed: -90 [ 181.310243][ T9566] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 181.364415][ T9566] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 181.607375][ T9577] netlink: 'syz.4.1016': attribute type 13 has an invalid length. [ 181.656872][ T9580] __nla_validate_parse: 18 callbacks suppressed [ 181.656896][ T9580] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.1018'. [ 181.663460][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1017'. [ 181.689015][ T9577] lo: entered promiscuous mode [ 181.694661][ T9583] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1017'. [ 181.700484][ T9577] lo: entered allmulticast mode [ 181.730512][ T9577] tunl0: entered promiscuous mode [ 181.751732][ T9577] tunl0: entered allmulticast mode [ 181.773395][ T9577] gre0: entered promiscuous mode [ 181.787652][ T9577] gre0: entered allmulticast mode [ 181.818965][ T9577] gretap0: entered promiscuous mode [ 181.825126][ T9577] gretap0: entered allmulticast mode [ 181.841575][ T9577] gretap0: refused to change device tx_queue_len [ 181.849141][ T9577] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 182.108776][ T9604] openvswitch: netlink: IPv4 tun info is not correct [ 182.289995][ T9614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 182.341223][ T9614] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1027'. [ 182.494523][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 182.578535][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1033'. [ 182.589371][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1034'. [ 182.625175][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 182.646102][ T9638] netlink: 'syz.2.1035': attribute type 10 has an invalid length. [ 182.740960][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1036'. [ 182.908022][ T9651] tipc: Enabling of bearer rejected, already enabled [ 183.162093][ T9648] netlink: 'syz.4.1037': attribute type 12 has an invalid length. [ 183.218159][ T9650] netlink: 'syz.4.1037': attribute type 12 has an invalid length. [ 183.760389][ T9682] netlink: 'syz.2.1049': attribute type 2 has an invalid length. [ 184.412667][ T9684] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 184.499727][ T9692] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 185.107683][ T9728] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 185.125299][ T9732] netlink: 'syz.1.1066': attribute type 2 has an invalid length. [ 185.347276][ T9740] tipc: Enabling of bearer rejected, failed to enable media [ 185.546591][ T9746] tipc: Started in network mode [ 185.552105][ T9746] tipc: Node identity 761232aa1719, cluster identity 4711 [ 185.560277][ T9746] tipc: Enabled bearer , priority 0 [ 185.570189][ T9746] syzkaller0: entered promiscuous mode [ 185.576966][ T9746] syzkaller0: entered allmulticast mode [ 185.602055][ T9746] tipc: Resetting bearer [ 185.613599][ T9745] tipc: Resetting bearer [ 185.656078][ T9745] tipc: Disabling bearer [ 185.927390][ T929] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 185.959985][ T9753] bond4: entered promiscuous mode [ 185.969895][ T929] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 185.985607][ T9753] bond4: entered allmulticast mode [ 185.999071][ T9753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.254285][ T9753] bond4 (unregistering): Released all slaves [ 186.453659][ T9775] can: request_module (can-proto-0) failed. [ 186.629990][ T9784] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 186.641443][ T9784] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 186.866508][ T9794] tipc: Started in network mode [ 186.911261][ T9794] tipc: Node identity 080211000001, cluster identity 140 [ 186.919531][ T9794] tipc: Enabled bearer , priority 0 [ 186.936945][ T9796] __nla_validate_parse: 16 callbacks suppressed [ 186.936966][ T9796] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1082'. [ 186.983233][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 187.029691][ T9803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.047825][ T9800] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 187.092741][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1087'. [ 187.116281][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1087'. [ 187.327102][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 187.421710][ T9825] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1092'. [ 187.472774][ T9827] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 187.551056][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'. [ 187.699794][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1097'. [ 187.734525][ T9841] netlink: 'syz.1.1099': attribute type 21 has an invalid length. [ 187.763866][ T9841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1099'. [ 187.784232][ T9841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1099'. [ 188.035538][ T24] tipc: Node number set to 134418688 [ 188.090995][ T9862] netlink: 'syz.5.1106': attribute type 1 has an invalid length. [ 188.133123][ T9862] netlink: 'syz.5.1106': attribute type 2 has an invalid length. [ 188.272930][ T9874] netlink: 'syz.1.1108': attribute type 6 has an invalid length. [ 188.280773][ T9874] netlink: 'syz.1.1108': attribute type 5 has an invalid length. [ 188.323686][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.707318][ T5874] hid-generic 0005:16C0:8002.0002: collection stack underflow [ 188.750450][ T5874] hid-generic 0005:16C0:8002.0002: item 0 0 0 12 parsing failed [ 188.814833][ T5874] hid-generic 0005:16C0:8002.0002: probe with driver hid-generic failed with error -22 [ 188.974846][ T9913] veth0: entered promiscuous mode [ 189.035629][ T9913] veth0: left promiscuous mode [ 189.231831][ T9933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.359600][ T9936] pimreg3: entered allmulticast mode [ 190.213554][ T9976] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 190.224612][ T9976] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 190.458422][ T9986] validate_nla: 1 callbacks suppressed [ 190.458443][ T9986] netlink: 'syz.3.1143': attribute type 29 has an invalid length. [ 190.486454][ T9986] netlink: 'syz.3.1143': attribute type 29 has an invalid length. [ 190.535042][ T9987] netlink: 'syz.1.1144': attribute type 4 has an invalid length. [ 190.587047][ T9991] netlink: 'syz.1.1144': attribute type 4 has an invalid length. [ 190.628602][ T9989] veth1_macvtap: left promiscuous mode [ 190.652340][ T9995] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 190.993359][T10012] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 191.057876][T10017] netlink: 'syz.5.1153': attribute type 62 has an invalid length. [ 191.555045][T10029] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.694573][T10042] lo: left promiscuous mode [ 191.706940][T10042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.149888][T10067] __nla_validate_parse: 22 callbacks suppressed [ 192.149910][T10067] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1172'. [ 192.189365][T10070] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1172'. [ 192.227059][T10069] netlink: 'syz.2.1173': attribute type 4 has an invalid length. [ 192.237400][T10072] tipc: Enabled bearer , priority 10 [ 192.252937][T10069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1173'. [ 192.503814][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 192.523317][T10087] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1181'. [ 192.569259][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 192.575421][T10093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1182'. [ 192.609652][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 192.626198][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 192.626469][T10095] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 192.648794][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 192.656611][T10095] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 193.112560][T10126] openvswitch: netlink: Key type 6160 is out of range max 32 [ 193.362043][ T850] tipc: Node number set to 34759570 [ 194.055464][ T3454] smc: removing ib device syz2 [ 194.065073][T10175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.092106][T10175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.123243][T10175] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 194.144593][T10175] bond0 (unregistering): Released all slaves [ 194.487576][T10191] pim6reg: entered allmulticast mode [ 194.538336][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.650432][T10257] dvmrp0: entered allmulticast mode [ 196.669406][T10260] dvmrp0: left allmulticast mode [ 197.166858][T10294] __nla_validate_parse: 16 callbacks suppressed [ 197.166881][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 197.382573][T10309] pim6reg527: entered allmulticast mode [ 197.489741][T10319] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 197.497230][T10319] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 197.508383][T10319] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 197.519465][T10320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.290531][T10341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.392133][T10343] team0: Device gtp0 is of different type [ 198.452992][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1264'. [ 198.465782][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1264'. [ 198.490540][T10345] gretap0: left promiscuous mode [ 198.570788][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.610011][T10345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.745004][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 198.774697][T10368] tc_dump_action: action bad kind [ 198.826133][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 198.838970][T10368] tc_dump_action: action bad kind [ 198.895408][T10376] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 198.935821][ T5856] af_packet: tpacket_rcv: packet too big, clamped from 452 to 4294967272. macoff=96 [ 199.746011][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 199.809263][T10437] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 199.827883][T10437] netlink: 'syz.1.1282': attribute type 2 has an invalid length. [ 199.879646][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1284'. [ 200.587260][T10473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.777556][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 200.899648][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1295'. [ 201.472989][T10529] macsec0: entered promiscuous mode [ 201.478256][T10529] macsec0: entered allmulticast mode [ 201.529405][T10529] veth1_macvtap: entered promiscuous mode [ 201.550567][T10529] veth1_macvtap: entered allmulticast mode [ 201.568493][T10529] macsec0: left promiscuous mode [ 201.586658][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 201.598409][T10529] macsec0: left allmulticast mode [ 201.651673][T10529] veth1_macvtap: left allmulticast mode [ 202.375602][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1324'. [ 203.041245][T10603] netlink: 'syz.2.1328': attribute type 1 has an invalid length. [ 203.054825][T10603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1328'. [ 203.064144][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 203.080172][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 203.274524][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 203.290258][T10619] netlink: 'syz.4.1332': attribute type 21 has an invalid length. [ 203.310033][T10614] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1334'. [ 203.707561][T10637] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 203.727855][T10641] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1341'. [ 203.911886][T10643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1343'. [ 204.646356][T10681] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 204.652254][T10683] netlink: 'syz.5.1356': attribute type 1 has an invalid length. [ 204.666930][T10681] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1355'. [ 204.810405][T10690] bond2: (slave bridge2): making interface the new active one [ 204.816694][T10695] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1359'. [ 204.819351][T10690] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 204.856959][T10697] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 205.766687][T10745] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 206.024220][T10762] sctp: [Deprecated]: syz.1.1381 (pid 10762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.024220][T10762] Use struct sctp_sack_info instead [ 207.197645][T10799] : entered promiscuous mode [ 207.281228][T10805] netlink: 'syz.4.1398': attribute type 2 has an invalid length. [ 207.324524][T10808] : renamed from bridge_slave_0 (while UP) [ 207.587047][T10811] __nla_validate_parse: 35 callbacks suppressed [ 207.587067][T10811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1400'. [ 207.938446][T10831] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1405'. [ 208.008672][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 208.328968][T10841] 8021q: VLANs not supported on ip6gre0 [ 208.550413][T10855] tipc: Enabling of bearer rejected, already enabled [ 208.569426][T10859] netlink: 'syz.2.1414': attribute type 21 has an invalid length. [ 208.678013][T10855] tipc: Resetting bearer [ 208.894085][T10876] 8021q: VLANs not supported on ip6gre0 [ 209.183079][T10888] ip6gre1: entered allmulticast mode [ 209.418151][T10903] bridge4: entered promiscuous mode [ 209.437415][T10903] bridge4: entered allmulticast mode [ 209.466659][T10906] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 209.528381][ T10] IPVS: starting estimator thread 0... [ 209.622232][T10911] IPVS: using max 24 ests per chain, 57600 per kthread [ 209.624174][T10914] tipc: New replicast peer: 255.255.255.255 [ 209.654380][T10914] tipc: Enabled bearer , priority 10 [ 209.690171][T10918] netlink: 'syz.4.1437': attribute type 4 has an invalid length. [ 209.707183][T10918] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1437'. [ 209.773251][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1438'. [ 209.819755][T10924] 8021q: VLANs not supported on ip6gre0 [ 209.828996][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1438'. [ 210.189943][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 210.219643][T10946] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1446'. [ 210.625328][T10966] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1451'. [ 210.641514][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1452'. [ 210.651402][ T929] tipc: Node number set to 1628123818 [ 210.698057][T10966] pim6reg1: entered promiscuous mode [ 210.718600][T10966] pim6reg1: entered allmulticast mode [ 211.375008][T10996] bridge0: port 3(vlan1) entered blocking state [ 211.403431][T10996] bridge0: port 3(vlan1) entered disabled state [ 211.410644][T10996] vlan1: entered allmulticast mode [ 211.416444][T10996] bridge0: entered allmulticast mode [ 211.438189][T10996] vlan1: left allmulticast mode [ 211.466265][T10996] bridge0: left allmulticast mode [ 211.638386][T11008] netlink: 'syz.2.1468': attribute type 10 has an invalid length. [ 211.703600][T11008] dummy0: entered promiscuous mode [ 211.726745][T11008] team0: Port device dummy0 added [ 211.743204][T11018] netlink: 'syz.4.1471': attribute type 21 has an invalid length. [ 211.793723][T11021] netlink: 'syz.1.1472': attribute type 142 has an invalid length. [ 212.280240][T11051] syzkaller1: entered promiscuous mode [ 212.287766][T11051] syzkaller1: entered allmulticast mode [ 212.313682][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.566386][T11072] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 212.579398][T11072] netlink: 'syz.3.1488': attribute type 4 has an invalid length. [ 212.601852][T11072] __nla_validate_parse: 6 callbacks suppressed [ 212.601873][T11072] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1488'. [ 212.657908][T11077] netlink: 'syz.5.1490': attribute type 1 has an invalid length. [ 212.685440][T11077] netlink: 'syz.5.1490': attribute type 2 has an invalid length. [ 212.718002][T11077] syzkaller1: entered promiscuous mode [ 212.723775][T11077] syzkaller1: entered allmulticast mode [ 213.833239][T11115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1504'. [ 213.962369][T11125] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1508'. [ 213.987189][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1508'. [ 214.039792][T11130] netlink: 'syz.4.1509': attribute type 6 has an invalid length. [ 214.074527][T11134] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 214.236731][T11137] xt_policy: too many policy elements [ 214.375718][ T51] Bluetooth: hci4: command tx timeout [ 214.598183][T11155] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.676443][T11163] 8021q: VLANs not supported on ip6gre0 [ 214.695580][T11166] sctp: [Deprecated]: syz.1.1520 (pid 11166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.695580][T11166] Use struct sctp_sack_info instead [ 215.208441][T11194] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 215.443098][T11208] 8021q: VLANs not supported on ip6gre0 [ 215.488032][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 215.660219][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 215.674536][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 216.005295][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1543'. [ 216.016882][T11232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.268857][T11251] 8021q: VLANs not supported on ip6gre0 [ 216.444818][T11264] pim6reg1: entered promiscuous mode [ 216.455453][T11264] pim6reg1: entered allmulticast mode [ 216.639287][T11275] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1555'. [ 216.668118][T11275] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1555'. [ 217.091775][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 217.094387][ T5886] Bluetooth: hci1: command 0x0406 tx timeout [ 217.176194][T11301] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 217.313262][T11305] 8021q: VLANs not supported on ip6tnl0 [ 217.489543][T11319] FAULT_INJECTION: forcing a failure. [ 217.489543][T11319] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 217.528564][T11319] CPU: 0 UID: 0 PID: 11319 Comm: syz.3.1567 Not tainted syzkaller #0 PREEMPT(full) [ 217.528593][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.528605][T11319] Call Trace: [ 217.528613][T11319] [ 217.528622][T11319] dump_stack_lvl+0x189/0x250 [ 217.528653][T11319] ? __pfx____ratelimit+0x10/0x10 [ 217.528689][T11319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.528714][T11319] ? __pfx__printk+0x10/0x10 [ 217.528742][T11319] ? __might_fault+0xb0/0x130 [ 217.528784][T11319] should_fail_ex+0x414/0x560 [ 217.528816][T11319] _copy_from_user+0x2d/0xb0 [ 217.528840][T11319] ___sys_sendmsg+0x158/0x2a0 [ 217.528865][T11319] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.528929][T11319] ? __fget_files+0x2a/0x420 [ 217.528957][T11319] ? __fget_files+0x3a0/0x420 [ 217.528999][T11319] __x64_sys_sendmsg+0x19b/0x260 [ 217.529023][T11319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.529055][T11319] ? __pfx_ksys_write+0x10/0x10 [ 217.529078][T11319] ? rcu_is_watching+0x15/0xb0 [ 217.529104][T11319] ? do_syscall_64+0xbe/0x3b0 [ 217.529137][T11319] do_syscall_64+0xfa/0x3b0 [ 217.529162][T11319] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.529187][T11319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.529206][T11319] ? clear_bhb_loop+0x60/0xb0 [ 217.529230][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.529249][T11319] RIP: 0033:0x7ff672b8ebe9 [ 217.529268][T11319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.529285][T11319] RSP: 002b:00007ff67395e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.529307][T11319] RAX: ffffffffffffffda RBX: 00007ff672db5fa0 RCX: 00007ff672b8ebe9 [ 217.529321][T11319] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000018 [ 217.529333][T11319] RBP: 00007ff67395e090 R08: 0000000000000000 R09: 0000000000000000 [ 217.529345][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.529356][T11319] R13: 00007ff672db6038 R14: 00007ff672db5fa0 R15: 00007fff31ac3c58 [ 217.529391][T11319] [ 217.553573][T11323] netlink: 'syz.4.1569': attribute type 12 has an invalid length. [ 217.764326][T11323] __nla_validate_parse: 3 callbacks suppressed [ 217.764346][T11323] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1569'. [ 218.345503][T11356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.422175][T11357] pim6reg: entered allmulticast mode [ 218.465572][T11351] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1576'. [ 218.493437][T11359] 8021q: VLANs not supported on ip6tnl0 [ 218.740418][T11373] FAULT_INJECTION: forcing a failure. [ 218.740418][T11373] name failslab, interval 1, probability 0, space 0, times 1 [ 218.777783][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.2.1585 Not tainted syzkaller #0 PREEMPT(full) [ 218.777813][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.777824][T11373] Call Trace: [ 218.777832][T11373] [ 218.777840][T11373] dump_stack_lvl+0x189/0x250 [ 218.777868][T11373] ? __pfx____ratelimit+0x10/0x10 [ 218.777895][T11373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.777918][T11373] ? __pfx__printk+0x10/0x10 [ 218.777951][T11373] ? __pfx___might_resched+0x10/0x10 [ 218.777985][T11373] should_fail_ex+0x414/0x560 [ 218.778016][T11373] should_failslab+0xa8/0x100 [ 218.778045][T11373] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 218.778072][T11373] ? __alloc_skb+0x112/0x2d0 [ 218.778104][T11373] __alloc_skb+0x112/0x2d0 [ 218.778136][T11373] netlink_sendmsg+0x5c6/0xb30 [ 218.778176][T11373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.778207][T11373] ? aa_sock_msg_perm+0xf1/0x1d0 [ 218.778239][T11373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.778259][T11373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.778287][T11373] __sock_sendmsg+0x21c/0x270 [ 218.778315][T11373] ____sys_sendmsg+0x505/0x830 [ 218.778342][T11373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.778372][T11373] ? import_iovec+0x74/0xa0 [ 218.778397][T11373] ___sys_sendmsg+0x21f/0x2a0 [ 218.778419][T11373] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.778489][T11373] ? __fget_files+0x2a/0x420 [ 218.778515][T11373] ? __fget_files+0x3a0/0x420 [ 218.778553][T11373] __x64_sys_sendmsg+0x19b/0x260 [ 218.778577][T11373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.778609][T11373] ? __pfx_ksys_write+0x10/0x10 [ 218.778632][T11373] ? rcu_is_watching+0x15/0xb0 [ 218.778659][T11373] ? do_syscall_64+0xbe/0x3b0 [ 218.778690][T11373] do_syscall_64+0xfa/0x3b0 [ 218.778715][T11373] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.778741][T11373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.778760][T11373] ? clear_bhb_loop+0x60/0xb0 [ 218.778785][T11373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.778803][T11373] RIP: 0033:0x7f06e098ebe9 [ 218.778822][T11373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.778839][T11373] RSP: 002b:00007f06e18d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.778861][T11373] RAX: ffffffffffffffda RBX: 00007f06e0bb5fa0 RCX: 00007f06e098ebe9 [ 218.778875][T11373] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000018 [ 218.778887][T11373] RBP: 00007f06e18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 218.778899][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.778910][T11373] R13: 00007f06e0bb6038 R14: 00007f06e0bb5fa0 R15: 00007ffeae03a488 [ 218.778943][T11373] [ 219.328483][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1591'. [ 219.346064][T11395] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 219.361565][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 219.369938][T11392] xfrm1: entered promiscuous mode [ 219.372352][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 219.378292][T11392] xfrm1: entered allmulticast mode [ 219.396737][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1593'. [ 219.396913][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1591'. [ 219.427569][T11397] sctp: [Deprecated]: syz.2.1593 (pid 11397) Use of int in max_burst socket option. [ 219.427569][T11397] Use struct sctp_assoc_value instead [ 219.501007][T11404] 8021q: VLANs not supported on ip6tnl0 [ 219.840111][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1600'. [ 219.866637][T11423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.878571][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1600'. [ 219.888153][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1600'. [ 220.149039][T11438] tipc: Enabling of bearer rejected, already enabled [ 220.167226][T11438] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 220.175462][T11438] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 220.223127][T11438] tipc: Resetting bearer [ 220.396423][T11447] 8021q: VLANs not supported on ip6gre0 [ 220.541950][T11455] FAULT_INJECTION: forcing a failure. [ 220.541950][T11455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.555376][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.4.1613 Not tainted syzkaller #0 PREEMPT(full) [ 220.555404][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.555415][T11455] Call Trace: [ 220.555423][T11455] [ 220.555431][T11455] dump_stack_lvl+0x189/0x250 [ 220.555461][T11455] ? __pfx____ratelimit+0x10/0x10 [ 220.555488][T11455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.555512][T11455] ? __pfx__printk+0x10/0x10 [ 220.555539][T11455] ? __might_fault+0xb0/0x130 [ 220.555580][T11455] should_fail_ex+0x414/0x560 [ 220.555622][T11455] _copy_from_iter+0x1db/0x16f0 [ 220.555648][T11455] ? rcu_is_watching+0x15/0xb0 [ 220.555671][T11455] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 220.555700][T11455] ? __pfx__copy_from_iter+0x10/0x10 [ 220.555722][T11455] ? __build_skb_around+0x257/0x3e0 [ 220.555754][T11455] ? netlink_sendmsg+0x642/0xb30 [ 220.555781][T11455] ? skb_put+0x11b/0x210 [ 220.555814][T11455] netlink_sendmsg+0x6b2/0xb30 [ 220.555853][T11455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.555885][T11455] ? aa_sock_msg_perm+0xf1/0x1d0 [ 220.555918][T11455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.555939][T11455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.555968][T11455] __sock_sendmsg+0x21c/0x270 [ 220.555997][T11455] ____sys_sendmsg+0x505/0x830 [ 220.556025][T11455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.556056][T11455] ? import_iovec+0x74/0xa0 [ 220.556083][T11455] ___sys_sendmsg+0x21f/0x2a0 [ 220.556107][T11455] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.556172][T11455] ? __fget_files+0x2a/0x420 [ 220.556199][T11455] ? __fget_files+0x3a0/0x420 [ 220.556239][T11455] __x64_sys_sendmsg+0x19b/0x260 [ 220.556262][T11455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.556291][T11455] ? __pfx_ksys_write+0x10/0x10 [ 220.556312][T11455] ? rcu_is_watching+0x15/0xb0 [ 220.556336][T11455] ? do_syscall_64+0xbe/0x3b0 [ 220.556367][T11455] do_syscall_64+0xfa/0x3b0 [ 220.556392][T11455] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.556417][T11455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.556437][T11455] ? clear_bhb_loop+0x60/0xb0 [ 220.556462][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.556480][T11455] RIP: 0033:0x7f0d5958ebe9 [ 220.556498][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.556515][T11455] RSP: 002b:00007f0d5a311038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.556537][T11455] RAX: ffffffffffffffda RBX: 00007f0d597b5fa0 RCX: 00007f0d5958ebe9 [ 220.556552][T11455] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000018 [ 220.556564][T11455] RBP: 00007f0d5a311090 R08: 0000000000000000 R09: 0000000000000000 [ 220.556576][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.556587][T11455] R13: 00007f0d597b6038 R14: 00007f0d597b5fa0 R15: 00007fffd6934088 [ 220.556627][T11455] [ 221.605185][T11484] 8021q: VLANs not supported on ip6gre0 [ 221.838978][T11499] FAULT_INJECTION: forcing a failure. [ 221.838978][T11499] name failslab, interval 1, probability 0, space 0, times 0 [ 221.867943][T11499] CPU: 1 UID: 0 PID: 11499 Comm: syz.2.1630 Not tainted syzkaller #0 PREEMPT(full) [ 221.867973][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.867984][T11499] Call Trace: [ 221.867992][T11499] [ 221.868001][T11499] dump_stack_lvl+0x189/0x250 [ 221.868030][T11499] ? __pfx____ratelimit+0x10/0x10 [ 221.868056][T11499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.868078][T11499] ? __pfx__printk+0x10/0x10 [ 221.868106][T11499] ? __lock_acquire+0xab9/0xd20 [ 221.868145][T11499] should_fail_ex+0x414/0x560 [ 221.868175][T11499] should_failslab+0xa8/0x100 [ 221.868204][T11499] kmem_cache_alloc_noprof+0x73/0x3c0 [ 221.868229][T11499] ? skb_clone+0x212/0x3a0 [ 221.868254][T11499] skb_clone+0x212/0x3a0 [ 221.868277][T11499] __netlink_deliver_tap+0x404/0x850 [ 221.868320][T11499] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.868348][T11499] netlink_deliver_tap+0x19c/0x1b0 [ 221.868376][T11499] netlink_unicast+0x7fa/0x9e0 [ 221.868410][T11499] ? __pfx_netlink_unicast+0x10/0x10 [ 221.868437][T11499] ? netlink_sendmsg+0x642/0xb30 [ 221.868461][T11499] ? skb_put+0x11b/0x210 [ 221.868493][T11499] netlink_sendmsg+0x805/0xb30 [ 221.868531][T11499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.868562][T11499] ? aa_sock_msg_perm+0xf1/0x1d0 [ 221.868593][T11499] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.868613][T11499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.868641][T11499] __sock_sendmsg+0x21c/0x270 [ 221.868669][T11499] ____sys_sendmsg+0x505/0x830 [ 221.868704][T11499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.868734][T11499] ? import_iovec+0x74/0xa0 [ 221.868760][T11499] ___sys_sendmsg+0x21f/0x2a0 [ 221.868781][T11499] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.868845][T11499] ? __fget_files+0x2a/0x420 [ 221.868871][T11499] ? __fget_files+0x3a0/0x420 [ 221.868911][T11499] __x64_sys_sendmsg+0x19b/0x260 [ 221.868934][T11499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.868964][T11499] ? __pfx_ksys_write+0x10/0x10 [ 221.868986][T11499] ? rcu_is_watching+0x15/0xb0 [ 221.869011][T11499] ? do_syscall_64+0xbe/0x3b0 [ 221.869042][T11499] do_syscall_64+0xfa/0x3b0 [ 221.869066][T11499] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.869090][T11499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.869108][T11499] ? clear_bhb_loop+0x60/0xb0 [ 221.869132][T11499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.869149][T11499] RIP: 0033:0x7f06e098ebe9 [ 221.869167][T11499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.869182][T11499] RSP: 002b:00007f06e18d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.869203][T11499] RAX: ffffffffffffffda RBX: 00007f06e0bb5fa0 RCX: 00007f06e098ebe9 [ 221.869216][T11499] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000018 [ 221.869227][T11499] RBP: 00007f06e18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 221.869238][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.869249][T11499] R13: 00007f06e0bb6038 R14: 00007f06e0bb5fa0 R15: 00007ffeae03a488 [ 221.869282][T11499] [ 222.207186][T11507] netlink: 'syz.1.1632': attribute type 24 has an invalid length. [ 222.380483][T11515] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 222.456431][T11515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.466541][T11515] bond4: (slave bond5): making interface the new active one [ 222.474570][T11515] bond4: (slave bond5): Enslaving as an active interface with an up link [ 222.560824][T11523] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.593138][T11523] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 222.736971][T11515] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 222.895416][T11541] __nla_validate_parse: 10 callbacks suppressed [ 222.895440][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 222.988722][T11541] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1639'. [ 223.080018][T11544] 8021q: VLANs not supported on ip6gre0 [ 223.099801][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 223.334000][T11560] FAULT_INJECTION: forcing a failure. [ 223.334000][T11560] name failslab, interval 1, probability 0, space 0, times 0 [ 223.357249][T11558] netlink: 'syz.2.1647': attribute type 12 has an invalid length. [ 223.362107][T11560] CPU: 1 UID: 0 PID: 11560 Comm: syz.4.1646 Not tainted syzkaller #0 PREEMPT(full) [ 223.362134][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.362145][T11560] Call Trace: [ 223.362153][T11560] [ 223.362160][T11560] dump_stack_lvl+0x189/0x250 [ 223.362187][T11560] ? __pfx____ratelimit+0x10/0x10 [ 223.362213][T11560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.362234][T11560] ? __pfx__printk+0x10/0x10 [ 223.362262][T11560] ? __pfx___might_resched+0x10/0x10 [ 223.362281][T11560] ? fs_reclaim_acquire+0x7d/0x100 [ 223.362314][T11560] should_fail_ex+0x414/0x560 [ 223.362343][T11560] should_failslab+0xa8/0x100 [ 223.362370][T11560] __kmalloc_noprof+0xcb/0x4f0 [ 223.362393][T11560] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 223.362420][T11560] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 223.362449][T11560] genl_family_rcv_msg_doit+0xb8/0x300 [ 223.362476][T11560] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 223.362506][T11560] ? apparmor_capable+0x137/0x1b0 [ 223.362529][T11560] ? bpf_lsm_capable+0x9/0x20 [ 223.362552][T11560] ? security_capable+0x7e/0x2e0 [ 223.362584][T11560] genl_rcv_msg+0x60e/0x790 [ 223.362612][T11560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.362631][T11560] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 223.362661][T11560] ? __asan_memcpy+0x40/0x70 [ 223.362680][T11560] ? __pfx_ref_tracker_free+0x10/0x10 [ 223.362713][T11560] netlink_rcv_skb+0x208/0x470 [ 223.362736][T11560] ? __lock_acquire+0xab9/0xd20 [ 223.362762][T11560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.362783][T11560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.362829][T11560] ? down_read+0x1ad/0x2e0 [ 223.362859][T11560] genl_rcv+0x28/0x40 [ 223.362876][T11560] netlink_unicast+0x82c/0x9e0 [ 223.362909][T11560] ? __pfx_netlink_unicast+0x10/0x10 [ 223.362943][T11560] ? netlink_sendmsg+0x642/0xb30 [ 223.362965][T11560] ? skb_put+0x11b/0x210 [ 223.362996][T11560] netlink_sendmsg+0x805/0xb30 [ 223.363033][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.363062][T11560] ? aa_sock_msg_perm+0xf1/0x1d0 [ 223.363093][T11560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.363112][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.363138][T11560] __sock_sendmsg+0x21c/0x270 [ 223.363164][T11560] ____sys_sendmsg+0x505/0x830 [ 223.363189][T11560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.363219][T11560] ? import_iovec+0x74/0xa0 [ 223.363245][T11560] ___sys_sendmsg+0x21f/0x2a0 [ 223.363266][T11560] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.363327][T11560] ? __fget_files+0x2a/0x420 [ 223.363352][T11560] ? __fget_files+0x3a0/0x420 [ 223.363391][T11560] __x64_sys_sendmsg+0x19b/0x260 [ 223.363413][T11560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.363443][T11560] ? __pfx_ksys_write+0x10/0x10 [ 223.363464][T11560] ? rcu_is_watching+0x15/0xb0 [ 223.363489][T11560] ? do_syscall_64+0xbe/0x3b0 [ 223.363519][T11560] do_syscall_64+0xfa/0x3b0 [ 223.363542][T11560] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.363565][T11560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.363582][T11560] ? clear_bhb_loop+0x60/0xb0 [ 223.363605][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.363622][T11560] RIP: 0033:0x7f0d5958ebe9 [ 223.363640][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.363656][T11560] RSP: 002b:00007f0d5a311038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.363676][T11560] RAX: ffffffffffffffda RBX: 00007f0d597b5fa0 RCX: 00007f0d5958ebe9 [ 223.363690][T11560] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000018 [ 223.363702][T11560] RBP: 00007f0d5a311090 R08: 0000000000000000 R09: 0000000000000000 [ 223.363713][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.363724][T11560] R13: 00007f0d597b6038 R14: 00007f0d597b5fa0 R15: 00007fffd6934088 [ 223.363756][T11560] [ 223.504542][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 223.575079][T11564] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 223.854897][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1651'. [ 223.864798][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 223.929803][T11564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.525868][T11609] netlink: 'syz.2.1659': attribute type 3 has an invalid length. [ 224.573441][T11609] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1659'. [ 224.613908][T11611] FAULT_INJECTION: forcing a failure. [ 224.613908][T11611] name failslab, interval 1, probability 0, space 0, times 0 [ 224.643987][T11611] CPU: 0 UID: 0 PID: 11611 Comm: syz.1.1661 Not tainted syzkaller #0 PREEMPT(full) [ 224.644025][T11611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.644037][T11611] Call Trace: [ 224.644044][T11611] [ 224.644054][T11611] dump_stack_lvl+0x189/0x250 [ 224.644086][T11611] ? __pfx____ratelimit+0x10/0x10 [ 224.644115][T11611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.644139][T11611] ? __pfx__printk+0x10/0x10 [ 224.644173][T11611] ? __pfx___might_resched+0x10/0x10 [ 224.644192][T11611] ? fs_reclaim_acquire+0x7d/0x100 [ 224.644230][T11611] should_fail_ex+0x414/0x560 [ 224.644264][T11611] should_failslab+0xa8/0x100 [ 224.644295][T11611] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 224.644322][T11611] ? rcu_is_watching+0x15/0xb0 [ 224.644339][T11611] ? ethnl_default_set_doit+0x3d6/0x890 [ 224.644379][T11611] kmemdup_noprof+0x2b/0x70 [ 224.644403][T11611] ethnl_default_set_doit+0x3d6/0x890 [ 224.644447][T11611] genl_family_rcv_msg_doit+0x215/0x300 [ 224.644481][T11611] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 224.644522][T11611] ? bpf_lsm_capable+0x9/0x20 [ 224.644547][T11611] ? security_capable+0x7e/0x2e0 [ 224.644585][T11611] genl_rcv_msg+0x60e/0x790 [ 224.644615][T11611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.644636][T11611] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 224.644696][T11611] netlink_rcv_skb+0x208/0x470 [ 224.644721][T11611] ? __lock_acquire+0xab9/0xd20 [ 224.644756][T11611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.644779][T11611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.644825][T11611] ? down_read+0x1ad/0x2e0 [ 224.644853][T11611] genl_rcv+0x28/0x40 [ 224.644869][T11611] netlink_unicast+0x82c/0x9e0 [ 224.644905][T11611] ? __pfx_netlink_unicast+0x10/0x10 [ 224.644934][T11611] ? netlink_sendmsg+0x642/0xb30 [ 224.644957][T11611] ? skb_put+0x11b/0x210 [ 224.644988][T11611] netlink_sendmsg+0x805/0xb30 [ 224.645022][T11611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.645049][T11611] ? aa_sock_msg_perm+0xf1/0x1d0 [ 224.645077][T11611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.645095][T11611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.645119][T11611] __sock_sendmsg+0x21c/0x270 [ 224.645144][T11611] ____sys_sendmsg+0x505/0x830 [ 224.645171][T11611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.645199][T11611] ? import_iovec+0x74/0xa0 [ 224.645222][T11611] ___sys_sendmsg+0x21f/0x2a0 [ 224.645242][T11611] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.645300][T11611] ? __fget_files+0x2a/0x420 [ 224.645323][T11611] ? __fget_files+0x3a0/0x420 [ 224.645359][T11611] __x64_sys_sendmsg+0x19b/0x260 [ 224.645379][T11611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.645407][T11611] ? __pfx_ksys_write+0x10/0x10 [ 224.645427][T11611] ? rcu_is_watching+0x15/0xb0 [ 224.645449][T11611] ? do_syscall_64+0xbe/0x3b0 [ 224.645477][T11611] do_syscall_64+0xfa/0x3b0 [ 224.645498][T11611] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.645519][T11611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.645535][T11611] ? clear_bhb_loop+0x60/0xb0 [ 224.645556][T11611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.645571][T11611] RIP: 0033:0x7fb97a58ebe9 [ 224.645588][T11611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.645603][T11611] RSP: 002b:00007fb97b379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.645622][T11611] RAX: ffffffffffffffda RBX: 00007fb97a7b5fa0 RCX: 00007fb97a58ebe9 [ 224.645635][T11611] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000018 [ 224.645652][T11611] RBP: 00007fb97b379090 R08: 0000000000000000 R09: 0000000000000000 [ 224.645663][T11611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.645672][T11611] R13: 00007fb97a7b6038 R14: 00007fb97a7b5fa0 R15: 00007ffcb1069de8 [ 224.645702][T11611] [ 225.226016][T11627] vxcan1: left promiscuous mode [ 225.237913][T11627] vxcan1: entered allmulticast mode [ 225.245859][T11625] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1666'. [ 225.379351][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 225.423232][T11632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1667'. [ 225.763527][T11660] FAULT_INJECTION: forcing a failure. [ 225.763527][T11660] name failslab, interval 1, probability 0, space 0, times 0 [ 225.795028][T11660] CPU: 0 UID: 0 PID: 11660 Comm: syz.4.1675 Not tainted syzkaller #0 PREEMPT(full) [ 225.795060][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.795072][T11660] Call Trace: [ 225.795081][T11660] [ 225.795089][T11660] dump_stack_lvl+0x189/0x250 [ 225.795119][T11660] ? __pfx____ratelimit+0x10/0x10 [ 225.795149][T11660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.795173][T11660] ? __pfx__printk+0x10/0x10 [ 225.795207][T11660] ? __pfx___might_resched+0x10/0x10 [ 225.795223][T11660] ? fs_reclaim_acquire+0x7d/0x100 [ 225.795256][T11660] should_fail_ex+0x414/0x560 [ 225.795288][T11660] should_failslab+0xa8/0x100 [ 225.795320][T11660] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 225.795347][T11660] ? rcu_is_watching+0x15/0xb0 [ 225.795365][T11660] ? ethnl_default_set_doit+0x3d6/0x890 [ 225.795403][T11660] kmemdup_noprof+0x2b/0x70 [ 225.795428][T11660] ethnl_default_set_doit+0x3d6/0x890 [ 225.795472][T11660] genl_family_rcv_msg_doit+0x215/0x300 [ 225.795505][T11660] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 225.795547][T11660] ? bpf_lsm_capable+0x9/0x20 [ 225.795571][T11660] ? security_capable+0x7e/0x2e0 [ 225.795606][T11660] genl_rcv_msg+0x60e/0x790 [ 225.795648][T11660] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.795669][T11660] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 225.795702][T11660] ? __asan_memcpy+0x40/0x70 [ 225.795724][T11660] ? __pfx_ref_tracker_free+0x10/0x10 [ 225.795762][T11660] netlink_rcv_skb+0x208/0x470 [ 225.795788][T11660] ? __lock_acquire+0xab9/0xd20 [ 225.795818][T11660] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.795842][T11660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.795895][T11660] ? down_read+0x1ad/0x2e0 [ 225.795929][T11660] genl_rcv+0x28/0x40 [ 225.795949][T11660] netlink_unicast+0x82c/0x9e0 [ 225.795987][T11660] ? __pfx_netlink_unicast+0x10/0x10 [ 225.796015][T11660] ? netlink_sendmsg+0x642/0xb30 [ 225.796038][T11660] ? skb_put+0x11b/0x210 [ 225.796073][T11660] netlink_sendmsg+0x805/0xb30 [ 225.796112][T11660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.796144][T11660] ? aa_sock_msg_perm+0xf1/0x1d0 [ 225.796176][T11660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.796197][T11660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.796225][T11660] __sock_sendmsg+0x21c/0x270 [ 225.796251][T11660] ____sys_sendmsg+0x505/0x830 [ 225.796274][T11660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.796302][T11660] ? import_iovec+0x74/0xa0 [ 225.796325][T11660] ___sys_sendmsg+0x21f/0x2a0 [ 225.796345][T11660] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.796402][T11660] ? __fget_files+0x2a/0x420 [ 225.796426][T11660] ? __fget_files+0x3a0/0x420 [ 225.796462][T11660] __x64_sys_sendmsg+0x19b/0x260 [ 225.796481][T11660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.796509][T11660] ? __pfx_ksys_write+0x10/0x10 [ 225.796528][T11660] ? rcu_is_watching+0x15/0xb0 [ 225.796550][T11660] ? do_syscall_64+0xbe/0x3b0 [ 225.796578][T11660] do_syscall_64+0xfa/0x3b0 [ 225.796599][T11660] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.796628][T11660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.796644][T11660] ? clear_bhb_loop+0x60/0xb0 [ 225.796665][T11660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.796681][T11660] RIP: 0033:0x7f0d5958ebe9 [ 225.796698][T11660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.796713][T11660] RSP: 002b:00007f0d5a311038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.796733][T11660] RAX: ffffffffffffffda RBX: 00007f0d597b5fa0 RCX: 00007f0d5958ebe9 [ 225.796745][T11660] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000018 [ 225.796756][T11660] RBP: 00007f0d5a311090 R08: 0000000000000000 R09: 0000000000000000 [ 225.796766][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.796776][T11660] R13: 00007f0d597b6038 R14: 00007f0d597b5fa0 R15: 00007fffd6934088 [ 225.796807][T11660] [ 226.378840][T11672] 8021q: VLANs not supported on ip6tnl0 [ 226.930777][T11708] FAULT_INJECTION: forcing a failure. [ 226.930777][T11708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.976968][T11708] CPU: 0 UID: 0 PID: 11708 Comm: syz.1.1692 Not tainted syzkaller #0 PREEMPT(full) [ 226.976999][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.977011][T11708] Call Trace: [ 226.977020][T11708] [ 226.977030][T11708] dump_stack_lvl+0x189/0x250 [ 226.977061][T11708] ? __pfx____ratelimit+0x10/0x10 [ 226.977090][T11708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.977115][T11708] ? __pfx__printk+0x10/0x10 [ 226.977144][T11708] ? __might_fault+0xb0/0x130 [ 226.977188][T11708] should_fail_ex+0x414/0x560 [ 226.977222][T11708] _copy_from_user+0x2d/0xb0 [ 226.977247][T11708] kstrtouint_from_user+0xc4/0x170 [ 226.977282][T11708] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 226.977336][T11708] proc_fail_nth_write+0x88/0x200 [ 226.977359][T11708] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 226.977390][T11708] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 226.977416][T11708] vfs_write+0x27b/0xb30 [ 226.977454][T11708] ? __pfx_vfs_write+0x10/0x10 [ 226.977484][T11708] ? __fget_files+0x2a/0x420 [ 226.977519][T11708] ? __fget_files+0x3a0/0x420 [ 226.977547][T11708] ? __fget_files+0x2a/0x420 [ 226.977588][T11708] ksys_write+0x145/0x250 [ 226.977619][T11708] ? __pfx_ksys_write+0x10/0x10 [ 226.977642][T11708] ? rcu_is_watching+0x15/0xb0 [ 226.977669][T11708] ? do_syscall_64+0xbe/0x3b0 [ 226.977703][T11708] do_syscall_64+0xfa/0x3b0 [ 226.977729][T11708] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.977755][T11708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.977776][T11708] ? clear_bhb_loop+0x60/0xb0 [ 226.977802][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.977821][T11708] RIP: 0033:0x7fb97a58d69f [ 226.977840][T11708] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 226.977858][T11708] RSP: 002b:00007fb97b379030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 226.977881][T11708] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb97a58d69f [ 226.977897][T11708] RDX: 0000000000000001 RSI: 00007fb97b3790a0 RDI: 0000000000000019 [ 226.977917][T11708] RBP: 00007fb97b379090 R08: 0000000000000000 R09: 0000000000000000 [ 226.977930][T11708] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 226.977942][T11708] R13: 00007fb97a7b6038 R14: 00007fb97a7b5fa0 R15: 00007ffcb1069de8 [ 226.977979][T11708] [ 227.342387][T11719] netlink: 'syz.5.1698': attribute type 1 has an invalid length. [ 227.394362][T11719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.425274][T11720] bond4: (slave veth9): Enslaving as an active interface with a down link [ 227.528698][T11724] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 227.677605][T11736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.002390][T11761] __nla_validate_parse: 10 callbacks suppressed [ 228.002414][T11761] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1708'. [ 228.055093][T11762] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 228.102328][T11762] veth1_macvtap: left promiscuous mode [ 228.193776][T11753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1708'. [ 228.445594][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 228.470062][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 228.526726][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 228.647317][T11784] netlink: 'syz.4.1716': attribute type 12 has an invalid length. [ 228.670900][T11784] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1716'. [ 228.716906][T11794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1720'. [ 228.743941][T11789] netlink: 'syz.4.1716': attribute type 12 has an invalid length. [ 228.756197][T11789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1716'. [ 228.775883][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1721'. [ 229.243851][T11818] netlink: 'syz.5.1728': attribute type 24 has an invalid length. [ 229.357802][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 230.083997][T11866] 8021q: VLANs not supported on ip6gre0 [ 230.854451][T11904] 8021q: VLANs not supported on ip6gre0 [ 231.132514][T11919] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 231.992666][T11958] netlink: 'syz.4.1767': attribute type 21 has an invalid length. [ 232.088686][T11964] 8021q: VLANs not supported on ip6gre0 [ 232.258202][T11971] gtp0: entered promiscuous mode [ 232.281244][T11971] gtp0: entered allmulticast mode [ 232.416451][T11979] openvswitch: netlink: Message has 5 unknown bytes. [ 232.478999][T11982] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.890132][T12008] netlink: 'syz.1.1784': attribute type 1 has an invalid length. [ 232.908766][T12008] netlink: 'syz.1.1784': attribute type 3 has an invalid length. [ 232.950407][T12008] NCSI netlink: No device for ifindex 0 [ 233.106740][T12014] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 233.191261][T12016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.205509][T12017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.447841][T12022] __nla_validate_parse: 27 callbacks suppressed [ 233.447865][T12022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1789'. [ 233.795213][T12035] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1795'. [ 233.826183][T12037] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1793'. [ 233.924052][T12041] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20000 [ 234.053258][T12050] netlink: 'syz.5.1799': attribute type 4 has an invalid length. [ 234.365484][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1805'. [ 234.457521][T12067] 8021q: VLANs not supported on ip6tnl0 [ 234.595030][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1808'. [ 234.627831][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1808'. [ 234.965169][T12089] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 234.992491][T12089] batman_adv: batadv0: Adding interface: wlan1 [ 234.998722][T12089] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.053891][T12089] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 235.237868][T12098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1816'. [ 235.274283][T12098] vlan3: entered allmulticast mode [ 235.279560][T12098] bond0: entered allmulticast mode [ 235.435499][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1818'. [ 235.807733][T12109] 8021q: VLANs not supported on ip6tnl0 [ 235.925484][T12113] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 235.940720][T12113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.077344][T12123] dvmrp1: entered allmulticast mode [ 236.358195][T12130] ip6gre2: entered allmulticast mode [ 236.578987][T12147] 8021q: VLANs not supported on ip6tnl0 [ 236.770669][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 237.006372][T12170] netlink: 'syz.1.1839': attribute type 10 has an invalid length. [ 237.036461][T12170] bridge_slave_1: left allmulticast mode [ 237.052488][T12170] bridge_slave_1: left promiscuous mode [ 237.058605][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.080532][T12170] bridge_slave_1: entered promiscuous mode [ 237.087385][T12170] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 237.220428][T12178] can: request_module (can-proto-3) failed. [ 237.376716][T12190] netlink: 'syz.2.1847': attribute type 10 has an invalid length. [ 237.518405][T12195] netlink: 'syz.4.1849': attribute type 21 has an invalid length. [ 237.543345][T12195] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1849'. [ 237.603160][T12207] netlink: 'syz.4.1849': attribute type 11 has an invalid length. [ 237.617166][T12207] netlink: 'syz.4.1849': attribute type 11 has an invalid length. [ 238.139230][ T5888] Bluetooth: hci2: command 0x0405 tx timeout [ 238.546610][T12247] __nla_validate_parse: 6 callbacks suppressed [ 238.546630][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1869'. [ 238.588218][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 238.624441][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1871'. [ 238.647010][T12250] : renamed from bridge_slave_0 [ 238.747942][T12257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1872'. [ 239.003128][T12273] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 239.070312][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 239.089235][T12273] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.121781][T12275] bond6: (slave gretap1): making interface the new active one [ 239.137070][T12275] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 239.306529][T12288] tipc: Enabled bearer , priority 0 [ 239.314276][T12288] syzkaller0: entered promiscuous mode [ 239.319977][T12288] syzkaller0: entered allmulticast mode [ 239.329194][T12288] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 239.393680][T12288] tipc: Resetting bearer [ 239.413519][T12296] openvswitch: netlink: IPv4 tun info is not correct [ 239.420591][T12287] tipc: Resetting bearer [ 239.428557][T12296] openvswitch: netlink: IPv4 tun info is not correct [ 239.446592][T12287] tipc: Disabling bearer [ 239.455018][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1882'. [ 239.475966][T12295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.655250][T12307] openvswitch: netlink: IPv4 tun info is not correct [ 239.881054][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1893'. [ 239.926690][T12320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.950576][T12321] netlink: 'syz.5.1893': attribute type 1 has an invalid length. [ 239.960813][T12321] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1893'. [ 240.143308][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 240.313158][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1901'. [ 241.223327][T12366] syz_tun: entered promiscuous mode [ 241.382643][T12366] macvtap1: entered promiscuous mode [ 241.387991][T12366] vlan0: entered promiscuous mode [ 241.393973][T12366] macvtap1: entered allmulticast mode [ 241.399381][T12366] vlan0: entered allmulticast mode [ 241.404823][T12366] syz_tun: entered allmulticast mode [ 241.853170][T12363] macvtap2: entered promiscuous mode [ 241.858648][T12363] macvtap2: entered allmulticast mode [ 242.033952][T12390] netlink: 'syz.5.1916': attribute type 1 has an invalid length. [ 242.046727][T12390] netlink: 'syz.5.1916': attribute type 1 has an invalid length. [ 242.063645][T12391] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 242.072510][T12390] netlink: 'syz.5.1916': attribute type 2 has an invalid length. [ 242.297906][T12406] openvswitch: netlink: Actions may not be safe on all matching packets [ 242.609499][T12417] ip6gre1: entered allmulticast mode [ 242.684837][T12420] netlink: 'syz.3.1926': attribute type 1 has an invalid length. [ 242.820185][T12420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.849414][T12436] syz.2.1931: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 242.888971][T12436] CPU: 1 UID: 0 PID: 12436 Comm: syz.2.1931 Not tainted syzkaller #0 PREEMPT(full) [ 242.889003][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.889016][T12436] Call Trace: [ 242.889024][T12436] [ 242.889033][T12436] dump_stack_lvl+0x189/0x250 [ 242.889069][T12436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.889093][T12436] ? __pfx__printk+0x10/0x10 [ 242.889123][T12436] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 242.889148][T12436] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 242.889174][T12436] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 242.889202][T12436] warn_alloc+0x214/0x310 [ 242.889232][T12436] ? stack_depot_save_flags+0x40/0x860 [ 242.889262][T12436] ? __pfx_warn_alloc+0x10/0x10 [ 242.889291][T12436] ? kasan_save_track+0x4f/0x80 [ 242.889315][T12436] ? xskq_create+0x56/0x170 [ 242.889337][T12436] ? xsk_init_queue+0xb0/0x110 [ 242.889358][T12436] ? xsk_setsockopt+0x4dc/0x8d0 [ 242.889376][T12436] ? do_sock_setsockopt+0x17c/0x1b0 [ 242.889404][T12436] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 242.889419][T12436] ? do_syscall_64+0xfa/0x3b0 [ 242.889445][T12436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.889475][T12436] __vmalloc_node_range_noprof+0x125/0x12f0 [ 242.889538][T12436] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 242.889574][T12436] ? __kasan_kmalloc+0x93/0xb0 [ 242.889602][T12436] vmalloc_user_noprof+0xad/0xf0 [ 242.889631][T12436] ? xskq_create+0xbf/0x170 [ 242.889657][T12436] xskq_create+0xbf/0x170 [ 242.889685][T12436] xsk_init_queue+0xb0/0x110 [ 242.889713][T12436] xsk_setsockopt+0x4dc/0x8d0 [ 242.889740][T12436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 242.889772][T12436] ? __pfx_aa_sk_perm+0x10/0x10 [ 242.889806][T12436] ? aa_sock_opt_perm+0xff/0x1b0 [ 242.889830][T12436] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 242.889851][T12436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 242.889878][T12436] do_sock_setsockopt+0x17c/0x1b0 [ 242.889914][T12436] __x64_sys_setsockopt+0x13f/0x1b0 [ 242.889940][T12436] do_syscall_64+0xfa/0x3b0 [ 242.889965][T12436] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.889990][T12436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.890010][T12436] ? clear_bhb_loop+0x60/0xb0 [ 242.890035][T12436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.890053][T12436] RIP: 0033:0x7f06e098ebe9 [ 242.890073][T12436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.890090][T12436] RSP: 002b:00007f06e18b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.890114][T12436] RAX: ffffffffffffffda RBX: 00007f06e0bb6090 RCX: 00007f06e098ebe9 [ 242.890130][T12436] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 242.890142][T12436] RBP: 00007f06e0a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 242.890155][T12436] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.890168][T12436] R13: 00007f06e0bb6128 R14: 00007f06e0bb6090 R15: 00007ffeae03a488 [ 242.890203][T12436] [ 242.890641][T12436] Mem-Info: [ 243.235631][T12436] active_anon:3685 inactive_anon:0 isolated_anon:0 [ 243.235631][T12436] active_file:2965 inactive_file:39887 isolated_file:0 [ 243.235631][T12436] unevictable:768 dirty:211 writeback:0 [ 243.235631][T12436] slab_reclaimable:12091 slab_unreclaimable:119604 [ 243.235631][T12436] mapped:30036 shmem:1409 pagetables:1049 [ 243.235631][T12436] sec_pagetables:0 bounce:0 [ 243.235631][T12436] kernel_misc_reclaimable:0 [ 243.235631][T12436] free:1298133 free_pcp:20907 free_cma:0 [ 243.341917][T12436] Node 0 active_anon:14940kB inactive_anon:0kB active_file:11860kB inactive_file:159348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116344kB dirty:644kB writeback:100kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12824kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.412563][T12436] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.462543][T12436] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.494457][T12436] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 243.500469][T12436] Node 0 DMA32 free:1282872kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14796kB inactive_anon:0kB active_file:11860kB inactive_file:157780kB unevictable:1536kB writepending:644kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:64692kB local_pcp:36044kB free_cma:0kB [ 243.540418][T12459] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 243.546133][T12436] lowmem_reserve[]: 0 0 1 1 1 [ 243.554683][T12436] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 243.568357][T12459] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 243.657761][T12436] lowmem_reserve[]: 0 0 0 0 0 [ 243.665992][T12436] Node 1 Normal free:3894276kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18732kB local_pcp:9380kB free_cma:0kB [ 243.702986][T12436] lowmem_reserve[]: 0 0 0 0 0 [ 243.726865][T12463] __nla_validate_parse: 12 callbacks suppressed [ 243.726890][T12463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1936'. [ 243.749735][T12436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 243.819596][T12436] Node 0 DMA32: 2530*4kB (UM) 706*8kB (UME) 6*16kB (UM) 2*32kB (UE) 20*64kB (UME) 26*128kB (ME) 11*256kB (UM) 8*512kB (UM) 8*1024kB (UM) 3*2048kB (UME) 303*4096kB (M) = 1282872kB [ 243.859644][T12436] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 243.895846][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 243.896316][T12436] Node 1 Normal: 209*4kB (UME) 56*8kB (UME) 42*16kB (UME) 67*32kB (UME) 12*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 948*4096kB (M) = 3894276kB [ 243.925643][T12470] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1940'. [ 243.935269][T12436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.985628][T12477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.061683][T12436] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 244.099235][T12436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.139327][T12436] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 244.164538][T12436] 44258 total pagecache pages [ 244.172809][T12436] 0 pages in swap cache [ 244.177016][T12436] Free swap = 124996kB [ 244.181990][T12436] Total swap = 124996kB [ 244.187485][T12436] 2097051 pages RAM [ 244.192374][T12436] 0 pages HighMem/MovableOnly [ 244.197124][T12436] 425656 pages reserved [ 244.203187][T12436] 0 pages cma reserved [ 244.508724][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1949'. [ 244.674864][T12509] sctp: [Deprecated]: syz.1.1954 (pid 12509) Use of int in maxseg socket option. [ 244.674864][T12509] Use struct sctp_assoc_value instead [ 244.694429][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'. [ 244.859803][T12514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.458302][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 245.844564][T12556] syz.5.1971 uses old SIOCAX25GETINFO [ 245.847238][T12557] tipc: Enabled bearer , priority 0 [ 245.880089][T12557] syzkaller0: entered promiscuous mode [ 245.901657][T12557] syzkaller0: entered allmulticast mode [ 245.923303][T12557] tipc: Resetting bearer [ 246.450552][T12589] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1979'. [ 246.568315][T12547] tipc: Resetting bearer [ 246.618447][T12547] tipc: Disabling bearer [ 246.636652][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 246.952283][T12609] tipc: Enabling of bearer rejected, already enabled [ 246.963537][T12609] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 246.981791][T12609] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 247.099104][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1989'. [ 247.183122][T12628] openvswitch: netlink: Unknown key attributes 2 [ 247.265707][T12633] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 247.295951][T12633] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1992'. [ 248.249326][T12674] gretap0: entered promiscuous mode [ 249.006976][T12710] __nla_validate_parse: 4 callbacks suppressed [ 249.006997][T12710] netlink: 360 bytes leftover after parsing attributes in process `syz.5.2014'. [ 249.359522][T12724] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2019'. [ 249.391017][T12727] netlink: 'syz.2.2018': attribute type 4 has an invalid length. [ 249.407263][T12724] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2019'. [ 249.560737][T12734] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 249.604510][T12724] netlink: 'syz.5.2019': attribute type 33 has an invalid length. [ 249.613564][T12724] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 249.826826][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 250.132102][T12769] netlink: 'syz.1.2029': attribute type 3 has an invalid length. [ 250.140251][T12769] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2029'. [ 250.462358][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 250.583908][T12786] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2036'. [ 250.668371][T12780] hsr_slave_1 (unregistering): left promiscuous mode [ 250.912444][T12801] netlink: 'syz.4.2039': attribute type 7 has an invalid length. [ 250.972305][T12801] : entered promiscuous mode [ 250.979134][T12802] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 250.990705][T12802] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 251.177529][T12814] sctp: [Deprecated]: syz.2.2043 (pid 12814) Use of int in max_burst socket option. [ 251.177529][T12814] Use struct sctp_assoc_value instead [ 251.278430][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 251.278473][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 251.320070][T12822] openvswitch: netlink: EtherType 0 is less than min 600 [ 251.358770][T12823] openvswitch: netlink: EtherType 0 is less than min 600 [ 251.683669][T12834] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2047'. [ 251.721228][T12834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.544095][T12879] netlink: 'syz.5.2061': attribute type 23 has an invalid length. [ 252.598526][T12880] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 252.627001][T12880] sctp: [Deprecated]: syz.5.2061 (pid 12880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.627001][T12880] Use struct sctp_sack_info instead [ 252.931667][ T5888] Bluetooth: hci4: command 0x0406 tx timeout [ 252.945029][T12882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.106747][T12893] pim6reg: entered allmulticast mode [ 253.132790][T12896] pim6reg: left allmulticast mode [ 253.405866][T12910] geneve3: entered promiscuous mode [ 253.437709][T12910] geneve3: entered allmulticast mode [ 253.459554][ T36] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 253.469169][ T36] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 253.506640][ T36] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 253.542263][ T36] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.064425][T12953] sctp: [Deprecated]: syz.1.2084 (pid 12953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.064425][T12953] Use struct sctp_sack_info instead [ 254.386738][T12976] __nla_validate_parse: 4 callbacks suppressed [ 254.386762][T12976] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2090'. [ 254.475401][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 254.985053][T13004] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2095'. [ 255.059097][T13008] netlink: zone id is out of range [ 255.069876][T13008] netlink: zone id is out of range [ 255.075378][T13008] netlink: zone id is out of range [ 255.080789][T13008] netlink: zone id is out of range [ 255.090921][T13008] netlink: zone id is out of range [ 255.098160][T13008] netlink: zone id is out of range [ 255.138914][T13008] sch_fq: defrate 0 ignored. [ 255.316761][T13015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2100'. [ 255.346924][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2100'. [ 255.379837][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 255.500683][T13026] tipc: Resetting bearer [ 255.595601][T13026] vlan0: left allmulticast mode [ 255.605096][T13026] veth0_vlan: left allmulticast mode [ 255.840381][T13027] hsr_slave_0 (unregistering): left promiscuous mode [ 255.928362][ T972] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.939389][ T972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 255.977978][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.999702][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.012507][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.124046][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.149595][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.197609][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.227113][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.525828][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2111'. [ 256.859142][T13089] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2115'. [ 256.881906][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2116'. [ 256.978162][T13089] vlan1: entered allmulticast mode [ 257.009698][T13089] gretap0: entered allmulticast mode [ 257.050160][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 257.694315][T13144] netlink: 'syz.4.2133': attribute type 4 has an invalid length. [ 257.772880][T13142] bridge6: entered promiscuous mode [ 257.778159][T13142] bridge6: entered allmulticast mode [ 257.818108][T13147] netlink: 'syz.4.2133': attribute type 4 has an invalid length. [ 257.964533][T13156] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 257.977041][T13156] bond4: (slave vcan1): Error -95 calling set_mac_address [ 258.210374][T13166] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 258.244142][T13169] bond0: (slave dummy0): Releasing backup interface [ 258.300932][T13169] bond0: (slave batadv0): Releasing backup interface [ 258.325407][T13169] batadv0: left promiscuous mode [ 258.333301][T13169] bridge_slave_0: left allmulticast mode [ 258.340775][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.354797][T13169] bond0: (slave bridge_slave_1): Releasing backup interface [ 258.363652][T13169] bridge_slave_1: left promiscuous mode [ 258.373301][T13169] bond0: (slave bond_slave_0): Releasing backup interface [ 258.385902][T13169] bond0: (slave bond_slave_1): Releasing backup interface [ 258.420149][T13169] team0: Port device team_slave_0 removed [ 258.435190][T13169] team0: Port device team_slave_1 removed [ 258.442541][T13169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.450345][T13169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.510913][T13171] net_ratelimit: 19 callbacks suppressed [ 258.510938][T13171] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 258.540408][T13173] tipc: Enabling of bearer rejected, failed to enable media [ 258.549591][T13181] netlink: 'syz.2.2143': attribute type 6 has an invalid length. [ 258.603112][T13181] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 258.681535][T13186] tipc: Enabled bearer , priority 0 [ 258.851052][T13186] syzkaller0: entered promiscuous mode [ 258.869472][T13186] syzkaller0: entered allmulticast mode [ 258.886302][T13186] tipc: Resetting bearer [ 258.933305][T13185] tipc: Resetting bearer [ 258.974346][T13192] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 258.983970][ T30] audit: type=1800 audit(1755768817.780:5): pid=13192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2147" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 259.029310][T13192] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 259.047039][T13192] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 259.067678][T13192] syz.5.2147 (13192) used greatest stack depth: 18008 bytes left [ 259.274835][T13215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.996874][T13185] tipc: Disabling bearer [ 261.204038][T13233] sctp: [Deprecated]: syz.5.2160 (pid 13233) Use of int in maxseg socket option. [ 261.204038][T13233] Use struct sctp_assoc_value instead [ 261.241639][T13234] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 261.531679][T13251] __nla_validate_parse: 6 callbacks suppressed [ 261.531702][T13251] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2166'. [ 261.560400][T13253] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2168'. [ 261.645891][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2170'. [ 261.897213][T13272] netlink: 'syz.5.2174': attribute type 1 has an invalid length. [ 262.530830][T13300] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 262.565665][T13300] tipc: Enabled bearer , priority 0 [ 262.573411][T13300] syzkaller0: entered promiscuous mode [ 262.579018][T13300] syzkaller0: entered allmulticast mode [ 262.847073][T13300] tipc: Resetting bearer [ 262.926670][T13300] tipc: Disabling bearer [ 263.167336][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'. [ 263.447985][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'. [ 263.485512][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'. [ 263.497237][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2193'. [ 263.566997][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2193'. [ 263.740028][T13345] syzkaller1: entered promiscuous mode [ 263.748002][T13345] syzkaller1: entered allmulticast mode [ 264.060418][T13357] netlink: 'syz.5.2201': attribute type 1 has an invalid length. [ 264.103703][T13363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.143300][T13357] bond5: entered promiscuous mode [ 264.155180][T13357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.336349][T13357] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.387142][T13357] bond5: (slave bond6): making interface the new active one [ 264.426394][T13357] bond6: entered promiscuous mode [ 264.460111][T13357] bond5: (slave bond6): Enslaving as an active interface with an up link [ 264.612086][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 265.008585][T13400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2210'. [ 265.263011][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 265.711951][T13439] netlink: 'syz.4.2222': attribute type 12 has an invalid length. [ 265.789667][T13439] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 265.953555][T13450] netlink: 'syz.5.2226': attribute type 1 has an invalid length. [ 265.981645][T13452] netlink: 'syz.1.2225': attribute type 9 has an invalid length. [ 265.992374][T13450] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 266.174701][T13465] IPv6: sit1: Disabled Multicast RS [ 266.216329][T13465] sit1: entered allmulticast mode [ 266.256762][T13467] netlink: 'syz.4.2230': attribute type 33 has an invalid length. [ 266.414277][T13474] rdma_op ffff88807da829f0 conn xmit_rdma 0000000000000000 [ 266.631898][T13485] __nla_validate_parse: 6 callbacks suppressed [ 266.631921][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2238'. [ 266.786385][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2242'. [ 266.976971][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2242'. [ 266.984088][T13510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2244'. [ 267.058326][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2242'. [ 267.108829][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2242'. [ 267.156857][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2242'. [ 267.203990][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2242'. [ 267.248318][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2242'. [ 267.385433][T13525] delete_channel: no stack [ 267.444822][T13496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2242'. [ 267.650865][T13536] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 267.675612][T13536] netlink: 'syz.5.2249': attribute type 3 has an invalid length. [ 268.053877][T13556] batman_adv: batadv0: Interface activated: wlan1 [ 268.064660][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.084771][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.510023][T13583] vlan0: entered promiscuous mode [ 268.528090][T13583] bridge0: entered promiscuous mode [ 268.760629][T13593] netlink: 'syz.2.2270': attribute type 2 has an invalid length. [ 268.770797][T13593] netlink: 'syz.2.2270': attribute type 8 has an invalid length. [ 269.075194][T13611] smc: net device bond0 applied user defined pnetid SYZ2 [ 269.549603][T13611] smc: removing net device bond0 with user defined pnetid SYZ2 [ 269.560251][T13611] bond0 (unregistering): Released all slaves [ 269.700839][T13633] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.713248][T13633] team0: Failed to send port change of device bond7 via netlink (err -105) [ 269.723032][T13633] team0: Failed to send options change via netlink (err -105) [ 269.731750][T13633] team0: Port device bond7 added [ 269.942101][T13644] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 270.261872][T13668] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 270.458663][T13673] FAULT_INJECTION: forcing a failure. [ 270.458663][T13673] name failslab, interval 1, probability 0, space 0, times 0 [ 270.497972][T13673] CPU: 0 UID: 0 PID: 13673 Comm: syz.3.2294 Not tainted syzkaller #0 PREEMPT(full) [ 270.498004][T13673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.498016][T13673] Call Trace: [ 270.498025][T13673] [ 270.498034][T13673] dump_stack_lvl+0x189/0x250 [ 270.498064][T13673] ? __pfx____ratelimit+0x10/0x10 [ 270.498092][T13673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.498116][T13673] ? __pfx__printk+0x10/0x10 [ 270.498145][T13673] ? __pfx___might_resched+0x10/0x10 [ 270.498163][T13673] ? fs_reclaim_acquire+0x7d/0x100 [ 270.498199][T13673] should_fail_ex+0x414/0x560 [ 270.498230][T13673] should_failslab+0xa8/0x100 [ 270.498260][T13673] __kmalloc_noprof+0xcb/0x4f0 [ 270.498284][T13673] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 270.498314][T13673] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 270.498345][T13673] genl_family_rcv_msg_doit+0xb8/0x300 [ 270.498382][T13673] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 270.498413][T13673] ? apparmor_capable+0x137/0x1b0 [ 270.498439][T13673] ? bpf_lsm_capable+0x9/0x20 [ 270.498463][T13673] ? security_capable+0x7e/0x2e0 [ 270.498498][T13673] genl_rcv_msg+0x60e/0x790 [ 270.498527][T13673] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.498547][T13673] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 270.498594][T13673] netlink_rcv_skb+0x208/0x470 [ 270.498620][T13673] ? __lock_acquire+0xab9/0xd20 [ 270.498650][T13673] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.498674][T13673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.498727][T13673] ? down_read+0x1ad/0x2e0 [ 270.498761][T13673] genl_rcv+0x28/0x40 [ 270.498780][T13673] netlink_unicast+0x82c/0x9e0 [ 270.498818][T13673] ? __pfx_netlink_unicast+0x10/0x10 [ 270.498846][T13673] ? netlink_sendmsg+0x642/0xb30 [ 270.498872][T13673] ? skb_put+0x11b/0x210 [ 270.498906][T13673] netlink_sendmsg+0x805/0xb30 [ 270.498948][T13673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.498980][T13673] ? aa_sock_msg_perm+0xf1/0x1d0 [ 270.499010][T13673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.499031][T13673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.499061][T13673] __sock_sendmsg+0x21c/0x270 [ 270.499090][T13673] ____sys_sendmsg+0x505/0x830 [ 270.499117][T13673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.499150][T13673] ? import_iovec+0x74/0xa0 [ 270.499178][T13673] ___sys_sendmsg+0x21f/0x2a0 [ 270.499202][T13673] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.499274][T13673] ? __fget_files+0x2a/0x420 [ 270.499302][T13673] ? __fget_files+0x3a0/0x420 [ 270.499344][T13673] __x64_sys_sendmsg+0x19b/0x260 [ 270.499380][T13673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.499414][T13673] ? __pfx_ksys_write+0x10/0x10 [ 270.499438][T13673] ? rcu_is_watching+0x15/0xb0 [ 270.499467][T13673] ? do_syscall_64+0xbe/0x3b0 [ 270.499501][T13673] do_syscall_64+0xfa/0x3b0 [ 270.499527][T13673] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.499554][T13673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.499574][T13673] ? clear_bhb_loop+0x60/0xb0 [ 270.499600][T13673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.499619][T13673] RIP: 0033:0x7ff672b8ebe9 [ 270.499638][T13673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.499657][T13673] RSP: 002b:00007ff67395e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.499680][T13673] RAX: ffffffffffffffda RBX: 00007ff672db5fa0 RCX: 00007ff672b8ebe9 [ 270.499694][T13673] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 270.499707][T13673] RBP: 00007ff67395e090 R08: 0000000000000000 R09: 0000000000000000 [ 270.499720][T13673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.499732][T13673] R13: 00007ff672db6038 R14: 00007ff672db5fa0 R15: 00007fff31ac3c58 [ 270.499769][T13673] [ 271.314066][T13694] openvswitch: netlink: Tunnel attr 257 out of range max 16 [ 271.441644][T13699] siw: device registration error -23 [ 271.461469][T13696] hsr0 speed is unknown, defaulting to 1000 [ 271.467752][T13696] hsr0 speed is unknown, defaulting to 1000 [ 271.494113][T13696] hsr0 speed is unknown, defaulting to 1000 [ 271.557323][T13696] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 271.608032][T13696] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 271.746233][T13711] netlink: 'syz.2.2302': attribute type 10 has an invalid length. [ 272.172144][T13696] hsr0 speed is unknown, defaulting to 1000 [ 272.202186][T13711] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 272.269371][ T3572] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.286006][T13696] hsr0 speed is unknown, defaulting to 1000 [ 272.299917][T13696] hsr0 speed is unknown, defaulting to 1000 [ 272.307317][ T3572] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.336376][ T3572] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.367191][T13696] hsr0 speed is unknown, defaulting to 1000 [ 272.373664][ T3572] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.406611][T13696] hsr0 speed is unknown, defaulting to 1000 [ 272.418911][T13696] hsr0 speed is unknown, defaulting to 1000 [ 272.501696][T13730] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 272.627709][T13730] 8021q: adding VLAN 0 to HW filter on device bond8 [ 272.635067][T13740] __nla_validate_parse: 9 callbacks suppressed [ 272.635087][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 272.660661][T13737] bond8: (slave geneve3): making interface the new active one [ 272.673268][T13737] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 272.706388][ T3558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.730059][ T3558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.798749][ T3558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.877332][T13750] FAULT_INJECTION: forcing a failure. [ 272.877332][T13750] name failslab, interval 1, probability 0, space 0, times 0 [ 272.897119][T13750] CPU: 1 UID: 0 PID: 13750 Comm: syz.3.2314 Not tainted syzkaller #0 PREEMPT(full) [ 272.897149][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.897161][T13750] Call Trace: [ 272.897169][T13750] [ 272.897177][T13750] dump_stack_lvl+0x189/0x250 [ 272.897207][T13750] ? __pfx____ratelimit+0x10/0x10 [ 272.897234][T13750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.897258][T13750] ? __pfx__printk+0x10/0x10 [ 272.897290][T13750] ? __pfx___might_resched+0x10/0x10 [ 272.897309][T13750] ? fs_reclaim_acquire+0x7d/0x100 [ 272.897344][T13750] should_fail_ex+0x414/0x560 [ 272.897377][T13750] should_failslab+0xa8/0x100 [ 272.897408][T13750] __kmalloc_noprof+0xcb/0x4f0 [ 272.897433][T13750] ? ethnl_default_set_doit+0x168/0x890 [ 272.897469][T13750] ethnl_default_set_doit+0x168/0x890 [ 272.897498][T13750] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 272.897531][T13750] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 272.897561][T13750] genl_family_rcv_msg_doit+0x215/0x300 [ 272.897592][T13750] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.897630][T13750] ? bpf_lsm_capable+0x9/0x20 [ 272.897655][T13750] ? security_capable+0x7e/0x2e0 [ 272.897692][T13750] genl_rcv_msg+0x60e/0x790 [ 272.897722][T13750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.897743][T13750] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 272.897790][T13750] netlink_rcv_skb+0x208/0x470 [ 272.897815][T13750] ? __lock_acquire+0xab9/0xd20 [ 272.897843][T13750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.897865][T13750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.897917][T13750] ? down_read+0x1ad/0x2e0 [ 272.897951][T13750] genl_rcv+0x28/0x40 [ 272.897970][T13750] netlink_unicast+0x82c/0x9e0 [ 272.898007][T13750] ? __pfx_netlink_unicast+0x10/0x10 [ 272.898035][T13750] ? netlink_sendmsg+0x642/0xb30 [ 272.898060][T13750] ? skb_put+0x11b/0x210 [ 272.898095][T13750] netlink_sendmsg+0x805/0xb30 [ 272.898133][T13750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.898165][T13750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 272.898198][T13750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.898219][T13750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.898249][T13750] __sock_sendmsg+0x21c/0x270 [ 272.898278][T13750] ____sys_sendmsg+0x505/0x830 [ 272.898307][T13750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.898340][T13750] ? import_iovec+0x74/0xa0 [ 272.898368][T13750] ___sys_sendmsg+0x21f/0x2a0 [ 272.898393][T13750] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.898461][T13750] ? __fget_files+0x2a/0x420 [ 272.898490][T13750] ? __fget_files+0x3a0/0x420 [ 272.898541][T13750] __x64_sys_sendmsg+0x19b/0x260 [ 272.898566][T13750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.898600][T13750] ? __pfx_ksys_write+0x10/0x10 [ 272.898623][T13750] ? rcu_is_watching+0x15/0xb0 [ 272.898651][T13750] ? do_syscall_64+0xbe/0x3b0 [ 272.898685][T13750] do_syscall_64+0xfa/0x3b0 [ 272.898711][T13750] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.898738][T13750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.898758][T13750] ? clear_bhb_loop+0x60/0xb0 [ 272.898783][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.898802][T13750] RIP: 0033:0x7ff672b8ebe9 [ 272.898822][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.898840][T13750] RSP: 002b:00007ff67395e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.898862][T13750] RAX: ffffffffffffffda RBX: 00007ff672db5fa0 RCX: 00007ff672b8ebe9 [ 272.898877][T13750] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 272.898889][T13750] RBP: 00007ff67395e090 R08: 0000000000000000 R09: 0000000000000000 [ 272.898902][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.898914][T13750] R13: 00007ff672db6038 R14: 00007ff672db5fa0 R15: 00007fff31ac3c58 [ 272.898949][T13750] [ 273.472545][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 273.567562][T13768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2318'. [ 273.648239][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 273.657034][T13768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2318'. [ 273.710516][T13771] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 273.751276][T13771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.887941][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2325'. [ 273.987610][T13798] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2325'. [ 274.338857][T13813] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 274.449956][T13819] netlink: 'syz.1.2330': attribute type 1 has an invalid length. [ 274.488478][T13819] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2330'. [ 274.515223][T13819] netlink: 'syz.1.2330': attribute type 1 has an invalid length. [ 274.600690][T13828] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 274.669097][T13830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2333'. [ 274.770328][T13834] FAULT_INJECTION: forcing a failure. [ 274.770328][T13834] name failslab, interval 1, probability 0, space 0, times 0 [ 274.791605][T13834] CPU: 0 UID: 0 PID: 13834 Comm: syz.5.2334 Not tainted syzkaller #0 PREEMPT(full) [ 274.791636][T13834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.791648][T13834] Call Trace: [ 274.791656][T13834] [ 274.791664][T13834] dump_stack_lvl+0x189/0x250 [ 274.791694][T13834] ? __pfx____ratelimit+0x10/0x10 [ 274.791723][T13834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.791747][T13834] ? __pfx__printk+0x10/0x10 [ 274.791779][T13834] ? __pfx___might_resched+0x10/0x10 [ 274.791800][T13834] ? fs_reclaim_acquire+0x7d/0x100 [ 274.791837][T13834] should_fail_ex+0x414/0x560 [ 274.791871][T13834] should_failslab+0xa8/0x100 [ 274.791902][T13834] __kmalloc_noprof+0xcb/0x4f0 [ 274.791928][T13834] ? ethnl_default_set_doit+0x168/0x890 [ 274.791965][T13834] ethnl_default_set_doit+0x168/0x890 [ 274.791997][T13834] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 274.792019][T13834] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 274.792052][T13834] genl_family_rcv_msg_doit+0x215/0x300 [ 274.792083][T13834] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.792121][T13834] ? bpf_lsm_capable+0x9/0x20 [ 274.792145][T13834] ? security_capable+0x7e/0x2e0 [ 274.792180][T13834] genl_rcv_msg+0x60e/0x790 [ 274.792210][T13834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.792243][T13834] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 274.792275][T13834] ? __asan_memcpy+0x40/0x70 [ 274.792296][T13834] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.792330][T13834] netlink_rcv_skb+0x208/0x470 [ 274.792355][T13834] ? __lock_acquire+0xab9/0xd20 [ 274.792383][T13834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.792406][T13834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.792459][T13834] ? down_read+0x1ad/0x2e0 [ 274.792491][T13834] genl_rcv+0x28/0x40 [ 274.792510][T13834] netlink_unicast+0x82c/0x9e0 [ 274.792548][T13834] ? __pfx_netlink_unicast+0x10/0x10 [ 274.792576][T13834] ? netlink_sendmsg+0x642/0xb30 [ 274.792601][T13834] ? skb_put+0x11b/0x210 [ 274.792637][T13834] netlink_sendmsg+0x805/0xb30 [ 274.792678][T13834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.792711][T13834] ? aa_sock_msg_perm+0xf1/0x1d0 [ 274.792745][T13834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.792766][T13834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.792795][T13834] __sock_sendmsg+0x21c/0x270 [ 274.792825][T13834] ____sys_sendmsg+0x505/0x830 [ 274.792865][T13834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.792898][T13834] ? import_iovec+0x74/0xa0 [ 274.792927][T13834] ___sys_sendmsg+0x21f/0x2a0 [ 274.792952][T13834] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.793020][T13834] ? __fget_files+0x2a/0x420 [ 274.793049][T13834] ? __fget_files+0x3a0/0x420 [ 274.793091][T13834] __x64_sys_sendmsg+0x19b/0x260 [ 274.793117][T13834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.793151][T13834] ? __pfx_ksys_write+0x10/0x10 [ 274.793174][T13834] ? rcu_is_watching+0x15/0xb0 [ 274.793202][T13834] ? do_syscall_64+0xbe/0x3b0 [ 274.793244][T13834] do_syscall_64+0xfa/0x3b0 [ 274.793270][T13834] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.793296][T13834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.793317][T13834] ? clear_bhb_loop+0x60/0xb0 [ 274.793343][T13834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.793362][T13834] RIP: 0033:0x7fe88ed8ebe9 [ 274.793382][T13834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.793400][T13834] RSP: 002b:00007fe88fb53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.793424][T13834] RAX: ffffffffffffffda RBX: 00007fe88efb5fa0 RCX: 00007fe88ed8ebe9 [ 274.793438][T13834] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 274.793451][T13834] RBP: 00007fe88fb53090 R08: 0000000000000000 R09: 0000000000000000 [ 274.793464][T13834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.793475][T13834] R13: 00007fe88efb6038 R14: 00007fe88efb5fa0 R15: 00007fffa731e828 [ 274.793512][T13834] [ 275.554483][T13815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.580786][T13815] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 275.621790][ T30] audit: type=1804 audit(1755768834.420:6): pid=13850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2340" name="/newroot/478/cgroup.controllers" dev="tmpfs" ino=2467 res=1 errno=0 [ 275.647173][T13815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.662016][T13815] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 275.688181][ T30] audit: type=1800 audit(1755768834.420:7): pid=13850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2340" name="cgroup.controllers" dev="tmpfs" ino=2467 res=0 errno=0 [ 275.723005][T13815] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.729055][T13815] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 275.753461][T13856] netlink: 'syz.1.2344': attribute type 8 has an invalid length. [ 275.769479][T13854] syzkaller1: entered promiscuous mode [ 275.775861][T13854] syzkaller1: entered allmulticast mode [ 275.801760][T13856] macvlan0: left promiscuous mode [ 275.821860][T13856] netlink: 'syz.1.2344': attribute type 2 has an invalid length. [ 275.949217][T13815] batman_adv: batadv0: Interface deactivated: wlan1 [ 276.066295][T13870] netlink: 'syz.5.2346': attribute type 1 has an invalid length. [ 276.083023][T13870] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2346'. [ 276.126791][T13815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.135726][T13815] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 276.139077][T13871] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 276.155963][T13870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 276.177038][T13815] ------------[ cut here ]------------ [ 276.184046][T13815] refcount_t: underflow; use-after-free. [ 276.190330][T13815] WARNING: CPU: 0 PID: 13815 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 276.200679][T13815] Modules linked in: [ 276.206489][T13815] CPU: 0 UID: 0 PID: 13815 Comm: syz.3.2329 Not tainted syzkaller #0 PREEMPT(full) [ 276.216450][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.227373][T13815] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 276.234180][T13815] Code: 40 ae e2 8b e8 c7 71 bb fc 90 0f 0b 90 90 eb d7 e8 bb d3 f7 fc c6 05 84 98 c5 0a 01 90 48 c7 c7 a0 ae e2 8b e8 a7 71 bb fc 90 <0f> 0b 90 90 eb b7 e8 9b d3 f7 fc c6 05 61 98 c5 0a 01 90 48 c7 c7 [ 276.255028][T13815] RSP: 0018:ffffc9000fbaf7b8 EFLAGS: 00010246 [ 276.261815][T13815] RAX: 591409f4adb61b00 RBX: 0000000000000003 RCX: 0000000000080000 [ 276.269925][T13815] RDX: ffffc9000c46a000 RSI: 000000000003af10 RDI: 000000000003af11 [ 276.278208][T13815] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 276.286425][T13815] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880325cd800 [ 276.295999][T13815] R13: ffff88807b568060 R14: ffff88807b568078 R15: dffffc0000000000 [ 276.304433][T13815] FS: 00007ff67395e6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 276.314099][T13815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.320823][T13815] CR2: 00007f0d5a2e56c0 CR3: 0000000023ac8000 CR4: 00000000003526f0 [ 276.329351][T13815] Call Trace: [ 276.333315][T13815] [ 276.336301][T13815] klist_dec_and_del+0x3c7/0x3d0 [ 276.341893][T13815] klist_remove+0x1bd/0x340 [ 276.346648][T13815] ? __pfx_klist_children_put+0x10/0x10 [ 276.352792][T13815] ? __pfx_klist_remove+0x10/0x10 [ 276.357886][T13815] ? __pfx_kobject_move+0x10/0x10 [ 276.363909][T13815] ? get_device_parent+0x366/0x3a0 [ 276.369173][T13815] device_move+0x193/0x700 [ 276.374288][T13815] hci_conn_del_sysfs+0xb8/0x170 [ 276.379308][T13815] hci_conn_del+0x9b7/0xd60 [ 276.384444][T13815] hci_conn_hash_flush+0x191/0x230 [ 276.389614][T13815] hci_dev_close_sync+0xaef/0x1330 [ 276.395690][T13815] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 276.401916][T13815] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 276.407883][T13815] hci_dev_do_close+0x2f/0x90 [ 276.413186][T13815] hci_rfkill_set_block+0x21d/0x2e0 [ 276.418453][T13815] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 276.424865][T13815] rfkill_set_block+0x1d2/0x440 [ 276.429787][T13815] rfkill_fop_write+0x44b/0x570 [ 276.435285][T13815] ? __pfx_rfkill_fop_write+0x10/0x10 [ 276.441279][T13815] ? __pfx_security_file_permission+0x10/0x10 [ 276.448405][T13815] ? rw_verify_area+0x255/0x4d0 [ 276.455371][T13815] ? __lock_acquire+0xab9/0xd20 [ 276.460306][T13815] ? __pfx_rfkill_fop_write+0x10/0x10 [ 276.467024][T13815] vfs_write+0x27b/0xb30 [ 276.471901][T13815] ? __pfx_vfs_write+0x10/0x10 [ 276.476726][T13815] ? __fget_files+0x2a/0x420 [ 276.481957][T13815] ? __fget_files+0x2a/0x420 [ 276.486601][T13815] ? __fget_files+0x3a0/0x420 [ 276.491980][T13815] ? __fget_files+0x2a/0x420 [ 276.496653][T13815] ksys_write+0x145/0x250 [ 276.501651][T13815] ? __pfx_ksys_write+0x10/0x10 [ 276.506565][T13815] ? rcu_is_watching+0x15/0xb0 [ 276.511923][T13815] ? do_syscall_64+0xbe/0x3b0 [ 276.516669][T13815] do_syscall_64+0xfa/0x3b0 [ 276.521917][T13815] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.527176][T13815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.534150][T13815] ? clear_bhb_loop+0x60/0xb0 [ 276.538895][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.545504][T13815] RIP: 0033:0x7ff672b8ebe9 [ 276.549983][T13815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.570278][T13815] RSP: 002b:00007ff67395e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.580410][T13815] RAX: ffffffffffffffda RBX: 00007ff672db5fa0 RCX: 00007ff672b8ebe9 [ 276.588798][T13815] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 276.596977][T13815] RBP: 00007ff672c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 276.605172][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.613835][T13815] R13: 00007ff672db6038 R14: 00007ff672db5fa0 R15: 00007fff31ac3c58 [ 276.622485][T13815] [ 276.625565][T13815] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.632930][T13815] CPU: 0 UID: 0 PID: 13815 Comm: syz.3.2329 Not tainted syzkaller #0 PREEMPT(full) [ 276.642340][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.652605][T13815] Call Trace: [ 276.655942][T13815] [ 276.658916][T13815] dump_stack_lvl+0x99/0x250 [ 276.663558][T13815] ? __asan_memcpy+0x40/0x70 [ 276.668284][T13815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.673515][T13815] ? __pfx__printk+0x10/0x10 [ 276.678147][T13815] vpanic+0x281/0x750 [ 276.682148][T13815] ? __pfx__printk+0x10/0x10 [ 276.686750][T13815] ? __pfx_vpanic+0x10/0x10 [ 276.691261][T13815] ? is_bpf_text_address+0x292/0x2b0 [ 276.696661][T13815] panic+0xb9/0xc0 [ 276.700476][T13815] ? __pfx_panic+0x10/0x10 [ 276.704921][T13815] __warn+0x31b/0x4b0 [ 276.708910][T13815] ? refcount_warn_saturate+0x11a/0x1d0 [ 276.714549][T13815] ? refcount_warn_saturate+0x11a/0x1d0 [ 276.720128][T13815] report_bug+0x2be/0x4f0 [ 276.724991][T13815] ? refcount_warn_saturate+0x11a/0x1d0 [ 276.730630][T13815] ? refcount_warn_saturate+0x11a/0x1d0 [ 276.736183][T13815] ? refcount_warn_saturate+0x11c/0x1d0 [ 276.741760][T13815] handle_bug+0x84/0x160 [ 276.746004][T13815] exc_invalid_op+0x1a/0x50 [ 276.750602][T13815] asm_exc_invalid_op+0x1a/0x20 [ 276.755482][T13815] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 276.761642][T13815] Code: 40 ae e2 8b e8 c7 71 bb fc 90 0f 0b 90 90 eb d7 e8 bb d3 f7 fc c6 05 84 98 c5 0a 01 90 48 c7 c7 a0 ae e2 8b e8 a7 71 bb fc 90 <0f> 0b 90 90 eb b7 e8 9b d3 f7 fc c6 05 61 98 c5 0a 01 90 48 c7 c7 [ 276.781528][T13815] RSP: 0018:ffffc9000fbaf7b8 EFLAGS: 00010246 [ 276.787698][T13815] RAX: 591409f4adb61b00 RBX: 0000000000000003 RCX: 0000000000080000 [ 276.795677][T13815] RDX: ffffc9000c46a000 RSI: 000000000003af10 RDI: 000000000003af11 [ 276.803828][T13815] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 276.811890][T13815] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880325cd800 [ 276.819876][T13815] R13: ffff88807b568060 R14: ffff88807b568078 R15: dffffc0000000000 [ 276.827878][T13815] ? refcount_warn_saturate+0x119/0x1d0 [ 276.833782][T13815] klist_dec_and_del+0x3c7/0x3d0 [ 276.838740][T13815] klist_remove+0x1bd/0x340 [ 276.843260][T13815] ? __pfx_klist_children_put+0x10/0x10 [ 276.848993][T13815] ? __pfx_klist_remove+0x10/0x10 [ 276.854068][T13815] ? __pfx_kobject_move+0x10/0x10 [ 276.859105][T13815] ? get_device_parent+0x366/0x3a0 [ 276.864227][T13815] device_move+0x193/0x700 [ 276.868747][T13815] hci_conn_del_sysfs+0xb8/0x170 [ 276.873700][T13815] hci_conn_del+0x9b7/0xd60 [ 276.878264][T13815] hci_conn_hash_flush+0x191/0x230 [ 276.883383][T13815] hci_dev_close_sync+0xaef/0x1330 [ 276.888602][T13815] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 276.894162][T13815] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 276.900072][T13815] hci_dev_do_close+0x2f/0x90 [ 276.904765][T13815] hci_rfkill_set_block+0x21d/0x2e0 [ 276.909974][T13815] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 276.915705][T13815] rfkill_set_block+0x1d2/0x440 [ 276.920746][T13815] rfkill_fop_write+0x44b/0x570 [ 276.925962][T13815] ? __pfx_rfkill_fop_write+0x10/0x10 [ 276.931352][T13815] ? __pfx_security_file_permission+0x10/0x10 [ 276.937436][T13815] ? rw_verify_area+0x255/0x4d0 [ 276.942295][T13815] ? __lock_acquire+0xab9/0xd20 [ 276.947335][T13815] ? __pfx_rfkill_fop_write+0x10/0x10 [ 276.952903][T13815] vfs_write+0x27b/0xb30 [ 276.957170][T13815] ? __pfx_vfs_write+0x10/0x10 [ 276.962117][T13815] ? __fget_files+0x2a/0x420 [ 276.966725][T13815] ? __fget_files+0x2a/0x420 [ 276.971329][T13815] ? __fget_files+0x3a0/0x420 [ 276.976023][T13815] ? __fget_files+0x2a/0x420 [ 276.980632][T13815] ksys_write+0x145/0x250 [ 276.984981][T13815] ? __pfx_ksys_write+0x10/0x10 [ 276.989847][T13815] ? rcu_is_watching+0x15/0xb0 [ 276.994707][T13815] ? do_syscall_64+0xbe/0x3b0 [ 276.999403][T13815] do_syscall_64+0xfa/0x3b0 [ 277.004020][T13815] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.009274][T13815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.015370][T13815] ? clear_bhb_loop+0x60/0xb0 [ 277.020065][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.025966][T13815] RIP: 0033:0x7ff672b8ebe9 [ 277.030390][T13815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.050089][T13815] RSP: 002b:00007ff67395e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.058605][T13815] RAX: ffffffffffffffda RBX: 00007ff672db5fa0 RCX: 00007ff672b8ebe9 [ 277.066583][T13815] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 277.074559][T13815] RBP: 00007ff672c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 277.082569][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.090547][T13815] R13: 00007ff672db6038 R14: 00007ff672db5fa0 R15: 00007fff31ac3c58 [ 277.098634][T13815] [ 277.101967][T13815] Kernel Offset: disabled [ 277.106289][T13815] Rebooting in 86400 seconds..