last executing test programs: 8m13.82634985s ago: executing program 4 (id=3155): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8de00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 8m13.309448875s ago: executing program 4 (id=3158): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x48d4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'dvmrp0\x00', {0x6}, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12aaf1e75c40000004000000020000000051c1c92ad10d3ceb1f"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="0100001400000000000002", @ANYRES32], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 8m12.67459387s ago: executing program 4 (id=3161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffcff}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0xfcff, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m12.220259482s ago: executing program 4 (id=3163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500f8000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003c00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 8m11.950570425s ago: executing program 4 (id=3165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1ff, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000500000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8m10.07975126s ago: executing program 4 (id=3172): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername$packet(r4, &(0x7f0000000cc0), &(0x7f0000000d00)=0x14) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r8, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYRES8=r5], 0x1c}}, 0x4008054) write$nci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r9 = socket(0x1e, 0x4, 0x0) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r7, @ANYRES16=r9], 0x14) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000001880)={&(0x7f0000000380), 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x48, r10, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "fd1dcb6994432f1e71f40ada2fc9a70c"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008800) 8m7.809167753s ago: executing program 1 (id=3178): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@mpls_delroute={0x30, 0x19, 0x10, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x14, 0x10, 0x6, 0x0, 0x2, 0xfe, 0x9, 0x600}, [@RTA_VIA={0x14, 0x12, {0x11, "e6226475a6316f1fa063fb6cb1aa"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x8800) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0xffffffffffffff32, &(0x7f0000000100)=[{&(0x7f0000000340)="860d", 0x3}, {&(0x7f0000000640)="def3f65a16ed839cbca521467afcebdc18e6c1753c4feb5ffe0b44ffe3fbc2d7a747b1858958ee152156c53753715b35c563d2ee31562bf7e16e93a7fe24c89d8d8c0282199858092b1742bc3aa139b94d1c1866e25ffcee0d5866caf717822a98debfdf6b434763adeff910e4cd3bafb438cd497802706e22f39bccc5da673b751dda1afe749d88a04b16d0910a2cbda2cbd6a4a21693c5bf9097256ee687e273e8307f6ee048ca43889f577d7a2f03c870f7e9d7a9ce8a5757c6d01e035e6d6b5a45b40829cf87fd07fc48b84bb31fe471e2e27a45e5235c81e6f3d466b26385b224a0837e946213dee5f7", 0xec}, {&(0x7f00000005c0)="0a01c8087979c27bd0a904bbac1fb6cab03c927c76b65a6565d4757d7d40519943e75f3e0b9700254998ddb21dfa836e5d66f65a7f6740e5e3b02384a08e301303ab3f00ac0e93f3cf278f882ec09bd3a9560f92ae5d999f5c7130b08f76fcdbc5bd39186d38a500dc7766340b0342a271fc5379a155de88", 0x78}], 0x3, 0x0, 0x0, 0x4c944}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0xc880) recvmmsg$unix(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 8m7.475235068s ago: executing program 1 (id=3179): r0 = socket(0x1e, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x42) (async) write(r0, &(0x7f0000000100)="1800000016005f021dfffffffffffff80700000001000000", 0x18) (async) unshare(0x2a020400) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c777b95ca109ff3", 0x1c}], 0x18, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101}}}], 0x20}, 0x400c804) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x1) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x27) 8m7.006600468s ago: executing program 1 (id=3181): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000f8ac3a6de322a8a294c58b5bfaeec04e7c60d9254dba4e289f720bf0d23b95f6303a3395c6648eadd97b14ed446993207bf90f580e4646697babb9cbc319ba56da99c44abad0a3340fd941d43d1fda2cd27bdfba566ae5e136e25eb2124f9948", @ANYRES16=r1, @ANYBLOB="07000000000002000400050000001400038004000400080002000000000004000100180001801400020073797a5f74756e000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4e23, 0x0, 0x0, 0x8000, 0xa}, {0xff, 0x0, 0x3}, {0x0, 0x5}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x5}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2b}, 0x0, @in=@private=0xa010103, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4894) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4e23, 0x0, 0x0, 0x8000, 0xa}, {0xff, 0x0, 0x3}, {0x0, 0x5}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x5}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2b}, 0x0, @in=@private=0xa010103, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4894) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @a={0x5, 0x1, 0x6, 0x0, 0x6a, 0x6, 0x3, {0x1, 0x0, "", 0xc, 0x81}, 0xe, 0x81, 0x7f, 0x9}}, 0x13) 8m6.133966554s ago: executing program 1 (id=3183): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x30000000, 0x42f, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept(r0, 0x0, &(0x7f0000000100)) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0x6, 0xa, 0x0, 0x7, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0x0, @in6={0xa, 0x4e23, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb5}}]}, 0x38}}, 0x4000) 8m5.613721025s ago: executing program 1 (id=3185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600a00a0000100002800c001480070006"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'veth0\x00', @broadcast}) writev(r10, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f00000002c0)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c191f", 0x21}], 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r9], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 8m3.660087407s ago: executing program 1 (id=3190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe2c) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000743b79e9469215bb0081002000791010000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$802154_raw(r0, &(0x7f0000000640)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400001, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0x10000000, 0x6}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x3, 0x9, 0x7, 0xfffffffffffffffe, 0x52}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001b40)={0x0, 0xfffffffffffffd90, &(0x7f0000001b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) 7m54.67977787s ago: executing program 32 (id=3172): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername$packet(r4, &(0x7f0000000cc0), &(0x7f0000000d00)=0x14) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r8, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYRES8=r5], 0x1c}}, 0x4008054) write$nci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r9 = socket(0x1e, 0x4, 0x0) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r7, @ANYRES16=r9], 0x14) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000001880)={&(0x7f0000000380), 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x48, r10, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "fd1dcb6994432f1e71f40ada2fc9a70c"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008800) 7m48.379719994s ago: executing program 33 (id=3190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe2c) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000743b79e9469215bb0081002000791010000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$802154_raw(r0, &(0x7f0000000640)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400001, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0x10000000, 0x6}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x3, 0x9, 0x7, 0xfffffffffffffffe, 0x52}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001b40)={0x0, 0xfffffffffffffd90, &(0x7f0000001b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) 4.512508517s ago: executing program 3 (id=7065): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003102010095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) 4.394968946s ago: executing program 3 (id=7067): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'dvmrp0\x00', {0x6}, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="0100001400000000000002", @ANYRES32], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 3.69162027s ago: executing program 3 (id=7078): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x108, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 3.502821009s ago: executing program 3 (id=7082): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff30500180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702800408000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 3.067966802s ago: executing program 3 (id=7093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f00000002c0)={&(0x7f0000000140)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x20000080}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x1}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) close(r4) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', r8, 0x7800, 0x8, 0x1b, 0x9, {{0x7, 0x4, 0x0, 0x32, 0x1c, 0x67, 0x0, 0x0, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}, {&(0x7f0000000280)="b6b6b695e0af", 0x6}], 0x2}, 0x804) 2.280566947s ago: executing program 2 (id=7106): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000407b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.020323259s ago: executing program 2 (id=7110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffffd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffc, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x103, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.881857312s ago: executing program 2 (id=7113): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xfffffffffffffc82, 0x0, &(0x7f00000001c0)={0x23, 0x95, 0x81, 0x2}, 0x10) r1 = socket(0x2, 0x805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140020000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) unshare(0xa020480) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x40047451, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={r9, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f00000003c0)={r3, 0xbe, "84af654f1075c1ca917723093818ea4d425b96e5310a0b9b7c775168d800905a821f8286b3bc15fd1b78de0be205c1ceb71c9acce375acbdbbd18666b41824c3664c4d3824e0ca3d3755085096ad2b0061a3ee70a4d7737191b9867decc9014cdaad691c321d3c55440525ea2c213cfa76a4712d853f2bc30130080e3b56412f1d708e6d26a0583b300895472ac7901cb04569cce5f40d73e78eeae98a0ad89797cce32fe5d6a959bb030a720944bc7f3705730f2388db45864304ed4c40"}, &(0x7f00000004c0)=0xc6) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000300)={r12, 0x1ff}, 0x8) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r13, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x10000000) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @local, @broadcast}}}], 0x20}, 0x200000e0) ioctl$FS_IOC_SETFSLABEL(r11, 0x41009432, &(0x7f0000000540)="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") getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r9, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) 1.881466025s ago: executing program 3 (id=7114): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000029c0)={&(0x7f0000000240)={0xa, 0x4e23, 0x0, @local, 0xa}, 0x1c, 0x0, 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1400000000000000110000003400000043ba00000000000071d6b84d3f12d4dd3296e3875d9c39fbf1c044c92ff7835ac2ba1721db0ba6d22bf379af17292c6eb0dbb8b9878aeecf3313267035dabc703bfbf6fa5ee1977fbb48fde2"], 0x18}, 0x480d0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00\x00\x00', @ANYRES32], 0x20) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0xf, 0x8, 0x7fffffff, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x8, 0xb88, 0xd833}}) (async, rerun: 64) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@var={0x3, 0x0, 0x0, 0xe, 0x5, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @fwd={0xd}]}, {0x0, [0x61, 0x0, 0x61, 0x30, 0x30, 0x30]}}, &(0x7f00000002c0)=""/4096, 0x54, 0x1000, 0x1, 0x1, 0x10000}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x7, 0x20, &(0x7f0000001380)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x98}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @exit, @alu={0x4, 0x0, 0xb, 0xa, 0x2, 0xffffffffffffffee, 0x10}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000001480)='syzkaller\x00', 0x0, 0xc4, &(0x7f00000014c0)=""/196, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001600)=[0x1], &(0x7f0000001640)=[{0x3, 0x2, 0x6, 0x2}, {0x4, 0x1, 0xe, 0xa}, {0x5, 0x1, 0x9, 0xb}], 0x10, 0x4}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001840)={r1, &(0x7f0000001740)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x210002, &(0x7f0000001780)={@_ha_fsid={[0x3, 0xb]}, {0x1, 0xf5, 0xfffffffb, 0x4}}, 0x0, &(0x7f00000017c0)={@_ha_fsid}, &(0x7f0000001800)=0xb2e}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_ext={0x1c, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000100000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000002b70000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0x1c, &(0x7f0000000140)=""/28, 0x41100, 0x10, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001340)={0x2, 0xb, 0x8, 0x16f}, 0x10, 0x161c8, r7, 0x2, &(0x7f0000001880)=[r8, r10], &(0x7f00000018c0)=[{0x4, 0x4, 0x4, 0x3}, {0x5, 0x4, 0x0, 0xb}], 0x10, 0x6}, 0x94) 1.739694392s ago: executing program 6 (id=7115): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000002c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}, 0x4004000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000002c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}, 0x4004000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) (async) listen(r1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) (async) 1.739080636s ago: executing program 0 (id=7116): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x10c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 1.630736475s ago: executing program 0 (id=7118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000040050001000620000005000500"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 1.513687071s ago: executing program 0 (id=7119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001000)=@delchain={0x3ec0, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x5, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) socket$igmp(0x2, 0x3, 0x2) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000240)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @random="df3472a79f29", @device_a, @broadcast, {0x5, 0xff8}, "", @value={0x8, 0x1, 0x1, 0x0, 0xa}, @value=@ver_80211n={0x0, 0x3, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x31, "57640c978e9c4102e6c0e9a9cd2c244df3eb550ebad4d076bc3ad76367327181d2fe9d13a7074920b68c10244611afc647"}, {@device_b, @device_a, 0x6b, "4ff1dce46081729350b48463178bba78cb1dd9ba00569499ad6b671658d96e3fc93461ebb8a6a52a82d247c1e0a01acbf05527e28ed30b3a7c3d4d34dd1cad5193f34cbafb896233adadfb5b9ae9a210db09372460017b7b28c14e5f000930414f6d69e322182644e42d0b"}]}, 0xda) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000004000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.403328205s ago: executing program 5 (id=7120): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'dvmrp0\x00', {0x6}, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="0100001400000000000002", @ANYRES32], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.383918857s ago: executing program 6 (id=7121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000117b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.115884248s ago: executing program 6 (id=7122): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.090683013s ago: executing program 5 (id=7123): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'dvmrp0\x00', {0x6}, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="0100001400000000000002", @ANYRES32], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 999.196769ms ago: executing program 6 (id=7124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) pwritev(r0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001900)}], 0x2, 0x5, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) writev(r0, &(0x7f0000000040), 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfffa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1004205c}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005940)={r2, 0xe0, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000005680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000056c0)=[0x0, 0x0], &(0x7f0000005700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000005740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000005780), &(0x7f00000057c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000005800)}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0xfffffffe, 0xffffffff, {0x2, 0x14, 0x10, 0x4, 0xfd, 0x0, 0xfe, 0x2, 0x300}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0xffffff7f}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f000000a800)={'syztnl1\x00', &(0x7f000000a780)={'gre0\x00', 0x0, 0x700, 0x7800, 0x40, 0x714, {{0xb, 0x4, 0x3, 0x22, 0x2c, 0xe, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp={0x44, 0x18, 0x79, 0x0, 0xc, [0x10, 0x5, 0x10000, 0x9, 0x9]}]}}}}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000ae40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x5, @private1, 0xfff}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000000e00)}, {&(0x7f0000000ec0)="762548b27c1403d0b256e13b62eb302c41baa85f71ad346739940450923f4cf8bfb1a745e5267d3b25261e919dc17c1cdd89dcd9c2579ecd1c5d263f18ee0f843b31d714cb2bbcf23c1762345ae73c4eee998e50b22f52dea4c0837972a01ac960dc9b4d64eb468044e99b5c1317039525070205c3bedd50279c35605923152ebde98fd4ffb1f8f5e86075228ecff8ad1906133450", 0x95}, {&(0x7f0000000f80)="af68ced80f32166eeceee6ee8b80f27e0537ace7", 0x14}, {&(0x7f0000000fc0)="26c1536c33ac5e7f8d75f8e1665e10705d321d09657b8b0f4a4ce1a286a6c94a3c2247e8518cafa9abe0ea1c892a8ca3fbfe8866ac91ccbb93975902f825c8899595248129a530b1f6a0c63bf0daae06d48b831c166c67ff37e396997231bff9cad72c3c466a8d2f9d3a7b6feb61c49fe0bd6dbeb0dfda63dab5ecad158af7ecb71d3408ea129969eb5b8ceeef99f9e5d0f407f25f105bd675e824674b9efd0896d3aa03c85029b136a9427ad98be869735312c95b29e0ae10807390f4ce41bd0ce815c434a95d58c999f6a4577bf9ade473193522634614a0f82cf1ff", 0xdd}, {&(0x7f00000010c0)="96462b5e1ca89bd87b7939b94ead018e0f95cbc1289f684412890a9365ec1f76545b3c17174549e4851bc8f378", 0x2d}, {&(0x7f0000001a40)}, {&(0x7f0000002a40)="298c06795a72f2db7d443b66a541ac8510a241cc21669f51402af1024599827abfc1795cd65dcd1bfc4d26883eb5901434968197f9b6a03fe1d0434405250d2af2364a7bcba438d3f7b1a439e9388977e19cd7cf20d5", 0x56}], 0x7, &(0x7f0000002bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffb}}], 0x30}}, {{&(0x7f0000003e80)={0xa, 0x4e22, 0xfffffff8, @private2, 0x2}, 0x1c, &(0x7f0000004200)=[{&(0x7f0000003ec0)="b192c9c7ee713829d0cf26c786730c3801278c99a9b70ccefa", 0x19}, {&(0x7f0000003f00)="00f1324e91e28b4fc3651c5cf2de49dec9f40906aa63938913ce39d9b8805d1de9486aaae27624b1017508ca5e1bf4b8c152ae6c1010a4826ccaff56f21506c4412aaad83289b7252bf5f4afb7a5234a88bc2b", 0x53}, {&(0x7f0000003f80)="5ba896942f66ddec75120dafdf93c21bf6002696330e338bc0c127c61bb68f129093002e41a9961631602d8edbeeed913cd7bb8dfcf84e4b340a1fadec3f301649681828", 0x44}, {&(0x7f0000004000)="3f04255d1053ab49316dc551808782ee2721189070ad146615ed4f9b5c3c77fd52e390a89d5fb87b73fe694d731348aa78ab5a9c53af3d756f2585961479a6f049637baafff55aa9b583a27f5a62b27350b5", 0x52}, {&(0x7f0000004080)="c84ef78cf6e77f7b14b43a118be1aa2d65a9e8733b0cdc9fc137b10c73b6fa480395390fa461f7579710053259fce7ca50da6137ea5cce99be1c7bba829c8519b3ab83a05d333bda3834d096db5a650ee4be21e7", 0x54}, {&(0x7f0000004100)="ea089e738b86bc1edcbc76c44a4b7c459c83365410cf83579efd547f15b17bd71d79bff5179ad449b2769e07b28c4d3e9654bc31aa35b436e770eac56c8681c71051307d2c82eabd62623d2bd54c9a00eb4dab0cd742fd5564d87a00c18ce106b0ac02003a9d0e4737e7f81e3a2c594738e947f71bb9e86363c2444a2d643840f25a9d736a2cef17a134013480ddd8784c8368692bded5d576897118b337e4f0441046ab77579b1b50ab91", 0xab}], 0x6, &(0x7f0000004280)}}, {{&(0x7f00000043c0)={0xa, 0x4e24, 0x5, @loopback, 0x1}, 0x1c, &(0x7f0000005600)=[{&(0x7f0000004400)}, {0x0}, {&(0x7f00000044c0)="72aef204c8f17f8ab0d8eaa038093c3e168efe976788f2a10366414cf211b69e1fd59cc5aef3f444796e4d36c5f36c511be2a2d8395eb191b826f4201c94274c38f790e5121accda1163a9d4322b63b4b1769e32e94c8907f404cfdb4ff57b47ff52968fc6265422390a42f386d0f4b5deeb2282463fa465080c30d00d7f2801fe22b2575504833b88002123c97ef5e8727e", 0x92}, {&(0x7f0000004580)="8531f272efe4d7ace97be857d7981581b3226e653a2c03dd2a5bc6c91fa24407da88b60e2d3d9adec7c91ad1cf9143dc9fbda9b3d51da1f7c7e2976c9166f29ff02c07cb16ae6d", 0x47}, {&(0x7f0000004600)="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", 0x1000}], 0x5, &(0x7f0000005980)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x1, 0x6, 0x0, [@mcast1, @loopback]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r5}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2b, 0x6, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x5, 0x3}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @generic={0x0, 0x12, "1a230e021ecf927d781bbdb9691577248c99"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r6}}}, @dstopts={{0x1f0, 0x29, 0x37, {0xc, 0x3a, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1}, @generic={0xad, 0xf4, "3960a5e7970590df5e130b9742168c78a4428215a1e3c26d87a81f3968e79cf62f98173a57a0bfac8570eec50958b4b42f674d175756cadba20e55c28cf8692ab18cc9cbec2481d6010b03a514b423aec8b96eed4b43c777366551676688dab71f07d936f3973aee9d193e0fa220daa170020e7f18c4660d5d02708d2025e5f41e840b8d34571353dcf4577832a9b10f933fccf27dc120fdfa074b550493cd1c2ecb66b7bbbd78e3edd8b1ccb8dfc9b0e8c9744a8736ecbfdd2e1991e7066efc7caa795e7043a0a6926603ec5378c75e358378f58c9ac2f840898b850d10d0219a1fd3a16a5ef5f8ab6bca24319759d63a29d915"}, @generic, @generic={0xa, 0xc8, "dba72761abc62651775ed359db68ea063f15567a945497391e462bf718dab9423264c29872f20fe4eafea0bdc218f72c577a92eca3c9838505fbf142bdd991af8468824b3c8fa4d16af7b17e08629b176f5190db2dd2347d60286b375815768a26b6d5b6b70ad2236bcebdb05f780a99320a8ff633a5738b0fa61703f2534b9482d1f352555940314bfd7093eea1c30908d916cc02f086041f9ac5dc48e5fd03ac2ed10730256bf15d37db3437c9509638900e1e18fe56207ee6618f95b32a174fa2324f172f50c0"}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x51}]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x2f, 0x19, '\x00', [@generic={0x8, 0x4c, "04a150f6d7a990495ecef54433fe1bacf481f073ea3ded236a68d38dffb61c48f09326797d3d178b832f50599eccb6c5602931f86d1b4d272177310256f6879eba068119068a55ce7a0f4ed0"}, @generic={0xfa, 0x2a, "7d376eea585e405742f5457f980068d7b718b6e5f13c56971b037147b390c83559f590597ad532eae782"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x18, 0x40, "ecfa049c0464ec7ffe3d7b31b3ec9bcb555ddeaa991e1e516ad65683552cd3d6b478e6b1d0e10e3565a8be1220f7a67eafc978148c147a0199dc57a5303c4690"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x3f0}}, {{&(0x7f0000005e40)={0xa, 0x4e22, 0x7, @mcast1, 0x7}, 0x1c, &(0x7f00000060c0)=[{&(0x7f0000005e80)="39d75ebc8a1e0a2fcbd0963cb4b8378f9977cd763e76fdf98d7d5361d8655081e3f3783ef3a32007ac889d9feb9a49f29fb0121e2cff7ae7b5ad4963b1d14bffec262e03f12ee93329c07d6e25749692cba590f4e1a80067b482cd82b843b32ea5bc5eb25cb0c31ed7ab475bb5aa3278b645da8b28fd953ccfbc14b01d5d3086d715bf524c6d4d1e1083828e34de2b8ae6f48bcecbe7a03d65d3d2a8a99a0e992c879caccf7e5fadc9", 0xa9}, {&(0x7f0000005f40)="9948a9f5b3a96f45402ca9365677afbb84934e040b1ce5380c7cce9b7e7ad60dae99ccb6f98d892e9ebba304790423581e8a2a91d9893fc0abb9ffa08aa8b0e049f87cd1c8620d8f4b0356a7b0d1a9e18a4dea4534182efe9acadad027cd5994f2cb0a9c5667a965edaf8afb8d02abca737e09cdc72a86eb8f3ccd1d7773dee3f68b9067d08625c75523f4e060bb9a02e1d74fd59f2a7a95c99a123afdf4346005b09f58387719f337e6d0e0b3fd3e6387983ab8aa3e5dd45df6c3a09802092b220548547f9b930843a50f92131cde4676619fb4692a2f18794b68fe105dbbcb", 0xe0}, {&(0x7f0000006040)="c3ac5093fd6ad7f07d6e69214e44f93e54bbdf62a61bf209176f6729c82f4854141a468e26029df96ffb9ada9ea42d2346a9dd26a6b42b840777aeb9a401032c4e6ce3d4feeef16e0af21595", 0x4c}], 0x3, &(0x7f0000006100)}}, {{0x0, 0x0, &(0x7f0000007980)=[{&(0x7f0000007380)="3adfbdf8d438db2d6b6c82f261b3bd1a3b713e525c203cea991be5a9d29837728222da5709773f8af1d49ac2cd3fb2648f4b367fd1e181e461a59ad7872ee8a68cef481db118c2165a04bfdec6ec111b20e98af3ba8741f0a894b185eb68fc7d627ea98eac504d63e9f1758ea4", 0x6d}, {&(0x7f0000007400)="3de5add298601bd3d3760d03f645aeb8f35e3f50d422b4564eee83c203927fccd34d2638fcdc082d257aad555d3297d604a8a1bf3d25ede0c601a23629b7e66673c2bf", 0x43}, {&(0x7f0000007480)="db8636c20e1f8c2cbd5f6d89ed53ee1e3921431d1b5dd6f25bed4dfb0c90d720f81e62d8dac9668d9c8097adb8a8a2bff15dfa7803ed3f84727e1103c7ca1bf9c0b400ad12d89d68c403119f46f9aaa24873a55a04e8cc525cccf6eba0216ab07c5230e01ed5177a22c7573c1bba486722ea82ed1eba92ad2f52eeaba2600b801ba3878bf07162b046cc2a943f7377d56b23fc578b6f85b0676619720aef0daf6de25776d1a3d9c2695c9bdb41a6d0e771cb86fc3f829d38ef9a9680f949807ec589a14a8c98f4b7ba9f4a786404afcf36b69c59748e8f", 0xd7}, {&(0x7f0000007580)="8f8d146b9da491b4f738a2c183acc5db8d3939cef2311d3d379789f8d6277a7de7bb544ebed398dc0f6595ec3b999323737657501f34a8507e3646849927af88bf46470c59c86d87bd1699515961efd7828369065d395f8b36d338f81c7467652f8380d7909d57443b408c086c4301ba324710d747f254a00683a6e1f76df33b5d6704590a804bf7ff0088ec44f1baea76ceeea2e4a41d0c98c0adcc6d4248624c4a503771460d29b2a7bad8af94616a90654fc36b83ece69d7f4620156488187319c6df3a50a2eaa74787a3", 0xcc}, {&(0x7f0000007680)="bd71d702c1c009b75d3c0d5ad8a71c49eb81f735e630b3975b3631fbbd7778fcdcd7aac58360bbecb9b61668ad95c8e5c5172df3563322c6d1e91c7560d2a4ddfb914a019e0c3782ce84f3391913ddd0092149f0b03b077cc78b3a3cc947e0a2e6ff961b2f0e1fbc7641d99ce3d82dc225a9", 0x72}, {&(0x7f0000007700)="66678406e428962bb34a6c0ed042befc7e7d1e46dd77b5bf53aa747df1eaadae22798b6214a3320db4cd60c44bbbf37744a28f141b5d5fdfa0df07e6835fc6c2dcc27fe4728a145909c3df0f04f3f3f663a307a1b594f95d2213726d58306bbc2b38ec93b058e489da6899b7ba12718282c34844ac3054f54d9e138de6f7d48ea43b0dba6eaf7fad795f35e1e9937605e9f854f8052637be4a26991e60d1e383dc6390424dae6f0a1e7446de2af46e0a5154afefe7a6b7ac25de916fe6c7b875f04213638a59f02a17f164c006befedbc7fea8c2", 0xd4}, {&(0x7f0000007800)="1de8f1d3b328486d25f9bfe7f1a4d63b1ac90f3a356f2ffb6a34c0c1c216f518025c49a8b4bafc5e78ad9700a39e1c90dcfebda5313228631e0191955a8d83dccab24f53761debd5420ae25773f7c2a8983d59bc3d8ca70b5715", 0x5a}, {&(0x7f0000007880)="60a5ae6cb6c0cf78628a5089bd002268f9521d6ba788c06ff2628fdb84904da8df482ebe013c5edc45b97d30775e11cb3e6f399250527c15c501bc131df2cd7ac248cd997545af3815e27b88db79acb1d3ce673a1cc2f6dbab80322005bc1213aafbb2ddd5cc20b5b7ff6e233c676fc20110886ec3d49236e760a50a2fbead3bfcf7778a9689c9c72368dac5eea153c992edccbdb08808bcc03deea4850badd2e6146723868d58c22bac34f79c8b891bf415dab4f58f0d1d9fa940a30b29737e4cda0737d84187371147dac1", 0xcc}], 0x8, &(0x7f0000007a00)=[@dstopts_2292={{0x48, 0x29, 0x4, {0xc2cbfaccf5c19334, 0x6, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x12}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x81}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x78}}, {{&(0x7f0000007a80)={0xa, 0x4e21, 0x6, @local, 0x1ff}, 0x1c, &(0x7f0000009180)=[{&(0x7f0000007ac0)="a142a17e4b4f8fee929d0c46b66c2367a76fdd7ab3975bd32d7dc3a54dd8020e6ceebdbfe47d54e6d35a37a42bdf9ad79c2e53136c9f041fddda10bdaf8a61955d8edda52d781524b71e9942424bb83c2b9546587b932686d6ebb073251769601ab4608fab3af7df92220f2fd9df689f5c56b2686df89d3c2ceea172178cb282f580a828cb80e428dd540a60af5493dd6083009c4b6b29e73d9da9d165a96e0301caeb3a9fe2d1b3f2e18b7d187a78ef195e42c34abf140354fcca9eaead5c7e226e3380bee3fd1f19a6f80f9336ded78f110626fdabc7e3764e80", 0xdb}, {&(0x7f0000007bc0)="96e0628986f3f2b38d3e9de0229f3de421a4a1e4832f5f07b77a556cee642e85da368daa759dc5f49cbaa98e1f", 0x2d}, {&(0x7f0000007c00)="48e6f1975ba3db95f843a88ffc85f44d6cc606c3ffb979713d8c0555e0e2a6df6d5c9befcb887233d0cb04be2f79ae0d360dcf5fd7ec50c55c42ac85e668d26b702ef5033d4a5cee478e87426e22ff426d21357eb3b2ff04549579387a8bf7b565113f62e31e91e799d4254ca03fa738f034decb9044b8bf74b3022daab48f0a5a2c453d4e419d10301c3ebfd0923c280044b12feb3ab90e610592bdd0cad722bc81adfd7cc90f6b02866bf14faeba7fea3bf12ae6b0861e514aebb4a2d4cd6d5b987a1ae5be1748acc4438280bdfd3489a8697cddc4d785b383a4b43d251533db68c676f1a97a80", 0xe8}, {&(0x7f0000007d00)="4915193bc96d3d98b7bf3724ee15d519fead917058f8588368b2ac75067cd3cbf169e0e50764f662bea3db53cda786bd7ab94e53d507333c8efc05f74ad4c0b9c9c744a0b4a88585ad66e16c3960f44c43f4f46cf4f70b48535bbc4ed5ffbc6638c30df0f64612719682", 0x6a}, {&(0x7f0000007d80)="dcda2b9388248e22a9159012f967495bd781133cdec864fac4d100fd22c79ce6ce6c2e5cf1cc1e41108d6231dffce4bdde528d13ea5a3ff19fb7bb22e37bbab235e73ad70112def4642cdaf88767cee09537f04231f5e14082d6360e8c2704074a95a97a20298e231f4692a49353a8245b7e398c27b96080ef50182242b03efb718a194de22f119112ea2c6a19292f016df1214d86a2cf8436dc32b1b0908b4b34fd31f5c72d94b4b9879bda7a0af739f26ad1e39d5b3fcdd61bc7b7e970907325957ac300fc17c4dff40769e5a0861ab11ed43e0be17ceab569bcc382eeb8848971a0db680529c158", 0xe9}, {&(0x7f0000007e80)="23b4b5613aa82279462b85b6bdf020b0ea8fa94b862f36f639dd38a9cc3a5d1e922f856928187c72fbe9b0d890cc72d986e7ddd6f31f84a8d1575fc1cb8595fb6cb1d32b5ed6a0da554fdfec3a1e2fc241008ad7737bbdc6af2094baf86d40690241bc29a9fa01544c1699aa8daa876b22750e706bce29ab4751c239192c1e0f9ddc6fe14abac7617f57fe1223e94b131dd75dabe440b7c3baac348e6663dfc16e18af49e9e01e5812d5c31918a5d2379107ffaef1185dc48b06e4d9ae7bc0fb8ed29fef81a382ad7ef0aab1828b00294883dd1f73b86bc89a655035ac7600b83d386818fa81fe31a1", 0xe9}, {&(0x7f0000007f80)="e42dbd263a9e55d21264201557527be0ad6cfc6ec4d5f3bbb5f4a3cf96fef1012a4001b4fff9ceb40ecc187b729fafed686a66262cbe5b9bb466143e5a2f40f74ca88d2bc618ed0022766c527a2e263ed495c3bd", 0x54}, {&(0x7f0000008000)="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", 0x1000}, {&(0x7f0000009000)="5d5e240ad2c8ac270061a71c4cbbf80f972a5604dda8ddb249a112bf5f2c40bc365a5edb4a08091428769c71fa4820f59434a7d4d7c96ee7958ef1192152ffda798ace58fb0642333dc6191d5557790aa5d3603983e54453b0efa4744cfb14abe5c1f815da600d28aaf055c9aba3565df3f4b5df1defa37f3cbe9574b7963fe7547ca7aa7930d53c891d39f2e8981a6605b9ff077270b29c1602576883a5100176f3212d17ac3837288b28b4c498b29b88e1e51661ff4317d4f6f8e9744933e7b9116e82f6de095fdb00782f1c159eea0cf482857f825d57700d4b1b57bb44605d546b2a", 0xe4}, {&(0x7f0000009100)="89977f4d8fc836cd3a8a850d45e79dc099a8c31892459d5aa75f2ae31679b7c82d4ece90f224f13f6b89d6a13c7a341e3ed8a0e912fe19b28599f3f6ecdb1231933d687bf30f0fe593538e9f8fc6f294d43240c5dca08844b9073d4587b5e185dcb69d22906ffc", 0x67}], 0xa, &(0x7f0000009240)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2, 0x8, 0x2, 0xf, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private2]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x3a, 0xe, 0x0, 0x4, 0x0, [@loopback, @loopback, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0xf8}}, {{&(0x7f0000009380)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f000000a700)=[{&(0x7f00000093c0)="15f8db95", 0x4}, {&(0x7f0000009400)="d4d51cf04340cf653da7fd4ccb95c90aeb24b367466a8f57e8c00ca32405448cad05a8e1ff5dc232ca42fbe891099e35a453a0c24b0e5dad9d9fdeda41a5098e5f066c637553577446a9a6aa04dccaf4ac4af806540b3723fb14c6d8097c592810f1260f6b519bad8ec542ce783d25b29279e2664fe809703914c12c6237a9292130f17baf0b2158b25e3d97f701a9221475678d15a9f999b23089b3b673f4ab612d09ffad3f3d0d422ce1d83474f5e528996bbd0638cca8b86a4332bb8e10e39f74105318e61c2b1af9e7f2b3b91c2a2b04e457e6", 0xd5}, {&(0x7f0000009500)}, {&(0x7f0000009540)="b5b5886f12c330181debccccd7020c92423ee6ad9bcc30ae493ea798f6082ac6c63c0b6c1efc4b5b46f844914404bd15004d06a488ecd62c8474e950d1dc31c82a6478ce0033774c682bdf1d2adfc9a6230523495c60a3fd92564991aaebdbb17dde6f12fd11a5cbcfde60ad47ba92216459c30260ff6c5187ba3097b7d29a14d040c1159dff", 0x86}, {&(0x7f0000009600)="45bb95cea248a48f0ed7b6e4ad1e360dac2bea4471a658876cd3e584dd768f5b1e1816583eca07", 0x27}, {&(0x7f0000009640)="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", 0x1000}, {&(0x7f000000a640)="51b5e5a0473a76bbb9e05c0f5a41302720b742ec999a6486e8ea1a3a6126dc44ca4b0e3e97c292ba5add8077c00a39c2dfade498c72f141284e67d01e96582579bd0949de71a194c88d005c9bee20685aa7917db961eeae85e9e64451f6b38b987efa4189e8a1edae5b0ce1ddc74607cb9d97a3f60dc27755cb805ad130419a802567a9e3c45ac6d9d34cdbbaee06a4ff4b58cfb1adee86ece07bce684712df8a306033e3e07faf0b4623510ed1dc6693b8d07125e5c23bff8573b", 0xbb}], 0x7, &(0x7f000000a840)=[@rthdr={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts_2292={{0xb0, 0x29, 0x36, {0x2c, 0x12, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0xa89, [0x80000001, 0x2, 0x2, 0x8000000000000000, 0x2, 0x5, 0x200]}}, @generic={0x0, 0x49, "6bf190acdbf529fa393dee2d53edd7c4aa48f19d223734eeab78d487bc43eea070fc5890bc3168c62c4b8b7385d9d46fed0bff41f831271747dd39b753d2cafbc6734c913c484ba9cc"}, @jumbo={0xc2, 0x4, 0xe}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @ra]}}}, @rthdr={{0x28, 0x29, 0x39, {0x8, 0x2, 0x0, 0xf3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3c, 0x0, '\x00', [@pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r10}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}], 0x1d0}}, {{&(0x7f000000aa40)={0xa, 0x4e24, 0x7f, @loopback, 0xfffffffe}, 0x1c, &(0x7f000000ad80)=[{&(0x7f000000aa80)="b5382ad7add191b62607566fce4f1a5ecb3352a12bc26ec3a1e9ba8560fdcd1b8da4009863f43754d3303b850730f3b36caeb72f83993f3736f041876b64f0efe2a6ab20cc9c2650781b97d294dd20dfc09cfa500c143edaea08936b5000339a2251ef7c3d9c6bc49a7b04537f0edf7a4dbc034e56adf36411979b1f62ad", 0x7e}, {&(0x7f000000ab00)="2a97dcc741f1270dc5e24858788f1fd8d00278fa1504ccf02d4f87e3b221589c8b7fd138d14783f22bece2bd06bea4c8826455423d57d703fa7ade5ae8004329a77c9d0d20e89be97c3042667aefa171a380cce06dce4eca32c08be642f95e289f33a80b4a62cb38ca61d86547a0a5bf6f92751e6fd93b3bde4dc9b581b79e52", 0x80}, {&(0x7f000000ab80)="eabe9bee1d1e162ddd6ee3ac2b912d53d1e60e7fe47af52e3378970bfbee6a86", 0x20}, {&(0x7f000000abc0)="434a5d2ca825d0fa26ac4ad6695f9040c2c859090ff5f43cf2f464e0df47ca7678ef89c20b8332d83c811feef6c998a9f345c10da222a79b159a9f", 0x3b}, {&(0x7f000000ac00)="f235afd5642ecf58bfa940d38ba0d12facf39916bbffdeab62e6f04a63264f05bcde19e7b6fd7b65d8788c87820c4aa47954c79f742106e14894137b9ebe3dd12430ee83e61dd301a45a32e73ca2a6e045671674429251bfe2d9dd6ad2", 0x5d}, {&(0x7f000000ac80)="d9ab17dd2fc028854ec02d71c7f9c0a8b12e7f4e8266e2a4a51d4a27ebb0334f0871b1d7737f9eb445f73601d363082a91b4b45fd732cd62da9d440f22645201baa77ceee80a6c1c6e5e30ab4c91a3eade99d4e8704d42970a53ff282491f463407e9f899a4ca7bbdca294a8e8eb0c783916cb2fbb7419d0cc756317ff20de8dab9fb6982c927e9787c118f1b1c1011ec4fd9fb18e75abf69bc85a4fcffb9c30dbf23c056749ec4060c6d1b6d6998fe98ecd25da37e4d42404c66700c6ca5141070f9e16529f0293a9e845f41409283e68e056c85a3232a2d9e7cacacde23647b5e3022755af76eecb510fff1bf617516ed3", 0xf2}], 0x6, &(0x7f000000ae00)}}], 0x8, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000aa880a8cfbdbdf2505000000280001800d0001007564703a73797a320000000014000208000400"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b40)={0x2b8, r11, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x29}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "5f2e747ec44bcdbe81ca446331bf2a2d1e6c9cee2839206daac36963a4845716f749fde03b606b2dc5ddbcea29404e65751a8a522a4d4b8b"}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x200, @mcast1, 0xa3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xb9, @remote, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6, 0x3, "4cd3"}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @empty, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private0, 0x80000001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4000}, 0x2048000) r12 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000100)={r12}) bind$xdp(r13, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x0, 0x0, 0x148, 0x0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x8, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 823.54509ms ago: executing program 2 (id=7125): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x4, 0x7, {{0x17, 0x4, 0x3, 0x2, 0x5c, 0x66, 0x0, 0x80, 0x2f, 0x0, @empty, @loopback, {[@lsrr={0x83, 0xf, 0x61, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x1, 0x3, '|'}, {0x7, 0xa, "0229440a61aa7887"}, {0x2, 0xe, "c4aca513f7f5c7883403def2"}, {0x0, 0xd, "e8fb6a4faa19b0fa744cfe"}]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0xf, [0x10000]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff2}, {0xffff, 0x1}, {0xfff3, 0xfffd}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x21, 0x800, 0x13) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 822.978584ms ago: executing program 5 (id=7126): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffcff}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x1800}, 0x94) 626.022571ms ago: executing program 5 (id=7127): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x48d4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'dvmrp0\x00', {0x6}, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="0100001400000000000002", @ANYRES32], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 592.333489ms ago: executing program 6 (id=7128): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000140), 0x4) 543.769852ms ago: executing program 0 (id=7129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000040050001000620000005000500"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 411.471974ms ago: executing program 0 (id=7130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff0000f8ffbfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003c00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 398.503492ms ago: executing program 2 (id=7131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x4000080) 335.470264ms ago: executing program 6 (id=7132): r0 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1400000015160100110083aad3605c8508000000"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r3, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x4000, 0x40, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d10", 0x3}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x24000880) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) 277.008538ms ago: executing program 5 (id=7133): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a11fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 161.764325ms ago: executing program 5 (id=7134): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 100.990773ms ago: executing program 2 (id=7135): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000), 0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x80000000, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000002040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r5, &(0x7f0000000d40)={&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @rand_addr=0xacc}, 0x4, 0x4, 0x3, 0x2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="81f3d7018c3f227532b08e041f5af6256aa1262e19c5cdb564953845771139c220fddae40492b018b4fd397ec00cf1b6421582204e18f18899737f818c60952f5c87fb87da1e11b0c781995d63e380a920c698304d02ca0dafbea73e1d1a2075d0f17adaeb65dedb", 0x68}], 0x1, &(0x7f0000000780)=[{0xf0, 0x112, 0x7fff, "a947f273204960adb1cbf12fd2c21c712087dd81f860b6bbf2370feb58be3ac0338d6ace23de845eed18693ffdd6e89597901f69ff579b7e1556d61e5219b7c40c32afc8b2d378ebee594ffaa3fedfb912a8d7b61a58589935c2d7cf5def94d79c21b70f2f24512ea4a1e6a6bf6b316fd4f43fe82211c335fda9d81ec42b0ca7cdbeb63f997ee99ab9ae0c72bf09a8f70fedf7da21e0a1ee2729eaf0f8fb03d876a1f16bde09e6971f3e6c3c241657a378fd7d47332c5896bb7188785c486dadf86c86c7ad31dd61d9a8dc6159489556a54b370787a4a96ac5"}, {0xd8, 0x111, 0x14, "84b4f93cfffa3583c27923180a317d0cfb4cfb53d46852d642d76774c1f55ad566afbe4835e370c1c0928ccd3d593e4e26526ca40e4a53529d0f7fb8f8d8dc09bceb69608c827ec4ca07c6dcd68f8e7ffcbb721d321c82be061978ded4646003e672a62827f882a6724262969593e52bb25c3827443840d50d3b833fb5288118ec6213b6e1021dc7b5358b46f0c83191eaa4993192dd3866914dfb910e2445278822a0c3230378320db98f812b529c98161d77623928dd6fad25bc9d4d33c3364482bd77"}, {0x58, 0x107, 0x1, "b256551c1a371a086a0e37befb7c6f2d209fec0a478c952d940b039f5201a0a9c4d1543218bbac46d6b67c78c345c8169611ecb858edc95eacd6942cb7117f1e7bda64de25"}, {0x108, 0x112, 0x1, "1e350e1b51af4c5669f2f01c72fb731ae15765015eb803bfd9b11b2640bddbcaaebc81c92b0ad22d71afbf473a92353fec3d948a2725b2cbc69514759a7eceac991d31420facf76e24e4f43d120cbb1644338c13cfe6fc7fb64ceba98809b42e8c600e0318730a03f17f5c0a1c3621e1cea7554bc6cc5bdc02766919b0beec0f154891b29ad2db0f4f26e58cb177249cc30738f799425691ead2c5c130f3056f10020bd1b133cbdc4e66376574034d1b8fdeb77f4f8817c276b460898dfe68f2537356f73bc2d9a34b773f0377a61e8e32621e49c5290bb8a2d462cabadeec7f89447d8060a4d8c5543ee5a37452e4266a05be3bd7"}, {0x78, 0x110, 0x5, "b59b18d11a4a3fa6ec072d05f677a34db5f080a4c90c95c416ea5ca239a9a4f842310eddc0114c552f57675d47458074198103b569295c8ed32be9549a56baf4e67a94855ca87545eaad1fa6188bc9f8957006aa618339468b58b6326ce122c5037cc1f63f"}, {0x30, 0x10c, 0xdf46, "4e6cc6a812713855e2f940ddcd3808e1cd449025e3c85240a83f3ee8cb"}, {0x108, 0x29, 0xab, "117a0b0f692f5fef1ce8c9d44c685b55161fb7cc49294f09f208d918d1a5ed8ef51c3a7ea39498826d4fcdf702fa5051be905396eda5e9d574296bf047094d27bccea7b0d326414c3d5b197232558d1c5676039c01a6b6a83e1385ea10dc33d7378829a8277c77f5aa8a2fac340d11b1539adbccbc0bb733083452aab424c6288265a4c3eca2fbc7315f392acf1a8aaea4da5369ca976327996c58220baccf2aa3105b1686063a5ca2338708646758a0651a7436cf4b58baaeabf20475725c621d0da9ff06b1c1b5f7b7ec2c36a7cab2a587c37a2b04da7afaff806e2c6a59e7de92069703c1302720993757d2b972e718"}, {0x68, 0x104, 0x8, "baf83eedbe76ebd805fcca7570c58cb5c61d0416c5ad28be3f9b7cfe45ec9b9f15c0f6f1650945ab17db4c42c314f5fa5974dcc223afd7ebe2d3ee5b65dd4a5244601bab0f3ecea59b28a040bbb1837892d6d4bac44c"}, {0x48, 0x10b, 0xf, "f4868121c68705a8d358ea741a61eb227651372452180760a7ccff0d6c00e30dbe9b101a46ee4f23b446790cab80cae9b79b6d47109806"}], 0x588}, 0x4000040) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000067000000080001004000000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800c30074130000"], 0x38}}, 0x0) 0s ago: executing program 0 (id=7136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x3ff, 0x20000000, 0xf760, 0x65}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6, {0x2}}}}]}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "9c979b32261fbabdae20b34f870e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r10 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@remote, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x41}, {0x0, 0x10401, 0x9141, 0x800, 0x0, 0xf42, 0x5, 0x4}, {0x3, 0x0, 0x0, 0x1000}, 0x1, 0x1, 0x1, 0x0, 0x4}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in=@rand_addr=0x64010100, 0x100350b, 0x5, 0x0, 0x4, 0x0, 0x8, 0xfffffffb}}, 0xe8) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d3f2007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r4, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x98}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x40040c4) kernel console output (not intermixed with test programs): romiscuous mode [ 749.266621][T22996] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.288652][T24179] bridge0: port 1(batadv1) entered blocking state [ 749.333776][T24179] bridge0: port 1(batadv1) entered disabled state [ 749.341958][T24179] batadv1: entered allmulticast mode [ 749.351036][T24179] batadv1: entered promiscuous mode [ 749.511230][T24184] openvswitch: netlink: Message has 8 unknown bytes. [ 749.530653][T24184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.594804][ T9327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.622617][ T9327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.695182][T24069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.731242][T24180] IPVS: Scheduler module ip_vs_ not found [ 749.772684][ T5782] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 749.781973][ T5782] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 749.794463][T24069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.835822][T24191] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.5644'. [ 749.940136][ T9327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.952873][ T9327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.008938][ T5630] Bluetooth: hci1: command tx timeout [ 750.067299][T24069] team0: Port device team_slave_0 added [ 750.101887][T24069] team0: Port device team_slave_1 added [ 750.245710][T24069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.258890][T24206] netlink: 'syz.0.5650': attribute type 8 has an invalid length. [ 750.281505][T24069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.321016][T24069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.338781][T24069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.346167][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.361414][T24069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.437067][T24069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.769720][T24069] hsr_slave_0: entered promiscuous mode [ 750.781098][T24069] hsr_slave_1: entered promiscuous mode [ 750.960164][T24230] netlink: 'syz.3.5656': attribute type 3 has an invalid length. [ 751.109069][T24220] bridge6: entered promiscuous mode [ 751.114375][T24220] bridge6: entered allmulticast mode [ 751.120809][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.285851][T24240] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5660'. [ 751.365280][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.624511][T24250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5661'. [ 751.818776][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5661'. [ 752.144085][ T5630] Bluetooth: hci1: command tx timeout [ 752.322117][ T9327] bond4 (unregistering): (slave gretap1): Releasing active interface [ 752.485498][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.520259][ T9327] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 752.528382][ T9327] bridge3 (unregistering): left promiscuous mode [ 752.534754][ T9327] bridge3 (unregistering): left allmulticast mode [ 752.613739][ T9327] bond0 (unregistering): left allmulticast mode [ 752.625686][ T9327] team0: Port device macvlan2 removed [ 752.636951][ T9327] bond0 (unregistering): Released all slaves [ 752.648018][ T9327] bond1 (unregistering): Released all slaves [ 752.663455][ T9327] bond2 (unregistering): Released all slaves [ 752.678822][ T9327] bond3 (unregistering): Released all slaves [ 752.715621][ T9327] bond4 (unregistering): Released all slaves [ 752.731370][ T9327] bond5 (unregistering): Released all slaves [ 752.747321][ T9327] bond6 (unregistering): Released all slaves [ 752.763015][ T9327] bond8 (unregistering): Released all slaves [ 752.794188][T24253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5661'. [ 752.812243][T24253] tipc: Invalid UDP bearer configuration [ 752.812312][T24253] tipc: Enabling of bearer rejected, failed to enable media [ 752.863063][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 753.007034][T24281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5666'. [ 753.037736][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.064861][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.107267][T24280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.117339][T24280] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5668'. [ 753.238769][T24281] bond4: entered promiscuous mode [ 753.271440][T24281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 753.423056][ T9327] tipc: Left network mode [ 753.446414][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5670'. [ 754.096205][T24316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.099017][T24314] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.5675'. [ 754.161189][ T5630] Bluetooth: hci1: command tx timeout [ 754.749479][ T808] net_ratelimit: 4 callbacks suppressed [ 754.749498][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.992374][T24346] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5678'. [ 755.012077][T24343] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5677'. [ 755.603732][T24371] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5683'. [ 755.719107][ T9327] veth1_macvtap: left promiscuous mode [ 755.738489][ T9327] veth0_macvtap: left promiscuous mode [ 755.740758][T24374] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5686'. [ 755.848480][T10428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.769236][T24387] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 756.777793][T24387] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 756.876674][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.200764][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.359181][T24069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 757.384923][T24403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5692'. [ 757.404260][T24069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 757.416898][T24405] netlink: 'syz.3.5694': attribute type 11 has an invalid length. [ 757.473846][T24409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5694'. [ 757.527282][T24403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.535444][T24069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 757.570062][T24069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.612568][T24069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 757.654981][T24069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 757.693783][T24069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 757.729334][T24069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 757.940104][T24430] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5699'. [ 757.984348][T24434] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5699'. [ 758.017154][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.100897][T24069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.163892][T24069] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.184111][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.191308][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.200849][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.208027][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.520258][T24069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 758.530659][T24069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 758.567052][ T9327] IPVS: stop unused estimator thread 0... [ 758.791261][ T7512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.140670][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.168268][T24476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.200982][T24476] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5710'. [ 759.609515][T24487] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 759.985497][T24487] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 760.092968][T24069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.238328][T19303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.265742][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.329972][T24069] veth0_vlan: entered promiscuous mode [ 760.366021][T24069] veth1_vlan: entered promiscuous mode [ 760.425281][T24069] veth0_macvtap: entered promiscuous mode [ 760.436825][T24069] veth1_macvtap: entered promiscuous mode [ 760.493350][T24521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.531042][T24521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5716'. [ 760.555284][T24069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.602719][T24069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.619206][ T9323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.627987][ T9323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.662481][ T9323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.671272][ T9323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.033300][T24512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.215049][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.251401][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.431592][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.461206][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.469090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.768815][T24557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.897547][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5608'. [ 762.220743][ T5630] Bluetooth: hci1: command tx timeout [ 762.307977][T24583] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 762.333292][T24585] xt_SECMARK: invalid mode: 4 [ 762.341225][T24583] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 762.348820][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5722'. [ 762.361909][T24585] netlink: 'syz.6.5730': attribute type 10 has an invalid length. [ 762.419212][T24585] team0: Device bridge0 is already an upper device of the team interface [ 762.464961][T24585] netlink: 284 bytes leftover after parsing attributes in process `syz.6.5730'. [ 762.495869][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.632613][T24587] syzkaller0: entered promiscuous mode [ 762.639898][T24587] syzkaller0: entered allmulticast mode [ 762.667926][T24587] tipc: Started in network mode [ 762.672888][T24587] tipc: Node identity 86dac51e7edb, cluster identity 4711 [ 762.680367][T24587] tipc: Enabled bearer , priority 0 [ 762.747057][T24586] tipc: Resetting bearer [ 762.781338][T24586] tipc: Disabling bearer [ 763.320869][T23830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.329459][T19303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.431616][T24611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.106489][T24637] Cannot find del_set index 1 as target [ 764.793806][T24662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5749'. [ 765.653413][T24694] net_ratelimit: 5 callbacks suppressed [ 765.653434][T24694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.693708][T24693] IPv6: Can't replace route, no match found [ 765.714749][T24697] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5757'. [ 765.853046][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.058238][T24711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.210471][T24711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.319157][T19303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.328759][T24726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.351843][T24711] ieee802154 phy0 wpan0: encryption failed: -22 [ 766.377710][T24728] team0: No ports can be present during mode change [ 766.693705][T24740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.710374][T24740] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5769'. [ 766.760078][T24743] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 766.768286][T24743] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 766.974177][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.016369][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5771'. [ 767.151686][T24761] Cannot find add_set index 2 as target [ 767.192535][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.312082][T24750] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5771'. [ 767.750468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.796932][T24780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5777'. [ 767.824608][T24784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5780'. [ 767.829837][T24783] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5779'. [ 767.897017][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5776'. [ 767.939417][T24784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5780'. [ 767.950732][T24784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 768.083497][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.275967][T24803] can: request_module (can-proto-3) failed. [ 768.342672][T24808] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5782'. [ 768.788105][T24830] ip_vti0: entered promiscuous mode [ 768.798838][T24830] xt_hashlimit: size too large, truncated to 1048576 [ 768.806626][T24830] xt_hashlimit: max too large, truncated to 1048576 [ 768.824849][T24830] ipvlan1: entered promiscuous mode [ 768.842593][T24830] ipvlan1: left promiscuous mode [ 770.881089][T24905] net_ratelimit: 9 callbacks suppressed [ 770.881111][T24905] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 770.913761][T24905] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 771.241046][T24914] __nla_validate_parse: 5 callbacks suppressed [ 771.241067][T24914] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5807'. [ 771.417894][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.800696][T24930] netlink: 'syz.0.5810': attribute type 1 has an invalid length. [ 771.822164][T24924] Cannot find set identified by id 0 to match [ 771.887253][T24924] smc: removing ib device uyz0 [ 771.947673][T24932] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5811'. [ 771.988758][T24932] nbd: must specify a size in bytes for the device [ 772.060802][T24924] smbdirect: ib_dev[uyz0] removed [ 772.410608][T19303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.540300][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.872151][T19303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.914661][T23830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.298757][T24968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5819'. [ 773.661054][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.975486][ T5289] veth0_vlan: left promiscuous mode [ 774.010015][ T5289] veth0_vlan: entered promiscuous mode [ 774.834151][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.264903][T25007] syzkaller0: entered promiscuous mode [ 775.289812][T25007] syzkaller0: entered allmulticast mode [ 775.468749][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.915093][ T808] net_ratelimit: 1 callbacks suppressed [ 775.915114][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.948063][T25025] syzkaller0: entered promiscuous mode [ 775.966071][T25025] syzkaller0: entered allmulticast mode [ 776.800147][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5837'. [ 776.869424][T25045] netlink: 'syz.5.5837': attribute type 13 has an invalid length. [ 777.047201][T25045] hsr0: left promiscuous mode [ 777.056438][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.069787][T25055] netlink: 'syz.0.5839': attribute type 89 has an invalid length. [ 777.344064][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.354423][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.365094][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.451204][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.479731][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.518502][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.531627][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.546385][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.555363][T25067] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5845'. [ 777.567613][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.575520][T25061] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 777.724480][T25072] syzkaller0: entered promiscuous mode [ 777.730024][T25072] syzkaller0: entered allmulticast mode [ 777.759854][T25072] tipc: Enabled bearer , priority 0 [ 777.902365][T25071] tipc: Resetting bearer [ 777.965178][T25071] tipc: Disabling bearer [ 778.099870][T25090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5851'. [ 778.171851][T10428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.257168][T25094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.561306][T19303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.738791][T25119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5861'. [ 778.926209][T25128] TCP: TCP_TX_DELAY enabled [ 779.226204][T25142] syzkaller0: entered promiscuous mode [ 779.245020][T25142] syzkaller0: entered allmulticast mode [ 779.267223][T25142] tipc: Enabled bearer , priority 0 [ 779.287752][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.301263][T25139] tipc: Resetting bearer [ 779.360603][T25139] tipc: Disabling bearer [ 779.742798][T25170] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 779.773387][T25170] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 780.099811][T25184] netlink: 'syz.3.5881': attribute type 4 has an invalid length. [ 780.154661][T25184] netlink: 'syz.3.5881': attribute type 4 has an invalid length. [ 780.194179][T25184] netlink: 'syz.3.5881': attribute type 9 has an invalid length. [ 780.203265][T25184] netlink: 186364 bytes leftover after parsing attributes in process `syz.3.5881'. [ 780.278840][T25192] syzkaller0: entered promiscuous mode [ 780.353926][T25192] syzkaller0: entered allmulticast mode [ 780.390046][T25192] tipc: Enabled bearer , priority 0 [ 780.418385][T10428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.532248][T25191] tipc: Resetting bearer [ 780.603889][T25191] tipc: Disabling bearer [ 780.977624][T25225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.047073][T25225] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5893'. [ 781.199581][T22985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.525877][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.590668][T19303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.672089][T25240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.740679][T25240] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5897'. [ 781.896851][T25246] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5899'. [ 781.925669][T10428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.995873][T25247] syzkaller0: entered promiscuous mode [ 782.001443][T25247] syzkaller0: entered allmulticast mode [ 782.481535][T19303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.658102][T10428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.681092][T25274] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 782.689236][T25274] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 782.969508][T25295] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5910'. [ 784.950772][T25375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5928'. [ 785.307050][T25384] Cannot find set identified by id 0 to match [ 785.341769][T25384] netlink: 'syz.2.5930': attribute type 1 has an invalid length. [ 785.349578][T25384] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5930'. [ 785.358561][T25384] netlink: 'syz.2.5930': attribute type 1 has an invalid length. [ 785.363108][T25386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 785.366328][T25384] netlink: 634 bytes leftover after parsing attributes in process `syz.2.5930'. [ 785.366354][T25384] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5930'. [ 785.438806][T25388] syzkaller1: entered promiscuous mode [ 785.444692][T25388] syzkaller1: entered allmulticast mode [ 785.996670][T10428] net_ratelimit: 8 callbacks suppressed [ 785.996691][T10428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.506224][T25428] ipip0: entered promiscuous mode [ 786.525978][T25428] ipip0: entered allmulticast mode [ 786.941394][ T7512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.119553][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.462055][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 787.473715][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 787.481633][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 787.489796][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 787.503064][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 787.785761][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.046499][T25483] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 788.095386][T25483] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 788.231075][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.266516][T25495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.067595][T25528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.346704][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.465629][T25550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5966'. [ 789.549706][T25462] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.577249][T25462] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.592060][T25462] bridge_slave_0: entered allmulticast mode [ 789.610574][T25462] bridge_slave_0: entered promiscuous mode [ 789.632640][T25462] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.645813][T25462] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.655076][T25462] bridge_slave_1: entered allmulticast mode [ 789.686892][ T50] Bluetooth: hci3: command tx timeout [ 789.692047][T25462] bridge_slave_1: entered promiscuous mode [ 789.701811][T25559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5967'. [ 789.773039][T25462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.834988][T25462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.934281][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5970'. [ 789.952557][T25462] team0: Port device team_slave_0 added [ 789.962385][T25462] team0: Port device team_slave_1 added [ 790.033984][T25462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.040991][T25462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.066913][T25462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.145856][T25462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.152932][T25462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.179976][T25462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.231012][T25579] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5973'. [ 790.322838][T25462] hsr_slave_0: entered promiscuous mode [ 790.329660][T25462] hsr_slave_1: entered promiscuous mode [ 790.336262][T25462] debugfs: 'hsr0' already exists in 'hsr' [ 790.342132][T25462] Cannot create hsr debugfs directory [ 790.398894][T25569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.927203][T25581] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5972'. [ 790.979966][T25601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5977'. [ 791.592932][ T5768] net_ratelimit: 2 callbacks suppressed [ 791.592954][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.803483][ T50] Bluetooth: hci3: command tx timeout [ 791.852869][T25632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5983'. [ 792.090808][T19302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.101753][T23830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.115593][T25638] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.5985'. [ 792.737244][T10428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.752102][T22996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.364990][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5988'. [ 793.410463][T25674] vlan3: entered allmulticast mode [ 793.415626][T25674] bond0: entered allmulticast mode [ 793.423523][T25674] bond_slave_0: entered allmulticast mode [ 793.429315][T25674] bond_slave_1: entered allmulticast mode [ 793.435537][T25462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 793.449383][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.457569][T25462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 793.483366][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.499352][T25462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 793.542946][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.551080][T25462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 793.564723][T25462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.747040][T25462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.775161][T25462] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.802896][T22996] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.810135][T22996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.823257][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.862432][T23830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.873283][T22996] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.880485][T22996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.929487][ T50] Bluetooth: hci3: command tx timeout [ 794.463185][T25706] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5995'. [ 794.793513][T25462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.946517][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.982645][T25462] veth0_vlan: entered promiscuous mode [ 795.031726][T25462] veth1_vlan: entered promiscuous mode [ 795.121387][T25462] veth0_macvtap: entered promiscuous mode [ 795.146743][T25462] veth1_macvtap: entered promiscuous mode [ 795.210826][T25462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.250308][T25462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.300435][ T7512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.320265][ T7512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.338673][ T7512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.352012][ T7512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.365640][T25734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6003'. [ 795.552233][ T7512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.584181][ T7512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.683877][ T9324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.691763][ T9324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.718301][T25742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.776747][T25748] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6008'. [ 795.898423][T25753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.007859][T25755] lo: Caught tx_queue_len zero misconfig [ 796.016546][ T50] Bluetooth: hci3: command tx timeout [ 796.026476][T25755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 796.095907][T25762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5948'. [ 797.127756][T25790] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.6022'. [ 797.167607][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6020'. [ 797.185779][T25778] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 797.363063][T25797] syzkaller0: entered promiscuous mode [ 797.381352][T25797] syzkaller0: entered allmulticast mode [ 797.533047][T25806] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6026'. [ 797.556084][T25807] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6026'. [ 797.672562][T25812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6028'. [ 798.119104][T25832] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6036'. [ 799.041250][T25873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6046'. [ 799.064619][T25873] block nbd3: Unsupported socket: should be TCP or UNIX. [ 799.179516][T25878] bond5: entered promiscuous mode [ 799.186712][T25878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 799.337264][T25878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 799.344509][T25878] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 799.396380][T25878] bond5: (slave ip6gre2): Error -95 calling set_mac_address [ 799.875413][T25907] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 799.897491][T25907] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 799.921337][T25909] syzkaller0: entered promiscuous mode [ 799.926881][T25909] syzkaller0: entered allmulticast mode [ 800.395379][T25918] can: request_module (can-proto-0) failed. [ 800.467064][T25920] __nla_validate_parse: 6 callbacks suppressed [ 800.467086][T25920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6056'. [ 802.679203][T25914] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 802.693090][T25915] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 802.696915][T25916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 802.761326][T25935] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6059'. [ 802.887927][T25943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6063'. [ 802.897009][T25943] openvswitch: netlink: Flow key attr not present in new flow. [ 802.913394][T25942] nft_compat: unsupported protocol 5 [ 802.917946][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6064'. [ 802.936428][T25944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6064'. [ 802.967498][T19302] IPVS: starting estimator thread 0... [ 803.113008][T25952] syzkaller0: entered promiscuous mode [ 803.118597][T25952] syzkaller0: entered allmulticast mode [ 803.124760][T25945] IPVS: using max 27 ests per chain, 64800 per kthread [ 803.746698][T25986] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 803.765558][T25986] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 803.869607][T25988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.364668][T26005] netlink: 208 bytes leftover after parsing attributes in process `syz.5.6080'. [ 804.373879][T26005] netlink: 208 bytes leftover after parsing attributes in process `syz.5.6080'. [ 804.698890][T26017] syzkaller0: entered promiscuous mode [ 804.704440][T26017] syzkaller0: entered allmulticast mode [ 804.725357][T26017] tipc: Enabled bearer , priority 0 [ 804.764737][T25993] infiniband uyz0: set active [ 804.769696][T25993] infiniband uyz0: added bridge_slave_1 [ 804.780384][T26016] tipc: Resetting bearer [ 804.801432][T25993] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 804.803901][T26019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 804.820464][T25993] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 804.846623][T25993] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 804.906561][T26016] tipc: Disabling bearer [ 804.909439][T25993] RDS/IB: uyz0: added [ 804.917780][T25993] smc: adding ib device uyz0 with port count 1 [ 804.925409][T25993] smc: ib device uyz0 port 1 has no pnetid [ 805.147317][T26019] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 805.282769][T26029] netlink: 'syz.3.6088': attribute type 2 has an invalid length. [ 805.290574][T26029] tipc: Cannot configure node identity twice [ 805.562119][T26040] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 805.577211][T26040] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 806.019222][T26049] netlink: 'syz.3.6095': attribute type 8 has an invalid length. [ 806.035335][T26049] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.6095'. [ 806.327432][T26057] syzkaller0: entered promiscuous mode [ 806.343262][T26057] syzkaller0: entered allmulticast mode [ 806.368872][T26057] tipc: Enabled bearer , priority 0 [ 806.387701][T26055] tipc: Resetting bearer [ 806.450809][T26055] tipc: Disabling bearer [ 806.461113][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'. [ 806.494743][T26063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6102'. [ 806.856246][T26080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.883472][T26081] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 806.897285][T26079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.906930][T26081] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 806.939121][T26080] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 806.955070][T26080] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 806.965396][T26080] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 807.022243][T26079] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6108'. [ 807.285609][T26095] netlink: 'syz.2.6111': attribute type 8 has an invalid length. [ 808.043571][T26105] syzkaller0: entered promiscuous mode [ 808.049103][T26105] syzkaller0: entered allmulticast mode [ 808.058858][T26105] tipc: Enabled bearer , priority 0 [ 808.068148][T26104] tipc: Resetting bearer [ 808.159047][T26104] tipc: Disabling bearer [ 808.624843][T26120] netlink: 'syz.0.6120': attribute type 8 has an invalid length. [ 808.649267][T26120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6120'. [ 808.678977][T26120] FAULT_INJECTION: forcing a failure. [ 808.678977][T26120] name failslab, interval 1, probability 0, space 0, times 0 [ 808.692034][T26120] CPU: 1 UID: 0 PID: 26120 Comm: syz.0.6120 Not tainted syzkaller #0 PREEMPT(full) [ 808.692062][T26120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 808.692075][T26120] Call Trace: [ 808.692084][T26120] [ 808.692093][T26120] dump_stack_lvl+0xe8/0x150 [ 808.692127][T26120] should_fail_ex+0x40c/0x560 [ 808.692169][T26120] should_failslab+0xa8/0x100 [ 808.692194][T26120] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 808.692224][T26120] ? __alloc_skb+0x1d7/0x7a0 [ 808.692257][T26120] ? __local_bh_enable_ip+0xd0/0x130 [ 808.692286][T26120] __alloc_skb+0x1d7/0x7a0 [ 808.692324][T26120] netlink_ack+0x136/0xb30 [ 808.692346][T26120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 808.692377][T26120] ? __pfx_nl802154_post_doit+0x10/0x10 [ 808.692551][T26120] netlink_rcv_skb+0x2a4/0x4a0 [ 808.692577][T26120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 808.692608][T26120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 808.692659][T26120] ? down_read+0x270/0x2e0 [ 808.692687][T26120] ? genl_rcv+0xd/0x40 [ 808.692719][T26120] genl_rcv+0x28/0x40 [ 808.692746][T26120] netlink_unicast+0x7bb/0x940 [ 808.692794][T26120] netlink_sendmsg+0x813/0xb40 [ 808.692830][T26120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.692860][T26120] ? aa_sock_msg_perm+0xf1/0x1b0 [ 808.692896][T26120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 808.692926][T26120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.692954][T26120] ____sys_sendmsg+0x9b9/0xa20 [ 808.692978][T26120] ? __might_fault+0xaf/0x130 [ 808.693021][T26120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.693056][T26120] ? import_iovec+0x73/0xa0 [ 808.693087][T26120] ___sys_sendmsg+0x2a5/0x360 [ 808.693110][T26120] ? __lock_acquire+0x683/0x2cd0 [ 808.693141][T26120] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.693207][T26120] ? __fget_files+0x2a/0x420 [ 808.693235][T26120] ? __fget_files+0x3a2/0x420 [ 808.693275][T26120] __x64_sys_sendmsg+0x1bd/0x2a0 [ 808.693303][T26120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 808.693340][T26120] ? __pfx_ksys_write+0x10/0x10 [ 808.693384][T26120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.693413][T26120] do_syscall_64+0x174/0x580 [ 808.693439][T26120] ? trace_irq_disable+0x3b/0x140 [ 808.693473][T26120] ? clear_bhb_loop+0x40/0x90 [ 808.693501][T26120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.693524][T26120] RIP: 0033:0x7fecaf99ce59 [ 808.693545][T26120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.693565][T26120] RSP: 002b:00007fecb0929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.693588][T26120] RAX: ffffffffffffffda RBX: 00007fecafc15fa0 RCX: 00007fecaf99ce59 [ 808.693605][T26120] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000004 [ 808.693620][T26120] RBP: 00007fecb0929090 R08: 0000000000000000 R09: 0000000000000000 [ 808.693634][T26120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.693648][T26120] R13: 00007fecafc16038 R14: 00007fecafc15fa0 R15: 00007ffcd13dd368 [ 808.693692][T26120] [ 809.053459][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.423991][T26145] netlink: 'syz.3.6125': attribute type 12 has an invalid length. [ 809.549788][T26153] tipc: Enabling of bearer rejected, failed to enable media [ 810.279579][T26170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6133'. [ 810.309317][T26172] netlink: 'syz.5.6134': attribute type 8 has an invalid length. [ 810.319725][T26172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6134'. [ 810.508442][T26182] netlink: 'syz.0.6137': attribute type 13 has an invalid length. [ 810.516343][T26182] netlink: 'syz.0.6137': attribute type 17 has an invalid length. [ 811.134212][T26196] tls_set_device_offload_rx: netdev not found [ 811.489545][T26211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.542394][T26216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.595445][T26216] xt_cgroup: invalid path, errno=-2 [ 811.863544][T26228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.891551][T26228] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6154'. [ 812.071486][T26233] ieee802154 phy0 wpan0: encryption failed: -90 [ 812.678668][T26254] x_tables: duplicate underflow at hook 1 [ 812.696090][T26254] netlink: 192 bytes leftover after parsing attributes in process `syz.6.6159'. [ 813.337382][T26278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.722271][T26291] tipc: Enabled bearer , priority 0 [ 813.806042][T26298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.816387][T26298] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6173'. [ 813.887763][T26291] syzkaller0: entered promiscuous mode [ 813.896034][T26291] syzkaller0: entered allmulticast mode [ 813.932910][T26290] tipc: Resetting bearer [ 813.969112][T26303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6174'. [ 813.994700][T26290] tipc: Disabling bearer [ 814.005883][T26303] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 814.014000][T26303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6174'. [ 814.224644][T26309] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6175'. [ 814.409598][T26311] 0ªî{X¹¦: left allmulticast mode [ 814.452285][T26311] erspan0: left promiscuous mode [ 814.486396][T26311] syz_tun: left promiscuous mode [ 814.735170][ T30] audit: type=1804 audit(1781642142.324:9): pid=26323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6178" name="/newroot/575/cgroup.controllers" dev="tmpfs" ino=2931 res=1 errno=0 [ 814.838697][ T30] audit: type=1800 audit(1781642142.324:10): pid=26323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6178" name="cgroup.controllers" dev="tmpfs" ino=2931 res=0 errno=0 [ 815.349028][T26311] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 815.387384][T26311] bond1: left promiscuous mode [ 815.392606][T26311] erspan1: left promiscuous mode [ 815.397874][T26311] bond1: left allmulticast mode [ 815.488140][T26311] erspan1: left allmulticast mode [ 815.601922][T26311] bond3: left allmulticast mode [ 815.623997][T26311] team1: left promiscuous mode [ 815.628989][T26311] team1: left allmulticast mode [ 815.640632][T26311] team2: left promiscuous mode [ 815.656918][T26311] team2: left allmulticast mode [ 815.672195][T26311] bond4: left promiscuous mode [ 815.693601][T26318] wg1: Caught tx_queue_len zero misconfig [ 815.750004][T22985] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.790291][T22985] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.805476][T22985] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.843165][T22985] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.211174][T26358] syzkaller0: entered promiscuous mode [ 816.233424][T26358] syzkaller0: entered allmulticast mode [ 816.261081][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6191'. [ 816.296159][T26361] nbd: couldn't find a device at index 65546 [ 816.311904][T26360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6191'. [ 816.389897][T26360] nbd: couldn't find a device at index 65546 [ 816.974369][T26398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6197'. [ 817.808068][T26427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6210'. [ 818.022282][T26444] tipc: Failed to remove unknown binding: 66,1,1/0:3324872695/3324872697 [ 818.090850][T26445] netlink: 'syz.0.6214': attribute type 8 has an invalid length. [ 818.094070][T26450] netlink: 'syz.6.6215': attribute type 1 has an invalid length. [ 818.131240][T26445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6214'. [ 818.136804][T26450] netlink: 'syz.6.6215': attribute type 1 has an invalid length. [ 818.282562][T26455] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6217'. [ 818.302381][T26456] netlink: 'syz.0.6217': attribute type 11 has an invalid length. [ 818.734924][T26464] --map-set only usable from mangle table [ 818.835748][T26476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6221'. [ 818.858965][T26475] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6223'. [ 818.955034][T26479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6224'. [ 819.172345][T26485] pim6reg99999999: entered allmulticast mode [ 819.285864][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 819.295477][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 819.303461][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 819.315278][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 819.323624][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 819.496197][T26495] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 819.530072][T26495] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 819.666869][T26501] sch_tbf: burst 0 is lower than device bond0 mtu (1514) ! [ 820.149848][T26519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6235'. [ 820.635066][T26530] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6237'. [ 820.686834][T26537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6239'. [ 821.004404][T26547] xt_hashlimit: size too large, truncated to 1048576 [ 821.122934][T26549] netlink: 'syz.3.6242': attribute type 1 has an invalid length. [ 821.380306][T26486] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.394011][T26486] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.401353][T26486] bridge_slave_0: entered allmulticast mode [ 821.411356][T26486] bridge_slave_0: entered promiscuous mode [ 821.420304][T26486] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.421072][ T50] Bluetooth: hci2: command tx timeout [ 821.427521][T26486] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.427718][T26486] bridge_slave_1: entered allmulticast mode [ 821.430018][T26486] bridge_slave_1: entered promiscuous mode [ 821.617942][T26486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.632175][T26486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.749214][T26486] team0: Port device team_slave_0 added [ 821.762663][T26486] team0: Port device team_slave_1 added [ 821.859473][T26486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.866669][T26486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.907509][T26486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.942426][T26570] openvswitch: netlink: Message has 4 unknown bytes. [ 821.949379][T26570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.960369][T26486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.967364][T26486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.993888][T26570] netlink: 'syz.0.6249': attribute type 1 has an invalid length. [ 822.011064][T26486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.102503][T26570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.202312][T26486] hsr_slave_0: entered promiscuous mode [ 822.244039][T26486] hsr_slave_1: entered promiscuous mode [ 822.250649][T26486] debugfs: 'hsr0' already exists in 'hsr' [ 822.286138][T26486] Cannot create hsr debugfs directory [ 822.887421][T26600] netlink: zone id is out of range [ 822.901628][T26600] netlink: zone id is out of range [ 822.907535][T26486] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.920992][T26600] netlink: zone id is out of range [ 822.921625][T26486] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.960527][T26600] netlink: zone id is out of range [ 822.982679][T26600] netlink: zone id is out of range [ 822.990630][T26600] netlink: zone id is out of range [ 823.372109][T26486] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.431567][T26486] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.510538][ T50] Bluetooth: hci2: command tx timeout [ 823.782048][T26486] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.792564][T26486] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.259671][T26486] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.270180][T26486] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.616346][T26486] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 824.719198][T26486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.800702][T26486] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 824.826339][T26486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.834640][T26486] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 824.866316][T26486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 824.884666][T26486] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 824.903303][T26486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 824.916360][T26649] __nla_validate_parse: 6 callbacks suppressed [ 824.916382][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6276'. [ 824.932275][T26649] netlink: 'syz.2.6276': attribute type 3 has an invalid length. [ 824.940096][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6276'. [ 824.952208][T26649] netlink: 'syz.2.6276': attribute type 3 has an invalid length. [ 825.011595][T26649] netlink: 908 bytes leftover after parsing attributes in process `syz.2.6276'. [ 825.239206][T26486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.286142][T26486] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.296253][T26667] netlink: 'syz.5.6281': attribute type 21 has an invalid length. [ 825.305549][T26667] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6281'. [ 825.323513][T26667] netlink: 'syz.5.6281': attribute type 4 has an invalid length. [ 825.331289][T26667] netlink: 'syz.5.6281': attribute type 5 has an invalid length. [ 825.339219][T26667] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6281'. [ 825.355169][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.362511][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.393257][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.400508][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.591106][ T50] Bluetooth: hci2: command tx timeout [ 826.156004][T26693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6287'. [ 826.182435][T26486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.641949][T26486] veth0_vlan: entered promiscuous mode [ 826.707154][T26486] veth1_vlan: entered promiscuous mode [ 826.769663][T26486] veth0_macvtap: entered promiscuous mode [ 826.799833][T26486] veth1_macvtap: entered promiscuous mode [ 826.835149][T26486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.867966][T26486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.914474][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.946119][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.001320][T26705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6290'. [ 827.016565][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.029250][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.102168][T26707] syzkaller0: entered promiscuous mode [ 827.670500][ T50] Bluetooth: hci2: command tx timeout [ 827.760710][ T9323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.768591][ T9323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.985949][T26722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6296'. [ 828.066080][ T9323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.085372][ T9323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.109077][T26727] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6298'. [ 828.248078][T26735] tipc: Enabling of bearer rejected, failed to enable media [ 828.281629][T26733] syzkaller0: entered promiscuous mode [ 828.287171][T26733] syzkaller0: entered allmulticast mode [ 828.317890][T26737] syz_tun: entered allmulticast mode [ 828.393324][T26737] dvmrp6: entered allmulticast mode [ 828.428711][T26739] netlink: 'syz.3.6302': attribute type 1 has an invalid length. [ 828.435366][T26736] syz_tun: left allmulticast mode [ 828.597398][T26739] 8021q: adding VLAN 0 to HW filter on device bond6 [ 828.684369][T26743] vlan3: entered allmulticast mode [ 828.707360][T26743] bond6: entered allmulticast mode [ 828.815596][T26747] bond6: (slave geneve2): making interface the new active one [ 828.823377][T26747] geneve2: entered allmulticast mode [ 828.831060][T26747] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 829.141566][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 829.153557][T26745] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.161249][T26745] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.171752][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 829.191596][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 829.205512][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 829.225747][T26767] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6310'. [ 829.257539][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 829.670873][T26745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.687382][T26745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.945407][T26749] netlink: 'syz.0.6303': attribute type 1 has an invalid length. [ 829.953213][T26749] netlink: 'syz.0.6303': attribute type 27 has an invalid length. [ 829.961615][T26749] netlink: 252 bytes leftover after parsing attributes in process `syz.0.6303'. [ 829.989364][ T9323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.999212][ T9323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.017511][ T5360] uyz0: Port: 1 Link DOWN [ 830.172015][T26789] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6314'. [ 830.181035][T26789] netlink: 59 bytes leftover after parsing attributes in process `syz.6.6314'. [ 830.184355][ T9323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.190003][T26789] netlink: 59 bytes leftover after parsing attributes in process `syz.6.6314'. [ 830.213562][ T9323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.223173][ T9323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.232186][ T9323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.241660][ T9323] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.251733][ T9323] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.354113][T26799] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6317'. [ 830.912195][T26823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6324'. [ 831.371210][ T5630] Bluetooth: hci5: command tx timeout [ 831.419488][T26836] syzkaller0: entered promiscuous mode [ 831.430761][T26836] syzkaller0: entered allmulticast mode [ 833.450637][ T5630] Bluetooth: hci5: command tx timeout [ 835.511903][ T5630] Bluetooth: hci5: command tx timeout [ 835.748413][T26758] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.755815][T26758] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.763362][T26758] bridge_slave_0: entered allmulticast mode [ 835.777706][T26758] bridge_slave_0: entered promiscuous mode [ 835.786618][T26926] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6350'. [ 835.815708][T26758] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.852456][T26758] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.859887][T26758] bridge_slave_1: entered allmulticast mode [ 835.867916][T26758] bridge_slave_1: entered promiscuous mode [ 835.965158][T26932] netlink: 'syz.6.6350': attribute type 1 has an invalid length. [ 835.978115][T26932] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6350'. [ 835.989256][T26758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.032115][T26758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.152457][T26758] team0: Port device team_slave_0 added [ 836.165264][T26758] team0: Port device team_slave_1 added [ 836.217182][T26758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.224239][T26758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.259987][T26758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.273413][T26758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.280796][T26758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.306800][T26758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.410692][T26758] hsr_slave_0: entered promiscuous mode [ 836.434735][T26758] hsr_slave_1: entered promiscuous mode [ 836.441640][T26758] debugfs: 'hsr0' already exists in 'hsr' [ 836.441660][T26952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6356'. [ 836.447523][T26758] Cannot create hsr debugfs directory [ 836.484256][T26953] net_ratelimit: 26 callbacks suppressed [ 836.484277][T26953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.499484][T26953] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6357'. [ 836.728048][T26758] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.754614][T26956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.765638][T26956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6358'. [ 836.944346][T26963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6360'. [ 837.029436][T26967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6361'. [ 837.143637][T26758] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.482020][T26984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.515096][T26984] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6362'. [ 837.612562][ T5630] Bluetooth: hci5: command tx timeout [ 837.834392][T26758] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.008518][T26999] netlink: 'syz.0.6368': attribute type 8 has an invalid length. [ 838.021355][T26999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6368'. [ 838.390727][T26758] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.415448][T27017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.425086][T27017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6372'. [ 838.887931][T26758] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 838.965252][T26758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 838.973627][T26758] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 838.987780][T26758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.996194][T26758] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 839.121993][T26758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 839.144299][T26758] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 839.155607][T26758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 839.312092][T26758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.375668][T26758] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.388376][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.395620][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.453470][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.460669][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.521180][T26758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 839.531592][T26758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 840.365749][T26758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.969974][T27092] netlink: 'syz.3.6374': attribute type 1 has an invalid length. [ 840.999303][T27092] netlink: 'syz.3.6374': attribute type 3 has an invalid length. [ 841.023396][T27092] __nla_validate_parse: 4 callbacks suppressed [ 841.023414][T27092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6374'. [ 841.096641][T26758] veth0_vlan: entered promiscuous mode [ 841.111605][T26758] veth1_vlan: entered promiscuous mode [ 841.238416][T26758] veth0_macvtap: entered promiscuous mode [ 841.258646][T26758] veth1_macvtap: entered promiscuous mode [ 841.315044][T27092] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6374'. [ 841.441834][T26758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.514839][T26758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.532423][ T1255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.586701][ T1255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.595517][ T1255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.746197][ T1255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.815654][T27130] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 841.828732][T27130] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 841.946211][T27136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6393'. [ 842.022124][ T9323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.037413][ T9323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.095799][ T9330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.105360][ T9330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.542974][T27156] netlink: 'syz.5.6399': attribute type 1 has an invalid length. [ 842.550776][T27156] netlink: 'syz.5.6399': attribute type 3 has an invalid length. [ 842.558543][T27156] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6399'. [ 842.572371][T27156] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6399'. [ 842.651693][T27158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6398'. [ 843.336083][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 843.351731][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 843.361988][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 843.371129][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 843.381634][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 843.939914][T27206] netlink: 'syz.2.6410': attribute type 1 has an invalid length. [ 843.947719][T27206] netlink: 'syz.2.6410': attribute type 3 has an invalid length. [ 843.955781][T27206] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6410'. [ 844.002927][T27206] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6410'. [ 844.611891][ T9323] team0: left promiscuous mode [ 844.616772][ T9323] team_slave_0: left promiscuous mode [ 844.622379][ T9323] team_slave_1: left promiscuous mode [ 844.627968][ T9323] geneve1: left promiscuous mode [ 844.705841][ T9323] bridge0: port 3(team0) entered disabled state [ 844.745305][T27233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6416'. [ 844.881756][ T9323] bridge_slave_1: left allmulticast mode [ 844.887472][ T9323] bridge_slave_1: left promiscuous mode [ 844.893300][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.914324][ T9323] bridge_slave_0: left allmulticast mode [ 844.920044][ T9323] bridge_slave_0: left promiscuous mode [ 844.925838][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.430969][ T50] Bluetooth: hci0: command tx timeout [ 845.501260][T27248] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6420'. [ 845.615433][ T9323] geneve1 (unregistering): left allmulticast mode [ 845.623497][ T9323] team0: Port device geneve1 removed [ 845.734224][ T9323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.746505][ T9323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.757868][ T9323] bond0 (unregistering): Released all slaves [ 845.813185][ T9323] bond1 (unregistering): Released all slaves [ 845.832722][ T9323] bond2 (unregistering): Released all slaves [ 846.033775][ T9323] 5nè: left promiscuous mode [ 846.434516][ T9323] tipc: Left network mode [ 847.281721][T27176] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.289085][T27176] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.303693][T27176] bridge_slave_0: entered allmulticast mode [ 847.319225][T27176] bridge_slave_0: entered promiscuous mode [ 847.338663][T27176] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.358493][T27176] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.373676][T27176] bridge_slave_1: entered allmulticast mode [ 847.392153][T27176] bridge_slave_1: entered promiscuous mode [ 847.500735][ T50] Bluetooth: hci0: command tx timeout [ 847.559673][T27176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.573907][T27176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.981924][T27176] team0: Port device team_slave_0 added [ 848.052861][T27176] team0: Port device team_slave_1 added [ 848.065106][T27320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6440'. [ 848.095007][T27176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.191938][T27176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.310550][T27176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.056710][T27176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.065005][T27176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.097321][T27176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.185836][T27353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6448'. [ 849.338674][T27363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6448'. [ 849.515247][T27176] hsr_slave_0: entered promiscuous mode [ 849.525944][T27176] hsr_slave_1: entered promiscuous mode [ 849.532564][T27176] debugfs: 'hsr0' already exists in 'hsr' [ 849.538337][T27176] Cannot create hsr debugfs directory [ 849.583827][T27373] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 849.591972][T27373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 849.630788][ T50] Bluetooth: hci0: command tx timeout [ 849.974524][T15942] syz_tun (unregistering): left allmulticast mode [ 850.027796][T27394] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 850.055176][T27394] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 850.111944][T27392] netlink: 'syz.0.6459': attribute type 317 has an invalid length. [ 850.471922][T27176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.583753][T27414] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6467'. [ 850.997541][T27176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.104569][T27434] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6476'. [ 851.333382][T27441] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6479'. [ 851.670546][ T50] Bluetooth: hci0: command tx timeout [ 851.680614][T27176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.707633][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808153d800: rx timeout, send abort [ 852.210108][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808153ec00: rx timeout, send abort [ 852.218809][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808153d800: abort rx timeout. Force session deactivation [ 852.288876][T27176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.412836][T27478] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6494'. [ 852.483484][T27482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6496'. [ 852.563098][T27482] ipvlan2: entered allmulticast mode [ 852.567639][T27489] FAULT_INJECTION: forcing a failure. [ 852.567639][T27489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.568460][T27482] vlan1: entered allmulticast mode [ 852.568481][T27482] veth0_vlan: entered allmulticast mode [ 852.592603][T27489] CPU: 1 UID: 0 PID: 27489 Comm: syz.5.6499 Not tainted syzkaller #0 PREEMPT(full) [ 852.592633][T27489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.592647][T27489] Call Trace: [ 852.592657][T27489] [ 852.592667][T27489] dump_stack_lvl+0xe8/0x150 [ 852.592701][T27489] should_fail_ex+0x40c/0x560 [ 852.592745][T27489] _copy_from_user+0x2d/0xb0 [ 852.592772][T27489] mptcp_get_subflow_data+0xa0/0x250 [ 852.592921][T27489] mptcp_getsockopt+0x3b4/0x1ed0 [ 852.592958][T27489] ? process_measurement+0x14fb/0x1c10 [ 852.593019][T27489] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 852.593062][T27489] ? __pfx_process_measurement+0x10/0x10 [ 852.593088][T27489] ? tomoyo_check_open_permission+0x38e/0x470 [ 852.593168][T27489] ? tomoyo_check_open_permission+0x1d3/0x470 [ 852.593206][T27489] ? __lock_acquire+0x683/0x2cd0 [ 852.593248][T27489] ? __lock_acquire+0x683/0x2cd0 [ 852.593287][T27489] ? unwind_next_frame+0x8f/0x2550 [ 852.593337][T27489] ? __lock_acquire+0x683/0x2cd0 [ 852.593375][T27489] ? __lock_acquire+0x683/0x2cd0 [ 852.593405][T27489] ? aa_file_perm+0x18b/0x15f0 [ 852.593461][T27489] ? aa_label_sk_perm+0x532/0x6e0 [ 852.593509][T27489] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 852.593543][T27489] ? _parse_integer_limit+0x1ae/0x1f0 [ 852.593616][T27489] ? __lock_acquire+0x683/0x2cd0 [ 852.593643][T27489] ? kstrtouint+0x6e/0xe0 [ 852.593691][T27489] ? __might_fault+0xaf/0x130 [ 852.593722][T27489] ? __might_fault+0xaf/0x130 [ 852.593767][T27489] ? sock_common_getsockopt+0x2d/0xb0 [ 852.593801][T27489] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 852.593832][T27489] do_sock_getsockopt+0x51d/0x7e0 [ 852.593862][T27489] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 852.593902][T27489] ? __fget_files+0x3a2/0x420 [ 852.593930][T27489] ? __fget_files+0x2a/0x420 [ 852.593964][T27489] __x64_sys_getsockopt+0x1a4/0x240 [ 852.593995][T27489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.594029][T27489] do_syscall_64+0x174/0x580 [ 852.594056][T27489] ? trace_irq_disable+0x3b/0x140 [ 852.594090][T27489] ? clear_bhb_loop+0x40/0x90 [ 852.594118][T27489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.594140][T27489] RIP: 0033:0x7fa58639ce59 [ 852.594163][T27489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.594182][T27489] RSP: 002b:00007fa5845ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 852.594206][T27489] RAX: ffffffffffffffda RBX: 00007fa586615fa0 RCX: 00007fa58639ce59 [ 852.594231][T27489] RDX: 0000000000000002 RSI: 000000000000011c RDI: 0000000000000003 [ 852.594246][T27489] RBP: 00007fa5845ee090 R08: 0000200000000000 R09: 0000000000000000 [ 852.594261][T27489] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 852.594275][T27489] R13: 00007fa586616038 R14: 00007fa586615fa0 R15: 00007fffb992b948 [ 852.594312][T27489] [ 852.885844][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808153ec00: abort rx timeout. Force session deactivation [ 853.246872][T27500] netlink: 'syz.6.6502': attribute type 5 has an invalid length. [ 853.508322][T27510] --map-set only usable from mangle table [ 853.646069][T27510] netlink: 'syz.2.6506': attribute type 8 has an invalid length. [ 853.717381][T27517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6506'. [ 853.897819][T27176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 853.943056][T27176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 854.063331][T27522] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6512'. [ 854.098816][T27176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 854.160120][T27176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 854.188805][T27176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 854.207200][T27176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 854.300450][ T9323] veth1_macvtap: left promiscuous mode [ 854.308341][ T9323] veth0_macvtap: left promiscuous mode [ 854.321343][ T9323] veth1_vlan: left promiscuous mode [ 854.333011][ T9323] veth0_vlan: left promiscuous mode [ 854.354607][T27535] FAULT_INJECTION: forcing a failure. [ 854.354607][T27535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.369595][T27535] CPU: 1 UID: 0 PID: 27535 Comm: syz.6.6516 Not tainted syzkaller #0 PREEMPT(full) [ 854.369624][T27535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.369637][T27535] Call Trace: [ 854.369646][T27535] [ 854.369655][T27535] dump_stack_lvl+0xe8/0x150 [ 854.369688][T27535] should_fail_ex+0x40c/0x560 [ 854.369731][T27535] _copy_to_user+0x31/0xb0 [ 854.369760][T27535] simple_read_from_buffer+0xe1/0x170 [ 854.369796][T27535] proc_fail_nth_read+0x1bb/0x230 [ 854.369830][T27535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.369864][T27535] ? rw_verify_area+0x24a/0x4c0 [ 854.369898][T27535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.369927][T27535] vfs_read+0x213/0xa80 [ 854.369965][T27535] ? __pfx___mutex_lock+0x10/0x10 [ 854.369995][T27535] ? __pfx_vfs_read+0x10/0x10 [ 854.370053][T27535] ? __fget_files+0x2a/0x420 [ 854.370087][T27535] ? __fget_files+0x3a2/0x420 [ 854.370113][T27535] ? __fget_files+0x2a/0x420 [ 854.370155][T27535] ksys_read+0x150/0x270 [ 854.370195][T27535] ? __pfx_ksys_read+0x10/0x10 [ 854.370224][T27535] ? fput+0xa0/0xd0 [ 854.370258][T27535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.370281][T27535] do_syscall_64+0x174/0x580 [ 854.370307][T27535] ? trace_irq_disable+0x3b/0x140 [ 854.370341][T27535] ? clear_bhb_loop+0x40/0x90 [ 854.370370][T27535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.370392][T27535] RIP: 0033:0x7f07b475d68e [ 854.370413][T27535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 854.370433][T27535] RSP: 002b:00007f07b5601fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 854.370456][T27535] RAX: ffffffffffffffda RBX: 00007f07b56026c0 RCX: 00007f07b475d68e [ 854.370473][T27535] RDX: 000000000000000f RSI: 00007f07b56020a0 RDI: 0000000000000004 [ 854.370488][T27535] RBP: 00007f07b5602090 R08: 0000000000000000 R09: 0000000000000000 [ 854.370502][T27535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.370515][T27535] R13: 00007f07b4a16038 R14: 00007f07b4a15fa0 R15: 00007ffe189859f8 [ 854.370552][T27535] [ 854.612715][T27536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.587109][ T9323] team_slave_1 (unregistering): left allmulticast mode [ 856.601623][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 856.624135][ T9323] team_slave_0 (unregistering): left allmulticast mode [ 856.632300][ T9323] team0 (unregistering): Port device team_slave_0 removed [ 856.775727][T27176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 856.787229][T27176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.977237][T27568] netlink: 'syz.5.6522': attribute type 1 has an invalid length. [ 857.010087][T27176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.125308][T27176] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.202125][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.209363][ T9330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.223279][T27573] FAULT_INJECTION: forcing a failure. [ 857.223279][T27573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.266459][T27573] CPU: 0 UID: 0 PID: 27573 Comm: syz.2.6524 Not tainted syzkaller #0 PREEMPT(full) [ 857.266497][T27573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 857.266510][T27573] Call Trace: [ 857.266520][T27573] [ 857.266530][T27573] dump_stack_lvl+0xe8/0x150 [ 857.266563][T27573] should_fail_ex+0x40c/0x560 [ 857.266606][T27573] _copy_from_user+0x2d/0xb0 [ 857.266634][T27573] __sys_sendto+0x2b0/0x710 [ 857.266674][T27573] ? __pfx___sys_sendto+0x10/0x10 [ 857.266706][T27573] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 857.266749][T27573] ? __fget_files+0x3a2/0x420 [ 857.266789][T27573] ? ksys_write+0x242/0x270 [ 857.266824][T27573] ? __pfx_ksys_write+0x10/0x10 [ 857.266863][T27573] __x64_sys_sendto+0xde/0x100 [ 857.266898][T27573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.266923][T27573] do_syscall_64+0x174/0x580 [ 857.266948][T27573] ? trace_irq_disable+0x3b/0x140 [ 857.266982][T27573] ? clear_bhb_loop+0x40/0x90 [ 857.267010][T27573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.267032][T27573] RIP: 0033:0x7f498579ce59 [ 857.267053][T27573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.267072][T27573] RSP: 002b:00007f498657a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 857.267096][T27573] RAX: ffffffffffffffda RBX: 00007f4985a15fa0 RCX: 00007f498579ce59 [ 857.267113][T27573] RDX: 00000000ffffff1e RSI: 0000200000000840 RDI: 0000000000000003 [ 857.267128][T27573] RBP: 00007f498657a090 R08: 00002000000001c0 R09: 000000000000001c [ 857.267144][T27573] R10: 00000000200080c0 R11: 0000000000000246 R12: 0000000000000001 [ 857.267158][T27573] R13: 00007f4985a16038 R14: 00007f4985a15fa0 R15: 00007ffc41ad1f98 [ 857.267194][T27573] [ 857.290739][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.498419][ T9330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.634919][T27579] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 857.649944][T27176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.489003][T27614] Cannot find set identified by id 0 to match [ 858.514318][T27614] netlink: 'syz.5.6534': attribute type 21 has an invalid length. [ 858.547274][T27614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6534'. [ 858.976569][T27176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.067418][ T9323] IPVS: stop unused estimator thread 0... [ 859.137945][T27176] veth0_vlan: entered promiscuous mode [ 859.154015][T27176] veth1_vlan: entered promiscuous mode [ 859.251536][T27176] veth0_macvtap: entered promiscuous mode [ 859.277892][T27176] veth1_macvtap: entered promiscuous mode [ 859.353728][T27176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.384950][T27176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.433518][ T9327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.449310][ T9327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.480272][ T9327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.515388][ T9327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.708914][T22996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.717226][T22996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.893818][ T9327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.901703][ T9327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.707059][T27670] sock: sock_timestamping_bind_phc: sock not bind to device [ 862.023217][T27703] sctp: [Deprecated]: syz.0.6557 (pid 27703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 862.023217][T27703] Use struct sctp_sack_info instead [ 862.154375][T27706] bond2: option min_links: invalid value (18446744073709551612) [ 862.174170][T27706] bond2: option min_links: allowed values 0 - 2147483647 [ 862.266733][T27706] bond2 (unregistering): Released all slaves [ 862.324000][T27718] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6560'. [ 862.339801][T27717] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6561'. [ 863.201107][T27756] syzkaller0: entered promiscuous mode [ 863.206652][T27756] syzkaller0: entered allmulticast mode [ 863.530041][T27767] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 863.551736][T23830] IPVS: starting estimator thread 0... [ 863.575082][T27762] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.628902][T27771] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6574'. [ 863.895437][T27768] IPVS: using max 26 ests per chain, 62400 per kthread [ 865.073964][T27823] syzkaller0: entered promiscuous mode [ 865.079518][T27823] syzkaller0: entered allmulticast mode [ 865.161943][T27823] tipc: Started in network mode [ 865.167241][T27823] tipc: Node identity 0e4119a74294, cluster identity 4711 [ 865.197775][T27823] tipc: Enabled bearer , priority 0 [ 865.244147][T27822] tipc: Resetting bearer [ 865.293475][T27822] tipc: Disabling bearer [ 865.751622][T27840] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6597'. [ 865.836834][T27842] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.6596'. [ 865.983863][T27848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6598'. [ 866.127370][T27856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6598'. [ 866.138594][T27856] netlink: 'syz.2.6598': attribute type 1 has an invalid length. [ 866.579557][T27875] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6608'. [ 866.938450][T27888] netlink: 'syz.5.6614': attribute type 7 has an invalid length. [ 867.874982][T27916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6627'. [ 869.391491][T27978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6651'. [ 869.854918][T27996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.044877][T28002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6660'. [ 870.211407][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.567140][T28014] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 870.607335][T28014] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 870.646825][T28018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6664'. [ 870.966348][T28030] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6670'. [ 871.020161][T28030] ipvlan2: entered allmulticast mode [ 871.049537][T28030] vlan1: entered allmulticast mode [ 871.054723][T28030] veth0_vlan: entered allmulticast mode [ 871.300912][T28042] macvtap1: entered promiscuous mode [ 871.323043][T28042] bridge0: entered promiscuous mode [ 871.327279][T28044] netlink: 'syz.5.6675': attribute type 40 has an invalid length. [ 871.346182][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6675'. [ 871.467967][T28050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6677'. [ 872.052355][T28075] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 872.065752][T28075] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 872.184325][T28081] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 872.198231][T19312] IPVS: starting estimator thread 0... [ 872.218731][T28084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6689'. [ 872.227286][T28081] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 872.380540][T28082] IPVS: using max 31 ests per chain, 74400 per kthread [ 872.677908][T28099] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 872.954832][T28109] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 872.971025][T28109] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 873.314934][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6702'. [ 873.354022][T28117] ipvlan2: entered allmulticast mode [ 873.359433][T28117] vlan1: entered allmulticast mode [ 873.364599][T28117] veth0_vlan: entered allmulticast mode [ 873.818303][T28128] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6704'. [ 874.155295][T28138] syz_tun: entered allmulticast mode [ 874.217619][T28138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 874.248935][T28137] syz_tun: left allmulticast mode [ 874.344218][T28142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6707'. [ 874.356480][T28142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6707'. [ 874.516699][T28151] tipc: Failed to remove unknown binding: 66,1,1/0:3938713941/3938713943 [ 874.529353][T28152] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 874.537485][T28152] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 874.584905][T28153] tipc: Failed to remove unknown binding: 66,1,1/0:3938713941/3938713943 [ 874.593484][T28153] tipc: Failed to remove unknown binding: 66,1,1/0:3938713941/3938713943 [ 875.307185][ T9330] batadv1: left allmulticast mode [ 875.316026][ T9330] batadv1: left promiscuous mode [ 875.331082][ T9330] bridge0: port 4(batadv1) entered disabled state [ 875.347867][ T9330] vlan2: left allmulticast mode [ 875.355232][ T9330] geneve0: left allmulticast mode [ 875.363481][ T9330] vlan2: left promiscuous mode [ 875.373121][ T9330] geneve0: left promiscuous mode [ 875.381521][ T9330] bridge0: port 3(vlan2) entered disabled state [ 875.402561][ T9330] bridge_slave_1: left allmulticast mode [ 875.410796][ T9330] bridge_slave_1: left promiscuous mode [ 875.418716][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.640519][T28178] netlink: 'syz.0.6722': attribute type 1 has an invalid length. [ 875.707054][ T9330] bridge_slave_0: left allmulticast mode [ 875.715914][ T9330] bridge_slave_0: left promiscuous mode [ 875.730403][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.778600][ T9330] tunl0: left allmulticast mode [ 876.087456][ T9330] bond1 (unregistering): (slave geneve2): Releasing active interface [ 876.203611][ T9330] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 876.211767][ T9330] bridge4 (unregistering): left promiscuous mode [ 876.245542][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.256774][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.267718][ T9330] bond0 (unregistering): Released all slaves [ 876.282963][ T9330] bond1 (unregistering): Released all slaves [ 876.335233][ T9330] bond2 (unregistering): Released all slaves [ 876.428271][ T9330] bond3 (unregistering): Released all slaves [ 876.453462][ T9330] bond4 (unregistering): Released all slaves [ 876.506040][T28178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 876.543295][T28179] vlan2: entered allmulticast mode [ 876.548496][T28179] bond2: entered allmulticast mode [ 876.564154][T28182] bond2: (slave geneve2): making interface the new active one [ 876.572006][T28182] geneve2: entered allmulticast mode [ 876.582359][T28182] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 876.597660][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.610329][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.619129][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.631331][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.953425][ T9330] tipc: Left network mode [ 878.169872][T28241] netlink: 'syz.3.6740': attribute type 1 has an invalid length. [ 878.177857][T28241] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6740'. [ 878.187440][T28241] NCSI netlink: No device for ifindex 0 [ 878.439169][T28256] hsr0: entered promiscuous mode [ 878.681906][T28265] syzkaller0: entered promiscuous mode [ 878.688386][T28265] syzkaller0: entered allmulticast mode [ 879.003515][T28278] IPv6: NLM_F_CREATE should be specified when creating new route [ 879.857920][T28296] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6764'. [ 881.477926][ T9330] hsr_slave_0: left promiscuous mode [ 881.503544][ T9330] hsr_slave_1: left promiscuous mode [ 881.607151][ T9330] veth0_vlan: left promiscuous mode [ 882.831404][T28364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6780'. [ 883.020567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.134393][T28422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6793'. [ 885.342582][T28462] syzkaller0: entered promiscuous mode [ 885.348131][T28462] syzkaller0: entered allmulticast mode [ 885.416358][T28462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6803'. [ 885.705710][ T9330] IPVS: stop unused estimator thread 0... [ 886.505465][T28498] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.6815'. [ 886.515852][T28493] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6812'. [ 887.688107][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 887.936625][T28542] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6827'. [ 888.153485][T28549] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6829'. [ 888.243982][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6830'. [ 888.581705][T28562] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 888.592055][T28562] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 889.571659][T28594] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6847'. [ 889.609900][T28596] netlink: 284 bytes leftover after parsing attributes in process `syz.6.6850'. [ 889.747544][T28611] netlink: 'syz.6.6850': attribute type 13 has an invalid length. [ 889.769021][T28608] hsr0: entered promiscuous mode [ 889.858529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.884178][T28616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6852'. [ 890.195894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 890.328706][T28627] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 890.356915][T28627] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 890.401119][T28629] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6858'. [ 890.563869][T28638] FAULT_INJECTION: forcing a failure. [ 890.563869][T28638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.618541][T28638] CPU: 0 UID: 0 PID: 28638 Comm: syz.6.6859 Not tainted syzkaller #0 PREEMPT(full) [ 890.618571][T28638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 890.618585][T28638] Call Trace: [ 890.618593][T28638] [ 890.618603][T28638] dump_stack_lvl+0xe8/0x150 [ 890.618635][T28638] should_fail_ex+0x40c/0x560 [ 890.618677][T28638] _copy_from_iter+0x1d3/0x1660 [ 890.618705][T28638] ? rcu_is_watching+0x15/0xb0 [ 890.618738][T28638] ? __pfx__copy_from_iter+0x10/0x10 [ 890.618758][T28638] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 890.618799][T28638] ? netlink_sendmsg+0x650/0xb40 [ 890.618825][T28638] ? skb_put+0x112/0x210 [ 890.618849][T28638] netlink_sendmsg+0x6c0/0xb40 [ 890.618947][T28638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.618978][T28638] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.619013][T28638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.619042][T28638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.619069][T28638] ____sys_sendmsg+0x9b9/0xa20 [ 890.619093][T28638] ? __might_fault+0xaf/0x130 [ 890.619129][T28638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.619163][T28638] ? import_iovec+0x73/0xa0 [ 890.619193][T28638] ___sys_sendmsg+0x2a5/0x360 [ 890.619216][T28638] ? __lock_acquire+0x683/0x2cd0 [ 890.619244][T28638] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.619309][T28638] ? __fget_files+0x2a/0x420 [ 890.619336][T28638] ? __fget_files+0x3a2/0x420 [ 890.619375][T28638] __x64_sys_sendmsg+0x1bd/0x2a0 [ 890.619403][T28638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.619438][T28638] ? __pfx_ksys_write+0x10/0x10 [ 890.619479][T28638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.619503][T28638] do_syscall_64+0x174/0x580 [ 890.619529][T28638] ? trace_irq_disable+0x3b/0x140 [ 890.619560][T28638] ? clear_bhb_loop+0x40/0x90 [ 890.619585][T28638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.619607][T28638] RIP: 0033:0x7f07b479ce59 [ 890.619626][T28638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.619644][T28638] RSP: 002b:00007f07b55c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.619667][T28638] RAX: ffffffffffffffda RBX: 00007f07b4a16180 RCX: 00007f07b479ce59 [ 890.619684][T28638] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 890.619697][T28638] RBP: 00007f07b55c0090 R08: 0000000000000000 R09: 0000000000000000 [ 890.619711][T28638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.619724][T28638] R13: 00007f07b4a16218 R14: 00007f07b4a16180 R15: 00007ffe189859f8 [ 890.619759][T28638] [ 890.945477][T28640] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6862'. [ 891.483266][T28653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6868'. [ 891.587662][T28660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.604991][T28670] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6872'. [ 891.754764][T28676] syz_tun: entered allmulticast mode [ 891.769741][T28676] dvmrp8: entered allmulticast mode [ 891.783044][T28671] syz_tun: left allmulticast mode [ 891.783732][T28674] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6873'. [ 892.130224][T28686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6880'. [ 892.331880][T28690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6882'. [ 892.463944][T28701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6885'. [ 892.573067][T28706] FAULT_INJECTION: forcing a failure. [ 892.573067][T28706] name failslab, interval 1, probability 0, space 0, times 0 [ 892.589548][T28708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.599089][T28706] CPU: 1 UID: 0 PID: 28706 Comm: syz.5.6888 Not tainted syzkaller #0 PREEMPT(full) [ 892.599118][T28706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.599132][T28706] Call Trace: [ 892.599142][T28706] [ 892.599152][T28706] dump_stack_lvl+0xe8/0x150 [ 892.599184][T28706] should_fail_ex+0x40c/0x560 [ 892.599241][T28706] should_failslab+0xa8/0x100 [ 892.599267][T28706] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 892.599299][T28706] ? __alloc_skb+0x189/0x7a0 [ 892.599333][T28706] ? __alloc_skb+0x1d7/0x7a0 [ 892.599365][T28706] ? __local_bh_enable_ip+0xd0/0x130 [ 892.599394][T28706] __alloc_skb+0x1d7/0x7a0 [ 892.599433][T28706] netlink_sendmsg+0x5d4/0xb40 [ 892.599470][T28706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.599499][T28706] ? aa_sock_msg_perm+0xf1/0x1b0 [ 892.599535][T28706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 892.599564][T28706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.599591][T28706] ____sys_sendmsg+0x9b9/0xa20 [ 892.599616][T28706] ? __might_fault+0xaf/0x130 [ 892.599652][T28706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.599687][T28706] ? import_iovec+0x73/0xa0 [ 892.599717][T28706] ___sys_sendmsg+0x2a5/0x360 [ 892.599741][T28706] ? __lock_acquire+0x683/0x2cd0 [ 892.599770][T28706] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.599835][T28706] ? __fget_files+0x2a/0x420 [ 892.599862][T28706] ? __fget_files+0x3a2/0x420 [ 892.599901][T28706] __x64_sys_sendmsg+0x1bd/0x2a0 [ 892.599929][T28706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 892.599969][T28706] ? __pfx_ksys_write+0x10/0x10 [ 892.600011][T28706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.600037][T28706] do_syscall_64+0x174/0x580 [ 892.600063][T28706] ? trace_irq_disable+0x3b/0x140 [ 892.600096][T28706] ? clear_bhb_loop+0x40/0x90 [ 892.600124][T28706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.600146][T28706] RIP: 0033:0x7fa58639ce59 [ 892.600168][T28706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.600188][T28706] RSP: 002b:00007fa5845ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.600211][T28706] RAX: ffffffffffffffda RBX: 00007fa586615fa0 RCX: 00007fa58639ce59 [ 892.600234][T28706] RDX: 0000000024040000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 892.600249][T28706] RBP: 00007fa5845ee090 R08: 0000000000000000 R09: 0000000000000000 [ 892.600263][T28706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.600277][T28706] R13: 00007fa586616038 R14: 00007fa586615fa0 R15: 00007fffb992b948 [ 892.600314][T28706] [ 892.852201][T28708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6887'. [ 893.273347][T28719] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.6891'. [ 893.850323][T28743] gre2: entered allmulticast mode [ 893.934246][T28746] syzkaller0: entered promiscuous mode [ 893.939799][T28746] syzkaller0: entered allmulticast mode [ 894.591245][T28786] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 894.599481][T28786] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 894.725940][T28793] FAULT_INJECTION: forcing a failure. [ 894.725940][T28793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.739394][T28793] CPU: 1 UID: 0 PID: 28793 Comm: syz.0.6910 Not tainted syzkaller #0 PREEMPT(full) [ 894.739425][T28793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.739440][T28793] Call Trace: [ 894.739450][T28793] [ 894.739459][T28793] dump_stack_lvl+0xe8/0x150 [ 894.739491][T28793] should_fail_ex+0x40c/0x560 [ 894.739532][T28793] _copy_from_iter+0x1d3/0x1660 [ 894.739569][T28793] ? rcu_is_watching+0x15/0xb0 [ 894.739602][T28793] ? __pfx__copy_from_iter+0x10/0x10 [ 894.739622][T28793] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 894.739661][T28793] ? netlink_sendmsg+0x650/0xb40 [ 894.739684][T28793] ? skb_put+0x112/0x210 [ 894.739708][T28793] netlink_sendmsg+0x6c0/0xb40 [ 894.739743][T28793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.739773][T28793] ? aa_sock_msg_perm+0xf1/0x1b0 [ 894.739806][T28793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 894.739834][T28793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.739860][T28793] ____sys_sendmsg+0x9b9/0xa20 [ 894.739885][T28793] ? __might_fault+0xaf/0x130 [ 894.739920][T28793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.739954][T28793] ? import_iovec+0x73/0xa0 [ 894.739984][T28793] ___sys_sendmsg+0x2a5/0x360 [ 894.740006][T28793] ? __lock_acquire+0x683/0x2cd0 [ 894.740034][T28793] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.740097][T28793] ? __fget_files+0x2a/0x420 [ 894.740124][T28793] ? __fget_files+0x3a2/0x420 [ 894.740167][T28793] __x64_sys_sendmsg+0x1bd/0x2a0 [ 894.740201][T28793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 894.740236][T28793] ? __pfx_ksys_write+0x10/0x10 [ 894.740278][T28793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.740302][T28793] do_syscall_64+0x174/0x580 [ 894.740328][T28793] ? trace_irq_disable+0x3b/0x140 [ 894.740361][T28793] ? clear_bhb_loop+0x40/0x90 [ 894.740389][T28793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.740410][T28793] RIP: 0033:0x7fecaf99ce59 [ 894.740431][T28793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.740451][T28793] RSP: 002b:00007fecb0929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.740473][T28793] RAX: ffffffffffffffda RBX: 00007fecafc15fa0 RCX: 00007fecaf99ce59 [ 894.740490][T28793] RDX: 0000000024040000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 894.740505][T28793] RBP: 00007fecb0929090 R08: 0000000000000000 R09: 0000000000000000 [ 894.740518][T28793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.740531][T28793] R13: 00007fecafc16038 R14: 00007fecafc15fa0 R15: 00007ffcd13dd368 [ 894.740574][T28793] [ 895.431507][T28812] netlink: 'syz.3.6914': attribute type 2 has an invalid length. [ 895.439615][T28812] netlink: 'syz.3.6914': attribute type 9 has an invalid length. [ 895.448682][T28812] __nla_validate_parse: 7 callbacks suppressed [ 895.448702][T28812] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6914'. [ 895.546502][T28805] xt_CT: No such helper "syz1" [ 895.733097][T28824] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 895.741251][T28824] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 895.843733][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6922'. [ 895.915972][T28831] FAULT_INJECTION: forcing a failure. [ 895.915972][T28831] name failslab, interval 1, probability 0, space 0, times 0 [ 895.945098][T28831] CPU: 0 UID: 0 PID: 28831 Comm: syz.5.6923 Not tainted syzkaller #0 PREEMPT(full) [ 895.945135][T28831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 895.945148][T28831] Call Trace: [ 895.945158][T28831] [ 895.945168][T28831] dump_stack_lvl+0xe8/0x150 [ 895.945199][T28831] should_fail_ex+0x40c/0x560 [ 895.945240][T28831] should_failslab+0xa8/0x100 [ 895.945262][T28831] ? skb_clone+0x212/0x3a0 [ 895.945288][T28831] kmem_cache_alloc_noprof+0x87/0x650 [ 895.945328][T28831] skb_clone+0x212/0x3a0 [ 895.945357][T28831] __netlink_deliver_tap+0x413/0x860 [ 895.945400][T28831] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.945428][T28831] netlink_deliver_tap+0x19c/0x1b0 [ 895.945453][T28831] netlink_unicast+0x77f/0x940 [ 895.945501][T28831] netlink_sendmsg+0x813/0xb40 [ 895.945537][T28831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.945567][T28831] ? aa_sock_msg_perm+0xf1/0x1b0 [ 895.945602][T28831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 895.945631][T28831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.945659][T28831] ____sys_sendmsg+0x9b9/0xa20 [ 895.945683][T28831] ? __might_fault+0xaf/0x130 [ 895.945719][T28831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.945754][T28831] ? import_iovec+0x73/0xa0 [ 895.945784][T28831] ___sys_sendmsg+0x2a5/0x360 [ 895.945807][T28831] ? __lock_acquire+0x683/0x2cd0 [ 895.945836][T28831] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.945911][T28831] ? __fget_files+0x2a/0x420 [ 895.945940][T28831] ? __fget_files+0x3a2/0x420 [ 895.945979][T28831] __x64_sys_sendmsg+0x1bd/0x2a0 [ 895.946007][T28831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 895.946044][T28831] ? __pfx_ksys_write+0x10/0x10 [ 895.946087][T28831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.946112][T28831] do_syscall_64+0x174/0x580 [ 895.946138][T28831] ? trace_irq_disable+0x3b/0x140 [ 895.946171][T28831] ? clear_bhb_loop+0x40/0x90 [ 895.946200][T28831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.946222][T28831] RIP: 0033:0x7fa58639ce59 [ 895.946244][T28831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.946263][T28831] RSP: 002b:00007fa5845ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.946287][T28831] RAX: ffffffffffffffda RBX: 00007fa586615fa0 RCX: 00007fa58639ce59 [ 895.946303][T28831] RDX: 0000000024040000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 895.946318][T28831] RBP: 00007fa5845ee090 R08: 0000000000000000 R09: 0000000000000000 [ 895.946332][T28831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.946346][T28831] R13: 00007fa586616038 R14: 00007fa586615fa0 R15: 00007fffb992b948 [ 895.946399][T28831] [ 896.107614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 896.456882][T28830] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 896.574861][T28841] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 896.616400][T28834] ip6gretap0: entered promiscuous mode [ 896.851227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 896.964559][T28853] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6928'. [ 897.069423][T28856] Bluetooth: MGMT ver 1.23 [ 897.081494][T28857] tap0: tun_chr_ioctl cmd 2148553947 [ 897.151450][T28856] tap0: tun_chr_ioctl cmd 2148553947 [ 897.241137][T28862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6932'. [ 898.468469][T28913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.671026][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6954'. [ 898.745243][T28918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6952'. [ 898.929073][T28922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6955'. [ 898.938008][T28922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6955'. [ 898.947603][T28922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6955'. [ 899.183524][T28922] team0: Port device team_slave_0 removed [ 899.707645][T28954] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6969'. [ 899.766386][T28954] netlink: 'syz.5.6969': attribute type 10 has an invalid length. [ 899.794288][T28954] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.804203][T28954] bond0: (slave team0): Enslaving as an active interface with an up link [ 900.768054][T28995] syzkaller0: entered promiscuous mode [ 900.773612][T28995] syzkaller0: entered allmulticast mode [ 900.782911][T28995] tipc: Started in network mode [ 900.787859][T28995] tipc: Node identity 7eb4b300c1ef, cluster identity 4711 [ 900.835064][T28995] tipc: Enabled bearer , priority 0 [ 900.843845][T28993] tipc: Resetting bearer [ 900.877317][T28987] __nla_validate_parse: 1 callbacks suppressed [ 900.877343][T28987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6979'. [ 900.894234][T28993] tipc: Disabling bearer [ 901.058961][T29005] netlink: 'syz.2.6989': attribute type 1 has an invalid length. [ 901.121005][T29005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 901.169060][T29008] vlan4: entered promiscuous mode [ 901.176370][T29008] bond2: entered promiscuous mode [ 901.182171][T29008] vlan4: entered allmulticast mode [ 901.187642][T29008] bond2: entered allmulticast mode [ 901.232610][T29005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6989'. [ 901.329574][T29005] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 901.446786][T29025] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 901.463180][T29005] bond2: (slave batadv1): making interface the new active one [ 901.509443][T29005] batadv1: entered promiscuous mode [ 901.538404][T29005] batadv1: entered allmulticast mode [ 901.570956][T29005] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 902.099366][T29057] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7001'. [ 902.348161][T29070] block nbd3: Unsupported socket: should be TCP or UNIX. [ 902.855059][ T50] Bluetooth: hci0: link tx timeout [ 902.855855][T29103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7006'. [ 902.867550][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 903.208418][T29113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7017'. [ 903.390769][T29115] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7018'. [ 903.428464][T29117] netlink: 'syz.6.7019': attribute type 1 has an invalid length. [ 903.775051][T29134] netlink: 'syz.6.7025': attribute type 1 has an invalid length. [ 903.820421][T29134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 904.055046][T29145] IPv6: NLM_F_REPLACE set, but no existing node found! [ 904.078603][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7025'. [ 904.087811][T29134] netlink: 'syz.6.7025': attribute type 26 has an invalid length. [ 904.109257][T29146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7027'. [ 904.119445][T29145] IPv6: NLM_F_REPLACE set, but no existing node found! [ 904.131013][T29134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7025'. [ 904.147171][T29146] geneve0: entered promiscuous mode [ 904.152377][T29146] geneve0: left promiscuous mode [ 904.176816][T29150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7028'. [ 904.224357][T29134] netlink: 'syz.6.7025': attribute type 26 has an invalid length. [ 904.518056][T29163] FAULT_INJECTION: forcing a failure. [ 904.518056][T29163] name failslab, interval 1, probability 0, space 0, times 0 [ 904.561823][T29163] CPU: 1 UID: 0 PID: 29163 Comm: syz.5.7034 Not tainted syzkaller #0 PREEMPT(full) [ 904.561850][T29163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.561861][T29163] Call Trace: [ 904.561869][T29163] [ 904.561877][T29163] dump_stack_lvl+0xe8/0x150 [ 904.561908][T29163] should_fail_ex+0x40c/0x560 [ 904.561943][T29163] should_failslab+0xa8/0x100 [ 904.561963][T29163] __kmalloc_cache_noprof+0x88/0x660 [ 904.561991][T29163] ? nfnetlink_rcv+0x1021/0x28c0 [ 904.562120][T29163] nfnetlink_rcv+0x1021/0x28c0 [ 904.562186][T29163] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 904.562229][T29163] ? ref_tracker_free+0x689/0x830 [ 904.562285][T29163] ? skb_clone+0x246/0x3a0 [ 904.562308][T29163] ? __netlink_deliver_tap+0x811/0x860 [ 904.562335][T29163] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.562354][T29163] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.562378][T29163] netlink_unicast+0x7bb/0x940 [ 904.562418][T29163] netlink_sendmsg+0x813/0xb40 [ 904.562445][T29163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.562469][T29163] ? aa_sock_msg_perm+0xf1/0x1b0 [ 904.562502][T29163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 904.562531][T29163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.562558][T29163] ____sys_sendmsg+0x9b9/0xa20 [ 904.562582][T29163] ? __might_fault+0xaf/0x130 [ 904.562619][T29163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 904.562654][T29163] ? import_iovec+0x73/0xa0 [ 904.562684][T29163] ___sys_sendmsg+0x2a5/0x360 [ 904.562706][T29163] ? __lock_acquire+0x683/0x2cd0 [ 904.562736][T29163] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.562801][T29163] ? __fget_files+0x2a/0x420 [ 904.562829][T29163] ? __fget_files+0x3a2/0x420 [ 904.562868][T29163] __x64_sys_sendmsg+0x1bd/0x2a0 [ 904.562896][T29163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 904.562932][T29163] ? __pfx_ksys_write+0x10/0x10 [ 904.562975][T29163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.563000][T29163] do_syscall_64+0x174/0x580 [ 904.563026][T29163] ? trace_irq_disable+0x3b/0x140 [ 904.563059][T29163] ? clear_bhb_loop+0x40/0x90 [ 904.563087][T29163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.563110][T29163] RIP: 0033:0x7fa58639ce59 [ 904.563133][T29163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.563152][T29163] RSP: 002b:00007fa5845ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.563185][T29163] RAX: ffffffffffffffda RBX: 00007fa586615fa0 RCX: 00007fa58639ce59 [ 904.563202][T29163] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 904.563216][T29163] RBP: 00007fa5845ee090 R08: 0000000000000000 R09: 0000000000000000 [ 904.563231][T29163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.563244][T29163] R13: 00007fa586616038 R14: 00007fa586615fa0 R15: 00007fffb992b948 [ 904.563282][T29163] [ 904.986615][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 905.193681][T29176] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 905.231990][T29176] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.452949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 905.938685][T29191] netlink: 'syz.3.7043': attribute type 1 has an invalid length. [ 906.005990][T29191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 906.092949][T29199] netlink: 'syz.5.7045': attribute type 1 has an invalid length. [ 906.110537][T29199] netlink: 'syz.5.7045': attribute type 1 has an invalid length. [ 906.122225][T29199] __nla_validate_parse: 3 callbacks suppressed [ 906.122243][T29199] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.7045'. [ 906.417478][T29191] netlink: 'syz.3.7043': attribute type 4 has an invalid length. [ 906.866450][T29218] netlink: 'syz.6.7049': attribute type 1 has an invalid length. [ 907.104893][T29215] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7049'. [ 907.352915][T29234] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 907.361074][T29234] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 907.364629][T29223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 907.390267][T29223] bond2: (slave bond3): making interface the new active one [ 907.431794][T29223] bond2: (slave bond3): Enslaving as an active interface with an up link [ 907.442027][T29215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.216753][T29256] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7058'. [ 908.415730][T29258] FAULT_INJECTION: forcing a failure. [ 908.415730][T29258] name failslab, interval 1, probability 0, space 0, times 0 [ 908.428669][T29258] CPU: 1 UID: 0 PID: 29258 Comm: syz.6.7059 Not tainted syzkaller #0 PREEMPT(full) [ 908.428698][T29258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 908.428713][T29258] Call Trace: [ 908.428722][T29258] [ 908.428732][T29258] dump_stack_lvl+0xe8/0x150 [ 908.428765][T29258] should_fail_ex+0x40c/0x560 [ 908.428807][T29258] should_failslab+0xa8/0x100 [ 908.428831][T29258] __kvmalloc_node_noprof+0x16e/0x890 [ 908.428864][T29258] ? nla_strdup+0xb8/0x140 [ 908.428889][T29258] ? nf_tables_newchain+0x1c9a/0x28b0 [ 908.429064][T29258] nf_tables_newchain+0x1c9a/0x28b0 [ 908.429116][T29258] ? __pfx_nf_tables_newchain+0x10/0x10 [ 908.429182][T29258] ? nfnl_pernet+0x23/0x240 [ 908.429218][T29258] ? nfnl_pernet+0x23/0x240 [ 908.429263][T29258] ? __nla_parse+0x40/0x60 [ 908.429294][T29258] nfnetlink_rcv+0x1288/0x28c0 [ 908.429377][T29258] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 908.429431][T29258] ? ref_tracker_free+0x689/0x830 [ 908.429484][T29258] ? skb_clone+0x246/0x3a0 [ 908.429514][T29258] ? __netlink_deliver_tap+0x811/0x860 [ 908.429548][T29258] ? netlink_deliver_tap+0x2e/0x1b0 [ 908.429572][T29258] ? netlink_deliver_tap+0x2e/0x1b0 [ 908.429603][T29258] netlink_unicast+0x7bb/0x940 [ 908.429651][T29258] netlink_sendmsg+0x813/0xb40 [ 908.429691][T29258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.429721][T29258] ? aa_sock_msg_perm+0xf1/0x1b0 [ 908.429756][T29258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 908.429785][T29258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.429812][T29258] ____sys_sendmsg+0x9b9/0xa20 [ 908.429837][T29258] ? __might_fault+0xaf/0x130 [ 908.429873][T29258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.429908][T29258] ? import_iovec+0x73/0xa0 [ 908.429939][T29258] ___sys_sendmsg+0x2a5/0x360 [ 908.429961][T29258] ? __lock_acquire+0x683/0x2cd0 [ 908.429990][T29258] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.430057][T29258] ? __fget_files+0x2a/0x420 [ 908.430083][T29258] ? __fget_files+0x3a2/0x420 [ 908.430123][T29258] __x64_sys_sendmsg+0x1bd/0x2a0 [ 908.430151][T29258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.430188][T29258] ? __pfx_ksys_write+0x10/0x10 [ 908.430238][T29258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.430263][T29258] do_syscall_64+0x174/0x580 [ 908.430289][T29258] ? trace_irq_disable+0x3b/0x140 [ 908.430322][T29258] ? clear_bhb_loop+0x40/0x90 [ 908.430350][T29258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.430379][T29258] RIP: 0033:0x7f07b479ce59 [ 908.430401][T29258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.430420][T29258] RSP: 002b:00007f07b5602028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.430444][T29258] RAX: ffffffffffffffda RBX: 00007f07b4a15fa0 RCX: 00007f07b479ce59 [ 908.430461][T29258] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 908.430475][T29258] RBP: 00007f07b5602090 R08: 0000000000000000 R09: 0000000000000000 [ 908.430489][T29258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.430503][T29258] R13: 00007f07b4a16038 R14: 00007f07b4a15fa0 R15: 00007ffe189859f8 [ 908.430539][T29258] [ 908.890815][T29155] Set syz1 is full, maxelem 65536 reached [ 909.055401][T29264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7061'. [ 909.202679][ T50] block nbd3: Receive control failed (result -1) [ 909.441951][T29284] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7069'. [ 910.063066][T29310] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7080'. [ 910.510643][T29331] x_tables: duplicate underflow at hook 3 [ 910.632501][T29339] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7091'. [ 910.652559][T29337] syzkaller0: entered promiscuous mode [ 910.652586][T29337] syzkaller0: entered allmulticast mode [ 910.769442][T29348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7094'. [ 910.782562][T29348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7094'. [ 910.792188][T29341] syzkaller0: entered promiscuous mode [ 910.797706][T29341] syzkaller0: entered allmulticast mode [ 910.811222][T29348] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7094'. [ 911.129872][T29369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.183237][T29369] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7100'. [ 911.387364][T29380] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7105'. [ 911.717998][T29397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7109'. [ 912.059775][T29414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7117'. [ 912.114257][T29421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7118'. [ 912.378977][T29432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.629184][T29439] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7122'. [ 912.729497][T29445] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.7124'. [ 913.239189][T29468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7129'. [ 913.572255][T29478] xt_hashlimit: size too large, truncated to 1048576 [ 913.617040][T29483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7134'. [ 913.716321][T29487] [ 913.718720][T29487] ====================================================== [ 913.725794][T29487] WARNING: possible circular locking dependency detected [ 913.732940][T29487] syzkaller #0 Not tainted [ 913.737398][T29487] ------------------------------------------------------ [ 913.744550][T29487] syz.6.7132/29487 is trying to acquire lock: [ 913.750632][T29487] ffffffff8ea80d80 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 913.759971][T29487] [ 913.759971][T29487] but task is already holding lock: [ 913.767368][T29487] ffff888027f8e538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 913.776923][T29487] [ 913.776923][T29487] which lock already depends on the new lock. [ 913.776923][T29487] [ 913.787348][T29487] [ 913.787348][T29487] the existing dependency chain (in reverse order) is: [ 913.796473][T29487] [ 913.796473][T29487] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 913.804217][T29487] __might_fault+0xcb/0x130 [ 913.809278][T29487] _copy_from_user+0x28/0xb0 [ 913.814415][T29487] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 913.820989][T29487] ip_generic_getfrag+0x149/0x2d0 [ 913.826619][T29487] __ip6_append_data+0x3aef/0x4080 [ 913.832359][T29487] ip6_append_data+0x108/0x270 [ 913.837711][T29487] rawv6_sendmsg+0x1298/0x18c0 [ 913.843128][T29487] ____sys_sendmsg+0x853/0xa20 [ 913.848441][T29487] ___sys_sendmsg+0x2a5/0x360 [ 913.853676][T29487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 913.859154][T29487] do_syscall_64+0x174/0x580 [ 913.864288][T29487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.870733][T29487] [ 913.870733][T29487] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 913.878498][T29487] lock_sock_nested+0x41/0x100 [ 913.883900][T29487] inet_shutdown+0x6a/0x390 [ 913.889064][T29487] nbd_mark_nsock_dead+0x2cb/0x550 [ 913.894828][T29487] recv_work+0x1cef/0x1e10 [ 913.899805][T29487] process_scheduled_works+0xa8e/0x14e0 [ 913.905917][T29487] worker_thread+0xa47/0xfb0 [ 913.911079][T29487] kthread+0x389/0x470 [ 913.915693][T29487] ret_from_fork+0x514/0xb70 [ 913.920855][T29487] ret_from_fork_asm+0x1a/0x30 [ 913.926163][T29487] [ 913.926163][T29487] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 913.933857][T29487] __mutex_lock+0x19d/0x1590 [ 913.938997][T29487] nbd_queue_rq+0x373/0x1150 [ 913.944127][T29487] blk_mq_dispatch_rq_list+0x499/0x1990 [ 913.950391][T29487] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 913.957293][T29487] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 913.963809][T29487] blk_mq_run_hw_queue+0x348/0x4f0 [ 913.969550][T29487] blk_mq_dispatch_list+0xd11/0xe10 [ 913.975301][T29487] blk_mq_flush_plug_list+0x45f/0x540 [ 913.981220][T29487] __blk_flush_plug+0x3ed/0x4d0 [ 913.986659][T29487] __submit_bio+0x465/0x560 [ 913.991705][T29487] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 913.997912][T29487] block_read_full_folio+0x599/0x830 [ 914.003765][T29487] filemap_read_folio+0x12c/0x3a0 [ 914.009375][T29487] do_read_cache_folio+0x354/0x590 [ 914.015048][T29487] read_part_sector+0xb6/0x2b0 [ 914.020432][T29487] adfspart_check_ICS+0xb1/0x960 [ 914.025914][T29487] bdev_disk_changed+0x82b/0x1780 [ 914.031489][T29487] blkdev_get_whole+0x372/0x510 [ 914.036942][T29487] bdev_open+0x324/0xd70 [ 914.041836][T29487] blkdev_open+0x461/0x600 [ 914.046826][T29487] do_dentry_open+0x816/0x1380 [ 914.052142][T29487] vfs_open+0x3b/0x340 [ 914.056770][T29487] path_openat+0x2e3b/0x3890 [ 914.061924][T29487] do_file_open+0x23e/0x4a0 [ 914.066977][T29487] do_sys_openat2+0x113/0x200 [ 914.072373][T29487] __x64_sys_openat+0x138/0x170 [ 914.077768][T29487] do_syscall_64+0x174/0x580 [ 914.082936][T29487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.089368][T29487] [ 914.089368][T29487] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 914.096603][T29487] __mutex_lock+0x19d/0x1590 [ 914.101740][T29487] nbd_queue_rq+0xc1/0x1150 [ 914.106797][T29487] blk_mq_dispatch_rq_list+0x499/0x1990 [ 914.113023][T29487] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 914.119928][T29487] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 914.126492][T29487] blk_mq_run_hw_queue+0x348/0x4f0 [ 914.132161][T29487] blk_mq_dispatch_list+0xd11/0xe10 [ 914.137914][T29487] blk_mq_flush_plug_list+0x45f/0x540 [ 914.143928][T29487] __blk_flush_plug+0x3ed/0x4d0 [ 914.149334][T29487] __submit_bio+0x465/0x560 [ 914.154387][T29487] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 914.160561][T29487] block_read_full_folio+0x599/0x830 [ 914.166446][T29487] filemap_read_folio+0x12c/0x3a0 [ 914.172036][T29487] do_read_cache_folio+0x354/0x590 [ 914.177702][T29487] read_part_sector+0xb6/0x2b0 [ 914.183017][T29487] adfspart_check_ICS+0xb1/0x960 [ 914.188503][T29487] bdev_disk_changed+0x82b/0x1780 [ 914.194073][T29487] blkdev_get_whole+0x372/0x510 [ 914.199468][T29487] bdev_open+0x324/0xd70 [ 914.204248][T29487] blkdev_open+0x461/0x600 [ 914.209293][T29487] do_dentry_open+0x816/0x1380 [ 914.214596][T29487] vfs_open+0x3b/0x340 [ 914.219210][T29487] path_openat+0x2e3b/0x3890 [ 914.224350][T29487] do_file_open+0x23e/0x4a0 [ 914.229405][T29487] do_sys_openat2+0x113/0x200 [ 914.234627][T29487] __x64_sys_openat+0x138/0x170 [ 914.240023][T29487] do_syscall_64+0x174/0x580 [ 914.245173][T29487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.251614][T29487] [ 914.251614][T29487] -> #3 (set->srcu){.+.+}-{0:0}: [ 914.258785][T29487] __synchronize_srcu+0xc9/0x2f0 [ 914.264276][T29487] elevator_switch+0x1e8/0x7b0 [ 914.269659][T29487] elevator_change+0x2fa/0x480 [ 914.275000][T29487] elevator_set_default+0x375/0x440 [ 914.280741][T29487] blk_register_queue+0x3f3/0x4e0 [ 914.286304][T29487] __add_disk+0x6cb/0xe30 [ 914.291188][T29487] add_disk_fwnode+0xfb/0x4b0 [ 914.296429][T29487] nbd_dev_add+0x733/0xb60 [ 914.301406][T29487] nbd_init+0x15f/0x1e0 [ 914.306235][T29487] do_one_initcall+0x250/0x870 [ 914.311585][T29487] do_initcall_level+0x10a/0x1a0 [ 914.317094][T29487] do_initcalls+0x59/0xa0 [ 914.321961][T29487] kernel_init_freeable+0x29d/0x3e0 [ 914.327699][T29487] kernel_init+0x1d/0x1d0 [ 914.332596][T29487] ret_from_fork+0x514/0xb70 [ 914.337723][T29487] ret_from_fork_asm+0x1a/0x30 [ 914.343030][T29487] [ 914.343030][T29487] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 914.350875][T29487] __mutex_lock+0x19d/0x1590 [ 914.356010][T29487] elevator_change+0x1af/0x480 [ 914.361326][T29487] elevator_set_none+0xb5/0x140 [ 914.366726][T29487] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 914.373088][T29487] nbd_start_device+0x189/0xb30 [ 914.378498][T29487] nbd_genl_connect+0x1597/0x1c10 [ 914.384077][T29487] genl_family_rcv_msg_doit+0x233/0x340 [ 914.390170][T29487] genl_rcv_msg+0x614/0x7a0 [ 914.395258][T29487] netlink_rcv_skb+0x226/0x4a0 [ 914.400582][T29487] genl_rcv+0x28/0x40 [ 914.405106][T29487] netlink_unicast+0x7bb/0x940 [ 914.410418][T29487] netlink_sendmsg+0x813/0xb40 [ 914.415738][T29487] ____sys_sendmsg+0x9b9/0xa20 [ 914.421068][T29487] ___sys_sendmsg+0x2a5/0x360 [ 914.426299][T29487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 914.431892][T29487] do_syscall_64+0x174/0x580 [ 914.437086][T29487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.443556][T29487] [ 914.443556][T29487] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 914.452256][T29487] blk_alloc_queue+0x544/0x690 [ 914.457661][T29487] __blk_mq_alloc_disk+0x194/0x390 [ 914.463403][T29487] nbd_dev_add+0x494/0xb60 [ 914.468364][T29487] nbd_init+0x15f/0x1e0 [ 914.473157][T29487] do_one_initcall+0x250/0x870 [ 914.478477][T29487] do_initcall_level+0x10a/0x1a0 [ 914.483971][T29487] do_initcalls+0x59/0xa0 [ 914.488855][T29487] kernel_init_freeable+0x29d/0x3e0 [ 914.494603][T29487] kernel_init+0x1d/0x1d0 [ 914.499490][T29487] ret_from_fork+0x514/0xb70 [ 914.504633][T29487] ret_from_fork_asm+0x1a/0x30 [ 914.509946][T29487] [ 914.509946][T29487] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 914.517181][T29487] __lock_acquire+0x1520/0x2cd0 [ 914.522568][T29487] lock_acquire+0x106/0x350 [ 914.527612][T29487] fs_reclaim_acquire+0x71/0x100 [ 914.533105][T29487] prepare_alloc_pages+0x15b/0x650 [ 914.538785][T29487] __alloc_frozen_pages_noprof+0x12f/0x380 [ 914.545170][T29487] alloc_pages_mpol+0x212/0x380 [ 914.550598][T29487] folio_alloc_mpol_noprof+0x39/0x160 [ 914.556548][T29487] shmem_alloc_and_add_folio+0x43e/0xf60 [ 914.562733][T29487] shmem_get_folio_gfp+0x5b2/0x16c0 [ 914.568486][T29487] shmem_fault+0x179/0x390 [ 914.573447][T29487] __do_fault+0x138/0x2a0 [ 914.578323][T29487] do_pte_missing+0x228c/0x3540 [ 914.583727][T29487] handle_mm_fault+0x1b38/0x3080 [ 914.589208][T29487] do_user_addr_fault+0x744/0x1340 [ 914.594861][T29487] exc_page_fault+0x6a/0xc0 [ 914.599951][T29487] asm_exc_page_fault+0x26/0x30 [ 914.605358][T29487] rep_movs_alternative+0x4a/0x90 [ 914.610943][T29487] _copy_from_iter+0x21b/0x1660 [ 914.616338][T29487] sk_msg_memcopy_from_iter+0x35e/0x700 [ 914.622523][T29487] tls_sw_sendmsg+0x13ce/0x2400 [ 914.627982][T29487] __sys_sendto+0x4a3/0x710 [ 914.633053][T29487] __x64_sys_sendto+0xde/0x100 [ 914.638369][T29487] do_syscall_64+0x174/0x580 [ 914.643587][T29487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.650022][T29487] [ 914.650022][T29487] other info that might help us debug this: [ 914.650022][T29487] [ 914.660262][T29487] Chain exists of: [ 914.660262][T29487] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 914.660262][T29487] [ 914.672964][T29487] Possible unsafe locking scenario: [ 914.672964][T29487] [ 914.680525][T29487] CPU0 CPU1 [ 914.685943][T29487] ---- ---- [ 914.691335][T29487] rlock(&mm->mmap_lock); [ 914.695781][T29487] lock(sk_lock-AF_INET6); [ 914.702829][T29487] lock(&mm->mmap_lock); [ 914.709701][T29487] lock(fs_reclaim); [ 914.713808][T29487] [ 914.713808][T29487] *** DEADLOCK *** [ 914.713808][T29487] [ 914.722207][T29487] 3 locks held by syz.6.7132/29487: [ 914.727427][T29487] #0: ffff8880774310e8 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x12e/0x2400 [ 914.737013][T29487] #1: ffff888035aee0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x15e/0x2400 [ 914.746802][T29487] #2: ffff888027f8e538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 914.756758][T29487] [ 914.756758][T29487] stack backtrace: [ 914.762663][T29487] CPU: 1 UID: 0 PID: 29487 Comm: syz.6.7132 Not tainted syzkaller #0 PREEMPT(full) [ 914.762685][T29487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 914.762696][T29487] Call Trace: [ 914.762705][T29487] [ 914.762715][T29487] dump_stack_lvl+0xe8/0x150 [ 914.762738][T29487] print_circular_bug+0x2e1/0x300 [ 914.762771][T29487] check_noncircular+0x12e/0x150 [ 914.762797][T29487] __lock_acquire+0x1520/0x2cd0 [ 914.762827][T29487] ? prepare_alloc_pages+0x15b/0x650 [ 914.762856][T29487] lock_acquire+0x106/0x350 [ 914.762873][T29487] ? prepare_alloc_pages+0x15b/0x650 [ 914.762902][T29487] ? pick_next_task_fair+0x17c/0x1910 [ 914.762929][T29487] fs_reclaim_acquire+0x71/0x100 [ 914.762955][T29487] ? prepare_alloc_pages+0x15b/0x650 [ 914.762982][T29487] prepare_alloc_pages+0x15b/0x650 [ 914.763013][T29487] __alloc_frozen_pages_noprof+0x12f/0x380 [ 914.763044][T29487] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 914.763075][T29487] ? __pfx_policy_nodemask+0x10/0x10 [ 914.763104][T29487] ? rcu_is_watching+0x15/0xb0 [ 914.763126][T29487] ? trace_sched_exit_tp+0x3a/0x130 [ 914.763157][T29487] alloc_pages_mpol+0x212/0x380 [ 914.763176][T29487] folio_alloc_mpol_noprof+0x39/0x160 [ 914.763207][T29487] shmem_alloc_and_add_folio+0x43e/0xf60 [ 914.763232][T29487] ? filemap_get_entry+0xcd/0x3f0 [ 914.763262][T29487] ? __pfx_filemap_get_entry+0x10/0x10 [ 914.763286][T29487] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 914.763312][T29487] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 914.763336][T29487] shmem_get_folio_gfp+0x5b2/0x16c0 [ 914.763366][T29487] shmem_fault+0x179/0x390 [ 914.763393][T29487] __do_fault+0x138/0x2a0 [ 914.763420][T29487] ? do_pte_missing+0x1403/0x3540 [ 914.763446][T29487] do_pte_missing+0x228c/0x3540 [ 914.763478][T29487] ? handle_mm_fault+0xec/0x3080 [ 914.763502][T29487] handle_mm_fault+0x1b38/0x3080 [ 914.763530][T29487] ? handle_mm_fault+0xec/0x3080 [ 914.763556][T29487] ? __pfx_handle_mm_fault+0x10/0x10 [ 914.763584][T29487] ? __lock_acquire+0x683/0x2cd0 [ 914.763604][T29487] ? lock_mm_and_find_vma+0xa7/0x340 [ 914.763631][T29487] do_user_addr_fault+0x744/0x1340 [ 914.763658][T29487] exc_page_fault+0x6a/0xc0 [ 914.763680][T29487] asm_exc_page_fault+0x26/0x30 [ 914.763699][T29487] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 914.763727][T29487] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 914.763745][T29487] RSP: 0018:ffffc90004e977f8 EFLAGS: 00050206 [ 914.763767][T29487] RAX: 00007ffffffff001 RBX: ffff8880a7e3800d RCX: 0000000000003000 [ 914.763781][T29487] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffff8880a7e3900d [ 914.763795][T29487] RBP: ffffc90004e97958 R08: ffff8880a7e3c00c R09: 1ffff11014fc7801 [ 914.763809][T29487] R10: dffffc0000000000 R11: ffffed1014fc7802 R12: ffffc90004e97db8 [ 914.763824][T29487] R13: 0000200000000000 R14: 0000000000004000 R15: 1ffff920009d2fb7 [ 914.763847][T29487] _copy_from_iter+0x21b/0x1660 [ 914.763872][T29487] ? __pfx__copy_from_iter+0x10/0x10 [ 914.763894][T29487] ? sk_msg_clone+0xcec/0xd90 [ 914.763980][T29487] sk_msg_memcopy_from_iter+0x35e/0x700 [ 914.764005][T29487] tls_sw_sendmsg+0x13ce/0x2400 [ 914.764030][T29487] ? futex_unqueue+0x211/0x240 [ 914.764057][T29487] ? __futex_wait+0x1e1/0x400 [ 914.764100][T29487] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 914.764126][T29487] ? __pfx_aa_sk_perm+0x10/0x10 [ 914.764150][T29487] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 914.764181][T29487] ? sock_rps_record_flow+0x19/0x350 [ 914.764211][T29487] ? inet_send_prepare+0x5b/0x260 [ 914.764237][T29487] ? __pfx_inet6_sendmsg+0x10/0x10 [ 914.764258][T29487] ? inet6_sendmsg+0x101/0x120 [ 914.764276][T29487] ? __pfx_inet6_sendmsg+0x10/0x10 [ 914.764295][T29487] __sys_sendto+0x4a3/0x710 [ 914.764326][T29487] ? __pfx___sys_sendto+0x10/0x10 [ 914.764354][T29487] ? do_futex+0x333/0x420 [ 914.764388][T29487] ? rcu_is_watching+0x15/0xb0 [ 914.764412][T29487] __x64_sys_sendto+0xde/0x100 [ 914.764441][T29487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.764460][T29487] do_syscall_64+0x174/0x580 [ 914.764482][T29487] ? trace_irq_disable+0x3b/0x140 [ 914.764509][T29487] ? clear_bhb_loop+0x40/0x90 [ 914.764531][T29487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.764549][T29487] RIP: 0033:0x7f07b479ce59 [ 914.764566][T29487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.764581][T29487] RSP: 002b:00007f07b55c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 914.764599][T29487] RAX: ffffffffffffffda RBX: 00007f07b4a16180 RCX: 00007f07b479ce59 [ 914.764613][T29487] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000009 [ 914.764625][T29487] RBP: 00007f07b4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 914.764637][T29487] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 914.764648][T29487] R13: 00007f07b4a16218 R14: 00007f07b4a16180 R15: 00007ffe189859f8 [ 914.764671][T29487] [ 915.262532][ T9323] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1