last executing test programs: 2.4689195s ago: executing program 4 (id=4220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001abc78b65431d97857d3b70a0000000000000000000003000000"], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x92}, @exit, @ldst={0x3, 0x0, 0x2, 0x3, 0x1, 0x0, 0xc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r1], &(0x7f0000000640)=[{0x0, 0x1, 0x0, 0x3}], 0x10, 0x7d8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback, 0x37, 0x0, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a00)={0x81, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@map=r1, r7, 0x34, 0x60, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x7, 0x6, 0x6, 0x102, 0x2, 0x8000, 0x3, {0x0, @in6={{0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}}, 0x3, 0x6, 0x55c, 0x6a4000, 0x100}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r11, 0xd) syz_emit_ethernet(0x7e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900cb04fc6200000c0006400000000000000002140000001100010000000000000000000700000a"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x12, r6, {0xfff3, 0xffe0}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) 2.032707161s ago: executing program 1 (id=4226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu'], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e20, 0x6, @private1, 0xe000000}, {0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2}, 0x1, {[0x0, 0x1000, 0x1ff, 0x5, 0x80000003, 0x62d, 0x4, 0x4]}}, 0x5c) 1.893918968s ago: executing program 2 (id=4228): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket(0x2a, 0x2, 0xfffffffe) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "910427876cb8a9e4", "1714817f93d6c1052dc8ba47dcf8a8df", "089133e2", "b65d27c5deb46142"}, 0x28) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf251000000008003b000300000008000600", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x3ec0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0xd4, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x6, @mcast1, 0x57f}, @in6={0xa, 0x4e24, 0x100000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, @in6={0xa, 0x4e24, 0xa, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0xfffffffe, @local, 0x8}, @in6={0xa, 0x4e23, 0x96, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, @in={0x2, 0xf, @local}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0x8}]}, &(0x7f0000000580)=0x10) sendmsg$inet_sctp(r1, &(0x7f00000005c0)={&(0x7f0000000240)=@in6={0xa, 0x4e24, 0xcb3, @mcast1, 0x4}, 0x1c, &(0x7f00000003c0), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000006000000040000000000000018000000000000008400000000000000030007000700060018000000000000008400000007000000e000000200000000300000000000000084000000010000000500000004800000f200000005000000060000000700000005000000", @ANYRES32=r10, @ANYBLOB="1800000000dc5af8d7260000008530000007000000ac14142ab3000000180000000000000084000000060000000700000000000000"], 0xc8}, 0x40408d0) ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x101}], 0x1, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 1.728912125s ago: executing program 4 (id=4230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500080000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r1 = socket(0x1a, 0x6, 0x7f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) connect$llc(r1, &(0x7f0000000440)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @local}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) close(r3) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xffffffffffffff37, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x3}]}}}]}, 0x3c}}, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x270, 0x0, 0x410, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7add}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6d}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x77}}, {0x8, 0x6, r7}}}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x1}, 0x4004) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 1.493023576s ago: executing program 3 (id=4232): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480), &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42}, 0x20) pselect6(0x40, &(0x7f0000000000)={0xfffffffeffffffff, 0x38, 0x4, 0xa7c4, 0xd1, 0x8, 0x101, 0x8}, &(0x7f0000000040)={0x3, 0x2, 0x6, 0x60, 0x5, 0x2, 0x7fffffff, 0x9}, &(0x7f0000000100)={0x3, 0x5, 0xf, 0x5, 0x5, 0x0, 0x4616, 0x5}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x8001]}, 0x8}) 1.460854029s ago: executing program 1 (id=4233): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000440)=0x80000000, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x26}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r9, 0x0) (async) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r8, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r8, &(0x7f00000008c0)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r8, &(0x7f00000008c0)}, 0x20) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000004002a0008009e0048"], 0x34}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r11, 0x890c, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x63b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x334}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x24040805) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x63b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x334}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x24040805) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00030000a44e9c26df4f67c1c0e6cea60104a2c2283f68f4bb2c", @ANYRES32=r14, @ANYBLOB="1e001f0020000406000000000000000500ee001c0000000008040000007f00000400d000"], 0x40}, 0x1, 0x0, 0x0, 0xc015}, 0x24000000) (async) sendmsg$NL80211_CMD_ASSOCIATE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00030000a44e9c26df4f67c1c0e6cea60104a2c2283f68f4bb2c", @ANYRES32=r14, @ANYBLOB="1e001f0020000406000000000000000500ee001c0000000008040000007f00000400d000"], 0x40}, 0x1, 0x0, 0x0, 0xc015}, 0x24000000) 1.304507653s ago: executing program 2 (id=4235): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0xfffffffffffffffe, 0x80) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="2cf568c98614500bad27ca2e65007585f539ba8a140451c38e413333a454c83c90cdc920c45e58bfa939639df4bfedd388730e3890d66eb299aceb0bd0771f614e0cb022c26062d5548447ea54f1d32aa06e68b623315f7c203e3d47c18e891db23146c00fba7a0b08cc036f9b061628afb5a98648", 0x75}], 0x1, 0x0, 0x180}, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000035000002000100000000000000000048000300"], 0x138}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x460d4) sendmmsg$inet6(r2, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="aa6b5e01928a91e43ede66d9f18d256263895adcf82422d6b945488c", 0x1c}, {&(0x7f0000001400)="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", 0x1000}], 0x2, &(0x7f0000002400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdrdstopts={{0x1070, 0x29, 0x37, {0x88, 0x20a, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x7ff}, @calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0x8, [0x5, 0x4, 0x9, 0x7fff, 0x5]}}, @generic={0xff, 0x1000, "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"}, @pad1, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x8}, @pad1]}}}], 0x10a0}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @mcast2, 0x6}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000700)="76559cb85a857d5180cb7bcac980099081cd45411760e015896b7e8c346314a49b812e55cce6119200e9a7e4f76c994ff63914f9e86508faee656ac557e35a63a4e4bed949379a19969ce229af147ce9a04ad7659f7822b40f8b9b8cef0ae55af7bf889d9f489772cf231fd92c5539eff7c639ab23151dfb81390121b48cb018b099f1d685565ee56fed22a62b5600cbaa3c6c17110fcbd7b58f18ed637d21373d0e2285336bcde15d2670b3e5ea4b69ad4b5ffa5c316a4e6253467e3a", 0xbd}, {&(0x7f00000007c0)="596860f72c5f1812f15ac3124374d6e4baa603a8b67f469a98e95b646f98bacf7fd6d8f642cc93c8e309f3be135246aecfdb50a2301d8c06eb41e2e29819adbc25f32b7fb06dd4c3f5bd63a134c2411f129c2c7999164772ae429b8b0b681ddc5dc3bbf51c73cfd80b95abdcf6c84126bd049976687dcee5d44e14f08c32e5202ed15de1fd7453878a17aa07dc4411a6faf289d8c4ec961806d3ca39e70a578447c1e6f3761009b07f62205883e25a3b0cafe7d11e09178513058365affc8cc4304be398b20e846ebc313bdcc8ebb7ae3b02c761381af22318babe169167beb413643e78b452f6b5d4322f", 0xeb}, {&(0x7f0000000540)="c6b2acf7393e5b12e8c019f62521440c76cebd54c63e3d8d687318f702f9e8dc7e1fe8f84f91cfb37afa19597a754831c8f7036f57e1210587575c1e2e51be", 0x3f}], 0x3, &(0x7f00000008c0)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x88, 0x8, 0x1, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @mcast2, @empty]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x87, 0xe, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @private1]}}}, @dstopts={{0x70, 0x29, 0x37, {0x6c, 0xa, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x3, [0xf, 0x4a, 0x8]}}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xffff}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x2c, 0x2, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7f, 0x7, "054070bf1e67a9"}]}}}], 0x180}}, {{&(0x7f0000000600)={0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000640)="b78699f52fb8d9ced5e82d99eae73bffa6cc49fd7234708768", 0x19}, {&(0x7f0000000a40)="3ce6740c91cfdf5526c320e3f1f08bd98b2e8936b1bc8b60027d480619360ddfa28d530cc3a7d585839e4cfae30f6db53f9fdac24e4a845bf762ec820f3369713d1f692ea3d3281e511ebb9dd0a1f50232c7c5bd9496f5a0c9939358fdf3ff8a4eb862ba76ce6b6dcedf785146bbf1d222af0b3d294a12d41324280f44fba5b5eb587f0eaafdd6cdf79c0c821f71232e3028c6dae41dfdbf43fa57b16d3286156f6683ab75adb8697a545c2642405042928a7e2ed3d7d1c9484d1cd2a0fc2feb3b5c8a34cc7782929720e5de3feef987876861c84300c2e5a66d5906", 0xdc}, {&(0x7f0000000b40)="7898bc669e7f4e03432bb9798fb2f8d8ca451be8f6e1a23d473031803b06efdb51b1a4a551910e8bfd11d673e83bbae7a2b16f15d2d0d09692011efd5e3e04d84bf38254ab7abd335a1e57448744a69f81f79a904df5a025f56d7beedec9968a67cf991a500b7f127b5f66b9cea315bbc0ce5c4dbbecc2bcdd1cafdd405cc8cffd1bb59398fd8beb2789d55198fb8d333997dc41027f0ff9a259d19728", 0x9d}, {&(0x7f0000000c00)="36ead2bae1eaa086cebd", 0xa}, {&(0x7f0000000c40)="321ba0dbc2b58cb97bf9cf1fb19f2be2e459c0e1012fa80989d717b602fac72c24f194fe95484338692656a4b64deaaa43506d42ea2e7e06ff88d858c5dff80030e33a46cfbdfa1fedbc125be32522e43296148ba28556b684db87b8a2e1720dbfe37eb6e653a6e171c89a864270fd448c6d004b9e6c137bb604f098da2a0e90d5d9246411ac89127c9f5eeafcfca051d912c1ede3212e343a7a69540437b3d6e43189902f2c52a622f9b9a1f015572edb9f2f882d12b347d38e9554ae464ac3c7f730744e0b99c11c547d84b0cfed22bf91f2f7a74269df8acc17e2", 0xdc}, {&(0x7f0000000d40)="cf31e7a15b2ca5eb455589eceea5d2dc6acf096cd5c7eae905aa55947c41a6cb7a37149f4ad6c495092b6efc7e31aa6f8d109c8cdefb2ce3308da417213e6c3dfc84d95bf2a8c6ed3da07e77e14a9652c41f247ce3b7f703ba06d59424842e9f306635238ff2f66ba850125dec7ceeee3cfbd698269f4ecba41dc48a0af8f0a7425556c544b3685f3bd4829bcbb3f993df3f", 0x92}, {&(0x7f0000000e00)="1c69fe1c8f293214db9e963f85ddb093d51c9be65287ce39e6f6fdaf8d04c45fc09be1558aff31f60be2dbdf40d39a485545ea7234fc5f10c25e3d67b982a9214c96cad1f4263ce45a69a50926b46974a4160895ea10d6c6862e8251b3a248e119f35d2acfa8518e5b23b829dda733a367bd153aaf205f19019e9bd1d3093394dd8150650389e30a45e95a20116e8a646f5837dfa5d04b01f82f849511c17c6fe3f114a0893dea5ce4eb7813a2cb5c5a3b49e7d0f2498133d01cad99c453d776a73c5feac88ba601b69b2e4e52525d14bff8f983c9ff77edf51b56461a716c0d61acd75649d7e01adafaca21579c", 0xee}], 0x7}}, {{&(0x7f0000000f80)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000fc0)="448e3660a16843e5cee861c548da90f21f9bc254229b6f2be09418def62d92c74a941cbbbbcf129c5b151b2ec60d76545f3ccdabfb6e4ebbb502f1346cfc4b38389075f3773c998fac7e5558ae317727ff08e1b791bf9adaa8b0f194bf572bd706598ea206d9ca2e924d8afb75913b9f9417c596f14fb419756450b5757f025d9a62c02f27735fbc2ad4209c1836c040f7b877239f0a6e3a25f94843f34b8c4135ca7a7db231f406c29a2cd20d37a495c3049da428729d0a2c227062ebde8065af031b9382b474b57a4bd39306fd58bf2725fea9", 0xd4}, {&(0x7f00000010c0)="5e7cb993c1958e5bbabb43d1f7b602c4455512c54a87dabee47aad87bf5c95ebb50e22a7e61f5765f709e08d619a126789cc8233183f44dc4eb7fb853a1aa83dd70a521701f6af10b38111912efc73adcc185d82071bf2042aeeeae2e860d8939ca65306c3701c643b9913a52de7d0f0e98668fb8414ac42442755fa730f0766cba3871dec98330e28bbd5247c9ee44769148ea7ee444d5cef36c7f56ff891d9fc259d2f65dbb565d6e7ea5caf08254c142937c38e1c2f02ab7fe7f88b001c999ba1853dc5a63fea2ab49bce80b98a1b4401ab27cb95a7ed", 0xd8}, {&(0x7f00000011c0)="bed7a782d946941ebde5fbeadfd8392ac1b2dfd893fd232dc10b33bee8b4fa8c846cf9853d57bfbf352eb4176be324977d3688a374246075e81856a74fd7299f34e6973f40afa23afd3d5d2aa61b3e", 0x4f}], 0x3, &(0x7f0000001280)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000034c0)="3c6db11cec4c629e0d8a831e62679297396277f47fbde4a8b5c5ff6e6e4710207dc0e3be6984454a8ee7f2574d28738eb686c915eb2ffdc577d75077d94e0b329c010e6f1715f9bb29874ce3213ce58187d25db59cdc53ec34b4054d66c628252ec37e2947180d1027fe2c6d9d1cd615a7835382b03e0a2e341240cbf673510ac412b596581e56e101171a6b2f8b68673b3cf4da70c79aab461af7deecf61e66ea329553603f5464c4f5f2", 0xab}], 0x1}}, {{&(0x7f0000001300)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000003800)=[{&(0x7f0000003580)="6274e2368b361c8217", 0x9}, {&(0x7f00000035c0)="df5842682cdf5c4d647457629c9bbb1d41f6de991da9b9dc63e2e985a2a41ce7188c450249ce0c0a7502bf691fdc5b1fe22e590b8f58412a3400495a3f89449ea1c01818595e172460c051bf5e6120f2239642246e58c104fca2cbdbc092da746b498ba0a0ac3cde27e75709640e8972811bb2d39a7f369730b4033b7c8e6f0a2a7d8388abba642366183438825798d0441a2af687cc064315d7dca74055ac26bbc6d9288480338890200103", 0xac}, {&(0x7f0000003680)="e289d2a7d58818033c12d88ca4d7b7e27d280e40686a129f80dcceac8e913667ea772e664fcd37e3761f054622c05712f14586bd78539ce184347fb0", 0x3c}, {&(0x7f00000036c0)="21ea578a6ed60ac385f5e8dc0d715e4baecad84ea81a402502ff658de29b690f46bdc8", 0x23}, {&(0x7f0000003700)}, {&(0x7f0000003740)="038c4f9e0bfe6b1b75a75c3bdf4545744e8351b70cd4617cc469f2d2da2007b407f554dbf994e18f3af7762b7c38506475e81cb443e7c4f63d24df18d7d88f8dcb3bcca37657dc97a99598baa39a577017ab4c7af57bf57972b4abf82eda9de99a08cd0296c05b7e1ac160889bb2d9d4b67bdbf071ec997abc6dc98b0e0bc91dcbb5fd5296af76d755b4eccfeff6f63b4e5435549c8afebe316c0654c11bdcce5cfb1ed6", 0xa4}], 0x6, &(0x7f0000003880)=[@tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r6}}}], 0x40}}], 0x6, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$AUDIT_TRIM(r8, &(0x7f0000003ac0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x10, 0x3f6, 0x20, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x80) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$alg(0x26, 0x5, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200"], 0x23c}}, 0x4004000) 1.300429649s ago: executing program 4 (id=4236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x60, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f6eae59c3f369213ae1835666d"}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x8c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4c8}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe1c2202}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2000050) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x22, 0x2, 0x3) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000300)="aea9ec43fdb43b153b3a050363548f56ffeddba3a4b29db7a96b5f0c6f9e6eef5e14f15d152f60934619d32c0fd38e8b58ab9cc7b3beae9f0e14ecd879cdf12825b71e2c2437c1ea370f0d3014c9a7943237682029fc6e9ff4f5560c38124900d37b59146ebea702b9aed60f0472743a9540113e181928f4d1e1784dd7064a21fbc1c2810469c5f2bc813176bd25e1e7230e1febedea46f89d9e7439d4660434726ac7ed33067228fc929a6df741572122e09ead17a171f07f16cf8cb147ff", 0xbf, 0x8801, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001900)=ANY=[@ANYBLOB="400000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0800000000000000140012800b0001006772657461700000040002a00a0001"], 0x40}}, 0x0) 1.263432188s ago: executing program 3 (id=4237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960207142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe8023c889fd4cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337bc5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35db96c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae374bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0c4367ef4124bfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de589020000dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161520b7e7d37b581a0f51fe26167e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800af3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09229dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a411347051460326f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9c5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba33770ce3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f24600000000a80455f324746048ea24c0df0375e2cf333fa90a51cb4cc307e208a93d56368c920c239d0b3a21136d20d4c3ac328254adc96753ab34c4e31b500f71a49a75d9d598035765a72278bc823f63f770ee055e35c367be5301fcaf733e0caad10e0e1eb103b4783243c299729b4c9e26a4a6e0f2e1170e07c63fb58bcc8e145d9d9e54291361cd906ad379fa99b345a3002a2769af372eeadb9c8ebfd4402866f278781cc0d71ecbfcb16b0dfab8043f39b44cf8cc98266e6ffd9122fe16acf0b9071e359ff2fe351601c4ef491fc21cec175d0ed34885b80e8ab975f0552756be2ead3f963487d04a0fdf28aa7f59330c2f0c78ed3800d5eeaa9627472480af1e688e79bb873503c1aecdb0b5d3dda8cb3f0c189fad95955438c0fad34d4f60755d80e3977767be97443e95f7b7982c19a731a07cda09df5b746d5ad96c3e0b84493d94bd211ff1f0e30fc959322317aff59e86e512140a9cae22becca0f195b508905fce03ab6dd01dfb1c91600ef6119aeff341d04ee74c02a717b2f6107479989cd5075e806ea2c5aad0e02db9dc43b10d2792db042e7a2cc55779403b65e442a26d1ec0227fe5d05d0d63f4b0c1ae44f391b6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000044001000e000000200"/196], 0x16c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tun(r2, &(0x7f0000000180)={@void, @val={0x2, 0x3, 0x5, 0x4, 0x2, 0xd64f}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {}, {0x1000, 0x0, 0x1}, {0x8bc5c, 0x0, 0x1}, {0x7ff}, {0xff0b6}], @llc={@llc={0xf8, 0xfc, "e9b6", "59f1e43ca48b820632e974a10a41e556007bd3a8b53ec7742a6c0968ddc7b00860ca81e9fb544dc95c615dcafea26db121f9fe5f0d3fdfade81de3ca"}}}}}}}, 0x74) 1.164580578s ago: executing program 1 (id=4239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9e9a, 0x0, 0x0, 0x41000, 0x20}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x5, 0x3, 0x2, 0x0, 0xcbb}}]}}}]}, 0x8c}}, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000546000000000008009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="110000000400000000000000", @ANYRES32=r8, @ANYRES64=0x0], 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f00000001c0)=0x10c000, 0x4) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) pwritev(r2, &(0x7f0000000640)=[{&(0x7f0000000300)="7a9e5edc4e28864f694e33e29696393bee937910714e536f49e2535849d09ec28519133cad0e302161d83a393d057faf5ca52ededfbd0eb44d1090329e3e61b409890ef6f0c8434aaedf192df51ad31845c7826a14c4a26f93c685c06fe98e515740b3e94bdab6155e3e9c930bc6a5473638cddd699613cd2072ec041f76b13cd86dfcc3af54b249a929a4095ce11548fa721912448a5bb36be456fd793d08d3e23744806d3403ab992850db8e79936aaae3577fc385c31a16857132ca1af000f8d2de20629eb33bce9d4fff51578c711575", 0xd2}, {&(0x7f00000004c0)="b1e21bf6b53be640950c7ff6916600fdccad92209f9c73019982817166354124582ce46d2f024e810db50ff528369bb0fac009b8c536db12a37e551f11d3d45fc0974f428d3ef9f522", 0x49}, {&(0x7f0000000540)="928f6e8fea556bcae6bf2b295cffc9f8b9d6ae474e7a13bb8a967af500d13fac4ffd2b63995cb83f6b31c5eeff71d52c6ec4abd1465177aa9bf241de4cfaa15cf86a5e84c30bf34d905df19a8404ba81cddc109f81aa3515ba053f145dfae70fe5de42dd6410c0ce01c0e50276e1051762b22fdeb3c2682a37cd31d131f5d4c3b139dc0d2bd9285cf7f237eddcd27d2269d2f5529f2347ff43571133cd8b903dcbae3231a65d89d82d8a", 0xaa}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000600)="cc9c67b914e0e17a16304fb67bf9eaa697a3109ba72c5baf704576320064", 0x1e}], 0x5, 0xea6, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x3, 0x0, @gue={{0x2, 0x1, 0x2, 0x5, 0x100}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000300ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r1], 0x50}}, 0x4040040) 1.091657521s ago: executing program 4 (id=4240): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r1}, 0x38) 1.062453155s ago: executing program 0 (id=4241): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x694, 0x3, 0x3, 0x3, 0x8, 0x3ff}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f00000000c0)=""/223, 0xdf) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000200)={0x23, 0x1, 0x0, 0x1c}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x13c, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x10}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x40, 0x1}, {0x7, 0x5}, {0x7f, 0x2}, {0xc, 0x4}], "91d93f499257a3c0"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x2}, {0x4, 0x1}, {0xd, 0x4}, {0x3b, 0x2}, {0x4, 0x1}, {0x8, 0x3}, {0x80, 0x5}, {0x6, 0x7}, {0x59, 0x1}, {0xea}, {0x8d, 0x3}, {0x5, 0x3}, {0x6, 0x1}, {0xf9, 0x6}, {0x9}, {0x1, 0x4}], "cc6fa1f18387fd7f"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xf8, 0x6}, {0x9, 0x4}, {0x7, 0x5}, {0xb, 0x7}, {0x2, 0x6}, {0x4, 0x1}, {0x9, 0x6}, {0x9, 0x5}, {0x5, 0x3}, {0x9, 0x7}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x6}, {0xf, 0x2}, {0xbb, 0x7}], "d60e315afc9cc9b5"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x80, 0x1}, {0x2, 0x6}, {0x9, 0x3}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x1}, {0x6}, {0x2, 0x6}, {0x4, 0x6}, {0xdf, 0x3}, {0xf, 0x7}, {0x1e, 0x6}, {0x3, 0x4}, {0xc1, 0x1}], "2c49d20fd37a9537"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x2}, {0x82, 0x4}, {0x5, 0x1}, {0x80}, {0x5}, {0x3, 0x6}], "d08c8104bd5b8a27"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x8, 0x7}, {0xfd, 0x2}, {0xb, 0x6}], "01478dfaa88846b1"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xce, 0x2}, {0xfe, 0x7}, {0x87, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x9, 0x4}, {0x8}, {0x1, 0x7}, {0xa1}, {0x1, 0x2}, {0x10}], "a64a72e1dce415ff"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x1, 0x4}, {0x45}, {0x8, 0x4}, {0x2f, 0x1}, {0xc1, 0x2}, {0x81, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x7}, {0x40, 0x3}, {0xb, 0x6}, {0xf, 0x5}, {0x7, 0x4}, {0x2, 0x7}, {0x2, 0x4}, {0x2, 0x6}, {0xd2, 0x2}], "0814a775efd62ce7"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000884}, 0x80) r5 = accept4$x25(0xffffffffffffffff, &(0x7f00000004c0)={0x9, @remote}, &(0x7f0000000500)=0x12, 0x800) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000005c0)=0x1, 0x4) r6 = socket(0x3, 0x4, 0x65) connect$pppl2tp(r6, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x2, 0x1, 0x1, 0x1}}, 0x26) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000640)=@generic={0x3, 0x6b3f, 0x7}) socket$pptp(0x18, 0x1, 0x2) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000900)={0x4, &(0x7f0000000680)=[{@none}, {@fixed}, {}, {}]}) ioctl$sock_proto_private(r6, 0x89ec, &(0x7f0000000940)="e8ece58b306f9ab3b459e484e5dbcf49dfcb59444176c3f5214611894ab6aa74ca8c098e6a22d15dca34d54a7653e1fcfa8249599c0045405b7ba36b2db2d516f987dd") ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f00000009c0)="992fe11549f1c45fbb21008525392b1da1ef2b3802fec4ec9dff7259adaad64887efe6f087008284051f5e298b6d15bc6c9925d01afc2fd81790bf9919b4575a596077e960c9388f69b73de85d41291a5a7d2bc511e7618dd54bd14224f20cbd2562112a4d9f8dacab") clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005e40)=[{{&(0x7f0000000a40)=@qipcrtr, 0x80, &(0x7f0000003c80)=[{&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/225, 0xe1}], 0x5, &(0x7f0000003d00)=""/21, 0x15}, 0x5}, {{&(0x7f0000003d40)=@nl=@proc, 0x80, &(0x7f0000005340)=[{&(0x7f0000003dc0)=""/111, 0x6f}, {&(0x7f0000003e40)=""/141, 0x8d}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/60, 0x3c}, {&(0x7f0000004f40)=""/252, 0xfc}, {&(0x7f0000005040)=""/63, 0x3f}, {&(0x7f0000005080)=""/136, 0x88}, {&(0x7f0000005140)=""/193, 0xc1}, {&(0x7f0000005240)=""/162, 0xa2}, {&(0x7f0000005300)=""/64, 0x40}], 0xa, &(0x7f0000005400)=""/225, 0xe1}, 0xfffffff7}, {{&(0x7f0000005500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000005600)=[{&(0x7f0000005580)=""/62, 0x3e}, {&(0x7f00000055c0)=""/44, 0x2c}], 0x2, &(0x7f0000005640)=""/156, 0x9c}, 0x2}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005700)=""/26, 0x1a}, {&(0x7f0000005740)=""/190, 0xbe}, {&(0x7f0000005800)=""/15, 0xf}, {&(0x7f0000005840)=""/201, 0xc9}, {&(0x7f0000005940)}, {&(0x7f0000005980)=""/3, 0x3}], 0x6, &(0x7f0000005a40)}, 0xfff}, {{&(0x7f0000005a80)=@nfc, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000005b00)=""/82, 0x52}, {&(0x7f0000005b80)=""/23, 0x17}, {&(0x7f0000005bc0)=""/64, 0x40}, {&(0x7f0000005c00)=""/198, 0xc6}, {&(0x7f0000005d00)=""/140, 0x8c}], 0x5}, 0x7}], 0x5, 0x1, &(0x7f0000005fc0)={r8, r9+60000000}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000006000)={0x0, @in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7f}}}, &(0x7f00000060c0)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000006100)={r10, 0x46b}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000006140)={r10, 0xd1, 0x40, 0x1}, &(0x7f0000006180)=0x18) pwrite64(r5, &(0x7f00000061c0)="39b2405782888b870bad991c985ec97e38a3a9b146ee02559f14c306f90570ee8e7e33f1828de04acb664335ab5140fbc219", 0x32, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000006200)) 1.00485635s ago: executing program 3 (id=4242): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c04}, 0x20000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbd2bbbbbb0800450000380000000400000078ac1e0001ac1414aa04009078e00000e0450000000000f0ffff100000ac1414aaac1e0001341517c1b7df60c733306997d767d72b80de2aa28676b76d636203684dc78a50c08cc66fd790163a5ce64498b69ddb49940e5b596e204f97b9e1ed1d0bf3d542906b17dfd1647c3e9c78067dc28735b2f8d9e32e9cdb72fd225f84afd3dac2225f7d551646cc0daef62c144cafce406d84e6ef6eef9e183828627af45a21de9c4903e7"], 0x0) bind$bt_l2cap(r4, &(0x7f00000001c0), 0xe) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0xc0, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x7a, 0x8, "d82c8ff0b3d924b2238db001398c5e3dceef2630e58198b6b5ddc24a23edeb1c0429f374a9273838956ef0f4d08414b3f54e9e9ee685aa5c0745ced389875a0f8dbcc7f6815d7288877adbf56ab8527d702443449660cf216f2c76de9aaa5a1223d8155cf8a7cf5e6839d553a0e63c0ba63c3964401c"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}, 0x1, 0x0, 0x0, 0x9}, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e23, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff9}, {0xa, 0x4e23, 0x0, @local}, 0xffffffffffffffff, {[0x7, 0x9, 0x3, 0x0, 0x8, 0xfffffff1, 0xd, 0x9]}}, 0x5c) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x100043, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f00000008c0)=@name={0x1e, 0x2, 0x0, {{0xc1, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x40080a0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) 871.964074ms ago: executing program 2 (id=4243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6b4402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00', 0x4000}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000400)=""/195) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000007c0)) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="00000000000000000546000000000008009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x1e00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="110000000400000000000000", @ANYRES32=r3, @ANYRES64=0x0], 0x20) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 836.430692ms ago: executing program 3 (id=4244): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)={0x24, 0x46, 0x20, 0x70bd28, 0x25dfdbfb, "", [@typed={0x11, 0xdf, 0x0, 0x0, @str='NLBL_CIPSOv4\x00'}]}, 0x24}, {&(0x7f0000001f00)={0x107c, 0x3e, 0x808, 0x70bd2a, 0x25dfdbfe, "", [@generic="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", @generic, @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="b5593516df901a9240a27544269613dcf8048875dd0bf6512ec7ae0101b1ad3be20ce489d159ab6a7923e37ecb7d6664880202b9886cbeb338ca5b3cbad98472bb2f9689c87a74c100ca0874aa"]}, 0x107c}, {&(0x7f0000000740)={0x3cc, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@generic="ef2c04e39bf75096de5a2960042a80d377b9ec8325e2f932185c1ce10ba88585033dab08b75ee83cc7c991e40e8d7ec2ca3c4679f0326768", @nested={0x20, 0x100, 0x0, 0x1, [@nested={0x4, 0x10d}, @typed={0xc, 0xe9, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0xa8}, @typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@loopback}]}, @generic="c0e2d76ece076559a7ae9c17c74313f02c4bf9fdb9ba7a6fff45147d7a97f86a0af4da9eecb85d44cd5ad7bf94f115ef155af58968317b913561529a361a6f17d26d013ecc0965eb61a798d126ce5084386ab99115f91a0085fa683e11e4e0bad746d874a07d0e21fdb156e82ec121dc1e84e3e3a073f4a053903fe2fb685146a0a6de9707e0ddd0667aa17ec30b3008e1af022b7296d407ad4ebcded6d74449049cc7565edbc48717701ec3ea58d3c5f3f230e3d932b747394e2d75566fc7a5eaf8e497d5509ab4bc523170", @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x272, 0xfe, 0x0, 0x1, [@typed={0xc2, 0x3b, 0x0, 0x0, @binary="9c89a3b4eb4bd8afb544aa6509ad0948c30fe6658b93b6035a9f51bc0bd9364fdc8a3a58243b8dead7faf4f4affeb9a150ffb22a6f62ce2f8501bfc737453cd8945ad7ead9024b26a69a6d882fd2cede3ad9c4b0588108100ca94808c74ec3556cc2498aed0110fcaaf22476980b7b7e855a9367d48abec233ce26215e0ff272afc09855ea5c0804797a2e95a39e87f637bcaf9e762342e839c6e9a41cdafff0c623ac9d30c5ce8fded11828dc61d0efbada3a5b6ca4967a53d32bb52166"}, @generic="7b8f28370041f1f4917f1aef5d8d6d67f1e3a33a2cf273b52f1ae23507ea59a5a086ae3f9d94a06baf6b22e4c6b07baf33a42c1931b48e2de9ec4c2c5975dd312518f523531b0f7f7e8a1954a096bcbc10082ce4583bc9ada3b4b6", @nested={0x4, 0x8c}, @generic="268243f21b36a9ea79233fc354ce1a89eb19e40494c21693a7a79075a4e7c0743337e20c9b354b120524eb04b3c357c21517d3cfaef3be1c1fe459389f1b81d88f154f9ab858f4676aa3588f3c3edb1e6cab", @nested={0x4, 0x113}, @generic="085c7da49a3741a3b94cd2d452ee2a95b3770b91b23807a79fd41d9a1884da364a16c23424eb693a2abaf08669ea4eaab155282493cc7166bf97ff4e3b6ac6064793b145aae5fbf99d4934b297d92252a0f70ee171500765d8448ebc3156b0976c28d6aec9f0ac80637ea517351f2fba9b2bc576b2a722ca7934c780716c04c0319630f63d338f00dd7d3bc33ad26ad75edf4892c69f9543bf741da6693f04137c5bab9f90e38380b72c81e30bd2f97e09a72909265dfaa9adb1cf62fcaabd5f7caf326caff32ae23f2ee3b055133a167e10bcdb96f8e70dfac749cf510d61cc9f8525fd395a41aac177be3516447952d1b4194fa8"]}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@remote}]}, 0x3cc}], 0x3, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x138, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 700.760315ms ago: executing program 0 (id=4245): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x5}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) recvmmsg(r2, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f00000000c0), 0x4) r4 = socket(0x28, 0x5, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x43, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@empty}, 0x0, @in6=@private1}}, 0xe8) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x8b) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="4000000000000001000000000000000000f1ffff31f7da077dfed174ad08c2ba395938985887793768da217b4f3198912775baee957719f2ee7f50d3edf58ee9f7526a3a9201be6867dde6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50) getsockopt$bt_hci(r6, 0x84, 0x85, 0x0, &(0x7f00000004c0)) r7 = accept$netrom(r4, &(0x7f00000002c0)={{0x3, @null}, [@bcast, @rose, @default, @netrom, @remote, @remote, @default, @bcast]}, &(0x7f0000000040)=0x48) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000180)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 699.983307ms ago: executing program 2 (id=4246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x4e2, 0x42, &(0x7f00000000c0)=""/66, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xe, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x1, 0x1, 0x1}, {0x3, 0x3, 0xe, 0x3}, {0x1, 0x3, 0xa, 0xb}, {0x2, 0x3, 0xa, 0x9}, {0x1, 0x5, 0xd, 0x8}, {0x5, 0x2, 0xd, 0xb}, {0x3, 0x4, 0x9, 0x4}, {0x2, 0x5, 0xa, 0x8}, {0x0, 0x2, 0x3, 0x4}], 0x10, 0x4b}, 0x94) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000ac0)=0x7fffffff, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, [@jmp={0x5, 0x1, 0x6, 0xb, 0x3, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000001}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000005c0)='syzkaller\x00', 0x10001, 0x4, &(0x7f0000000600)=""/4, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xc, 0x400, 0x8}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000006c0)=[{0x4, 0x1, 0x8, 0x8}, {0x1, 0x4, 0x9, 0xb}, {0x5, 0x4, 0xb}, {0x2, 0x4, 0x10, 0xc}, {0x1, 0x5, 0x8, 0xa}, {0x5, 0x5, 0x8, 0xb}, {0x5, 0x3, 0x7, 0x1}, {0x4, 0x4, 0xf, 0xa}], 0x10, 0x7}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x50}}, 0x88890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r5, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=@deltaction={0x1d0, 0x31, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff583}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe149}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc09b}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x84}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x80}, 0x1) 697.440278ms ago: executing program 1 (id=4247): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x28, 0x0, 0x1, 0x1}}, @ip_retopts={{0x10}}], 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) 632.210235ms ago: executing program 4 (id=4248): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 600.760809ms ago: executing program 3 (id=4249): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x888e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x3, 0x0, 0x3}}, {@generic={0x88f7}}}}, 0x1a) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5c, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000811}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x1401, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xa00, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20044004}, 0x8050) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2400}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x65}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="005cd5d47f1179f8ac00000000"], 0x14}, 0x1, 0x0, 0x0, 0xc}, 0x0) 553.00782ms ago: executing program 0 (id=4250): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x114}], 0x1000000000000097, 0x0, 0x0, 0x600c8c0}, 0x0) 522.592656ms ago: executing program 1 (id=4251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020"], 0x28}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x4010, r3, 0x25834000) 412.008521ms ago: executing program 0 (id=4252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000, 0x8}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x104}}, 0x4cc00) socketpair(0x2, 0x802, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x2b, 0x107, 0x0, 0x0, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a00"], 0x38}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$AUDIT_USER(r2, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x28, 0x3ed, 0x100, 0x70bd2c, 0x25dfdbfe, "1073afd3d6a463637ada91f3e0fe6363630370c72336", ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008000) sendmsg$kcm(r2, &(0x7f0000002a80)={&(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000200)="2795306ef99cd3d6316936fe95ced81a68f46567761a57654b7ed82b", 0x1c}, {&(0x7f0000000240)="1426b8f7076e440a065623825c332abb9da6dd5b3619390841bab5ce11b2ccaa089bb13a338819eb2741dcd8d7a6f760543cd36e99a93b9cb9c68524c0d6597554f46e0de9e93ec6b43baadb47c3110aa9bede0df468aca93eb79c4859bf80961d5a44cf76852c11cc", 0x69}, {&(0x7f0000000600)="a3ed61200250ee158bbeb8a9b31a105dd3e4466192f690b657eb366be7756773cd22e673ee186ef66eb1d943cdbd97e54c067e91790a6a21ca6b5b4d6dcb80bd0a6c040f54f3efacc6b21ffcc3f1739c45dcfe01ca5ca162846ad46267a2aebaf4fadbbf7551fbe1d1d8536d08450286e44d9febb25654432a39801ae76d7acde5d72d23d3e2d69acae43e284b8427702c399781758de01e77393da51c427987b5544a525ac0cbd104b4fd5c525b8b2440509cada9536e16348e59fe91a67d566c9da3eb4df7af4393c5c06e8aedc0e26e80cfbca3f5cf50d9d1965611b411fee03061d5cb954422a1d10259d5966341cdacf7e8", 0xf4}, {&(0x7f0000000700)="fe8d6fbe72047d46d18fcc05a0f955acbd99a5061c23638b14405edfdc5f35b4ecb18003d0f0976e970f682d3764cdc5a9ac57048571f79c940a95d2fbd8140b8b677b30816fe1f9b8285ea362bd7dea414544776688dd0dada645ffaa2a5b498c94d6498130e6b60cc1c6b90669f3335124c45c9ceb468983ba4f0bf9a2569fd551fb41b2c29acbac15a98fefd0ccfd8317cc075db9e03ae6535eb991955bfc35e640b6ae5b6ca4579a35475db935db79b20fa21d02b738da92755886f0d5dec468b2", 0xc3}, {&(0x7f00000002c0)="8d47322108a50bbea9673c9b7e986dca73fc96ef9226c012e2271d3d309897a0f324be773d58e924985b37c6f428fca28f8c3c61d99a75fb848d4c91e6dc08b0f919c074f767958e4bf9fa18c677002cba4b57845c770d3cab90df46b3912d5d003c63ba38bf331933a34e95ed1cbc9776bc2f6e68de812cd3daaf93eb1eb8c01cd2e4571ca07cb9b72100f314246f380b295278a8f4c0bc014c60c7725544b44fd1b19b086602fb1871d44b4c80fc9c40438af008274c", 0xb7}, {&(0x7f0000000400)="8a3c5b2f441253b957a5a0c2f912104c0d862b3e0f70598017b2943b09fa3aedc8ef73197429399d4452586e0e858407c2e8053c7aa0cf09e933983711ba5a975fe3877109bfb0722dd56d34ced8ebb6af9cbb1f4705b9132b7fc1f3576112ec91751b9980da4540e16e1cb6faa2e97df2027b58e41bc76450f80ebfce7604b7d2710499453f1c174291ab2bf535c75691008f422e643b1d5a1010a511e9fd622d8871c508a6aa10b7", 0xa9}, {&(0x7f0000000800)="c404ebef23a507221b1b1ee2abe38af46229e8837c1f2c432e71a8749c60cf3daa1770f67c819545f34f245da0904f050d1a7db6af6fb28629ec7fddb91f7d49ed1669bfe605ce", 0x47}], 0x7, &(0x7f0000000900)=[{0x1010, 0x104, 0x5, "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"}, {0x1010, 0x1, 0x190, "c1245b798f7bc36aa64daded4dd7bcd6e337b5b64e1ad537c9a949f5300ba8700cd43fb838ae7ea34d3769c10508bb3b479c00d3a80efa086acdadf9cca74da4605a59d9016812af14932f1927f12c4662981b7b48d4df18ea54deef2a2c4e38232e6594f1ce3fd4368860b6472782643ccc7682388056e15b23292ed286a1842c358cbb934897711ef9f4a55394d7ea58b76db8ba7ffb88c1dd73626b1ef8d207b4279c844e450f98cb00c68233a13fcf70a6103b0d318898e492387202ccb3c60990a5cea75e94b04eb9106aef466daf831bfc32acd0422d2c947b7fa9b58329ae7117d437660da6034d078fd4a98bf2aae0c3930d4522ff61826215e69faa5d64b7ec13716fcb58e47b21682c0ac8fdbe8e3636f62cd71faf55d39c61eb3abb66653f94be0ad4cb9254a23609ca0867779dcce565b12e736e22daaa395e31cd15e92b403b3c0b36b159782440523550932d2c2fc122d122abce3bfcdf1858aab979db6cad0a289d2bf49072019a96b7af63cc4f2a0c084c3073cb069421e68be9a898faeb19ad2a66f6760b482b7aa3544dc2133f6520da774dc59da8f8fc6d46f43edec932eb7fa4d6f6a1ccfeb862f5125aac041dc8b998ed54666cee750f86bf3a6c57d167a9f7710cb93b7944c301d52fcf0a666c1f2f5979db427ddac4308649cb3c85e819c717dcccab248300f9f6cf80e7e832236a0b682c317a20a4d613c65d58154c65e0f90a95b6068ddcd7fdc80cc9ddc2175359d11a819c3db218e35a29fd75c0d5ed6f7eae4896efac3dde105903ef59c3284df22392483c8aa3fc5c02fbed6faeed6309c5a7270b5e17af5bbe984bd5a78ba51e7297ff145aab0dbca7f32cc91fd0991c13b8b5fc905f70c7f542e4d4d1e621249b1a71a66bf7679c7acdcd5a40b5f179d4c1cf68828bbc50a6f5f4847ad75fc21e58ed8bd4fd2d4f2a25ee7ab4099174b7caee5a9489c13c12bde11c405e930122ef0522e6c7890329ebd85351194e347ce8d02a428508f8bbc3382c8bd22544925bc0a57a50bc6877667c846513d4ac0eb32cd59131e840c8c6c446c58c2a82fac47d2b3727967b1ec5f681fd23308d9cce7149914ae64ed48fe1ad31f7196b0d616acd976d7ccc706a5e8e10d064c3c060ef4bc0ce141506fa3fa2ec6968ee2763cbc09e1d54b248c011965d1030dcc7cc1e3be66b669069471eecd1304f79ef655185701503c2cc2d63a4ba22ad0e4b7d5ffdd2e8e244b3d3cb4c7874a3357dfef27162f59e05860016b0662689572e6623d81e09c44d012cfb41c862909cb232f39c7d6bb6fd8be3002a36d3508303718e3d1f01295d114df7112582448d54d02298140e642eea1de57f4834ee0502bd86bdd14a94d92d36f42484c5e554c89dce5c14eb1d03e3d47063938149318dbed564fac712d0a8dd8757fcb3d9725506b09a1b8670c709fbb244ea9b83cb4ff97de0204982427f3c8eaf19ea7896fa8b4480d0518552a6a6f68ba5a304d3a786a62ece6c9c4bd7d7d77ebd6a4a40063d3bb37c4717df518ce25969034535994be6cbb994edd49930f3340068795c0e42ecc211fa32c3e97e9483cdca3be42ff6f22e5c6ddd108caaf07bf714f3c790e7bb1215b6430b422894a039e7f2517e14ee9faf4006f809755adad8b418acea77a3ad7c1a65c648ef9ca92f2c6b5643da3e51b42dc77495d7b9a8b6dbf2c31a0385e8e92dbed0513d1717e1bf9e58450accb3f885d55a70cff1b76669598a207363f1b438e60fa6fb9034da753eb916980551e7d13bc4f8d859ea3af344688a7a49a96227163cf696573b618d28913c44604523ddc38284eb17f3a37e9ca5bb551b64a7aa4dab2e578fdfc9681ff47fcab68605d8494016dfd2825dcbe8962e682c207e8bd514b2545b3c91911758f33313cce56588e0a616d2a7e6948640fa17761ef34f0f0c9a8fb2f05830f6162a7f8b7e0df8490653ca2cc57be63648469ac3899bd93a4e7beb38014c5cd7b4287f337ce02acb4a0582cb8009a2d61ab54ad58dbc03f24eb81a0bb7ea0990e07908b28a19e2abcf0d66db6dda7ea65bbb955fae67b7f094a2f97b74cb63e93d407a0058d1cb7272a41c8a908b84f41c56387b2fa8968a5c5a877f58ddefc188f1444c82fa7885e83ba23d59966b11f1ec0a3483bc9dcec7a8f9038fbe8b7648d919b869ab8b85278aeda77dbda61a7c615fdd7553870bada06a6a602791849e624112ecaf3c837be1227b13a4aebce8914e26ca7123dc2d1586426604a7fd755403cc26e8905b7df139ab57f06a036c5ea3cd2f53552c92db595bbd43695fd53978f7976775928e48283fcbdbd0c7f0a16eff5ccf924befac4a55d2697fbadecfecc892f6382412255269f66c969cdef26333afc3f80a1dd6e8db34844fd76f659b168e21aad88c7fab4f0c2064669e2266cbc4844ba6944ea1e9a9381663d651adc3bc1c45c87d3f92757388bf2a7a25fc8c160e15d7b49a38bcc3777ed6733145d72a6fae8f93d2b461580cf69cabff94f1c89d603ecdd7d84b6c8602c155cc2b5ce8b18412649f62a1b96ab14e914b5f02a297695cd665a104883c5cfe60872d12d5fa29e27c7d9221d0c9811ca412c632c625964b2a7672565689e367d380979f0e9bade7d4056e717c59491088f09eac2e4effcd511349740ce518fb40b1bfe8f10c16d8b07df34cff3bdf0e1a2a55dc9f42b421c0e6d7080833fbc546bb57f5043518d361ce7fccb39e5115e846fc0d461dcb4dd766818efa8783ef8f11063018154bd9b034a98fc1c80b8fd287dcba09de31b6731b329ca73c177a901daee4d8bcce51fa5f7a6664906e5fa97015375f95579343697894c2cf607352f958786c41da5fdc3665b9c6664e998cbd06d2942e62fd47aede6c4c619dd716b3b21f0bab482f4b34b34526eb2c5d7cea2bd9c4a0a218b55e1bd66d1c54ef8f0c4cb7d36e09db00f3f031900d31785598035cbb6c85863c04fcebffc08b090de85e492d3fab7f87ccb3cbedc19ad554deb51b5cac6a7590ce08fd2f08d091e9a1a90757bad426573fbbc732b3ff955c9f8e353c7818c3791be8537490bf7e715b3d418cdbc53003e261ebacb6f0e45794e22267281145e8e710e5d05b9bc66aeb1322f5d779483f1012d97f658bf04d33de35836e41deb40a9066d22a28e0c94a7e74217f71c0fe9b5bfd787803071cff1d0ab36b07bdfe44b54dd0e44a4d2e9638a72d98ba69b995d26e00596c3e66b52c083b644bf836c5119a3e163dbdfe28d395f43e06ee7df2feea8db0c83bf97c7f76a45652dd7ded1e5c7d3c4e02af2aaee7f60969205748d38e5e2c46ce148b9863c5e945be7639b0b4a90fe4a4a99a6f2ecc69fb1958f06655f7f65d3609a2da27e68d7d78565f172051ef82efa17f3a9ecce0bfce15f270c168e05662dd48a34b9fc116aa8cf94444038eb1601c8ab2632f655a95400b3db91df5ad6490388e03672227f0a67538b774901ec465ee34f0be150fe64a56588d3f196b23b708984271f4a4ca5c88851fbe9761cba10c1ccf429947f25ca8568fa2b239420b1e271eb6d6a131a6d6a46431733e4ac373f5223fcb3e688c7e1069eb21fa32932aa37fc5f8e591cf3a24cdf68448fb4f6ce6451d873efc2de054d36349a61045dbe2dd7425f5790aaf8ea627a42b5959a860573372a84c3cf85482edec9bf873c5620d7c4d9cac89cfdc965ebfa099c86d0304a4a04822f5dcf3771af7a87062b06d045c2e6742c8365db2b795cd73eabbc1e5d32fbdc9ad0aa53e0b7d4dffd9cd59fe3f6ef8742c30c8dddebdd0e56e290077b9a89d179e7c2bd552350706f81fe76dcfb5eb97993df63d79a8ffba4cef82bc4312a1afbc5a4026780f6573a21b0a909d288ba0b4535388950fab55c46010f0fd451bfc09184fb8d2be2dbe6b304158485a5dc00d44fcca206131ab9e4960b4fa7c06a41307c2511b225795dfa5965d4a511026509d64e1c486e8641ea74d99563e4124a1e113a3338274962f2ea269b35e66f206be4627fd8c2a6f5bc34f035ce5e6f41566ad061f2bac475877b314c33a30a691f24624673739ca8eab6c8fa636b655425b3edcefcafd064ef4753f69f0987fe70677328d58b5a79835456143631de435c621ea637fd1c7ef6932653b260c3ab6cb67227a5980fc2988b44f08a98f50bc00bf2709248be471068dc560ff6714514e30d5e537dab1a1684db4d7cacf4488ff93ee33d6df085d27176849c08bf80fd47b9215fbff06f2ddb9d6715cf6a0922414bb69ec71889e68acb0b213f0a8f54e5c5347831e4a491e9371bea3f09ecb4bfd19bfcdc5c1e42d4cc7d7216cad1a4cbf37e139e7bd84149654735a375b7da92ba3fb30aa9f6db7eabe8efa099dad2700d13b944e16a24bfee402fa50c29b5d4de9da37cf368e83e205dafd168ccbb9cade7a5d756fbb4e99f2df01a3bd25a25b3145616acdf4322a32888bc886906729346137c64d73353a92c6a7edc55f3cdadb7b3368fa827a12b98738dd2793c36c488f8ed82a6f50c165d7e37349330a4e540f1552f4c18c96319da555182098961ee6a9be5451740b3265a9215cf144c64bcd8da73c610e6caae33e0d977be5b24a83014acac31e0cea97068a3803b412861063fad9d34bdcf9456ad023d15b02f27839d2dfb19edf65584f2b8e252123af894e8a176a308c6327aa3b89dcc28876c2be8812b166e98fd979d129085b72384646ac89d88ea4337cfefaecaed031c1b3a6866fff7ea7e703aaf613b5fcdfd3906952b946e4a4463f60bb5e0697276e4a0be26d7fee37dc82e1a22a948d0ae501d2f3551551ace444f028f35a898420b82dc5897542cb8170caaf6967a30b5cb6d5cdf67b159eedf02d9af484a664d767a6a3c4bed17e6f9e6d2cf28d40ca8b733cd531a2236585a0088a043b792eb58c49dfe19f2e1c3c6853fb98745e7585e9e4b00d49c7b37422fe280963687653a382354072a670af0d0023425d9cd015ca55c83a34f6844810a44141036bd78ce091602461889be5a2d4ba8c2390820c17041e43e53f644065c0647cdd56f608e663002b7fb8e5632ef6eec3896fb1bc4da2c7e539c8ce33506571e0fd83ed8834454d9f679265168f729f8d11c38c9aad242f25d7ab2e5afbf452ec6112502656aeb39bd8da5662ea2ffe86a903b1e73c10cdc69bccb60efdef8fbc7653c4ec1ee88f7769aba61f3e7b4ca59c862d7f5063cd33405f005a7b79675c91687547f004ec704179faa1e841ef3651d18f3e0e36dc3147a0d7596db4faf8ac581f45e9e9ac91803b16448743c5afa696ab7416f616d413ca61a4c730d98bff9d92d6bdb031234283597a1c10c488453d44f2870c7db8bb8560f8e8ea28b606cae560a3a280388af65c5b2c83ed754c52c0e6a2328522b0f7ba388af8ecdb24baae69b6d55970b7f071cae9871c55c1a3a1c3968ea06139ec62c8a23b8e69a93cba35bd976d8b0446b26639db9d75940f09feeb2e1e21eb448cab805f9670e813b605d47f04e1c3b71187a92682780d84c1d975e1c51dcc643d7e0c25b9da49327a74a6c5237e2c855c9087ce189717e98c0b33cb7267060ede221d3968fb76cd47e026d7d2cdb1e8460404728c1d59703b05b043be3255e6c03a01a3a0f5cd7840da4af1a45b207e7c5a3b0fde8e85b73d2117dc3ec1e22c205a35af361f392ab664a1dc808c16df4cd16e779a412f0bfa49ac8ba6ac39e0714aa7b704482ea915ac982ad03b8a3af5fe6515ddb6f7d056599c79d4225bef7bfc64"}, {0x78, 0x81, 0x9, "399a3f984d66e2a2376b6594c812907fbe38f64546ccce1208aa9c70c8c57eeb067951848a86d2a181888fc30b7b1ca1e06b9cea8f4b5380aa86292e7f3bebb9016a20ce0af2c3e92028f777470ea260ce048da83d750c45d5b1c76b75fbe94349"}, {0xc8, 0x88, 0x7, "acf5f9af151a0572c051806bdafa6c246d95bdc679be0368f50455fca979e04241f8565eed30aa9792b463de960dac48ab6aff2a4af97f607dea17b74028d78c7a49cacc55e24aa35c09a754a86d884b5fd68255d3a666aa07c76e0fc0eb1739c74bd6d42ba9a452eb4d98fce8253481598c97ed551abde824e3755c17dc619362b3600d8a0e16163f42490b545e7234023f29662fbf9aef1d43465727efb171fb53651090ffcc70fd487e8a252591e682a48d9ad6bc022a"}], 0x2160}, 0x84) socket$kcm(0x29, 0x2, 0x0) 340.664932ms ago: executing program 2 (id=4253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x4d, 0x6d, 0xffffff44, 0x5, @private1, @private2, 0x10, 0x7, 0x8, 0x9}}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x100, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0x1}, {0x8, 0xfff3}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r7, 0x0, 0x0, 0xc040, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r5, 0x1, 0xffffffff, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x48001) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r9}, 0x38) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) close(r11) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close(r12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) 133.82028ms ago: executing program 1 (id=4254): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', r2, 0x7, 0x7, 0x1, 0xe86f, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x30, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@ssrr={0x89, 0x13, 0xbe, [@loopback, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x50, 0x4, 0x6, 0x0, 0x0, 0x0, {0xb, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040804}, 0x4004040) recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x24000090) r7 = socket$pppoe(0x18, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 133.370395ms ago: executing program 0 (id=4255): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c00a7aa00000000000000000a0006000000074000000001"], 0x44}}, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x3) ppoll(&(0x7f0000000280)=[{r2, 0xc0}], 0x1, &(0x7f0000000440), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 132.586628ms ago: executing program 4 (id=4256): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r4 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), r4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002d00)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8814}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x3a, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r3], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x24000800) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf250a0000000500380000000000060028000200000015002c007f008000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r6, 0xc08ba000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000300)) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfd}, 0xc) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000380)="0c74c728fe7d0bcc202bf89d0ff8fc535441b0b8ec8de5aa7b87f08301effc1259a834fa1cb05c4137773e797468907842b1b9a3721e48c80a5ff9048d044a6b85732318875e", 0x46}], 0x2, 0x0, 0x0, 0x10}, 0x20000400) 107.536598ms ago: executing program 3 (id=4257): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x122, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @igmp={{0x31, 0x4, 0x1, 0x6, 0x114, 0x68, 0x0, 0x4, 0x2, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x13, 0x42, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x28}, @empty, @dev={0xac, 0x14, 0x14, 0x31}]}, @noop, @lsrr={0x83, 0x13, 0xac, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @empty]}, @timestamp_prespec={0x44, 0x4c, 0xd9, 0x3, 0x5, [{@multicast2, 0x1}, {@rand_addr=0x64010102, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x4996}, {@multicast2, 0x81cf}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x3}, {@loopback, 0x390000}, {@empty, 0x1}, {@local, 0x8}]}, @timestamp_prespec={0x44, 0x3c, 0xe8, 0x3, 0x3, [{@rand_addr=0x64010102, 0x800}, {@loopback, 0x7}, {@remote, 0x1}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@private=0xa010100, 0x6}, {@remote, 0x7}]}]}}, {0x22, 0x53, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, "0c1309b1046f82809659b5a408d8b084123b5242abb08c688f63bab294cca540c89383f6a705400d5ddb5fa5abf134383c5996f092f7f7fb7682e08107b7b05cbd06bd4b77c0a381"}}}}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 649.147µs ago: executing program 2 (id=4258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x106, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0xa, 0xffff8001, 0x100, 0x3, 0x4a}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x207fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 0s ago: executing program 0 (id=4259): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x138, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): l_usercopy, interval 1, probability 0, space 0, times 0 [ 355.663373][T16204] CPU: 1 UID: 0 PID: 16204 Comm: syz.2.2864 Not tainted syzkaller #0 PREEMPT(full) [ 355.663405][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.663418][T16204] Call Trace: [ 355.663426][T16204] [ 355.663435][T16204] dump_stack_lvl+0x189/0x250 [ 355.663464][T16204] ? __pfx____ratelimit+0x10/0x10 [ 355.663491][T16204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.663515][T16204] ? __pfx__printk+0x10/0x10 [ 355.663543][T16204] ? __might_fault+0xb0/0x130 [ 355.663583][T16204] should_fail_ex+0x414/0x560 [ 355.663615][T16204] _copy_from_user+0x2d/0xb0 [ 355.663640][T16204] ___sys_recvmsg+0x12e/0x510 [ 355.663684][T16204] ? __pfx____sys_recvmsg+0x10/0x10 [ 355.663743][T16204] ? __might_fault+0xb0/0x130 [ 355.663780][T16204] do_recvmmsg+0x307/0x770 [ 355.663812][T16204] ? __pfx_do_recvmmsg+0x10/0x10 [ 355.663848][T16204] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 355.663897][T16204] __x64_sys_recvmmsg+0x190/0x240 [ 355.663922][T16204] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 355.663941][T16204] ? rcu_is_watching+0x15/0xb0 [ 355.663967][T16204] ? do_syscall_64+0xbe/0x3b0 [ 355.664000][T16204] do_syscall_64+0xfa/0x3b0 [ 355.664025][T16204] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.664051][T16204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.664071][T16204] ? clear_bhb_loop+0x60/0xb0 [ 355.664096][T16204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.664116][T16204] RIP: 0033:0x7f1fad38ebe9 [ 355.664135][T16204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.664153][T16204] RSP: 002b:00007f1fae2bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 355.664177][T16204] RAX: ffffffffffffffda RBX: 00007f1fad5b5fa0 RCX: 00007f1fad38ebe9 [ 355.664192][T16204] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 355.664204][T16204] RBP: 00007f1fae2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 355.664217][T16204] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 355.664230][T16204] R13: 00007f1fad5b6038 R14: 00007f1fad5b5fa0 R15: 00007fffb6652508 [ 355.664264][T16204] [ 356.371941][T16220] netlink: 'syz.3.2869': attribute type 7 has an invalid length. [ 356.415858][T16220] netlink: 'syz.3.2869': attribute type 7 has an invalid length. [ 356.483784][T16220] netlink: 'syz.3.2869': attribute type 16 has an invalid length. [ 356.553579][T16220] netlink: 'syz.3.2869': attribute type 17 has an invalid length. [ 356.812151][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.829120][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.839549][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.847296][T12016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 356.863959][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.873004][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.901835][T16220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.917067][T12016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 356.944205][T16220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.036391][ T24] lo speed is unknown, defaulting to 1000 [ 357.042360][ T24] syz0: Port: 1 Link ACTIVE [ 357.054878][ T78] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 357.084207][ T78] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 357.103819][ T78] bond0: (slave batadv0): link status definitely down, disabling slave [ 357.114185][ T78] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 357.133018][ T78] bond0: (slave ÿ): link status definitely down, disabling slave [ 357.185078][ T78] bond0: now running without any active interface! [ 357.222953][ T24] lo speed is unknown, defaulting to 1000 [ 357.527382][T16233] lo speed is unknown, defaulting to 1000 [ 357.591247][T16255] netlink: zone id is out of range [ 357.625152][T16255] netlink: zone id is out of range [ 357.630443][T16255] netlink: zone id is out of range [ 357.655842][T16257] netem: change failed [ 357.664050][T16255] netlink: zone id is out of range [ 357.680465][T16255] netlink: zone id is out of range [ 357.721726][T16255] netlink: del zone limit has 4 unknown bytes [ 357.815223][T11997] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 357.926102][T16268] __nla_validate_parse: 10 callbacks suppressed [ 357.926126][T16268] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2880'. [ 358.203588][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2883'. [ 358.611228][ T3477] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 358.983412][ T5869] Bluetooth: hci5: command tx timeout [ 359.211634][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2893'. [ 359.468331][T16323] netlink: 'syz.2.2895': attribute type 10 has an invalid length. [ 359.476587][T16233] chnl_net:caif_netlink_parms(): no params data found [ 359.632860][ T9901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 359.669022][ T9901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 359.862728][T16336] FAULT_INJECTION: forcing a failure. [ 359.862728][T16336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.869725][T16233] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.887648][T16233] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.895381][T16233] bridge_slave_0: entered allmulticast mode [ 359.906163][T16233] bridge_slave_0: entered promiscuous mode [ 359.914155][T16336] CPU: 1 UID: 0 PID: 16336 Comm: syz.2.2898 Not tainted syzkaller #0 PREEMPT(full) [ 359.914185][T16336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.914197][T16336] Call Trace: [ 359.914205][T16336] [ 359.914214][T16336] dump_stack_lvl+0x189/0x250 [ 359.914244][T16336] ? __pfx____ratelimit+0x10/0x10 [ 359.914272][T16336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.914296][T16336] ? __pfx__printk+0x10/0x10 [ 359.914324][T16336] ? __might_fault+0xb0/0x130 [ 359.914366][T16336] should_fail_ex+0x414/0x560 [ 359.914398][T16336] _copy_to_iter+0x575/0x16f0 [ 359.914435][T16336] ? __pfx__copy_to_iter+0x10/0x10 [ 359.914452][T16336] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 359.914483][T16336] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 359.914514][T16336] __skb_datagram_iter+0xf8/0x990 [ 359.914539][T16336] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 359.914572][T16336] skb_copy_datagram_iter+0xc5/0x230 [ 359.914601][T16336] netlink_recvmsg+0x2ab/0xa30 [ 359.914641][T16336] ? __pfx_netlink_recvmsg+0x10/0x10 [ 359.914684][T16336] ? __lock_acquire+0xab9/0xd20 [ 359.914710][T16336] ? aa_sock_msg_perm+0xf1/0x1d0 [ 359.914742][T16336] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 359.914765][T16336] ? __pfx_netlink_recvmsg+0x10/0x10 [ 359.914795][T16336] sock_recvmsg_nosec+0x183/0x1c0 [ 359.914827][T16336] ____sys_recvmsg+0x3aa/0x460 [ 359.914860][T16336] ? __pfx_____sys_recvmsg+0x10/0x10 [ 359.914902][T16336] ? import_iovec+0x74/0xa0 [ 359.914929][T16336] ___sys_recvmsg+0x1b5/0x510 [ 359.914958][T16336] ? __pfx____sys_recvmsg+0x10/0x10 [ 359.915018][T16336] ? __might_fault+0xb0/0x130 [ 359.915049][T16336] do_recvmmsg+0x307/0x770 [ 359.915082][T16336] ? __pfx_do_recvmmsg+0x10/0x10 [ 359.915118][T16336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 359.915173][T16336] __x64_sys_recvmmsg+0x190/0x240 [ 359.915199][T16336] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 359.915229][T16336] ? do_syscall_64+0xbe/0x3b0 [ 359.915260][T16336] do_syscall_64+0xfa/0x3b0 [ 359.915285][T16336] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.915310][T16336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.915330][T16336] ? clear_bhb_loop+0x60/0xb0 [ 359.915355][T16336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.915375][T16336] RIP: 0033:0x7f1fad38ebe9 [ 359.915394][T16336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.915412][T16336] RSP: 002b:00007f1fae29c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 359.915436][T16336] RAX: ffffffffffffffda RBX: 00007f1fad5b6090 RCX: 00007f1fad38ebe9 [ 359.915451][T16336] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 359.915464][T16336] RBP: 00007f1fae29c090 R08: 0000000000000000 R09: 0000000000000000 [ 359.915476][T16336] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 359.915488][T16336] R13: 00007f1fad5b6128 R14: 00007f1fad5b6090 R15: 00007fffb6652508 [ 359.915523][T16336] [ 360.285798][T16233] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.294941][T16233] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.302490][T16233] bridge_slave_1: entered allmulticast mode [ 360.311344][T16233] bridge_slave_1: entered promiscuous mode [ 360.493691][T12022] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 360.713802][T16233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.738514][T16233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.879843][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2906'. [ 361.053387][ T5869] Bluetooth: hci5: command tx timeout [ 361.094378][T16233] team0: Port device team_slave_0 added [ 361.114115][T16233] team0: Port device team_slave_1 added [ 361.232197][T16381] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2912'. [ 361.598134][T16233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.620430][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.681317][T16233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.779052][T16233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.815087][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.902076][T16233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.937622][T16403] FAULT_INJECTION: forcing a failure. [ 361.937622][T16403] name failslab, interval 1, probability 0, space 0, times 0 [ 361.990275][T16403] CPU: 0 UID: 0 PID: 16403 Comm: syz.4.2915 Not tainted syzkaller #0 PREEMPT(full) [ 361.990305][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.990318][T16403] Call Trace: [ 361.990327][T16403] [ 361.990335][T16403] dump_stack_lvl+0x189/0x250 [ 361.990362][T16403] ? __pfx____ratelimit+0x10/0x10 [ 361.990389][T16403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.990413][T16403] ? __pfx__printk+0x10/0x10 [ 361.990448][T16403] ? __pfx___might_resched+0x10/0x10 [ 361.990474][T16403] should_fail_ex+0x414/0x560 [ 361.990508][T16403] should_failslab+0xa8/0x100 [ 361.990540][T16403] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 361.990569][T16403] ? __alloc_skb+0x112/0x2d0 [ 361.990603][T16403] __alloc_skb+0x112/0x2d0 [ 361.990637][T16403] netlink_sendmsg+0x5c6/0xb30 [ 361.990746][T16403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.990777][T16403] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.990810][T16403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.990831][T16403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.990859][T16403] __sock_sendmsg+0x21c/0x270 [ 361.990887][T16403] ____sys_sendmsg+0x505/0x830 [ 361.990914][T16403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.990944][T16403] ? import_iovec+0x74/0xa0 [ 361.990971][T16403] ___sys_sendmsg+0x21f/0x2a0 [ 361.990995][T16403] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.991058][T16403] ? __fget_files+0x2a/0x420 [ 361.991087][T16403] ? __fget_files+0x3a0/0x420 [ 361.991128][T16403] __x64_sys_sendmsg+0x19b/0x260 [ 361.991152][T16403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.991184][T16403] ? __pfx_ksys_write+0x10/0x10 [ 361.991208][T16403] ? rcu_is_watching+0x15/0xb0 [ 361.991233][T16403] ? do_syscall_64+0xbe/0x3b0 [ 361.991272][T16403] do_syscall_64+0xfa/0x3b0 [ 361.991297][T16403] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.991324][T16403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.991343][T16403] ? clear_bhb_loop+0x60/0xb0 [ 361.991366][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.991385][T16403] RIP: 0033:0x7fc3f1f8ebe9 [ 361.991404][T16403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.991422][T16403] RSP: 002b:00007fc3f2db3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.991445][T16403] RAX: ffffffffffffffda RBX: 00007fc3f21b6090 RCX: 00007fc3f1f8ebe9 [ 361.991460][T16403] RDX: 0000000000000840 RSI: 0000200000000c80 RDI: 0000000000000003 [ 361.991472][T16403] RBP: 00007fc3f2db3090 R08: 0000000000000000 R09: 0000000000000000 [ 361.991484][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.991496][T16403] R13: 00007fc3f21b6128 R14: 00007fc3f21b6090 R15: 00007ffe91162c18 [ 361.991530][T16403] [ 362.585721][T16233] hsr_slave_0: entered promiscuous mode [ 362.611232][T16233] hsr_slave_1: entered promiscuous mode [ 362.645933][T16233] debugfs: 'hsr0' already exists in 'hsr' [ 362.673314][T16233] Cannot create hsr debugfs directory [ 362.679429][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 362.693004][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2920'. [ 362.737891][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 362.748766][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2920'. [ 363.133455][ T5869] Bluetooth: hci5: command tx timeout [ 363.265524][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 363.322374][T16233] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.334612][T16233] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.357816][T16453] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 363.434040][T16446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.443990][ T1141] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 363.467864][T16445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.490930][T16233] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.521236][T16462] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.2930'. [ 363.522995][T16233] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.613941][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.807418][T16233] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.838939][T16233] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.879257][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2931'. [ 363.902328][T16475] xfrm1: entered promiscuous mode [ 363.916515][T16475] xfrm1: entered allmulticast mode [ 363.939310][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2931'. [ 364.058255][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'. [ 364.068351][T16480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2933'. [ 364.092210][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'. [ 364.143655][T16480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2933'. [ 364.374714][T16490] tipc: Enabling of bearer rejected, already enabled [ 364.463884][T16494] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 364.490229][T16233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.523922][T16233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.542774][T16233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.597463][T16233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.642988][T16499] netem: change failed [ 364.932688][T16518] FAULT_INJECTION: forcing a failure. [ 364.932688][T16518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.937008][T16233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.964592][T16518] CPU: 0 UID: 0 PID: 16518 Comm: syz.2.2945 Not tainted syzkaller #0 PREEMPT(full) [ 364.964619][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.964631][T16518] Call Trace: [ 364.964640][T16518] [ 364.964649][T16518] dump_stack_lvl+0x189/0x250 [ 364.964679][T16518] ? __pfx____ratelimit+0x10/0x10 [ 364.964707][T16518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.964732][T16518] ? __pfx__printk+0x10/0x10 [ 364.964759][T16518] ? __might_fault+0xb0/0x130 [ 364.964801][T16518] should_fail_ex+0x414/0x560 [ 364.964833][T16518] _copy_from_user+0x2d/0xb0 [ 364.964856][T16518] ___sys_recvmsg+0x12e/0x510 [ 364.964896][T16518] ? __pfx____sys_recvmsg+0x10/0x10 [ 364.964956][T16518] ? __might_fault+0xb0/0x130 [ 364.964989][T16518] do_recvmmsg+0x307/0x770 [ 364.965020][T16518] ? __pfx_do_recvmmsg+0x10/0x10 [ 364.965057][T16518] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 364.965107][T16518] __x64_sys_recvmmsg+0x190/0x240 [ 364.965132][T16518] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 364.965151][T16518] ? rcu_is_watching+0x15/0xb0 [ 364.965180][T16518] ? do_syscall_64+0xbe/0x3b0 [ 364.965212][T16518] do_syscall_64+0xfa/0x3b0 [ 364.965238][T16518] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.965264][T16518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.965285][T16518] ? clear_bhb_loop+0x60/0xb0 [ 364.965311][T16518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.965330][T16518] RIP: 0033:0x7f1fad38ebe9 [ 364.965350][T16518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.965367][T16518] RSP: 002b:00007f1fae2bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 364.965389][T16518] RAX: ffffffffffffffda RBX: 00007f1fad5b5fa0 RCX: 00007f1fad38ebe9 [ 364.965404][T16518] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 364.965417][T16518] RBP: 00007f1fae2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 364.965429][T16518] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 364.965442][T16518] R13: 00007f1fad5b6038 R14: 00007f1fad5b5fa0 R15: 00007fffb6652508 [ 364.965477][T16518] [ 365.198659][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 365.216911][ T5869] Bluetooth: hci5: command tx timeout [ 365.226540][T16233] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.229231][T16521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2946'. [ 365.270841][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.278163][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.298653][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.306095][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.384652][ T94] block nbd2: Possible stuck request ffff888025045080: control (read@0,1024B). Runtime 150 seconds [ 365.395883][ T94] block nbd2: Possible stuck request ffff888025045240: control (read@1024,1024B). Runtime 150 seconds [ 365.412519][ T94] block nbd2: Possible stuck request ffff888025045400: control (read@2048,1024B). Runtime 150 seconds [ 365.425122][ T94] block nbd2: Possible stuck request ffff8880250455c0: control (read@3072,1024B). Runtime 150 seconds [ 365.580985][T16536] FAULT_INJECTION: forcing a failure. [ 365.580985][T16536] name failslab, interval 1, probability 0, space 0, times 0 [ 365.594950][T16536] CPU: 1 UID: 0 PID: 16536 Comm: syz.2.2950 Not tainted syzkaller #0 PREEMPT(full) [ 365.594979][T16536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.594991][T16536] Call Trace: [ 365.594999][T16536] [ 365.595008][T16536] dump_stack_lvl+0x189/0x250 [ 365.595039][T16536] ? __pfx____ratelimit+0x10/0x10 [ 365.595067][T16536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.595092][T16536] ? __pfx__printk+0x10/0x10 [ 365.595122][T16536] ? __lock_acquire+0xab9/0xd20 [ 365.595164][T16536] should_fail_ex+0x414/0x560 [ 365.595198][T16536] should_failslab+0xa8/0x100 [ 365.595230][T16536] kmem_cache_alloc_noprof+0x73/0x3c0 [ 365.595256][T16536] ? skb_clone+0x212/0x3a0 [ 365.595284][T16536] skb_clone+0x212/0x3a0 [ 365.595309][T16536] __netlink_deliver_tap+0x404/0x850 [ 365.595354][T16536] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.595385][T16536] netlink_deliver_tap+0x19c/0x1b0 [ 365.595415][T16536] netlink_unicast+0x7fa/0x9e0 [ 365.595452][T16536] ? __pfx_netlink_unicast+0x10/0x10 [ 365.595481][T16536] ? netlink_sendmsg+0x642/0xb30 [ 365.595507][T16536] ? skb_put+0x11b/0x210 [ 365.595541][T16536] netlink_sendmsg+0x805/0xb30 [ 365.595581][T16536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.595613][T16536] ? aa_sock_msg_perm+0xf1/0x1d0 [ 365.595646][T16536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.595668][T16536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.595698][T16536] __sock_sendmsg+0x21c/0x270 [ 365.595728][T16536] ____sys_sendmsg+0x505/0x830 [ 365.595757][T16536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.595790][T16536] ? import_iovec+0x74/0xa0 [ 365.595818][T16536] ___sys_sendmsg+0x21f/0x2a0 [ 365.595842][T16536] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.595924][T16536] ? __fget_files+0x2a/0x420 [ 365.595952][T16536] ? __fget_files+0x3a0/0x420 [ 365.595994][T16536] __x64_sys_sendmsg+0x19b/0x260 [ 365.596019][T16536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.596053][T16536] ? __pfx_ksys_write+0x10/0x10 [ 365.596076][T16536] ? rcu_is_watching+0x15/0xb0 [ 365.596104][T16536] ? do_syscall_64+0xbe/0x3b0 [ 365.596138][T16536] do_syscall_64+0xfa/0x3b0 [ 365.596164][T16536] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.596190][T16536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.596210][T16536] ? clear_bhb_loop+0x60/0xb0 [ 365.596237][T16536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.596257][T16536] RIP: 0033:0x7f1fad38ebe9 [ 365.596276][T16536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.596294][T16536] RSP: 002b:00007f1fae2bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.596318][T16536] RAX: ffffffffffffffda RBX: 00007f1fad5b5fa0 RCX: 00007f1fad38ebe9 [ 365.596332][T16536] RDX: 0000000000000840 RSI: 0000200000000c80 RDI: 0000000000000003 [ 365.596345][T16536] RBP: 00007f1fae2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 365.596358][T16536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.596370][T16536] R13: 00007f1fad5b6038 R14: 00007f1fad5b5fa0 R15: 00007fffb6652508 [ 365.596406][T16536] [ 365.612961][T16233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.926975][T16233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.110820][T16544] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 366.129790][T16544] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 366.225252][T16551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.255294][T16551] tipc: Enabling of bearer rejected, already enabled [ 366.271452][T16551] netlink: 'syz.0.2956': attribute type 1 has an invalid length. [ 366.706554][T16233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.892092][T16233] veth0_vlan: entered promiscuous mode [ 366.975814][T16233] veth1_vlan: entered promiscuous mode [ 367.116840][T16233] veth0_macvtap: entered promiscuous mode [ 367.159370][T16233] veth1_macvtap: entered promiscuous mode [ 367.204866][T16233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.246654][T16233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.311844][ T3529] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.329582][ T3529] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.342291][ T3529] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.361927][ T3529] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.648888][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.687787][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.809072][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.831485][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.182269][T16623] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 368.239297][T16623] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 369.171328][T16666] __nla_validate_parse: 13 callbacks suppressed [ 369.171352][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 369.259848][T16663] lo speed is unknown, defaulting to 1000 [ 369.397550][T16676] net veth1_virt_wifi .: renamed from virt_wifi0 [ 369.565338][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.577023][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.590694][T16676] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2990'. [ 369.605349][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.615755][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.624830][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.221909][T16681] lo speed is unknown, defaulting to 1000 [ 370.337493][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2994'. [ 371.202902][T16734] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3001'. [ 371.694229][ T5877] Bluetooth: hci1: command tx timeout [ 371.773388][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 372.231533][T16681] chnl_net:caif_netlink_parms(): no params data found [ 372.820202][T16791] vlan0: entered promiscuous mode [ 372.835667][T16791] vlan0: entered allmulticast mode [ 372.853933][T16791] veth0_vlan: entered allmulticast mode [ 372.913291][T16681] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.941537][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.949437][T16681] bridge_slave_0: entered allmulticast mode [ 372.962843][T16681] bridge_slave_0: entered promiscuous mode [ 372.984031][T16681] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.991389][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.002993][T16681] bridge_slave_1: entered allmulticast mode [ 373.015112][T16681] bridge_slave_1: entered promiscuous mode [ 373.132699][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'. [ 373.435902][T16681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.476804][T16823] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3015'. [ 373.492054][T16681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.786027][ T5877] Bluetooth: hci1: command tx timeout [ 373.786723][T16681] team0: Port device team_slave_0 added [ 373.828314][T16681] team0: Port device team_slave_1 added [ 374.082278][T16681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.114418][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.169542][T16860] netlink: 'syz.1.3024': attribute type 10 has an invalid length. [ 374.187520][T16681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.217256][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3024'. [ 374.295143][T16681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.317850][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.436035][T16681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.788254][T16681] hsr_slave_0: entered promiscuous mode [ 374.817402][T16681] hsr_slave_1: entered promiscuous mode [ 374.831421][T16681] debugfs: 'hsr0' already exists in 'hsr' [ 374.843272][T16681] Cannot create hsr debugfs directory [ 374.872516][T16882] bridge1: entered promiscuous mode [ 374.889144][T16882] bridge1: entered allmulticast mode [ 375.751807][T16918] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 375.773392][T16918] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 375.854381][ T5877] Bluetooth: hci1: command tx timeout [ 375.884905][T16932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3043'. [ 376.899177][T16962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3052'. [ 376.916644][T16681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.939465][T16681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.953682][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3052'. [ 376.994089][T16681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.041566][T16681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.314722][T16985] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3057'. [ 377.674955][T12001] IPVS: starting estimator thread 0... [ 377.683514][T16998] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.777631][T17002] IPVS: using max 28 ests per chain, 67200 per kthread [ 377.933582][ T5877] Bluetooth: hci1: command tx timeout [ 377.942079][T16983] team0 (unregistering): left allmulticast mode [ 377.965416][T17011] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3061'. [ 378.006931][T16983] team_slave_0: left allmulticast mode [ 378.036205][T16983] team_slave_1: left allmulticast mode [ 378.041944][T16983] team0 (unregistering): left promiscuous mode [ 378.061667][T16983] team_slave_0: left promiscuous mode [ 378.068173][T16983] team_slave_1: left promiscuous mode [ 378.094958][T16983] bridge0: port 3(team0) entered disabled state [ 378.121679][T16983] team0 (unregistering): Port device team_slave_0 removed [ 378.199908][T16983] team0 (unregistering): Port device team_slave_1 removed [ 378.294977][T17005] bridge6: entered promiscuous mode [ 378.303412][T17005] bridge6: entered allmulticast mode [ 378.364200][T17011] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 378.387697][T17011] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 378.413267][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 378.632044][T16681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.728028][T16681] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.812505][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.820020][ T9901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.927051][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.934876][ T9901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.346668][T17055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3070'. [ 379.454125][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 379.488605][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3071'. [ 379.643627][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'. [ 379.928340][T17075] bond7: entered promiscuous mode [ 379.950820][T17075] bond7: entered allmulticast mode [ 379.991703][T17075] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.121959][T16681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.292717][T17088] netlink: 'syz.0.3077': attribute type 2 has an invalid length. [ 380.316971][T17099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3077'. [ 380.454508][T16681] veth0_vlan: entered promiscuous mode [ 380.493532][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 380.507166][T16681] veth1_vlan: entered promiscuous mode [ 380.670708][T16681] veth0_macvtap: entered promiscuous mode [ 380.672624][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 380.701400][T16681] veth1_macvtap: entered promiscuous mode [ 380.721388][T17112] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 380.801120][T16681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.835981][T16681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.884161][ T3477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.904756][ T3477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.936527][ T3477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.946455][ T3477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.252824][T17125] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 381.261655][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.295290][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.384492][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.407891][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.533471][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 381.925585][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 382.239194][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 382.464722][T17167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.531578][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3099'. [ 382.573349][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 382.590679][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 382.862127][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.892504][T17178] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3102'. [ 382.905851][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.917169][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.926728][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.938833][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.978724][ T1076] IPVS: starting estimator thread 0... [ 383.080881][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.104601][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.123315][T17186] IPVS: using max 25 ests per chain, 60000 per kthread [ 383.140905][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 383.506642][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.536284][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.568615][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 383.613398][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 383.798225][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.819943][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.841253][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.065134][T17188] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.074132][T17188] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 384.173779][T17188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 384.200358][T17188] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 384.220748][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.250262][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.273240][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.427470][T17175] lo speed is unknown, defaulting to 1000 [ 384.580105][T17188] tipc: Resetting bearer [ 384.653377][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 384.977246][ T5877] Bluetooth: hci0: command tx timeout [ 385.120663][T17261] __nla_validate_parse: 4 callbacks suppressed [ 385.120689][T17261] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3115'. [ 385.410926][T17188] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.456890][T17188] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 385.693277][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 385.753533][T17188] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.769497][T17188] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 386.029158][T17188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 386.069794][T17188] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 386.480929][T17303] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 386.733788][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 386.847599][ T3477] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 386.859344][ T3477] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 386.871688][ T3477] bond4 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - f6:a0:bb:4f:fc:b2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 387.273763][ T3477] bond6 (unregistering): (slave gretap0): Releasing active interface [ 387.373007][ T3477] dvmrp1 (unregistering): left allmulticast mode [ 387.436048][ T3477] bond1 (unregistering): (slave geneve2): Releasing active interface [ 387.773617][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 387.776858][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 387.957068][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.969991][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.984510][ T3477] bond0 (unregistering): Released all slaves [ 388.188194][ T3477] bond1 (unregistering): Released all slaves [ 388.210867][ T3477] bond2 (unregistering): Released all slaves [ 388.226495][ T3477] bond3 (unregistering): Released all slaves [ 388.369960][ T3477] bond4 (unregistering): (slave veth1): Releasing backup interface [ 388.379820][ T3477] bond4 (unregistering): Released all slaves [ 388.511581][ T3477] bond5 (unregistering): Released all slaves [ 388.527085][ T3477] bond6 (unregistering): Released all slaves [ 388.662256][ T3477] bond7 (unregistering): Released all slaves [ 388.813598][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 388.920661][T17358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3130'. [ 388.939875][ T3477] : left promiscuous mode [ 389.175451][T17364] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3131'. [ 389.390386][ T3477] tipc: Disabling bearer [ 389.408005][ T3477] tipc: Left network mode [ 389.791556][T17175] chnl_net:caif_netlink_parms(): no params data found [ 390.640203][T17425] openvswitch: netlink: Flow key attribute not present in set flow. [ 390.802610][T17175] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.843384][T17175] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.850809][T17175] bridge_slave_0: entered allmulticast mode [ 390.886243][T17175] bridge_slave_0: entered promiscuous mode [ 390.929221][T17175] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.942942][T17434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3146'. [ 390.952748][T17175] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.961450][T17175] bridge_slave_1: entered allmulticast mode [ 390.970368][T17175] bridge_slave_1: entered promiscuous mode [ 391.019741][T17438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3146'. [ 391.033749][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'. [ 391.476629][T17175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.619269][T17175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.984005][T17475] netlink: 'syz.0.3154': attribute type 9 has an invalid length. [ 392.002633][T17477] netlink: 'syz.4.3155': attribute type 29 has an invalid length. [ 392.041329][T17478] netlink: 'syz.4.3155': attribute type 29 has an invalid length. [ 392.148650][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 392.172817][T17175] team0: Port device team_slave_0 added [ 392.276276][ T3477] hsr_slave_0: left promiscuous mode [ 392.289645][ T3477] hsr_slave_1: left promiscuous mode [ 392.372898][ T3477] veth1_macvtap: left promiscuous mode [ 392.381022][T17490] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3158'. [ 392.398797][ T3477] veth0_macvtap: left promiscuous mode [ 392.412056][ T3477] veth1_vlan: left promiscuous mode [ 393.880138][T17175] team0: Port device team_slave_1 added [ 394.078406][T17175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.108185][T17175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.169075][T17175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.188422][T17517] netem: change failed [ 394.228698][T17175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.243380][T17175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.271464][T17175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.354206][T17524] lo: entered promiscuous mode [ 394.383076][T17524] netlink: 'syz.1.3161': attribute type 2 has an invalid length. [ 394.404302][T17524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.535104][T17175] hsr_slave_0: entered promiscuous mode [ 394.576321][T17175] hsr_slave_1: entered promiscuous mode [ 394.627889][ T3477] IPVS: stop unused estimator thread 0... [ 395.461885][ T94] block nbd2: Possible stuck request ffff888025045080: control (read@0,1024B). Runtime 180 seconds [ 395.473189][ T94] block nbd2: Possible stuck request ffff888025045240: control (read@1024,1024B). Runtime 180 seconds [ 395.484465][ T94] block nbd2: Possible stuck request ffff888025045400: control (read@2048,1024B). Runtime 180 seconds [ 395.496058][ T94] block nbd2: Possible stuck request ffff8880250455c0: control (read@3072,1024B). Runtime 180 seconds [ 395.655160][T17572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3170'. [ 396.617761][T17175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.658168][T17175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.687758][T17175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.721009][T17175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.924957][T17626] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 397.058855][T17634] netlink: 'syz.0.3184': attribute type 32 has an invalid length. [ 397.123469][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3184'. [ 397.167310][T17634] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 397.319011][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 397.335773][T17175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.419537][T17175] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.459064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.466617][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.590171][T13279] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.597789][T13279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.661551][T17660] netlink: 'syz.1.3190': attribute type 4 has an invalid length. [ 397.750553][T17660] syzkaller0: entered promiscuous mode [ 397.763257][T17660] syzkaller0: entered allmulticast mode [ 397.789941][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 397.811307][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 397.870070][T17175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.121073][T17680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3194'. [ 398.519940][T17695] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 398.546202][T17695] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3199'. [ 398.665792][T17175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.901000][T17175] veth0_vlan: entered promiscuous mode [ 398.968928][T17175] veth1_vlan: entered promiscuous mode [ 399.067109][T17713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.181727][T17175] veth0_macvtap: entered promiscuous mode [ 399.220789][T17175] veth1_macvtap: entered promiscuous mode [ 399.309161][T17175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.365192][T17727] FAULT_INJECTION: forcing a failure. [ 399.365192][T17727] name failslab, interval 1, probability 0, space 0, times 0 [ 399.377476][T17175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.384689][T17729] netlink: 'syz.4.3208': attribute type 10 has an invalid length. [ 399.396919][T17727] CPU: 0 UID: 0 PID: 17727 Comm: syz.1.3207 Not tainted syzkaller #0 PREEMPT(full) [ 399.396949][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.396961][T17727] Call Trace: [ 399.396970][T17727] [ 399.396978][T17727] dump_stack_lvl+0x189/0x250 [ 399.397011][T17727] ? __pfx____ratelimit+0x10/0x10 [ 399.397039][T17727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.397063][T17727] ? __pfx__printk+0x10/0x10 [ 399.397098][T17727] ? __pfx___might_resched+0x10/0x10 [ 399.397117][T17727] ? fs_reclaim_acquire+0x7d/0x100 [ 399.397153][T17727] should_fail_ex+0x414/0x560 [ 399.397184][T17727] should_failslab+0xa8/0x100 [ 399.397214][T17727] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 399.397242][T17727] ? __alloc_skb+0x112/0x2d0 [ 399.397276][T17727] __alloc_skb+0x112/0x2d0 [ 399.397309][T17727] netlink_ack+0x146/0xa50 [ 399.397333][T17727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.397360][T17727] ? ref_tracker_free+0x63a/0x7d0 [ 399.397387][T17727] ? __asan_memcpy+0x40/0x70 [ 399.397409][T17727] ? __pfx_ref_tracker_free+0x10/0x10 [ 399.397449][T17727] netlink_rcv_skb+0x28c/0x470 [ 399.397476][T17727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.397505][T17727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.397545][T17727] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.397582][T17727] netlink_unicast+0x82c/0x9e0 [ 399.397618][T17727] ? __pfx_netlink_unicast+0x10/0x10 [ 399.397645][T17727] ? netlink_sendmsg+0x642/0xb30 [ 399.397667][T17727] ? skb_put+0x11b/0x210 [ 399.397700][T17727] netlink_sendmsg+0x805/0xb30 [ 399.397748][T17727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.397781][T17727] ? aa_sock_msg_perm+0xf1/0x1d0 [ 399.397813][T17727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.397836][T17727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.397865][T17727] __sock_sendmsg+0x21c/0x270 [ 399.397891][T17727] ____sys_sendmsg+0x505/0x830 [ 399.397917][T17727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.397947][T17727] ? import_iovec+0x74/0xa0 [ 399.397974][T17727] ___sys_sendmsg+0x21f/0x2a0 [ 399.397997][T17727] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.398058][T17727] ? __fget_files+0x2a/0x420 [ 399.398085][T17727] ? __fget_files+0x3a0/0x420 [ 399.398127][T17727] __x64_sys_sendmsg+0x19b/0x260 [ 399.398151][T17727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.398184][T17727] ? __pfx_ksys_write+0x10/0x10 [ 399.398207][T17727] ? rcu_is_watching+0x15/0xb0 [ 399.398234][T17727] ? do_syscall_64+0xbe/0x3b0 [ 399.398267][T17727] do_syscall_64+0xfa/0x3b0 [ 399.398292][T17727] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.398318][T17727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.398338][T17727] ? clear_bhb_loop+0x60/0xb0 [ 399.398363][T17727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.398382][T17727] RIP: 0033:0x7fd4d878ebe9 [ 399.398424][T17727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.398441][T17727] RSP: 002b:00007fd4d9654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.398464][T17727] RAX: ffffffffffffffda RBX: 00007fd4d89b5fa0 RCX: 00007fd4d878ebe9 [ 399.398477][T17727] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 399.398488][T17727] RBP: 00007fd4d9654090 R08: 0000000000000000 R09: 0000000000000000 [ 399.398498][T17727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.398507][T17727] R13: 00007fd4d89b6038 R14: 00007fd4d89b5fa0 R15: 00007fff2f8bf738 [ 399.398539][T17727] [ 399.428717][T17731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3205'. [ 399.453935][ T7206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.681900][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3205'. [ 399.721653][ T7206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.821973][T17729] geneve1: entered promiscuous mode [ 399.861245][T17729] geneve1: entered allmulticast mode [ 399.869768][T17729] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 400.024311][ T7206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.037562][ T7206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.067495][ T7206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.140279][ T7206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.297507][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.610376][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.628014][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.817791][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.856826][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.887882][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 401.030105][T17778] Bluetooth: MGMT ver 1.23 [ 401.046223][T17783] netlink: 184104 bytes leftover after parsing attributes in process `syz.3.3222'. [ 401.671188][T17816] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 401.731032][T17813] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.788297][T17813] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 402.302648][T17837] syzkaller1: entered promiscuous mode [ 402.334320][T17837] syzkaller1: entered allmulticast mode [ 402.415786][T17837] nbd: nbd2 already in use [ 402.443543][T17837] nbd: nbd2 already in use [ 402.647413][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.657887][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.667179][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.676006][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.684150][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.791468][T17855] lo speed is unknown, defaulting to 1000 [ 403.086110][T17874] __nla_validate_parse: 1 callbacks suppressed [ 403.086135][T17874] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3240'. [ 403.297546][T17874] netlink: 'syz.2.3240': attribute type 3 has an invalid length. [ 403.314828][T17874] netlink: 'syz.2.3240': attribute type 3 has an invalid length. [ 403.669426][T17898] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 403.692537][T17898] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 404.033893][T17913] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 404.105691][T17916] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 404.391919][T17929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.430384][T17937] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3255'. [ 404.520590][T17942] netlink: 'syz.4.3255': attribute type 10 has an invalid length. [ 404.543447][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3255'. [ 404.569473][T17942] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 404.734162][ T5869] Bluetooth: hci2: command tx timeout [ 404.740244][T17855] chnl_net:caif_netlink_parms(): no params data found [ 404.859105][T17955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3259'. [ 405.027007][T17963] netlink: 'syz.2.3260': attribute type 6 has an invalid length. [ 405.222247][T17969] netlink: 'syz.1.3261': attribute type 2 has an invalid length. [ 405.257337][T17855] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.303766][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.346382][T17855] bridge_slave_0: entered allmulticast mode [ 405.384981][T17855] bridge_slave_0: entered promiscuous mode [ 405.404611][T17855] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.411979][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.439900][T17855] bridge_slave_1: entered allmulticast mode [ 405.451380][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3262'. [ 405.471293][T17855] bridge_slave_1: entered promiscuous mode [ 405.509529][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3265'. [ 405.674884][T17982] geneve2: entered promiscuous mode [ 405.852515][T17855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.908546][T17855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.088488][T17855] team0: Port device team_slave_0 added [ 406.178630][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3272'. [ 406.195887][T17855] team0: Port device team_slave_1 added [ 406.471297][T17855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.490167][T17855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.549202][T17855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.730325][T18027] openvswitch: netlink: Multiple metadata blocks provided [ 406.747534][T17855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.774577][T17855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.814054][ T5869] Bluetooth: hci2: command tx timeout [ 406.847164][T17855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.985263][T18031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3277'. [ 407.251649][T17855] hsr_slave_0: entered promiscuous mode [ 407.282054][T17855] hsr_slave_1: entered promiscuous mode [ 407.307592][T17855] debugfs: 'hsr0' already exists in 'hsr' [ 407.330417][T17855] Cannot create hsr debugfs directory [ 407.349170][T18040] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3280'. [ 407.415748][T18048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3281'. [ 407.813516][ T1141] tipc: Subscription rejected, illegal request [ 408.098930][T18068] FAULT_INJECTION: forcing a failure. [ 408.098930][T18068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.123548][T18068] CPU: 1 UID: 0 PID: 18068 Comm: syz.3.3286 Not tainted syzkaller #0 PREEMPT(full) [ 408.123578][T18068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.123589][T18068] Call Trace: [ 408.123598][T18068] [ 408.123607][T18068] dump_stack_lvl+0x189/0x250 [ 408.123636][T18068] ? __pfx____ratelimit+0x10/0x10 [ 408.123665][T18068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.123698][T18068] ? __pfx__printk+0x10/0x10 [ 408.123726][T18068] ? __might_fault+0xb0/0x130 [ 408.123768][T18068] should_fail_ex+0x414/0x560 [ 408.123801][T18068] _copy_from_user+0x2d/0xb0 [ 408.123826][T18068] kstrtouint_from_user+0xc4/0x170 [ 408.123858][T18068] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 408.123909][T18068] proc_fail_nth_write+0x88/0x200 [ 408.123932][T18068] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 408.123961][T18068] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 408.123986][T18068] vfs_write+0x27b/0xb30 [ 408.124026][T18068] ? __pfx_vfs_write+0x10/0x10 [ 408.124054][T18068] ? __fget_files+0x2a/0x420 [ 408.124089][T18068] ? __fget_files+0x3a0/0x420 [ 408.124116][T18068] ? __fget_files+0x2a/0x420 [ 408.124157][T18068] ksys_write+0x145/0x250 [ 408.124186][T18068] ? __pfx_ksys_write+0x10/0x10 [ 408.124209][T18068] ? rcu_is_watching+0x15/0xb0 [ 408.124236][T18068] ? do_syscall_64+0xbe/0x3b0 [ 408.124270][T18068] do_syscall_64+0xfa/0x3b0 [ 408.124294][T18068] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.124319][T18068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.124339][T18068] ? clear_bhb_loop+0x60/0xb0 [ 408.124363][T18068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.124382][T18068] RIP: 0033:0x7f70b1f8d69f [ 408.124401][T18068] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 408.124419][T18068] RSP: 002b:00007f70b01f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 408.124441][T18068] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f70b1f8d69f [ 408.124455][T18068] RDX: 0000000000000001 RSI: 00007f70b01f60a0 RDI: 000000000000000a [ 408.124467][T18068] RBP: 00007f70b01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.124480][T18068] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 408.124491][T18068] R13: 00007f70b21b6128 R14: 00007f70b21b6090 R15: 00007ffe3bdfba28 [ 408.124527][T18068] [ 408.895102][ T5877] Bluetooth: hci2: command tx timeout [ 409.021918][T18097] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3291'. [ 409.181334][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 409.196927][T18103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.578480][T18119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3297'. [ 409.706446][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 409.978008][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3301'. [ 410.072791][T18140] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3302'. [ 410.138267][T18143] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3303'. [ 410.184483][T18143] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3303'. [ 410.244222][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 410.470171][T18157] IPVS: set_ctl: invalid protocol: 50 172.30.1.5:20004 [ 410.534689][T17855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.589313][T17855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.658229][T17855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.716402][T17855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.978382][ T5877] Bluetooth: hci2: command 0x0419 tx timeout [ 411.129784][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 411.189256][T18192] bridge_slave_0: left allmulticast mode [ 411.224434][T18192] bridge_slave_0: left promiscuous mode [ 411.247787][T18192] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.301161][T18192] bridge_slave_1: left allmulticast mode [ 411.315057][T18192] bridge_slave_1: left promiscuous mode [ 411.341545][T18192] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.424813][T18192] bond0: (slave bond_slave_0): Releasing backup interface [ 411.503025][T18192] bond0: (slave bond_slave_1): Releasing backup interface [ 411.559143][T18192] team0: Port device team_slave_0 removed [ 411.577323][T18192] team0: Port device team_slave_1 removed [ 411.597105][T18192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.611045][T18192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.621278][T18192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.647337][T18192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.768695][T18202] vlan1: entered promiscuous mode [ 412.081899][T17855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.170727][T17855] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.252501][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.259834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.304961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.312231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.514460][T18242] netlink: 'syz.1.3323': attribute type 24 has an invalid length. [ 412.955691][T18264] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 413.053811][ T5869] Bluetooth: hci2: command 0x0419 tx timeout [ 413.442748][T17855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.690051][T17855] veth0_vlan: entered promiscuous mode [ 413.768270][T17855] veth1_vlan: entered promiscuous mode [ 413.807375][T18296] tipc: Enabling of bearer rejected, media not registered [ 413.992759][T18301] tipc: Enabling of bearer rejected, media not registered [ 414.108543][T18310] __nla_validate_parse: 13 callbacks suppressed [ 414.108566][T18310] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3340'. [ 414.123759][T17855] veth0_macvtap: entered promiscuous mode [ 414.185949][T17855] veth1_macvtap: entered promiscuous mode [ 414.211256][T18317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.295798][T17855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.410120][T17855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.454116][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3343'. [ 414.488056][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 414.516385][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.525542][T18330] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3344'. [ 414.561660][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.594748][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.672771][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.808592][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3343'. [ 414.841710][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 414.952228][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.001996][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.135741][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.165340][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.480644][T18361] openvswitch: netlink: Missing key (keys=40, expected=100) [ 415.931283][T18347] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 416.059237][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3358'. [ 416.085576][T18385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3358'. [ 416.240667][T18382] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3356'. [ 416.324333][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3358'. [ 416.781164][T18400] tipc: Started in network mode [ 416.802683][T18400] tipc: Node identity fc02, cluster identity 4711 [ 416.859987][T18400] tipc: Enabled bearer , priority 0 [ 417.025504][T18413] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 417.072018][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.098749][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.110890][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.120477][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.130455][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.264320][T18417] lo speed is unknown, defaulting to 1000 [ 417.983771][T12024] tipc: Node number set to 4227989504 [ 418.726204][T18487] netlink: 'syz.1.3375': attribute type 18 has an invalid length. [ 418.818953][T13279] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.847728][T13279] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.928349][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.961435][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.074394][T18417] chnl_net:caif_netlink_parms(): no params data found [ 419.133526][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 419.142765][T18495] geneve2: entered promiscuous mode [ 419.159429][T18495] geneve2: entered allmulticast mode [ 419.214216][ T5877] Bluetooth: hci3: command tx timeout [ 419.748077][T18417] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.748977][T18538] __nla_validate_parse: 5 callbacks suppressed [ 419.748993][T18538] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3385'. [ 419.798529][T18417] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.836170][T18417] bridge_slave_0: entered allmulticast mode [ 419.874460][T18537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3387'. [ 419.895671][T18417] bridge_slave_0: entered promiscuous mode [ 419.963522][T18417] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.996031][T18417] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.022460][T18417] bridge_slave_1: entered allmulticast mode [ 420.064857][T18417] bridge_slave_1: entered promiscuous mode [ 420.166697][T18551] netlink: 'syz.0.3388': attribute type 1 has an invalid length. [ 420.446533][T18417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.481044][T18417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.695353][T18579] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 420.760598][T18579] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3394'. [ 420.790810][T18417] team0: Port device team_slave_0 added [ 420.837792][T18417] team0: Port device team_slave_1 added [ 421.045128][T18589] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3396'. [ 421.082511][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3396'. [ 421.086729][T18417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.147764][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.242652][T18417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.293334][ T5877] Bluetooth: hci3: command tx timeout [ 421.300517][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3396'. [ 421.351389][T18599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.361841][T18602] netlink: 'syz.1.3399': attribute type 4 has an invalid length. [ 421.390508][T18417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.408489][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.444033][T18599] netlink: 'syz.1.3399': attribute type 4 has an invalid length. [ 421.453919][T18417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.498737][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3399'. [ 421.558420][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'. [ 421.640493][T18610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.724687][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'. [ 421.774495][T18615] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 421.819810][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 421.869396][T18417] hsr_slave_0: entered promiscuous mode [ 421.895047][T18417] hsr_slave_1: entered promiscuous mode [ 421.922835][T18417] debugfs: 'hsr0' already exists in 'hsr' [ 421.953347][T18417] Cannot create hsr debugfs directory [ 422.450406][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.473769][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.502809][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.569780][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.095060][T18417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.109154][T18417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.301836][T18417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.343240][T18417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.375375][ T5877] Bluetooth: hci3: command tx timeout [ 423.567778][T18417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.600481][T18417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.459418][T18417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.511012][T18417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.579709][T18417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.647657][T18417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.127327][T18417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.216833][T18417] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.260935][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.268199][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.350482][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.357734][ T9901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.454079][ T5877] Bluetooth: hci3: command tx timeout [ 425.537405][ T94] block nbd2: Possible stuck request ffff888025045080: control (read@0,1024B). Runtime 210 seconds [ 425.549293][ T94] block nbd2: Possible stuck request ffff888025045240: control (read@1024,1024B). Runtime 210 seconds [ 425.561688][ T94] block nbd2: Possible stuck request ffff888025045400: control (read@2048,1024B). Runtime 210 seconds [ 425.574006][ T94] block nbd2: Possible stuck request ffff8880250455c0: control (read@3072,1024B). Runtime 210 seconds [ 425.806534][T18798] openvswitch: netlink: Duplicate or invalid key (type 0). [ 425.890364][T18798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.090619][T18803] syzkaller1: entered promiscuous mode [ 426.117345][T18803] syzkaller1: entered allmulticast mode [ 426.130051][T18814] __nla_validate_parse: 1 callbacks suppressed [ 426.130076][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3449'. [ 426.328931][T18814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.454082][T18819] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3450'. [ 426.460025][T18823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3451'. [ 426.597002][T18417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.884082][T18840] netlink: 'syz.3.3455': attribute type 11 has an invalid length. [ 426.901979][T18843] lo speed is unknown, defaulting to 1000 [ 426.913333][T18840] netlink: 'syz.3.3455': attribute type 11 has an invalid length. [ 426.953413][T18840] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3455'. [ 427.943684][T18877] netlink: 'syz.2.3464': attribute type 27 has an invalid length. [ 428.159406][T18417] veth0_vlan: entered promiscuous mode [ 428.260968][T18888] pim6reg: entered allmulticast mode [ 428.296215][T18888] pim6reg: left allmulticast mode [ 428.482168][T18417] veth1_vlan: entered promiscuous mode [ 428.640279][T18417] veth0_macvtap: entered promiscuous mode [ 428.767837][T18417] veth1_macvtap: entered promiscuous mode [ 428.883503][T18417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.964872][T18417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.026495][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.053720][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.098729][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.220981][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.138959][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 430.195213][T18948] macvlan0: entered promiscuous mode [ 430.206784][T18948] macvlan0: entered allmulticast mode [ 430.245113][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.275290][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 430.290604][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.292273][T18949] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 430.332787][T18956] RDS: rds_bind could not find a transport for 7231::1c2:0:0:0, load rds_tcp or rds_rdma? [ 430.458937][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.467957][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.665996][T18960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3485'. [ 430.698877][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3485'. [ 430.850525][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 430.872307][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3355'. [ 430.906965][T18974] netlink: 'syz.4.3355': attribute type 12 has an invalid length. [ 430.931320][T18968] IPVS: persistence engine module ip_vs_pe_À not found [ 430.957321][T18974] netlink: 'syz.4.3355': attribute type 11 has an invalid length. [ 431.006658][T18978] veth3: entered allmulticast mode [ 431.504060][T18990] __nla_validate_parse: 1 callbacks suppressed [ 431.504086][T18990] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3492'. [ 431.919350][T19022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3498'. [ 432.374601][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3503'. [ 432.655107][T19054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3507'. [ 433.185451][T19069] vlan2: entered allmulticast mode [ 433.197976][T19069] veth1: entered allmulticast mode [ 433.384051][T19085] syzkaller1: entered promiscuous mode [ 433.389675][T19085] syzkaller1: entered allmulticast mode [ 433.660264][T19106] tipc: Enabling of bearer rejected, failed to enable media [ 433.701130][T19098] sock: sock_set_timeout: `syz.4.3517' (pid 19098) tries to set negative timeout [ 433.770905][T19109] netlink: 'syz.2.3518': attribute type 8 has an invalid length. [ 434.371250][T19128] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3526'. [ 434.561230][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3527'. [ 434.607914][T19130] bridge_slave_0: left allmulticast mode [ 434.665703][T19130] bridge_slave_0: left promiscuous mode [ 434.685279][T19130] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.724834][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3530'. [ 434.777073][T19130] bridge_slave_1: left allmulticast mode [ 434.798632][T19130] bridge_slave_1: left promiscuous mode [ 434.815446][T19130] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.909201][T19130] bond0: (slave bond_slave_0): Releasing backup interface [ 434.955027][T19130] bond0: (slave bond_slave_1): Releasing backup interface [ 434.996150][T19130] team0: Port device team_slave_0 removed [ 435.032892][T19130] team0: Port device team_slave_1 removed [ 435.050186][T19130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.066559][T19130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.077451][T19130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.087753][T19130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.133675][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 435.355396][T19165] bond1: entered promiscuous mode [ 435.360651][T19165] bond1: entered allmulticast mode [ 435.379336][T19165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.821032][T19165] bond1 (unregistering): Released all slaves [ 436.266310][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3539'. [ 436.318354][T19202] netlink: 'syz.3.3539': attribute type 8 has an invalid length. [ 436.406914][T19208] netem: change failed [ 436.690474][T19227] xt_policy: too many policy elements [ 436.727255][T19231] netlink: 'syz.3.3549': attribute type 1 has an invalid length. [ 436.832586][T19231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.872402][T19231] bond1: (slave geneve2): making interface the new active one [ 436.905648][T19231] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 436.993489][T19226] wg1: entered allmulticast mode [ 437.004378][T19214] wg1: left allmulticast mode [ 437.550897][T19268] netlink: 'syz.4.3559': attribute type 1 has an invalid length. [ 437.568773][T19268] netlink: 'syz.4.3559': attribute type 1 has an invalid length. [ 437.789773][T19270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3560'. [ 437.817831][T19270] openvswitch: netlink: Flow key attr not present in new flow. [ 437.914180][T19277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3562'. [ 438.139393][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3563'. [ 438.332563][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3563'. [ 438.788174][T19286] hsr_slave_1 (unregistering): left promiscuous mode [ 438.855364][T19312] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 438.979881][T19312] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 439.018468][T19318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3573'. [ 439.191456][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 439.201075][T19327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3574'. [ 439.239085][T19331] IPVS: Unknown mcast interface: nicvf0 [ 439.248639][T19334] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3575'. [ 439.447367][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3581'. [ 439.488039][T19342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.499975][T19337] netlink: 'syz.3.3581': attribute type 10 has an invalid length. [ 439.511890][T19337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3581'. [ 439.542833][T19337] dummy0: entered promiscuous mode [ 439.575360][T19337] bridge0: port 1(dummy0) entered blocking state [ 439.591902][T19337] bridge0: port 1(dummy0) entered disabled state [ 439.612345][T19337] dummy0: entered allmulticast mode [ 439.639027][T19337] bridge0: port 1(dummy0) entered blocking state [ 439.645741][T19337] bridge0: port 1(dummy0) entered forwarding state [ 439.946077][T19362] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 440.150313][T19368] lo speed is unknown, defaulting to 1000 [ 440.637936][T19383] netlink: 'syz.1.3591': attribute type 8 has an invalid length. [ 440.659499][T19383] netlink: 'syz.1.3591': attribute type 8 has an invalid length. [ 440.951261][T19390] netlink: 'syz.2.3593': attribute type 12 has an invalid length. [ 441.001887][T19390] netlink: 'syz.2.3593': attribute type 11 has an invalid length. [ 441.132911][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.154397][T19390] tipc: Started in network mode [ 441.159327][T19390] tipc: Node identity a2bd13fb802a, cluster identity 4711 [ 441.163372][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.220921][T19390] tipc: Enabled bearer , priority 0 [ 441.245358][T19400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.326356][T19403] syzkaller0: entered promiscuous mode [ 441.331981][T19403] syzkaller0: entered allmulticast mode [ 441.396490][T19390] tipc: Resetting bearer [ 441.439529][T19387] tipc: Resetting bearer [ 441.496728][T19387] tipc: Disabling bearer [ 441.614788][T19412] netlink: 'syz.0.3600': attribute type 5 has an invalid length. [ 441.827870][T19412] netlink: 'syz.0.3600': attribute type 1 has an invalid length. [ 441.877911][T19412] netlink: 'syz.0.3600': attribute type 2 has an invalid length. [ 442.089290][T19429] unknown channel width for channel at 909000KHz? [ 442.105724][T19430] netem: change failed [ 442.281376][T19439] tipc: Started in network mode [ 442.301812][T19439] tipc: Node identity de9d89d18ce4, cluster identity 4711 [ 442.333331][T19439] tipc: Enabled bearer , priority 0 [ 442.341582][T19444] syzkaller0: entered promiscuous mode [ 442.387811][T19444] syzkaller0: entered allmulticast mode [ 442.435264][T19442] netlink: 'syz.3.3610': attribute type 12 has an invalid length. [ 442.453705][T19444] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 442.554911][T19444] tipc: Resetting bearer [ 442.572347][T19438] tipc: Resetting bearer [ 442.628901][T19438] tipc: Disabling bearer [ 442.846205][T19468] __nla_validate_parse: 11 callbacks suppressed [ 442.846244][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'. [ 442.866304][T19468] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 442.874243][T19468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.890364][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'. [ 442.910913][T19472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3621'. [ 442.940965][T19468] bridge_slave_0: default FDB implementation only supports local addresses [ 443.094977][T19468] nbd0: detected capacity change from 0 to 127 [ 443.112230][T19480] netem: change failed [ 443.128478][T19483] netlink: 'syz.3.3624': attribute type 75 has an invalid length. [ 443.208702][T19483] dvmrp0: entered allmulticast mode [ 443.444543][ T5877] block nbd0: Receive control failed (result -32) [ 443.452666][T19493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3627'. [ 443.511947][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'. [ 443.578635][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 443.630330][T19501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 443.748592][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 444.003812][T19519] netem: change failed [ 444.047216][T19517] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3636'. [ 444.212368][T19533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3641'. [ 444.605087][T19558] tipc: Enabling of bearer rejected, already enabled [ 444.702740][T19564] netem: change failed [ 444.735665][T19558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.754495][T19566] tipc: Started in network mode [ 444.763427][T19566] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 444.825767][T19566] tipc: Enabled bearer , priority 12 [ 445.301719][T19582] netlink: 'syz.3.3656': attribute type 14 has an invalid length. [ 445.651792][T19610] unsupported nlmsg_type 40 [ 445.943777][T12016] tipc: Node number set to 10070698 [ 447.897028][T19617] netlink: 'syz.2.3668': attribute type 1 has an invalid length. [ 447.931311][T19617] netlink: 'syz.2.3668': attribute type 1 has an invalid length. [ 447.963055][T19617] __nla_validate_parse: 3 callbacks suppressed [ 447.980011][T19617] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3668'. [ 448.027756][T19628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 448.064346][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'. [ 448.136962][T19628] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 448.317076][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3675'. [ 448.368636][T19642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3678'. [ 448.389970][T19642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3678'. [ 448.419859][T19647] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3677'. [ 448.440177][T19647] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3677'. [ 448.451665][T19647] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3677'. [ 448.463419][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3676'. [ 448.503935][T19642] syzkaller1: entered promiscuous mode [ 448.511204][T19642] syzkaller1: entered allmulticast mode [ 448.554856][T19649] netlink: 'syz.4.3679': attribute type 5 has an invalid length. [ 449.616398][T19707] : entered promiscuous mode [ 449.737114][T19721] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 449.952001][T19733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.021182][T12024] hid-generic 0005:15C2:5505.0003: item fetching failed at offset 0/1 [ 450.084494][T12024] hid-generic 0005:15C2:5505.0003: probe with driver hid-generic failed with error -22 [ 451.172452][T19789] syzkaller0: entered promiscuous mode [ 451.178309][T19789] syzkaller0: entered allmulticast mode [ 451.199868][T19787] openvswitch: netlink: Multiple metadata blocks provided [ 451.216657][T19787] netlink: 'syz.1.3722': attribute type 3 has an invalid length. [ 451.493400][T19799] IPVS: ip_vs_add_dest(): server weight less than zero [ 451.505359][T12001] IPVS: starting estimator thread 0... [ 451.603312][T19800] IPVS: using max 24 ests per chain, 57600 per kthread [ 451.841886][T19809] netlink: 'syz.1.3730': attribute type 19 has an invalid length. [ 453.823037][T19804] __nla_validate_parse: 9 callbacks suppressed [ 453.823056][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 454.052803][T19824] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3737'. [ 454.093744][T19824] openvswitch: netlink: Flow key attr not present in new flow. [ 454.298519][T19837] vlan2: entered promiscuous mode [ 454.313477][T19837] vlan2: entered allmulticast mode [ 454.329005][T19837] hsr_slave_1: entered allmulticast mode [ 454.402222][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3740'. [ 454.447143][T19845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.675736][T19862] bridge_slave_0: left allmulticast mode [ 454.688345][T19862] bridge_slave_0: left promiscuous mode [ 454.704606][T19862] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.734640][T19862] bridge_slave_1: left allmulticast mode [ 454.740352][T19862] bridge_slave_1: left promiscuous mode [ 454.749149][T19862] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.772570][T19862] bond0: (slave bond_slave_0): Releasing backup interface [ 454.802091][T19862] bond0: (slave bond_slave_1): Releasing backup interface [ 454.820456][T19862] team0: Port device team_slave_0 removed [ 454.836107][T19862] team0: Port device team_slave_1 removed [ 454.842938][T19862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.856422][T19862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.867100][T19862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.877636][T19862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.902030][T19867] team0: Mode changed to "broadcast" [ 454.910702][T19874] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3750'. [ 454.946125][T19871] netem: change failed [ 455.090744][T19876] netlink: 'syz.2.3751': attribute type 1 has an invalid length. [ 455.111030][T19876] netlink: 'syz.2.3751': attribute type 2 has an invalid length. [ 455.158477][T19886] netlink: 'syz.2.3751': attribute type 1 has an invalid length. [ 455.216045][T19886] netlink: 'syz.2.3751': attribute type 2 has an invalid length. [ 455.391410][T19898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3755'. [ 455.634929][ T94] block nbd2: Possible stuck request ffff888025045080: control (read@0,1024B). Runtime 240 seconds [ 455.646121][ T94] block nbd2: Possible stuck request ffff888025045240: control (read@1024,1024B). Runtime 240 seconds [ 455.657303][ T94] block nbd2: Possible stuck request ffff888025045400: control (read@2048,1024B). Runtime 240 seconds [ 455.669587][ T94] block nbd2: Possible stuck request ffff8880250455c0: control (read@3072,1024B). Runtime 240 seconds [ 456.014181][T19926] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3770'. [ 456.483048][T19953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3778'. [ 456.548159][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3778'. [ 456.788685][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3783'. [ 457.175085][T19996] netlink: 'syz.3.3786': attribute type 11 has an invalid length. [ 457.183037][T19996] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3786'. [ 457.399596][T19988] syzkaller0: entered promiscuous mode [ 457.424757][T19988] syzkaller0: entered allmulticast mode [ 458.047260][T20026] netlink: 'syz.1.3793': attribute type 21 has an invalid length. [ 458.259632][T20027] syz.2.3794: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 458.279901][T20027] CPU: 1 UID: 0 PID: 20027 Comm: syz.2.3794 Not tainted syzkaller #0 PREEMPT(full) [ 458.279927][T20027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.279939][T20027] Call Trace: [ 458.279946][T20027] [ 458.279954][T20027] dump_stack_lvl+0x189/0x250 [ 458.279987][T20027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.280010][T20027] ? __pfx__printk+0x10/0x10 [ 458.280036][T20027] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 458.280057][T20027] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 458.280079][T20027] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 458.280104][T20027] warn_alloc+0x214/0x310 [ 458.280139][T20027] ? __pfx_warn_alloc+0x10/0x10 [ 458.280177][T20027] ? __get_vm_area_node+0x28f/0x300 [ 458.280204][T20027] ? nf_tables_newset+0x132b/0x2530 [ 458.280230][T20027] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 458.280287][T20027] ? alloc_pages_mpol+0x3cd/0x4a0 [ 458.280328][T20027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.280361][T20027] ? rcu_is_watching+0x15/0xb0 [ 458.280382][T20027] ? nf_tables_newset+0x132b/0x2530 [ 458.280400][T20027] ? nf_tables_newset+0x132b/0x2530 [ 458.280416][T20027] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 458.280444][T20027] ? nf_tables_newset+0x132b/0x2530 [ 458.280463][T20027] ? nft_table_lookup+0x211/0x230 [ 458.280482][T20027] ? nft_set_lookup+0x128/0x150 [ 458.280503][T20027] ? nft_hash_privsize+0xaf/0xf0 [ 458.280532][T20027] nf_tables_newset+0x132b/0x2530 [ 458.280564][T20027] ? __pfx_nf_tables_newset+0x10/0x10 [ 458.280606][T20027] ? __nla_parse+0x40/0x60 [ 458.280638][T20027] nfnetlink_rcv+0x1132/0x2520 [ 458.280695][T20027] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 458.280735][T20027] ? ref_tracker_free+0x63a/0x7d0 [ 458.280789][T20027] ? __netlink_deliver_tap+0x807/0x850 [ 458.280814][T20027] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.280858][T20027] netlink_unicast+0x82c/0x9e0 [ 458.280892][T20027] ? __pfx_netlink_unicast+0x10/0x10 [ 458.280916][T20027] ? netlink_sendmsg+0x642/0xb30 [ 458.280938][T20027] ? skb_put+0x11b/0x210 [ 458.280969][T20027] netlink_sendmsg+0x805/0xb30 [ 458.281004][T20027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.281032][T20027] ? aa_sock_msg_perm+0xf1/0x1d0 [ 458.281060][T20027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.281088][T20027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.281115][T20027] __sock_sendmsg+0x21c/0x270 [ 458.281142][T20027] ____sys_sendmsg+0x505/0x830 [ 458.281168][T20027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.281196][T20027] ? import_iovec+0x74/0xa0 [ 458.281221][T20027] ___sys_sendmsg+0x21f/0x2a0 [ 458.281242][T20027] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.281310][T20027] ? __fget_files+0x2a/0x420 [ 458.281335][T20027] ? __fget_files+0x3a0/0x420 [ 458.281374][T20027] __x64_sys_sendmsg+0x19b/0x260 [ 458.281395][T20027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.281425][T20027] ? rcu_is_watching+0x15/0xb0 [ 458.281449][T20027] ? do_syscall_64+0xbe/0x3b0 [ 458.281479][T20027] do_syscall_64+0xfa/0x3b0 [ 458.281501][T20027] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.281524][T20027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.281542][T20027] ? clear_bhb_loop+0x60/0xb0 [ 458.281565][T20027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.281581][T20027] RIP: 0033:0x7f0c3918ebe9 [ 458.281600][T20027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.281615][T20027] RSP: 002b:00007f0c3a09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.281636][T20027] RAX: ffffffffffffffda RBX: 00007f0c393b5fa0 RCX: 00007f0c3918ebe9 [ 458.281650][T20027] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 458.281661][T20027] RBP: 00007f0c39211e19 R08: 0000000000000000 R09: 0000000000000000 [ 458.281672][T20027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.281683][T20027] R13: 00007f0c393b6038 R14: 00007f0c393b5fa0 R15: 00007ffdab7df368 [ 458.281716][T20027] [ 458.281724][T20027] Mem-Info: [ 458.693600][T20027] active_anon:6185 inactive_anon:0 isolated_anon:0 [ 458.693600][T20027] active_file:3594 inactive_file:39995 isolated_file:0 [ 458.693600][T20027] unevictable:768 dirty:104 writeback:0 [ 458.693600][T20027] slab_reclaimable:12595 slab_unreclaimable:122896 [ 458.693600][T20027] mapped:31567 shmem:1390 pagetables:1242 [ 458.693600][T20027] sec_pagetables:0 bounce:0 [ 458.693600][T20027] kernel_misc_reclaimable:0 [ 458.693600][T20027] free:1295978 free_pcp:13461 free_cma:0 [ 458.744399][T20027] Node 0 active_anon:24740kB inactive_anon:0kB active_file:14376kB inactive_file:159776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126268kB dirty:416kB writeback:0kB shmem:4024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14544kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 458.780224][T20027] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 458.810755][T20027] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.850493][T20027] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 458.858017][T20027] Node 0 DMA32 free:1272380kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24696kB inactive_anon:0kB active_file:14376kB inactive_file:158196kB unevictable:1536kB writepending:416kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:36580kB local_pcp:25688kB free_cma:0kB [ 458.891722][T20027] lowmem_reserve[]: 0 0 1 1 1 [ 458.897382][T20027] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 458.927147][T20027] lowmem_reserve[]: 0 0 0 0 0 [ 458.931924][T20027] Node 1 Normal free:3896160kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17356kB local_pcp:10728kB free_cma:0kB [ 458.972970][T20027] lowmem_reserve[]: 0 0 0 0 0 [ 458.978321][T20027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 458.991948][T20027] Node 0 DMA32: 476*4kB (UM) 343*8kB (UME) 159*16kB (UM) 105*32kB (ME) 41*64kB (M) 597*128kB (UM) 592*256kB (UM) 260*512kB (UM) 109*1024kB (UME) 10*2048kB (UM) 187*4096kB (UM) = 1272312kB [ 459.011202][T20027] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 459.024224][T20027] Node 1 Normal: 210*4kB (UE) 57*8kB (UME) 49*16kB (UME) 70*32kB (UME) 22*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896160kB [ 459.042431][T20027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.052284][T20027] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.062122][T20027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.072479][T20027] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.087366][T20027] 44976 total pagecache pages [ 459.092104][T20027] 0 pages in swap cache [ 459.097593][T20027] Free swap = 124996kB [ 459.101777][T20027] Total swap = 124996kB [ 459.107585][T20027] 2097051 pages RAM [ 459.111610][T20027] 0 pages HighMem/MovableOnly [ 459.116470][T20027] 425656 pages reserved [ 459.120812][T20027] 0 pages cma reserved [ 461.048509][T20022] tc_dump_action: action bad kind [ 461.054230][T20026] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3793'. [ 461.214708][T20040] tipc: Enabled bearer , priority 10 [ 461.264200][T20047] lo speed is unknown, defaulting to 1000 [ 461.496971][T20064] netlink: 'syz.2.3804': attribute type 21 has an invalid length. [ 461.509348][T20064] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3804'. [ 461.575160][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 461.611919][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3804'. [ 461.629301][T20068] 8021q: VLANs not supported on caif0 [ 462.085583][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3810'. [ 462.333735][T12001] tipc: Node number set to 580326395 [ 462.406621][T20094] tipc: Enabling of bearer rejected, already enabled [ 462.430874][T20094] tipc: Resetting bearer [ 462.616824][T20104] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3816'. [ 462.654910][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3817'. [ 462.853755][T20110] tipc: Started in network mode [ 462.860646][T20110] tipc: Node identity 4e6b92bde2a8, cluster identity 4711 [ 462.883592][T20110] tipc: Enabled bearer , priority 0 [ 462.912664][T20110] syzkaller0: entered promiscuous mode [ 462.922484][T20110] syzkaller0: entered allmulticast mode [ 462.984717][T20110] tipc: Resetting bearer [ 462.997905][T20108] tipc: Resetting bearer [ 463.083819][T20108] tipc: Disabling bearer [ 463.191122][T20129] tipc: Enabling of bearer rejected, already enabled [ 463.525912][T20148] netlink: 'syz.1.3828': attribute type 4 has an invalid length. [ 463.533903][T20139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3826'. [ 463.543416][T20149] netlink: 'syz.1.3828': attribute type 4 has an invalid length. [ 463.615415][T20148] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3828'. [ 463.625603][T20148] netlink: 'syz.1.3828': attribute type 1 has an invalid length. [ 464.122918][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'. [ 464.250140][T20172] syz.4.3837 uses old SIOCAX25GETINFO [ 464.765792][T20198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 464.800385][T20198] ip6erspan0: entered promiscuous mode [ 465.180691][T20212] syzkaller0: entered promiscuous mode [ 465.197234][T20212] syzkaller0: entered allmulticast mode [ 465.992877][T20250] syz_tun: entered promiscuous mode [ 466.033637][T20250] syz_tun: entered allmulticast mode [ 466.064968][T20252] __nla_validate_parse: 6 callbacks suppressed [ 466.064991][T20252] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3864'. [ 466.091663][T20257] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 466.117203][T20260] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 466.185944][T20265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.206270][T20264] lo speed is unknown, defaulting to 1000 [ 466.209076][T20266] netlink: 'syz.2.3863': attribute type 11 has an invalid length. [ 469.076090][T20280] vlan2: entered allmulticast mode [ 469.081265][T20280] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 469.212501][T20317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3879'. [ 469.455881][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 469.505415][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'. [ 469.527235][T20336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3881'. [ 469.562474][T20336] openvswitch: netlink: Missing key (keys=40, expected=80) [ 469.617138][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 469.633575][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'. [ 469.797079][T20342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3886'. [ 470.147673][T20356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.378257][T20368] openvswitch: netlink: IPv4 tun info is not correct [ 470.524694][T20376] netlink: 81 bytes leftover after parsing attributes in process `syz.4.3896'. [ 470.587644][T20376] tls_set_device_offload_rx: netdev not found [ 471.125762][T20403] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 471.292557][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3909'. [ 471.391910][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.433368][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.725833][T20431] netlink: 'syz.2.3915': attribute type 6 has an invalid length. [ 471.739571][T20432] veth0: entered promiscuous mode [ 471.758069][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'. [ 471.767460][T20431] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 471.796473][T20431] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 471.877344][T20446] netlink: 'syz.2.3915': attribute type 1 has an invalid length. [ 471.895473][T20446] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3915'. [ 472.119199][T20456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3921'. [ 472.558902][T20471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3926'. [ 472.831007][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3934'. [ 472.862946][T20489] netlink: 'syz.2.3935': attribute type 18 has an invalid length. [ 472.878322][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3934'. [ 472.884371][T20489] delete_channel: no stack [ 472.965008][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3934'. [ 473.001487][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3934'. [ 473.467239][T20520] team_slave_0: mtu greater than device maximum [ 473.666341][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 473.780624][ T78] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.812164][ T78] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.822317][ T78] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.835578][ T78] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.157787][T20547] bridge_slave_1: left allmulticast mode [ 475.164399][T20547] bridge_slave_1: left promiscuous mode [ 475.170356][T20547] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.219571][T20547] bridge_slave_0: left allmulticast mode [ 475.225817][T20547] bridge_slave_0: left promiscuous mode [ 475.242111][T20547] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.574510][T20576] netlink: 'syz.1.3959': attribute type 13 has an invalid length. [ 475.612969][T20576] netlink: 'syz.1.3959': attribute type 58 has an invalid length. [ 475.648166][ T5877] block nbd3: Receive control failed (result -32) [ 475.760112][T20579] veth0_to_bridge: entered promiscuous mode [ 475.788006][T20579] veth0_to_bridge: left promiscuous mode [ 475.910722][T20583] netlink: 'syz.4.3961': attribute type 10 has an invalid length. [ 475.959227][T20583] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.996969][T20583] bond0: (slave team0): Enslaving as an active interface with an up link [ 476.441291][T20615] __nla_validate_parse: 9 callbacks suppressed [ 476.441313][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3969'. [ 476.474323][T20617] syz_tun: entered promiscuous mode [ 476.479772][T20617] syz_tun: entered allmulticast mode [ 476.532579][T20617] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3970'. [ 476.549917][T20615] tipc: Resetting bearer [ 476.636643][T20627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.848266][T20615] tipc: Disabling bearer [ 477.065093][T20635] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3976'. [ 477.273305][T20647] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3982'. [ 477.318745][T20647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3982'. [ 477.330554][T20650] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 477.469145][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3984'. [ 477.589582][T20667] netem: change failed [ 477.701776][T20673] tipc: Enabled bearer , priority 0 [ 477.772013][T20673] tipc: Disabling bearer [ 477.835155][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 478.100647][T20687] tipc: New replicast peer: 255.255.255.255 [ 478.133536][T20689] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 478.134188][T20687] tipc: Enabled bearer , priority 10 [ 478.334742][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'. [ 478.428449][T20718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4003'. [ 478.447885][T20717] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4005'. [ 478.641458][T20727] veth0_to_bond: entered allmulticast mode [ 479.670768][T20789] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 480.316414][T20819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.348983][T20819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.491901][T20830] C: renamed from lo (while UP) [ 481.213868][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 481.302305][T20829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.693954][ T5877] Bluetooth: hci0: command tx timeout [ 483.263855][T20847] tipc: New replicast peer: 255.255.255.255 [ 483.271194][T20847] tipc: Enabled bearer , priority 10 [ 483.482491][T20860] netlink: 'syz.2.4048': attribute type 1 has an invalid length. [ 483.530476][T20860] __nla_validate_parse: 9 callbacks suppressed [ 483.530499][T20860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4048'. [ 483.580434][T20860] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4048'. [ 483.620038][T20860] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4048'. [ 484.155919][T20894] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4058'. [ 484.371070][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 484.429016][T20908] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 484.493363][T20908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.517564][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 484.537387][T20908] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 484.551539][T20905] syzkaller0: entered promiscuous mode [ 484.560641][T20908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.589010][T20905] syzkaller0: entered allmulticast mode [ 484.599147][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 484.622343][T20908] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 484.635454][T20908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.641600][T20922] netlink: 'syz.0.4066': attribute type 11 has an invalid length. [ 484.651116][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 484.664107][T20908] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 484.672086][T20908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.688934][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 484.706172][T20908] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 484.719332][T20922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4066'. [ 484.720415][T20908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.724361][ T94] block nbd2: Possible stuck request ffff888025045080: control (read@0,1024B). Runtime 270 seconds [ 485.736340][ T94] block nbd2: Possible stuck request ffff888025045240: control (read@1024,1024B). Runtime 270 seconds [ 485.749539][ T94] block nbd2: Possible stuck request ffff888025045400: control (read@2048,1024B). Runtime 270 seconds [ 485.761129][ T94] block nbd2: Possible stuck request ffff8880250455c0: control (read@3072,1024B). Runtime 270 seconds [ 487.604558][T21004] netlink: 'syz.0.4080': attribute type 1 has an invalid length. [ 487.718953][T21005] bond1 (unregistering): Released all slaves [ 487.802345][T21006] ip6tnl1: entered promiscuous mode [ 487.810230][T21006] ip6tnl1: entered allmulticast mode [ 487.873758][T21005] bond1 (unregistering): Released all slaves [ 487.907660][T21009] netlink: 'syz.2.4081': attribute type 1 has an invalid length. [ 487.915679][T21009] netlink: 'syz.2.4081': attribute type 3 has an invalid length. [ 488.006335][T21005] bond1 (unregistering): Released all slaves [ 488.273870][T21005] bond1 (unregistering): Released all slaves [ 488.314048][T21040] netlink: 'syz.3.4087': attribute type 5 has an invalid length. [ 488.568105][T21005] bond1 (unregistering): Released all slaves [ 488.954065][T21063] __nla_validate_parse: 65 callbacks suppressed [ 488.954087][T21063] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4093'. [ 489.635794][T21083] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 489.653361][ C1] net_ratelimit: 124 callbacks suppressed [ 489.653384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.767250][T21094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.851062][T21094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4104'. [ 490.032078][T21105] netlink: 'syz.0.4108': attribute type 1 has an invalid length. [ 490.083317][T21110] netlink: 'syz.0.4108': attribute type 10 has an invalid length. [ 490.156480][T21110] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.167249][T21110] bond0: (slave team0): Enslaving as an active interface with an up link [ 490.192128][T21105] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 490.209954][T21105] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 490.327568][T21115] netlink: 'syz.3.4111': attribute type 7 has an invalid length. [ 490.637615][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4114'. [ 490.686844][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'. [ 490.753595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.046971][T21150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4123'. [ 491.080054][T21154] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4120'. [ 491.197978][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4121'. [ 491.287962][T21135] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.295865][T21135] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.693386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.876637][T21168] netlink: 'syz.3.4124': attribute type 33 has an invalid length. [ 491.925981][T21135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.960381][T21135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.365999][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.403330][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.412323][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.475613][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.669397][T21182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4128'. [ 492.743436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.012164][T21184] tipc: Enabled bearer , priority 0 [ 493.062560][T21190] syzkaller0: entered promiscuous mode [ 493.073459][T21190] syzkaller0: entered allmulticast mode [ 493.228041][T21207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4135'. [ 493.268777][T21199] tipc: Resetting bearer [ 493.461329][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4136'. [ 493.639908][T21228] netlink: 'syz.2.4139': attribute type 13 has an invalid length. [ 493.708990][T21231] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 493.779234][T21183] tipc: Resetting bearer [ 493.893367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.987961][T21183] tipc: Disabling bearer [ 494.159559][T21228] veth0_macvtap: left promiscuous mode [ 494.216959][T21219] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 494.218350][T21228] macvtap0: entered allmulticast mode [ 494.276203][T21228] macvtap0: refused to change device tx_queue_len [ 494.523689][T21254] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 494.791003][T21269] netlink: 'syz.4.4150': attribute type 1 has an invalid length. [ 494.830289][T21269] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4150'. [ 494.883601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.196116][T21288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.202758][T21289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.488596][T21300] bond3: entered promiscuous mode [ 495.496563][T21300] bond3: entered allmulticast mode [ 495.502885][T21300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.614620][T21312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.912578][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4164'. [ 495.922111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.980160][T21300] bond3 (unregistering): Released all slaves [ 496.068183][T21318] syzkaller1: entered promiscuous mode [ 496.123884][T21318] syzkaller1: entered allmulticast mode [ 496.546179][T21337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4172'. [ 496.903179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.282454][T21370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4178'. [ 497.295008][T21370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4178'. [ 497.712252][T21370] bond0: (slave team0): Releasing backup interface [ 497.733047][T21370] team0 (unregistering): Port device team_slave_0 removed [ 497.743791][T21370] team0 (unregistering): Port device team_slave_1 removed [ 497.826610][T21388] netlink: 'syz.3.4182': attribute type 2 has an invalid length. [ 497.951794][T21392] sctp: [Deprecated]: syz.2.4183 (pid 21392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.951794][T21392] Use struct sctp_sack_info instead [ 497.969239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.172158][T21399] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 498.234733][T21402] openvswitch: netlink: Duplicate or invalid key (type 0). [ 498.242461][T21402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.272265][T21400] IPv6: sit1: Disabled Multicast RS [ 498.280917][T21400] sit1: entered allmulticast mode [ 498.434228][T21411] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4192'. [ 498.786372][T21425] tipc: Can't bind to reserved service type 0 [ 498.820615][T21420] netlink: 'syz.2.4194': attribute type 10 has an invalid length. [ 498.848166][T21425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4197'. [ 499.053540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.124319][T21442] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4201'. [ 499.924420][T21482] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4214'. [ 499.940383][T21485] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4213'. [ 499.953637][T21482] 0ªî{X¹¦: renamed from gretap0 [ 499.967030][T21482] 0ªî{X¹¦: entered allmulticast mode [ 499.989141][T21482] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 500.113216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.602016][T21511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4220'. [ 500.646252][T21515] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4221'. [ 500.775610][T21526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4222'. [ 500.895377][T21529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4225'. [ 501.213896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.297997][T21558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4231'. [ 501.320244][T21558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4231'. [ 501.352539][T21560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4230'. [ 501.364841][T21560] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 501.531452][T21565] bridge_slave_0: entered promiscuous mode [ 501.696517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.772669][T21578] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4237'. [ 501.837153][T21582] netlink: 'syz.1.4239': attribute type 14 has an invalid length. [ 501.945289][T21582] dummy0: entered promiscuous mode [ 501.952001][T21582] batadv_slave_1: entered promiscuous mode [ 501.982090][T21582] debugfs: 'hsr1' already exists in 'hsr' [ 501.992429][T21582] Cannot create hsr debugfs directory [ 502.103314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.620212][T21618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.755984][T21622] bond0: (slave bond_slave_0): Releasing backup interface [ 502.767026][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.835589][T21622] bond0: (slave bond_slave_1): Releasing backup interface [ 502.924855][T21622] team0: Port device team_slave_0 removed [ 502.970561][T21622] team0: Port device team_slave_1 removed [ 502.978806][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.987210][T21622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.998159][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.006965][T21622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.017923][T21622] ------------[ cut here ]------------ [ 503.023838][T21622] WARNING: CPU: 1 PID: 21622 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 503.033851][T21622] Modules linked in: [ 503.038089][T21622] CPU: 1 UID: 0 PID: 21622 Comm: syz.1.4254 Not tainted syzkaller #0 PREEMPT(full) [ 503.047716][T21622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.057931][T21622] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 503.064270][T21622] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 8d 94 f2 f7 e9 78 fe ff ff e8 c3 2b 8f f7 eb 05 e8 bc 2b 8f f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 cb 4b 01 [ 503.084240][T21622] RSP: 0018:ffffc9000f1ce620 EFLAGS: 00010246 [ 503.090348][T21622] RAX: ffffffff8a30806d RBX: ffff888079520c00 RCX: 0000000000080000 [ 503.098662][T21622] RDX: ffffc9011e402000 RSI: 000000000007ffff RDI: 0000000000080000 [ 503.106706][T21622] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 503.114741][T21622] R10: dffffc0000000000 R11: fffff52001e39cbc R12: ffff888054a71cde [ 503.122770][T21622] R13: ffff888079520c90 R14: 0000000000000000 R15: 1ffff1100f2a4192 [ 503.130886][T21622] FS: 00007fd4d96546c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 503.139899][T21622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.146550][T21622] CR2: 00002000000016c0 CR3: 000000005c41e000 CR4: 00000000003526f0 [ 503.154778][T21622] Call Trace: [ 503.158096][T21622] [ 503.161090][T21622] fib6_ifup+0x14a/0x180 [ 503.165573][T21622] ? __pfx_fib6_ifup+0x10/0x10 [ 503.170390][T21622] fib6_clean_node+0x24d/0x590 [ 503.175247][T21622] ? __pfx_fib6_clean_node+0x10/0x10 [ 503.180572][T21622] ? __lock_acquire+0xab9/0xd20 [ 503.185538][T21622] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.191022][T21622] fib6_walk_continue+0x67b/0x910 [ 503.196197][T21622] fib6_walk+0x149/0x290 [ 503.200487][T21622] __fib6_clean_all+0x234/0x380 [ 503.205433][T21622] ? __fib6_clean_all+0x9b/0x380 [ 503.210475][T21622] ? __pfx_fib6_ifup+0x10/0x10 [ 503.215350][T21622] ? __pfx___fib6_clean_all+0x10/0x10 [ 503.220776][T21622] ? __pfx_fib6_clean_node+0x10/0x10 [ 503.226155][T21622] ? __pfx_fib6_ifup+0x10/0x10 [ 503.231003][T21622] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 503.237055][T21622] rt6_sync_up+0x128/0x160 [ 503.241582][T21622] ? __pfx_rt6_sync_up+0x10/0x10 [ 503.246669][T21622] ? ipv6_mc_up+0x3da/0x580 [ 503.251219][T21622] addrconf_notify+0xd55/0x1010 [ 503.256170][T21622] notifier_call_chain+0x1b3/0x3e0 [ 503.261362][T21622] netif_state_change+0x284/0x3a0 [ 503.266497][T21622] ? __pfx_netif_state_change+0x10/0x10 [ 503.272119][T21622] ? do_set_master+0x1f7/0x6d0 [ 503.276983][T21622] ? validate_linkmsg+0x765/0x950 [ 503.282059][T21622] do_setlink+0x35de/0x41c0 [ 503.286737][T21622] ? __kernel_text_address+0xd/0x40 [ 503.291990][T21622] ? arch_stack_walk+0xfc/0x150 [ 503.296942][T21622] ? __pfx_do_setlink+0x10/0x10 [ 503.301939][T21622] ? __lock_acquire+0xab9/0xd20 [ 503.306920][T21622] ? __mutex_trylock_common+0x153/0x260 [ 503.312500][T21622] ? __pfx___mutex_trylock_common+0x10/0x10 [ 503.318567][T21622] ? rcu_is_watching+0x15/0xb0 [ 503.323396][T21622] ? trace_contention_end+0x39/0x120 [ 503.328805][T21622] ? __mutex_lock+0x335/0x1360 [ 503.333715][T21622] ? __pfx___nla_validate_parse+0x10/0x10 [ 503.339567][T21622] ? rtnl_newlink+0x8db/0x1c70 [ 503.344398][T21622] ? __pfx___mutex_lock+0x10/0x10 [ 503.349453][T21622] ? ns_capable+0x8a/0xf0 [ 503.353837][T21622] ? rtnl_link_get_net_capable+0x16a/0x350 [ 503.359687][T21622] rtnl_newlink+0x149f/0x1c70 [ 503.364555][T21622] ? netlink_sendmsg+0x805/0xb30 [ 503.369620][T21622] ? __pfx_rtnl_newlink+0x10/0x10 [ 503.374840][T21622] ? kasan_quarantine_put+0xdd/0x220 [ 503.380182][T21622] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.385544][T21622] ? nlmon_xmit+0xb0/0x100 [ 503.390122][T21622] ? kmem_cache_free+0x18f/0x400 [ 503.395152][T21622] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.400554][T21622] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.405825][T21622] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.411253][T21622] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 503.417073][T21622] ? __dev_queue_xmit+0x27b/0x3b50 [ 503.422656][T21622] ? __dev_queue_xmit+0x27b/0x3b50 [ 503.428190][T21622] ? __dev_queue_xmit+0x27b/0x3b50 [ 503.433372][T21622] ? __dev_queue_xmit+0x1d79/0x3b50 [ 503.438720][T21622] ? __lock_acquire+0xab9/0xd20 [ 503.443714][T21622] ? __pfx_rtnl_newlink+0x10/0x10 [ 503.448808][T21622] rtnetlink_rcv_msg+0x7cc/0xb70 [ 503.453889][T21622] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 503.459039][T21622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.464591][T21622] ? ref_tracker_free+0x63a/0x7d0 [ 503.469753][T21622] ? __asan_memcpy+0x40/0x70 [ 503.474418][T21622] ? __pfx_ref_tracker_free+0x10/0x10 [ 503.479880][T21622] netlink_rcv_skb+0x208/0x470 [ 503.484749][T21622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.490440][T21622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.495932][T21622] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.501392][T21622] netlink_unicast+0x82c/0x9e0 [ 503.506448][T21622] ? __pfx_netlink_unicast+0x10/0x10 [ 503.512062][T21622] ? netlink_sendmsg+0x642/0xb30 [ 503.517107][T21622] ? skb_put+0x11b/0x210 [ 503.521409][T21622] netlink_sendmsg+0x805/0xb30 [ 503.526329][T21622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.531668][T21622] ? aa_sock_msg_perm+0xf1/0x1d0 [ 503.537075][T21622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.543234][T21622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.548584][T21622] __sock_sendmsg+0x21c/0x270 [ 503.553329][T21622] ____sys_sendmsg+0x505/0x830 [ 503.558133][T21622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.563596][T21622] ? import_iovec+0x74/0xa0 [ 503.568127][T21622] ___sys_sendmsg+0x21f/0x2a0 [ 503.572808][T21622] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.578133][T21622] ? __fget_files+0x2a/0x420 [ 503.582767][T21622] ? __fget_files+0x3a0/0x420 [ 503.587652][T21622] __x64_sys_sendmsg+0x19b/0x260 [ 503.592815][T21622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.598364][T21622] ? rcu_is_watching+0x15/0xb0 [ 503.603231][T21622] ? do_syscall_64+0xbe/0x3b0 [ 503.608002][T21622] do_syscall_64+0xfa/0x3b0 [ 503.612699][T21622] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.618005][T21622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.624164][T21622] ? clear_bhb_loop+0x60/0xb0 [ 503.628892][T21622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.635157][T21622] RIP: 0033:0x7fd4d878ebe9 [ 503.639717][T21622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.659521][T21622] RSP: 002b:00007fd4d9654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.668031][T21622] RAX: ffffffffffffffda RBX: 00007fd4d89b5fa0 RCX: 00007fd4d878ebe9 [ 503.676191][T21622] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 503.684245][T21622] RBP: 00007fd4d8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 503.692261][T21622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.700340][T21622] R13: 00007fd4d89b6038 R14: 00007fd4d89b5fa0 R15: 00007fff2f8bf738 [ 503.708497][T21622] [ 503.711761][T21622] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 503.719158][T21622] CPU: 1 UID: 0 PID: 21622 Comm: syz.1.4254 Not tainted syzkaller #0 PREEMPT(full) [ 503.728803][T21622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.738896][T21622] Call Trace: [ 503.742475][T21622] [ 503.745443][T21622] dump_stack_lvl+0x99/0x250 [ 503.750091][T21622] ? __asan_memcpy+0x40/0x70 [ 503.754721][T21622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.759977][T21622] ? __pfx__printk+0x10/0x10 [ 503.764624][T21622] vpanic+0x281/0x750 [ 503.768652][T21622] ? __pfx__printk+0x10/0x10 [ 503.773460][T21622] ? __pfx_vpanic+0x10/0x10 [ 503.778018][T21622] ? is_bpf_text_address+0x26/0x2b0 [ 503.783275][T21622] panic+0xb9/0xc0 [ 503.787048][T21622] ? __pfx_panic+0x10/0x10 [ 503.791515][T21622] __warn+0x31b/0x4b0 [ 503.795524][T21622] ? rt6_multipath_rebalance+0x455/0x8b0 [ 503.801205][T21622] ? rt6_multipath_rebalance+0x455/0x8b0 [ 503.806895][T21622] report_bug+0x2be/0x4f0 [ 503.811263][T21622] ? rt6_multipath_rebalance+0x455/0x8b0 [ 503.816921][T21622] ? rt6_multipath_rebalance+0x455/0x8b0 [ 503.822605][T21622] ? rt6_multipath_rebalance+0x457/0x8b0 [ 503.828272][T21622] handle_bug+0x84/0x160 [ 503.832523][T21622] exc_invalid_op+0x1a/0x50 [ 503.837216][T21622] asm_exc_invalid_op+0x1a/0x20 [ 503.842095][T21622] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 503.848353][T21622] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 8d 94 f2 f7 e9 78 fe ff ff e8 c3 2b 8f f7 eb 05 e8 bc 2b 8f f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 cb 4b 01 [ 503.868086][T21622] RSP: 0018:ffffc9000f1ce620 EFLAGS: 00010246 [ 503.874262][T21622] RAX: ffffffff8a30806d RBX: ffff888079520c00 RCX: 0000000000080000 [ 503.882258][T21622] RDX: ffffc9011e402000 RSI: 000000000007ffff RDI: 0000000000080000 [ 503.890409][T21622] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 503.898481][T21622] R10: dffffc0000000000 R11: fffff52001e39cbc R12: ffff888054a71cde [ 503.906571][T21622] R13: ffff888079520c90 R14: 0000000000000000 R15: 1ffff1100f2a4192 [ 503.914609][T21622] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 503.920307][T21622] fib6_ifup+0x14a/0x180 [ 503.924668][T21622] ? __pfx_fib6_ifup+0x10/0x10 [ 503.929472][T21622] fib6_clean_node+0x24d/0x590 [ 503.934269][T21622] ? __pfx_fib6_clean_node+0x10/0x10 [ 503.939613][T21622] ? __lock_acquire+0xab9/0xd20 [ 503.944582][T21622] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.950048][T21622] fib6_walk_continue+0x67b/0x910 [ 503.955296][T21622] fib6_walk+0x149/0x290 [ 503.959745][T21622] __fib6_clean_all+0x234/0x380 [ 503.964725][T21622] ? __fib6_clean_all+0x9b/0x380 [ 503.969752][T21622] ? __pfx_fib6_ifup+0x10/0x10 [ 503.974809][T21622] ? __pfx___fib6_clean_all+0x10/0x10 [ 503.980230][T21622] ? __pfx_fib6_clean_node+0x10/0x10 [ 503.985539][T21622] ? __pfx_fib6_ifup+0x10/0x10 [ 503.990425][T21622] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 503.996096][T21622] rt6_sync_up+0x128/0x160 [ 504.000569][T21622] ? __pfx_rt6_sync_up+0x10/0x10 [ 504.005619][T21622] ? ipv6_mc_up+0x3da/0x580 [ 504.010158][T21622] addrconf_notify+0xd55/0x1010 [ 504.015031][T21622] notifier_call_chain+0x1b3/0x3e0 [ 504.020177][T21622] netif_state_change+0x284/0x3a0 [ 504.025223][T21622] ? __pfx_netif_state_change+0x10/0x10 [ 504.030910][T21622] ? do_set_master+0x1f7/0x6d0 [ 504.035685][T21622] ? validate_linkmsg+0x765/0x950 [ 504.040742][T21622] do_setlink+0x35de/0x41c0 [ 504.045266][T21622] ? __kernel_text_address+0xd/0x40 [ 504.050498][T21622] ? arch_stack_walk+0xfc/0x150 [ 504.055367][T21622] ? __pfx_do_setlink+0x10/0x10 [ 504.060296][T21622] ? __lock_acquire+0xab9/0xd20 [ 504.065197][T21622] ? __mutex_trylock_common+0x153/0x260 [ 504.070796][T21622] ? __pfx___mutex_trylock_common+0x10/0x10 [ 504.076901][T21622] ? rcu_is_watching+0x15/0xb0 [ 504.081783][T21622] ? trace_contention_end+0x39/0x120 [ 504.087097][T21622] ? __mutex_lock+0x335/0x1360 [ 504.092009][T21622] ? __pfx___nla_validate_parse+0x10/0x10 [ 504.097829][T21622] ? rtnl_newlink+0x8db/0x1c70 [ 504.102659][T21622] ? __pfx___mutex_lock+0x10/0x10 [ 504.107707][T21622] ? ns_capable+0x8a/0xf0 [ 504.112065][T21622] ? rtnl_link_get_net_capable+0x16a/0x350 [ 504.117899][T21622] rtnl_newlink+0x149f/0x1c70 [ 504.122590][T21622] ? netlink_sendmsg+0x805/0xb30 [ 504.127541][T21622] ? __pfx_rtnl_newlink+0x10/0x10 [ 504.132588][T21622] ? kasan_quarantine_put+0xdd/0x220 [ 504.137878][T21622] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.143112][T21622] ? nlmon_xmit+0xb0/0x100 [ 504.147541][T21622] ? kmem_cache_free+0x18f/0x400 [ 504.152503][T21622] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.157897][T21622] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.163130][T21622] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.168650][T21622] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.174479][T21622] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.181458][T21622] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.186780][T21622] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.192127][T21622] ? __dev_queue_xmit+0x1d79/0x3b50 [ 504.197372][T21622] ? __lock_acquire+0xab9/0xd20 [ 504.202284][T21622] ? __pfx_rtnl_newlink+0x10/0x10 [ 504.207331][T21622] rtnetlink_rcv_msg+0x7cc/0xb70 [ 504.212301][T21622] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 504.217441][T21622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.222943][T21622] ? ref_tracker_free+0x63a/0x7d0 [ 504.227998][T21622] ? __asan_memcpy+0x40/0x70 [ 504.232622][T21622] ? __pfx_ref_tracker_free+0x10/0x10 [ 504.238031][T21622] netlink_rcv_skb+0x208/0x470 [ 504.242946][T21622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.248436][T21622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.254083][T21622] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.259364][T21622] netlink_unicast+0x82c/0x9e0 [ 504.264291][T21622] ? __pfx_netlink_unicast+0x10/0x10 [ 504.269621][T21622] ? netlink_sendmsg+0x642/0xb30 [ 504.274582][T21622] ? skb_put+0x11b/0x210 [ 504.278882][T21622] netlink_sendmsg+0x805/0xb30 [ 504.283687][T21622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.289105][T21622] ? aa_sock_msg_perm+0xf1/0x1d0 [ 504.294090][T21622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.299407][T21622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.304813][T21622] __sock_sendmsg+0x21c/0x270 [ 504.309521][T21622] ____sys_sendmsg+0x505/0x830 [ 504.314310][T21622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.319628][T21622] ? import_iovec+0x74/0xa0 [ 504.324149][T21622] ___sys_sendmsg+0x21f/0x2a0 [ 504.328854][T21622] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.334109][T21622] ? __fget_files+0x2a/0x420 [ 504.338734][T21622] ? __fget_files+0x3a0/0x420 [ 504.343515][T21622] __x64_sys_sendmsg+0x19b/0x260 [ 504.348490][T21622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.354065][T21622] ? rcu_is_watching+0x15/0xb0 [ 504.358849][T21622] ? do_syscall_64+0xbe/0x3b0 [ 504.363543][T21622] do_syscall_64+0xfa/0x3b0 [ 504.368072][T21622] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.373285][T21622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.379464][T21622] ? clear_bhb_loop+0x60/0xb0 [ 504.384157][T21622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.390067][T21622] RIP: 0033:0x7fd4d878ebe9 [ 504.394489][T21622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.414133][T21622] RSP: 002b:00007fd4d9654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.422583][T21622] RAX: ffffffffffffffda RBX: 00007fd4d89b5fa0 RCX: 00007fd4d878ebe9 [ 504.430587][T21622] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 504.438560][T21622] RBP: 00007fd4d8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 504.446734][T21622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.455108][T21622] R13: 00007fd4d89b6038 R14: 00007fd4d89b5fa0 R15: 00007fff2f8bf738 [ 504.463163][T21622] [ 504.466374][T21622] Kernel Offset: disabled [ 504.470716][T21622] Rebooting in 86400 seconds..