last executing test programs: 2.860257088s ago: executing program 4 (id=6269): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmmsg(r0, &(0x7f0000008640)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r4], 0x44}}, 0x2000800) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000100)=@ctrl_frame=@cf_end={{}, {}, @broadcast}, 0x10) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0xfffd, 0xa, 0x2}, {@in=@multicast1, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.846378326s ago: executing program 1 (id=6270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xf9}, 0x92f5e}, 0x6d) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4000001) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [{{0x254, 0x1, {{0x6, 0x82}, 0x4, 0x0, 0x2, 0x805, 0x2, 'syz0\x00', "daed2cfebcf2d277bd118b8bfce1e6604bafdc3e54b40a1e4f23baf237354c13", "040080007918ab366c4891388a130a0100dad900", [{0x3, 0x0, {0x0, 0xeb}}, {0xf29, 0x5, {0x0, 0x2}}, {0x7, 0x2, {0x0, 0x400}}, {0x5, 0x8000, {0x0, 0x5}}, {0x6, 0x0, {0x3, 0xfffffffe}}, {0x6, 0x7f, {0x3, 0x7}}, {0x800, 0x8, {0x2, 0x5}}, {0x800, 0xe, {0x1, 0x10001}}, {0x9, 0x4cd, {0x1, 0x80000000}}, {0x80, 0x4, {0x1, 0x5}}, {0x9, 0x0, {0x0, 0x6}}, {0x3, 0x6, {0x3, 0x1}}, {0x101, 0x6, {0x0, 0x7}}, {0x5, 0x100, {0x2, 0x3}}, {0xf, 0x401, {0x3, 0x100}}, {0x6, 0x1000, {0x0, 0xc}}, {0x7, 0xfffa, {0x1, 0x7}}, {0x6, 0x4, {0x1, 0x1}}, {0xff, 0x3, {0x3}}, {0xfff, 0x7, {0x4, 0x2}}, {0x9, 0x2, {0x0, 0x9}}, {0x5, 0x0, {0x0, 0x2}}, {0xfffe, 0x2, {0x3}}, {0x3, 0xf80, {0x0, 0x2}}, {0x4e9c, 0x9, {0x2, 0x1000}}, {0x5, 0x5, {0x1, 0x3}}, {0x0, 0xf, {0x1}}, {0x28bb, 0x7, {0x0, 0x6}}, {0x3ff, 0x2, {0x2, 0x2}}, {0x6, 0x1, {0x1, 0xfffffffc}}, {0x4, 0xcd, {0x3, 0xb4}}, {0x12fc, 0x6, {0x1, 0x5}}, {0x3, 0x2, {0x3, 0xdb}}, {0x1595, 0xb6f3, {0x3, 0x80000000}}, {0x9, 0x7590, {0x2, 0x401}}, {0x4e, 0x5364, {0x0, 0x80000001}}, {0xc, 0x8, {0x2, 0x8ea0}}, {0xc, 0x6, {0x2, 0xf}}, {0x2, 0x32, {0x1, 0x80000000}}, {0x99, 0x8, {0x2, 0xa}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0xc1}, 0x8040) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}}, 0x0) 2.595695642s ago: executing program 1 (id=6273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', @ifru_settings={0x7, 0xccd, @sync=0x0}}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x0, 0x1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000002c0)=0x8, 0x4) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="ffff0086ffff00000805032f2700000000"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x25, 0x800, 0x1, 0x2, 0x8}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 2.311668257s ago: executing program 2 (id=6274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000001580)={0x1c14, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x44}}}}, [@NL80211_ATTR_IE={0xab, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x57}}, @preq={0x82, 0x67, {{0x1, 0x0, 0x1}, 0x6, 0x9, 0x4, @device_b, 0x3, @void, 0x0, 0xb73c, 0x7, [{{0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x100}, {{0x1}, @broadcast, 0x4}, {{}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0x735}, {{0x1, 0x0, 0x1}, @device_a, 0xcb4a}, {{0x1, 0x0, 0x1}, @device_a, 0x80000000}]}}, @challenge={0x10, 0x1, 0x52}, @measure_req={0x26, 0x33, {0x4, 0x46, 0x8, "c8c6587461a1fd2addcdb46eb2f081fd4ef252ca7191ce106be44a869f16b4ec4c1d42ebbb50753db7ea52f1d34fd506"}}]}, @NL80211_ATTR_BEACON_HEAD={0x46d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @from_mac=@device_b, {0x3, 0x1}, @value=@ver_80211n={0x0, 0x3d55, 0x1, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x8, @random=0xffff, 0x5046, @void, @val={0x1, 0x1, [{0x1, 0x1}]}, @val={0x3, 0x1, 0x84}, @void, @val={0x6, 0x2, 0xfef2}, @val={0x5, 0xce, {0xfe, 0xab, 0x4, "0b6ced841152c49bac97d884c403a4ac532d95dc264036dd8606de1588a4720f85d384a98e89da023aa838579472449c47b93d37bbcc5298a29cd6a7a48ecb79c403125e1537b5897932504f3a046fbaace0b148835a98239131d27592923b5c4dec928e31b2dd5f2246eb87cc0e2af4d671a7fcf9865a65824710e4dde287d4c945988616db88f7490c88b32f0d15d874639df8e4b8409c33f46c5127e106914ab22de4b3c827906160904d9b7e504e9190c46dc60b871220cf824064e216ddf3482d2e80273d864849b1"}}, @val={0x25, 0x3, {0x1, 0x9d, 0x2}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x2, 0x68, 0x9}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x40}}, @void, [{0xdd, 0xd4, "e0370a7619f2fd9c2e7a487c68731ed12b974cfde695cfe40bbaa919e32924be1f4f0010ed12aa58a973d5883e44cdf950cac9912a37511719a2240f89df7aa6f15630320ee67af81be47720907f294ecb9d8b8fa1873f22fa05a555bdc5b56f1d60090c57452ca7a25bfd7a6b3e2435177f56673348dc0ab26736da81e35dde3fee49c1e060a12f5210922729d5bbce5da7ced12d6985e418d21811d61e4fc40e189ccaa9c5ceace0fc1664761df3909dded709fe8c52ce9bef903d2452121206cd1b5e3526e525dd4272b918f2076beecfd6cf"}, {0xdd, 0x25, "26277b25b15230d35cad9bd896eb2672e139d221fbcf597504edb1d105861b4d4018df85e2"}, {0xdd, 0xe2, "7921eb1a4a5d0fee0b6f0228459ecc30fd86aa75060ae3f1d5670393eab0652096311ae3586ad419e037cf5656b1bbaee9c1c3fb543d83efd098df505b8f1c59559ec3da4f64afe0e0a1f3a55eb7c1360f1935f378eb4b1d36c46d7d19bd6626cddc97174f93b4e65459af8f1e880e15ef748c1ab5ed088db0013a7f8eab3eb4b6c752dca354c5d60ebd8fc759206c6b2aec6ae22032875d9ab6ac76146f3aba98b1e47b9716c5ef9cc0a0c9621d5ed27fd223f1112d47beb26420994a59e26e1b72a46f21bb2c710696c380f29db59fae90561caceef994ab31655593889a326b4e"}, {0xdd, 0xfd, "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"}, {0xdd, 0x66, "0c8f29e6bbc38d7f68436990121cd6da329d6a24de6676d88c4ac85f6c74e17548f9a0c9250921b25406254306168148f7f5c44c64c45de787864a04fa3865a1a78640315738c82dae13e5212571eaeb141636175560ca54a3823a5a42c4416cb16a64968d12"}]}}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE_PROBE_RESP={0xb, 0x7f, [@ibss={0x6, 0x2, 0x8}, @dsss={0x3, 0x1, 0x7c}]}, @NL80211_ATTR_FTM_RESPONDER={0x324, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xdc, 0x2, "bbf7591635c2bc2ab6f05cbe4f4f44f89b4bad726a6c4881ffd2fe42d0c0655a7b2ff7958ef83bc9da8bb768f916743152da2ccfd6c85be048b5bb857de35640561270ab2c927395893d24e345e6fc468a6db965651c4d8c07d205ab429a31857e953dc3427cfa911e50e40bf09a8df147423c35e0d8766c606740a7f4b23426be6d4125804a80fa4a836929e09332d7fcb923dc1b758eb4eda0223a2bc5a7c994365ec99a835d850fbd06ab05eabf537b95c32297e775373d7568fb5a0fe5b7fb9c2635db5a16e4539a3c317197adcc51c8e17f3326d23b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x80, 0x3, "57cec558f4d612720e486b609a935653ca4996e12956789b35ac0057e214352c6b920c43109b1b4b371ae1e253e1593381d3e4342aaeb25055f3b5c6df35fa6952b6a779f8545e15edd278822fb932593e9013b0653104e7d3521a9b808040aec82d2ad7fe0c4dcc324abfd06a2674100081696fc187f3503f7f0072"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x49, 0x3, "63a5cd2b627203b6190259b6b01a2fc65d4bc4c07a41b672bc7d4706443058d651855f5a809ea59de77101f804e2a80d60386b9442a81358e9acd444880cdc91bb2ff16804"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe0, 0x3, "6aac66ba6786c3dbf9ad48bc60f417a1d6ac8b6927ade68cf63006d2b67212f1e3c423ed34242c359431729150fcac6e9fdb4400ebf32f5a0f20534386538390650164b95f747c9d9d066c5d8f1d7ea3f51b2e79fa8a5319928e149654b1d8c26723843992fcae82f8194bd4243a4107ccfdf78a5a34a7592ab3539723565a84e3e6c54745dd8b1442ea891d45453585b89d8d299e47d34098d543d8e70dfa4a8c648e938be8bb79c286f64aaf7bf66f5c3175c0d84b6c2d80d810781310b11d70ac3cb720a0ded4c4c0f16b3f7ff48e111fa930a4f8b025f08f5109"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "c113af17a797cf06ad31183270ae26db49c8a454eba624faa8c560e4f17ed9efcaa60e163ac42f2b46caa407d2f5c0759c014759cd06182e8d2133cd557fe17da13e9e4e6c53cd1bb05152b0bd965b0ca4b61f0c20e658714de72005ea4d90d90609a8b48866b8d9bbd7a00c63419710064f78b3f01160bf9e54d2c75bf30cf0763e5eb185ef40c86a6fac38"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1a9, 0x7f, [@ht={0x2d, 0x1a, {0x2000, 0x0, 0x2, 0x0, {0x4000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0xb2f0, 0x9}}, @tim={0x5, 0xc9, {0x5, 0x46, 0x80, "89334d29df95f5b1b48e3af6c5d83f929a900f916058f9d1228823fddd1e3c5c12d59d2900d2143181165957f9fe709832e3d496709c998627524c30c53777ac565bead0aa100ab3e46527a22efde4a66189a6dba4625f921d8d8159e5ffddb0155bc311d5789023adc6d46cc14e38c3b2b59a3db5b2175877b5280084a5d0cdd92ed59db598c5d7a6f06b0783318c46e8cdedfeca6ed53c8ee9bfa97cff49ea6831a098599dec443e7c20469a20e2bf2ae7382286c8401393e2a8d6099e6e53cddb8e6bef6d"}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x8}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x13, {0x20b, "7dc16a6c1912", @long="c5f679c4130b1d7517522e9cbafea0cc"}}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x69, {0xd9, 0x1, 0x88, "088e14495649e705b4a82a5da9d94728cac6082687cab1e887a825180e6e7dd93572a9500b485b10b80e1dd263f653e2e319e78525859037bb7dcd819dda80a972d891e4055a0602ff9cafd1c6e58ac24bb31d9f43c4aeff9cd51bb2d127385f3ca9428a0012"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x50}}, @perr={0x84, 0x15, {0x9, 0x1, [{{0x0, 0x1}, @device_b, 0x7f, @value, 0x20}]}}]}, @NL80211_ATTR_PROBE_RESP={0x837, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x549, 0x91, "fb88867b7aa80b8b2ac6503146e6c8d1d86afb1cb4f50afd047e9b83bcb15af52a06d4a86cc8795a6ac516dcaa8b480c599a9f2843c7307f7d8335fd55b76b13e2930121c41140a681d11b9bc101e02f7db4d11c13d22f58fa4e6a95335273f02b208f7d7a261c8bacb65246ead5c49eb06414d09cf6ead3ebdcb3fc38ff7a8b45d01310dbe9521ed7e288218c2aee880e61c6245692263974da6fd26c0b99e123ce3c6e4840b1ae6f3926b08a20a5a3abb5e6633ab32c293dfd246f2b4f5fda26af1156a16814ce1083ad9c14106d5a82476ae9ad9ba83fbdaa2263ac7bbaf265057ff7388183d233ba784d6733dfd6dab48447b30e72a8d2096a0829781464f8161a49193928b8b515eeca29e2e57fb1fdbcb7524db2dd897b96d2484541c63289bc9cebfe77894684a9d9ac79fa03242fb8faf4df43ac74960f38f4b77f489ace027fa8a2793a8e57d0e6699c43764a10c67a6dad555a312cd789007cad9c79d265efb1a316257677b72304d0b263993f5534725b398793623ca6ee72663e62834f62367d50ad475ed373d7f53fa5f335ec101545b873092d578134f158e51a6f42c9f49e7bc493febcbdbeef4fe7a884ca6923f37f96519c76317a7f1f2d7cb329125c56c35d373e8411b4472fc6b18821cb75c792a10eb518c2b34f62da66e54386d9112419d05c503f55bfb7e7930e81ed1713d68adbd4f015d52c612a9513d9299e1324325c0ef39472d7b8fcdee8ee4233c499c210678ed5eb73c463803b7691ac469e097444f8de8436217f4680ea3bcbe62db6b3844769d7a138f4da79f3b40d033a1c5e025c9cd9bc56eddd0cf7d2468fb416b1dc001cad2e393fffd08b412278388020815d1d6fc84e860775ef1ae5bca01aa312fb74d45ec5dd6a6ee7c2fdebb5a34caa3fe631367fc0d901ac932a67fccd307c5c282a42082139f556b02256ec394424c819821521d59aeb8c559c24f77513fe94f01031e07a083702448f3f7f2b4ca4e260073f1ed0919184c609462aaf3aea3abd102fd27597c498fcb5c7e5698396d7a5eca2d7713b2d099918ff4a99f33f2fbc4aeea0dbb6d07cc92dc9c145c401857b367ad00de07b7613ddcb3d6130807d1ee3d1b2deabef3e90aa4793aa46bd04a3e658ce47aaea25242d55865bb396a8a4593e288785c57823bd4fb861702cd2ae9db77712a95fc1a7c37fac0c26c80b8614ed214e03f856100c6e486a2ca0a72afe93adeb3dbb88de8ed556c2fcb753a663b18e810fc311da185d46e69f4deba7edcf62e90d2268dca140972a395ce2339eb17f1a8edc815435a3a18b250162c6c46eb95332006fc35d77b01d661cadc89630b19aa8ffdb3ef8b2496eedca2199c0c39579b95e6c749fc9c7138e894ad0d36e7d8054e1f3bb4359f3710e0d5d12b250d5c6aa83d5ad426d3bee97db180b974588f2e07ef7fe3893c4de97b0fceeab99d64960803aa0bdac6013e23a3300fa56a84cc1098dd26aa028749fb592326513986367cdbbb3573de8a15f5e80b8f24832352ced70fe35516e56b803d6fd641126bc9506b3903694d993356142a7dbfee10d2582895fbae7b1081b1a5d7d5ecceaff37f23a89d5a53058d1bb75929ec3f62e26b34d35252ddecb07f495d7dc8430d501faffdcc04613fa6be6b7c34925c43d6300d676dfdc5df62c96f8bcf0f49e5c2685aec7e4eaba5368261d0ff4feadb823be41923b96f7d19ec33a1d91e5b7b80f9719c0fa98cded80e93ff6f785a0ffe7a121695f556c14bdcd707b07522e568200741d22402724ed6b368854bb710ebb0034f7032ea780135ff49b20b81a22de6cd393232f09d8dc2ca00d1f8b14df8062c5cadf3cd8adb7c49b3a3f192639de45d097189450625fda72a36138882f28ffc9717b"}, @NL80211_ATTR_FTM_RESPONDER={0x1e0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5e, 0x2, "cab96e63368788fd80eb6296e8c021ec05ecdc8c12cfe059f8da9d95bbdc7822ab0cc2889b96662bf848e2899939404f10ab95ee7582e4d1694f7616d65e5bea6c0ba0184bd77a8aab899262af98ee16050bb59b791ebd2c79a7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x9e, 0x2, "f58ce983be371d0daa1143a1547c96bb352c54e7f30f501ca2a2e9eb74ab9ccf679259f488f16a9dce1f66c67c2172321d417f6c3a6c902cc65a6fad22507dc2aaf77fa6709f010e2d866dbc320455aac1c4cb4d265031fbf70d0ea40e2ac4926fb34b0d9cc0288acbd253c322b9aacc466c9df7a3fec560d0b505ce3eedd76593a74f663601956fa8bc997a1ad10013f00b055e70bdec25f337"}, @NL80211_FTM_RESP_ATTR_LCI={0x10, 0x2, "deb72c3d4751439bb2e2bd9a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc6, 0x3, "5e831293d66bbbc34e4c5dc7b28c8cba0bbcd8c8bbd7cecaf8cdcb166d0007546ce7971bcb9e53e7741262aa29d921b90bafd5968e51a41ca1378e89490cccf802419638acfd003cc1a1bb4e095451050ddde56ae470525cce5df026846281a694049d1bb57bd994107a938e066c60668426a269a1eee098d0109ec1e0c2fc455d60e81dc94622fff567c17cfe3379303cea52f12fda528a97d3aef8c65d9e07edab3d685cf203cbe29342e1cb39947c173373445f25f9a4c632624fbd00286784e9"}]}, @NL80211_ATTR_PROBE_RESP={0x281, 0x91, "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"}]}, 0x1c14}, 0x1, 0x0, 0x0, 0x800}, 0x240488c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000400)=0x200007, 0x4) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0x407f, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000014c0)={0x2, &(0x7f0000000000)=[{0x50, 0x6, 0x8}, {0x6, 0x5, 0xf9, 0x207}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1a0, 0x240, 0xffffffff, 0x0, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000000)=0x4800, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 2.186070373s ago: executing program 2 (id=6276): getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000200)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x8, 0x5ac]}, @SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) 1.99569609s ago: executing program 4 (id=6278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffdfbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) r5 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) (async, rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="ad000000000200009d56812900000800", 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x2c8, 0x4c0, 0x2c8, 0x4c0, 0x0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x8000000, 0x0, {[{{@ipv6={@mcast2, @private0, [], [0xffffff00, 0x0, 0xffffff00, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x3, 0x100, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x14}, [0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {0xff}, 0x2b, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x7400}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@multicast2, 0xb, 0x19, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000e80)={0x0, @broadcast, @private}, &(0x7f0000000ec0)=0xc) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000f00)={'sit0\x00', 0x0, 0xf000, 0x1, 0x400, 0x1, {{0x2a, 0x4, 0x1, 0x4, 0xa8, 0x65, 0x0, 0x5, 0x4, 0x0, @remote, @empty, {[@timestamp={0x44, 0x18, 0x67, 0x0, 0xc, [0x9, 0x0, 0x89, 0x8001, 0x27]}, @timestamp_addr={0x44, 0x34, 0x90, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x19}, 0xa9d}, {@rand_addr=0x64010102, 0x100}, {@empty, 0x1}, {@remote, 0x90}, {@multicast2, 0x5}, {@empty, 0xb}]}, @lsrr={0x83, 0x7, 0xf6, [@private=0xa010101]}, @rr={0x7, 0x23, 0x6f, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @private=0xa010101]}, @rr={0x7, 0x1b, 0xb4, [@empty, @loopback, @empty, @multicast1, @empty, @empty]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001140)={'ip6tnl0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0xbf, 0xea, 0x7fffffff, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8, 0x0, 0x0, 0x2}}) r14 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x314f, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x3, 0x7, 0x13, 0x11, 0xc, 0x6, 0x7f, {0x6, 0x407c, 0x1, 0x4, 0x2b72, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) r16 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r17, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000011c0)=0x14) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f0000002e00)=ANY=[@ANYBLOB="04060000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffff7f38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=r7, @ANYBLOB="5802028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400abaa000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="640102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000180000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r18, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040006000000"], 0x604}, 0x1, 0x0, 0x0, 0x20008800}, 0x24004000) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="bacf08336bdbf5aa19fcf8fa988ec2d53786ff9a9d21098e4f1ba0953116893c2b576f9b0ef8d422273f27e99a1b29ad260a47cc9e6c4374d4f57f8285a48d0d1092bf80b9f9645c9f2a0bbde7c9961a62643c1eec292ce1de6ca867a888ea72c1ccbd9a97af3a7ca6d2f982d37a6bc2acdddb7e855366", @ANYRES16=r4, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 1.992187246s ago: executing program 2 (id=6280): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r1, 0x28) poll(&(0x7f0000000000)=[{r1, 0xd70cedfa20c8ffd4}, {r1, 0x9280}], 0x2, 0x400) shutdown(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000380), &(0x7f00000003c0)=0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x10c, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x3a0af83a) (async) listen(r1, 0x28) (async) poll(&(0x7f0000000000)=[{r1, 0xd70cedfa20c8ffd4}, {r1, 0x9280}], 0x2, 0x400) (async) shutdown(r1, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000380), &(0x7f00000003c0)=0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x10c, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) 1.95220643s ago: executing program 4 (id=6281): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, 0x0, 0x20000840) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140c, 0x101, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42010}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.856567741s ago: executing program 3 (id=6283): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x4, 0xc, 0x800, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c5}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYRESDEC=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x88}, 0x1, 0x0, 0x0, 0x4040004}, 0x1) 1.622204183s ago: executing program 3 (id=6285): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149014006040800", 0x58}], 0x1) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2e00}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0x1}) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r6, 0x40049409, r5) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.62103341s ago: executing program 1 (id=6286): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x29, 0x4, 0x7fff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) 1.619820663s ago: executing program 4 (id=6288): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0x7, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0xffffffffffffff3a}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x1c, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r6, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "c773123f2b3e455ee4e6ea5e09c0f1f3"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2dd18b02ac925853c7e68b0c348ae4c7"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8096c06d043ff89f71b5cb0e62bc4e2a"}]}, 0x5c}}, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000000000008510000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8fbffffb502020008000000b70300000000000085df0000a400000095cbca5687d710de74f50f16d821614c87d55010e9b5cda7a24b2a15010000000000000007ae12befc7288d7150e06f9e18930572aea3c644b05e1add5015aa3634a3569aff850be4239a5aedd720b0619967b5d6ff8e63220d419cb8dcb3bafe19d565eb1f2f1c1f8749ab10d701d82e0dd0ca1293afc00c25959f4f68a0bd30dcf03da82174fffafe32e006cf895c5fe9e41ef888430659b385aec8dc932c668d7ea8b3cb173149700"/265], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="11024d4f5c10d77526e811080008673f"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4020) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "c50beec89e29e806", "999327a652e44846f6f93c5c97035607cf7bdd844cd49c0394dbb311898a661c", "c67466a2", "c0206925142d47da"}, 0x38) 1.319749246s ago: executing program 1 (id=6289): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) unshare(0x22020400) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000280)="763a4fc49eb9d4315d4721313477ad8d92783bc313b8ebc736671490326ed9bcacdbda01d5378500d1232ef7cb053edf4f233b77772edad1b568129ed06215dcbafc4983318678c0e6fbec7579ea6b5e3c8adaaa6c123ce6a2da4c8faa10ab77d7ea761c300878061818eae89ceee84bb6bd34b85bf7fe8f19abd62fd8c29595d0d23c455f8c14eb52fc5cabfe27e951fff23f1e0d90b9ca8256eccc111eddb0847db872155d1fb3f3f2b4f3b90428345d41488a1eb323ade05e825aa607a9", &(0x7f0000000100)=@buf="145a222f39b028ea702b647b32e00a684b4885edf87b1d6ca92fc2c0075a2cce63b84cbfc56dfc75a2950e0767ae28d9f1fea9d17e58469db16ecc02f061fdb2e6f14bc6ed3c80cae01b", 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 1.24991918s ago: executing program 1 (id=6290): socket(0x22, 0x3, 0x1000041) (async) r0 = socket(0x22, 0x3, 0x1000041) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000940)=[{&(0x7f0000000680)="5a6fe0cd8cf806971bc83d06df93cbd0996fdfd9219a4a8da5ddf072147299877677cbc171b939", 0x27}, {&(0x7f0000000c40)="d801fa12ccd4c4ddc3e5d73af39e023e48f0aad8bd514aea05417ada15a9dc535bcd6463fa60320e8399ef636c0d0c2612b81b2eef29c78a453d8ca226adc67ffe107572958f61719fdd63cf9dcdd107a9bc936b92582944f946f8336a66971de01d9d68a89a1f4e8fd7b1ac3bb356b8a7c11f6ac0b0a0808ea84325b62f17b735bad4be9f9700358a7a765d05c229f9193275c16f46df4fda4b68356d7a760814dad454c4a1afcdc594d4546efb336f2c71f2296a9d5c48d86b84ad8acf35cee84fb2499b6b405ab841bf45", 0xcc}, {&(0x7f00000007c0)="7b0a6b62006fd7b3826dec3fcf14bea9a14479681db919cda33197d3481ad298cb691cbc9fcf727289ce6c2aa37105d7f41550df6d56ddc08ca1b2b7f230260c906767f2ab216f87eed7753f82622770df4506ed9a21ed5d4c6bf4caab54505c3e7e0a2ddb73c219ecde8c18a3f103a6358af170ad2b2cb5", 0x78}, {&(0x7f00000006c0)="40a17f88affccc2643b2d1e7af86f98ae58d53d47f6cb9493c4b4e3aafae47486e8d78", 0x23}, {&(0x7f0000000d40)="5087246dde6b544cc72b91b72752f79053dfb09cd39116f1bd5a1ab163a65c732ed4acd5b6b0d0972fe11f1261a77f46db0c6ce467ea1740a0e9dda7640def753b958511fcf30a78a6ded2073a9e196a0fee061b2b6dc3e21dd1737689abcd2ac92cb7e8c4ec3209994fc96c0296d238adbc2392bb0f22cea3ad39aafb7d03ae13129d1be29c30c66c4c6a38c1c26982232a2790cf1e272747e697ab008e2c7d884913c596ddac52b2e64a90680e13eeb69e2997282667ea07c60847226aeb50c637657cc27c5d3d1af8edd1426f1999455d9ef8ac0d31f9c50027623197e196a89f640a35", 0xe5}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000880)="1ef7d5f6bd5cdb96cbe5d3440893eb4c6a722809fd6241335a2e390ac6c74747621cff467ceae044de96cb660793e7a7cb3d62b315c1e1f2879b737c071a84802b5212ac82d8ec20cbd55d55410bc0b85485aa4bf3c2d236722ca806464efda90378a0c1c9a00d5b51f501", 0x6b}], 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r1, &(0x7f0000001e40)="24dda74e57e12764f5e4a767201dde38e8b7a22b9783abc35ac39f27fe42de3f97678089bb0b5415875a0c327e1822f2078bf2da9405d5a7d13f6ab652d6b796b78a69ae1130b0142ea8a2411201098fc0966aee2e095d9a5873bfcef3037c4c6190a6606e5f349c37ed0e5cca2e008260dc58595817420c35edcfce6521730e22a5fc518cb7fd3250d49a386a45d8de37dbd56860336532a8e868bb81d111abb20b0b4a5717020a012b91df77de909d8f0394ca8420654ce73ad376b4215884b0b0ccf33064596d56950c8912126f5c2cc9038b3dbb2b98f6758598f9c92924ff62b33e34b9b01d39ebda0cbd89c7d9cb6ddd", &(0x7f0000001f40)=""/204, 0x4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r4, &(0x7f00000008c0)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r4, &(0x7f00000008c0)}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xc, 0x100}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xff, 'syz0\x00', {0xa750}}}}, {{@ip={@remote, @local, 0xffffffff, 0x0, 'macvtap0\x00', 'netpci0\x00', {}, {0xff}, 0x62, 0x1, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x6, 0x5942a0a598be6c2, 0x5, 0x7], 0x2, 0x6}, {0x2, [0x1, 0x4, 0x0, 0x1, 0x4, 0x2], 0x5, 0x1}}}}, {{@ip={@loopback, @loopback, 0xffffff00, 0x0, 'batadv0\x00', '\x00', {0xff}, {}, 0x73, 0x2, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a0d1"}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x800, 0x1, 0x7bf6, 0x9, 0x7ff, 0xc6, 0x8]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x1, 0x3d, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)={0x2c, r6, 0x1, 0x70bd27, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}]}, 0x2c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0}, 0x20) socket(0x2c, 0x3, 0x0) (async) r11 = socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000002040)={0x8c, r6, 0x400, 0x70bd2c, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xb64ba14513389f0a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r11, 0x1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b80000000001010400000000000000000200000000e000000108000200000000000c00028005000100000000002c0002800c000280ea58c00bd3304eb405000100000002001400018008000100e000000108000200ac1e0001060003400000000008000740000000004c001080080003400000013308000240000000cd08000140000005ff0800014000000401080001400000000940f8c81afd034000000009070002400000000108000240000000090800014000000025fdf5fb4367367b51c7c83e9788acbd088bbf32b1b8"], 0xb8}}, 0x0) 1.148426757s ago: executing program 3 (id=6291): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='#\x00', 0x2, &(0x7f0000000040)={@align, {0x4, 0x5, 0x6, 0xb5fe}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}, {[0x7, 0xc63, 0x7, 0x9]}, 0x3, 0x64, &(0x7f0000000100)=""/100}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0x101, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) r2 = accept4$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x80000) connect$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x8, @any, 0x7fff}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000380)=0x1ff, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f00000003c0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000400)=0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='team0\x00', 0x10) syz_emit_ethernet(0x22, &(0x7f0000000480)={@broadcast, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "b4f08f6559c929c1"}}}}, &(0x7f00000004c0)={0x0, 0x1, [0xcd4, 0xb10, 0xd1d, 0xc03]}) sendmsg(r2, &(0x7f00000009c0)={&(0x7f0000000500)=@pppoe={0x18, 0x0, {0x2, @multicast, 'veth1_to_team\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000580)="cac7e89bc715d1cc3f9fa3c5d904669f1309d3c260d186bb97ca24ad36d8974e19b027d239bea92cd171b58cce470b59646fb7033b76d678d0eab04e8dac5ec93676c4376b329a72df627e88376ee40eecfd6ebfed99bf955de0ef8fb097d198dc7a72c00d16ca9805a91903b332fd07768e22be5c0c11b60fb0710fd14e37dffe90266d7c42937f8bf12afdcb0b372ac6e7c4a139a943cf0ade69f84020c25ee8f162d39a989527c67454a1c1e38d7fa6821ef8b0d72ecb2877d07c", 0xbc}, {&(0x7f0000000640)="6d8f0021ff399301a817ce377c232b0eb7834a54aa2e9013ee19e2800a60adc1344a29260baeeb0b431afa40f5db0a2be2a321ac61dccb74c0ad2918c97a61ac822912de262b93f84d14df1b3f605cbd5474f1a12ed9193ca6403364a6d55f8657fb14368bf6f4113687e86491af619b97a6ed2c494943b2c3c125cf69a31e113212766594c528b7c0", 0x89}, {&(0x7f0000000700)="21e6ac", 0x3}, {&(0x7f0000000740)="ad8adb4449f39be0e4c624ed6fef51c05f58bc331fdfabf89d7f85668fe6d5ad6e09f43cfd39b94203a409b032e15c2b6dab08a39908d9bcb1697d07722f293ed0891fb6be0e5da162be2c4af4d474c9ddea1febf494a3f0f72526426116997afec423c6245309b8ce4436621c9b9310ec759f8f6d162d4b08198ebafa78bd6cd082730b87598a0e261b8d59d357863d15a9a21d4db73724f8d8750ed2fbabf0c121416e76cc670ccafe5cbb3dcf5f3114ae2e06e9e693e9779ba413012494a9650a92", 0xc3}, {&(0x7f0000000840)="52173da07dc0a3f6f7e16ee75c98c2439b2f57af95b1afe4c8175a6336c1025e662629d4068c15a739dcafafbf42a2aced697abf5b9956731fce4da8401b14fc9c3c86d4f325bb68d5ecab4852f01616333a84a9a029530e035a9321b88dbadb76761c4ab55dfede0085d44043b3e62a0b2bf7907250bc8b45cce370e77e7911d8c46d00f72a663c669f0208f4525131eec01feaf69b2e03c172379dd7b8ab8af183e087d5be14f9f213edbed23a91bc58b2d2d1f8696024112232abd1aca12325debd17eaddf1d9764e923dfeb69e07e57b3924e79990fe1d6e02b6e24c601cc2168ef11896d031e49d5394bbda049e93db616bc03f49bd75", 0xf9}], 0x5}, 0x200040c4) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@ipv6_getroute={0x34, 0x1a, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x10, 0x20, 0xb, 0xfc, 0x8da0f2624f11bc9a, 0xfd, 0x4}, [@RTA_MARK={0x8, 0x10, 0x4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_EXPIRES={0x8, 0x17, 0xefc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000b40)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff7}, {0xfff2, 0x7}, {0x1, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000c40)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000c80)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000cc0)=r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000d00)={0x7, 'wg0\x00', {0x862b}, 0xc}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000d40)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e20, 0xfffff649, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e24, @multicast2}], 0x4c) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3f8, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48010}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000ec0)) sendmmsg$alg(r0, &(0x7f0000004040)=[{0x0, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x10000040}, {0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f40)="a0089da86dc116f40fd2651eaa5b2375a5961dc39c46cd24967e67fa64476fbc421422bb28", 0x25}, {&(0x7f0000000f80)="d826810fb4ae200224ab55f97b6b69bc4b29805505c6e6d5f3a996704d688065a5f2de87c808e07e5634c01c2763c3d71f950b479c1126774f12136901ca8ceaae6183657dace4f1f308078efb4528fd17908e6a94aa29144164", 0x5a}], 0x2, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xcd, "1d850b95b1e8cf04857ee8fc1fabe0c6c0fc251dd67ea76d765b30207b356ca64dd3cfbc81c89221992be7fa8ae7af7258215b8e2e544abaaa26c5ef014d0807dbbee299119a86e5f89c0a4a310087430c08958c1ea25042f3692672a4e3608a532e7518311bfe9b7a9d0524379ce41704b4434cea526bcd3b5b9351b8d01989f84e6c32bb20e5801fb5d3b90c7bad5910caffe3aa5e181cbee9a405998b2036197be968acc0051d9fdfae88e67de32f4d7bfddc0179b7506b0736d8ae2a97794e7414fc4d841a878bd94ce548"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xc8, 0x117, 0x2, 0xb4, "c6c44087d2d10a326698b25c9e6f62dd601dba0164f61ce7a5f0aaecc6130d266b69a3a55d516fa2337deff86297c50b5af6fb9d2b099699e2223557763c2693c2a08788e38ceff3fd2f93fa581b4e9d4d9ec953ac6010ec40ae2c3c71d1c177a458c28f60eea38845e362c7fe5fc4599604697a34091bf9fa93c675f4f98070823a43171ab9bda097a0fb0f7effa3ae93d1e131f3fadb73855b83f4230fdff71ef1c85dd506a5763b354c23fac26dc843de8911"}, @iv={0x28, 0x117, 0x2, 0x13, "225eb04b983704d7207961468dc35d062a59a7"}, @op={0x18, 0x117, 0x3, 0x1}], 0x220, 0x10}, {0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001280)="efe7c68873151d9af6f1dc9d7fe81e4b670e71e71ac20f9b6f6a", 0x1a}, {&(0x7f00000012c0)="2fa4e3fed0a80e7fc41ed82810884adb773b5bf26974e542ab7d2704add1026fa7c8f0b7", 0x24}, {&(0x7f0000001300)="8ff40e", 0x3}, {&(0x7f0000001340)="0d701091b8f194ef734a21fb92128bc99740c618f8a20da86b1d73ec3e1dff9aadaf2005d7bf8c106e84797bec947eee43579012", 0x34}, {&(0x7f0000001380)="31f8c7dd941103c458a1e572e31eee0e45c2ddce2512d7728dcb614ac41e0ba42057008f980a88c26771eff796702eed17d00e12d49c824fc130cbe30a09e75221ecf33dbf224e262d2f8148e4245de7fef9b0abf6e6a02c5b33d1576e2cc3f50b4fe71f9e868164655219720adbe838aacd8fbca5f57905c5d344577403e8f3beabca8b9b935233ceb51f0d5afcf73378df15f4a6d03d807610917139f59af8c01f3be7fe6d6eb48b287f792ac9300435ea23f8e771dede46", 0xb9}], 0x5, &(0x7f00000014c0)=[@iv={0xd0, 0x117, 0x2, 0xb8, "3e22b6efe21facf7df5419d8384855f28831319c188c4292a714bfe7bcf6da1c06589391c39fa6606193c93166431c6404ac6bee27295a26217b1b4dc4f9e88c865151f5574b861efb17a19ff50074c60bd6ecf92cd4b1f8a8b4028eab85f1455977e8673b2094b50af07cc3c4e18a2a659b1bf42c982ea36be49cc96533bc03f08d9f58f19fc38f807e552b24ff59a634f1ea3fa09dd00f8fd4596cf21aa59c0240c189119a996ee50fbdfbd0b732855af975c91b29b97f"}, @op={0x18, 0x117, 0x3, 0x1}], 0xe8, 0x845}, {0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="82a6eeef0f17a4ff6e45240dd28d97cbf9cab144c085e2b4d5d2b585e5268f5e29568bf380e4269f3b5e699666f2de558ce0c60d23f1c656c44c3c364ad238fb6132e9b442a9ab2d7a87", 0x4a}, {&(0x7f0000002640)="69df88647beebc2d008e9a15e8b1bf0a691292b871228a2b0d5eb6f9a5384fa318bc3a715a87bbff9b98172a98a2de99091a5345ffe3c1d26a603aecb235e50a716f3df80c5ca35959bfefea72f1c4db5d110bbf81fc26e1fd4328f7ded6f7f889a83a20df06cd168be235cbe702047b6f0ec95a6383d82884605073fb3345785e6c7eca835cb547c958cf06415a35425dc08f935a6a062eba915f4c0a75fc7a7e146a0881266ec866ce6c1a37e5b46fa7bbbc756431fc352861caf44487c36b2700bb480e0d19465400a26658ef5be6157b98c2ae9ed02a8c63937d4271d8650ea57b46510a438176cd01f6806c5f983867a88d11217f35a8215880badaa2d8e9be7738872f5ff2229e94262ed54603da399f7a14686c8efd6acb538d9b7e78555be156d3faae187982280b60cd35d214f8119a81356199eef580cdd6fedac64ab507ea5c784c95c48eade7637c8951b2638f68a81aa203274d920e56865b226cbb0946d53d2ff7a81208a32a3d8b6cf30a117ef6871dfb0eeab4765f77d0d6081e202680d3b08399d1852a5efd0ca6fcaae051b5292ed52dfa0ad6ef5194b86dae8b0b013a1311c05a018c2ba8cfef7649ff2f1d09dfc00657f88f4532d491f5c8a336ab500ee46c1e8cf11b98668ddeb69250414cf872b6b37651fb0be8f89381b01860e07c7ba515e4b4eb4f1aa31771f822d8fa8bf7f8f543df71d2fb6f6eba1fd41eef5e9577ede1077cb11f186e33401d27773e7796210dda4a3ca8d49ba632692b5829f171b13f9e091381a408b48438e1c67b923f18bd8774f73328b06a85f1618e59536045bacd090d49adff46173ad410baf641f209348eb2c6f3313bc70a576548a291c1637bbf1591c534ff747a6860693d565e0baddb79e1a3282d7c6c05b186b99325144c193d11d9f15c63200941a61ae3d4be385f43087d1539a2ecad588287941de47dc8b42df1c9786d0d08281c1054e852df6222a15998b06ade35ea1f6ba33b23df9249ad44a0bf2207b983789344bc9188246111c5fa5c8115acf693c1ca86b9b7ac314d46b822150a82660e370c0462ee2ae8c998b8817a7a4947c2f1c565107bc42541a32a2b3083051b2587f741e2268e3f1d46182a7c4f2b40bd9377398865caa522bd4f3468e107fc83b555042f810fe1788f4a83fad5422547f15f400e3ef4d38f6c8f58f79612e0c40275b8c574a8abe5326b767e9e6a3403dc95d618370ad5b5a02cd0b5db73c3f4450c5d15f1173e8ee620165547751679e2bf7f696c7b104cf59c3ac8fda2674b75af13f3ea4bf4045c8ff947bf9855d76ba891bb22b4e995bbe1a4a24b07505ba9d5272b3b0324d799add3be434b381fc4225c8c7c1ded8f9464aa2e606553e52e5557b28257621fb662c1e5a2db69061265cae6f08630070d6fdaad363edacbc1bbd45da90940e9baf4442d17459678ce920d908d96f9d740e2b7b098832807c949bef555ad98b7366bce61dbd414ff91a58333febff5cdfbfdab7abd9b23b37446ee8b8471b29eb53f004dc8c1847728cb39b81ad12985900143a6d3d0ce1c40e7a31f8010ef43fe27af2d168671763bef57c04125c7c35366ac94a616a9ab99fea2b06273b2a951465f3ae0349cb566f74cfb1f0498e3969ba44e360ef0a9b8fb7d06dd63af38fc5f222b298bfcbaacba69e1fcf794a104a2a7331cd0534c185db1c54ad47bdcc6f6a9affab150f3ed6b38a2eb5194e90c98224d26a4b47576222e0a67f6fe91b8c2e0163312ec0d795469a4cbc0693c1013c6e2efe48284eae6240246348eae1d4712c75b8ec16260dfa051255d3632b3336252363f61a6ccb7e4edf3b038536ff04c95e682a393ab056c9e879e5bdd58f58ed61b5f4ca8444e370b575fd0bbc7587ec026b42fe57dfaffa637b5bff957d8540bd02fd0bc832c2d28e2039bc23d117bbdef1a93c0e2a6f71ee3a551936e2a58333231abf86d7dd27d4f80420edc7ee2fbbfe6d33c23d386087a089570f985af4142dcb7520a6a26ce0a007d272e19967a915b55e109f809bcfab1f31cc85557b93e0a4ffe2f647fde89a8ddc60d7a21469e50d330e1ef75e8d01f8a1c0897ab8523bda695ff4a812ab92adf7b0922ed69c23d1d9634f58c9a867842f42ef28bddb89a5e61bd8d4754efbfc5c5cc095a867b45bbed2c7ba246b72fca4a90c2ea5eceabea6b37870adc554935d0df86f1a69d6e5e25c92943610ae03fcdb71a1fadfa3a68d2e802b7eff6eabd123f19db31b285665f0d0e3427918866de2ba106b4ff0180f1a15257a8af789f7aed9b066b5066a79e4e91bdbabfdcdbdba4f4c2134017225c09a19b4ccc7c5d88ff3d8c330747303c9ef1b0d03c444e3e0b88f8a097e3994783115f0a792da64ab0f9d27803c753df1d4323419f33850d2971c0694b5f7896c9ac1889cceaf4f24478826d3fb0808bee8624c003516c312dba0ec75c48fb6d2e839fd85b83c8db6268d28cb9bf730c8d4c45a02f510e7516ae712378b3e7d692b2fb6afe36b13f53501eb569b4550a1c266e444c8460c968733d7656ce91d44add41ed1b320c91403971e40f1f9fd7d67029f62de933416802d4184a52e3d548f734ab570972f78f973052c0e748e22652a683af6026ce2506fcca153509504532107b5c203783253d686143c064e0d042a37d06e6aa52ad50ee3cabb20d7456327eb06bf7304bcbf189a996e3aacd61763f22ea2859b57d8d14a79353ef748ad6fd08300dff15968a481f55c7c9174282b797c03826fd230504a2a7d383d70c4b6b06453af6c21fa42faf83de1f5a3cc0cbfc2f1e7d631c9cabb59eeaa8ee08c1047341465f49af10b5ceae2f841e41b58c1ae0f1f4c16012a9146871117d77b41a4fa1ac793c8fac28027fcd94f0cf9b6ef51cf2537a94ab095dbfb8b3846f9b04f7ed2a4b6e4389b9dcc72aff72c3c0c6110da64e1428ecbf94a2b6b59f22579be2200d653c64556b975668e918cad592bb249afda0ea1b75e9ed1f49056f6ea696427426f2d87f8c770fd12335cce878c7ab266ac7460f9b370d2d2b9c68da1ef9c73bb68ad89ef68caa0ad8d69e9a938991aac4e765ea9f84e3ffb593cf1965360da83a99cf58bec62df9b2fd82bffe8f9196eb2bb69d3e4821d5b86a69992b670f5fb21499297155084f71d169ca052ae320159bb7e1b86fc6a63b29fbd70d98788ca67da0a8d0b2fdcf2747e0b99141b88f846bd1a8b04db248770730a0c00648873ca4bb338aacdbbc502fc19af5ba8327baa2ae4f167362f7645d9de7253be011e497f21718490d3f44a20b945c0848595b782852511524c2972ef663982195d582b17cfb79785415c242eb67f8ca342f837bebd579e44a3d3e7bcbc54090f1d5d951f108d0de9e432a652bddb3f31aa33e8e6615f6e246a1a66e130dd594f9b7b7ab01b8f4ab56ac05020c91d14ce2fa7d1f8cadb741de8edf21cdd245eb9303a2547f953d5f6b2be2dce5769c149633775f9fcb23d4fc364af82f933a5aafc81a11681fff820985b688ac0d17324dbab1606487651c0715c3c804e77b7122136be18c408b4f5371739d9f3bfaf8c0d241230ab4506306ed43b11dddc1c14eb8a51bf51ac705147b5fb98ae737813f6f845fa9bfd5317f5f945d7a2da13af47aead947ddff9a528152a11e69e355595e7400349ecdb733b62e4c630f079e4fa8a20b88de21ff45a8e1d9e3827e79138997e3c3250fe2ea66923af606b79977ae6b132814d8f9b1df2d0d1739bb5c8245506dfcfb668f9751c8990030d5a01d651281181ff1bd0d45136a2ed91fe23b48cbe098c14c97610b4b275aa874f25a4737e174f8440da9c7a7a9f6608d698590a38d6ff57f2b7eb431514b8c0ddf89bd264fdf2b4332a61f6c16e0a85be5801a90602003560caf35211e63cb06df6d04448aff5a131026e0ec616298710c1ce6fbd1cc2cc46e4f090443b6047208a0fb6b117cc97b7d5cb9eac6711b6c535839e35bb83462e9dbcce6c953b64e47e0f2831d881a14de81f130fd288058845b0a15a1bb004dc6408daa4e792b015ce100db14a80450ca865afd0e06f450c02dd41473b3382bd348bcb01179a489c6004f2d52164dd2eb9f3b9654d5ecc03bc031511a623e873af1163dcbf43d749c6d67dc4285154473cfdbf4d32d5d391df978dd3ad46a351580a57309cdc7fbb4b8bdf948db1139a1ac244e378f5272a921ddc323b7eedc8e4ae742726f36f17f3f5ee295963fd31d6ea91a5c2ffe7f2783c74b8c64d60e89d34c8d8023b63d549c37c6921915afadb9b5372eb03418e9d9eb23d137b69cf29e0501b934a8830410bf3a7a670a8b309a31e6eaba5319093c175a0adc9f9e77b4a6b11a5aab751c1b734a4b7ab8b66c6e925593d66ae89c019252e8a5ed361cf445b935e5a3f17a98c7eca2e14650a037b32a4a8a7423c22e2324e6c8f86856b7ca0c1aebc8b69f78d3ef098e7b3e404fa7763bf9b125c83584aed712eb7f514a339810817627b5b5aa0a98f762d8dabb44b75b34d892cefae16711e052cd7729fd2857e335fb88c69c836618f66a7bbe627e578c4b400e3e50a0bc6eeaf424083f5e453d47ecea578df0eb378fe88e6e78f559ab2b9374c48fccdf90fccf6b6f36421a8d059f9c8d954964ac56941bcee7b6bc5a4298789c68175e5365ac10b805dd92d62427723011cc98c97cc345b946aff819c2110995b44ca96fe6350ae5cb833176c732a3c662663a361fd2449621bd92c2b591f537acd46b4fd1c566a18fb0b85fdc4956a1461d5143b9fe5dfce0a71ccd57b00e609398b8cea6b59faa3cf7e14efc7cc4bd9a34a0b04376c410a2917d36581b0ed95b2ea83ef0641a0d3670c9f147f806bab9a236f127ca00437b31c091d9fb83bfcb4cc6994528186766923087363574ced5f51015311c53d2270b2e4c34f6295cda10379f44cab2386f73f7fc1512405d6ca3b70a40d6935f9e933331fe82ad1ba8a7532abec9d9a5ab43ea9620c700dba1d251f4d46f9e46630a7078c72399156bcf1ecee26c14c042f1838356f7513696b0f2708d075934073d6ce549cd484ff4358387a60a0e2dfcb81f2f0b4151677749e2e94304a4b3ff28b330f6efb56b12efcb1044a9a69024a1e049000a2e2dfd3fed81fe7e7e1cd9be61ed77c52341c5185407dfac9d63fd99dbc4515cc1cd9a0e00c25ad750d19027b2346806b8dc18a511404ebb2a6bc2bceb29ab74378224a7a960f45dd2ac62ca4734d9e4fa980ca148242843be46fcb017648253934aac6d2e0ce9e55fcc92b01da5abf96497f3bbbe097e88d41ede42f7f602d36efc4ce49eb2dd841a5aaeaa6da921dd47c50c43b5a3899220c7f8ae15a959b3385826419fb50299851d5c0677c329efc2e242b2b2a3c14c999c6ebbeea6734fe93599d1e714385d2b763e9a7ecfc46436a1d7521fdd65b10f99924c7ab4d13325d540e06c136f3479862256644bc27f06e03457dadeb8ae73dbf61ab6b8cf927d4ab5769c22a460778e46e0fb23e279a797455c92532e0f3784f96b958514e9f6350e5ee2d0cb2465e312f5b39ed65af17519447ee6f864bc1b54c19d79660bcc1a4353db311392514b28547fa1bba1abe45690f77a265bfe625d1b29247e308541b55ee50122853f9eed197d6e1590b326e3643cd4c2888f9cc473ff192170b7fecc936c027f429876b05c784f1211adca2bf5228f16f89150ca789cb4a2279801684235dc6d8ad59bf8b93feea4dc7303a4ecdbe4de1b00ebb08d8eaef89dbe97d853c8e4", 0x1000}, {&(0x7f0000003640)="c0a79d07229c9dacc346d0702bdfeb959aea369693e105c2a2448e5c5fb3f8", 0x1f}, {&(0x7f0000003680)="c67e79367f4fce7d940a2bdc49d924c90ced8412c35aa7b2854bae4e57f5d7e667927ddb69a8e81ad3457e8eb9", 0x2d}], 0x5, &(0x7f0000003740)=[@iv={0x68, 0x117, 0x2, 0x51, "1b33af3d4738cd205a87443ec26651de535c39eb6a92e688dbd952629b3225bee027c269bffc2dc1eb9d18bb4407f294691c77de0a0f6420dab92376ed099e80abe9cfa9234311f6f9a477d821be08a0e9"}], 0x68}, {0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000037c0)="bfe83d38c9ddcfcad65e4e34e32796ab125a20c376a86720d94ccfa4ded4babdaaae5a339c8623c44993d172d45617ece9a5f41a12ac76999dc0a5a3b0665d1f2bd0d24c0f1dc24137261f71d2f9c4ca3de7939ccd3239a75c35b153965c466c9434fd029f940af60b99f9a7e5834eb0f945444557e0b87129cbcfe6fa31e6f1d4bf095c426fd72c6ed7750f1c4a0dc46167362b41cf1674d4a59d5a65290dfbe7f36492d40d06cdc49e41ba02e8", 0xae}, {&(0x7f0000003880)="305f54fd9a28b651d58690661532d16a21d78a3d1a231279327acbd7a555bd546075b9ff7de73ee608f6c099dae6705e780ed6fbc0c126e7672c55a631098052476a56e82d80f952801405b5963f0530297144b6441d8ae0d780a93bdb31e913a2fb33ec67b429bb4b7792b2ca1ffb682eaee161f00f73ecf490238010e74d0ef5d7afb33d41c4702de961694f7c72eb4c020f44362aa61fde760388b289e35fcabeebca7d3253f55e0a84ada7bb4d5adaac079be754a95e5b", 0xb9}, {&(0x7f0000003940)="98dc89050be45a7aefa61ba3d5c5eeca74994742490fbce20c82e00a2a33111bd69f71c66fb7c29b3014b3a0727c62eb012828c54d17c4b9efc8b4326c7df0234aea231aa89b019af6aaa37a88e5122b2ec86971541a96ea917b2e79f31a15ecc6c92ae2174e9d08b651a26147af0ed602829f97792981a68490aa988ebb7c0c48283e65365e7568799b2acfd081009b25bfc2a10dc735ba3a48b3a88fc84cd2d6f1c74a6eebd79594987ac4cc42128fc4b60b3b763e2d58ab48dcec250a74", 0xbf}, {&(0x7f0000003a00)="bd132373b6d3f55a2beacbff9f87a1eaa17085e3e14d33e82b931a502d73604921eac36dc118e520cc186a3880694d6049cb9c0287c9994808b14392edab4453cda77a9d22af03072df62e00e0197a568638603f80e09eb3efaf75479a44e16183ec3664226958a51fa0afcde47879f6ca4298bcc7df5e724cdabfe34f5cafcb651058e9e5f7f29725e9e3c0134d69b67e5718aa3b95a4edb53d732fca9579dec1aeb5997276a303a5f948d91447d3b79deaeb7391", 0xb5}, {&(0x7f0000003ac0)="bf7ad757cc58e3c7e306cea46b51bcf8655036e921a619431032c9c933836f4760c9108a83e8190079f20161c4cfe3f199892f1f2f6205a75be821f928f2b8a711ac3e9819b7e5810b6bb12f3dab40e92ee4e3e5a44ea6e4143522f96e77951c41931621a5d090223de8dbdbcb0ece2c3aaca81f06c3b265794b5b072306356f01a49913745b9b3674ebc7d0eeef7dc3035429d645b7cb3fbbfc565cff12be76f322865180f101c7647c0f10f2be2263241d99d6b1e9c1544ccfef46a85893ffc4fe16b25696015c56950083864512b168aae44491f617fd2640bc5f85cc4b9cf581", 0xe2}, {&(0x7f0000003bc0)="ac29f3bc8a3c72252a3bc0918b0362fa3f2ec1200bbe727b7ff9830dcf2c5af5ebe6447e0da2ad0fc121938332f63a42cd800b8c311e925d5b1a702bd2cd260c6b903c5eb8ceca632a2e13c1e8af22b5b1b08372cd0d984c554b116a8da3450cf52c308a7337be02df435b08595c4c6e1c3a8519859532d5c23beb81bda05ff2", 0x80}, {&(0x7f0000003c40)="494a949862e713c0eb111416bcca9053c34ab01096065681d5ca75f5f2dcb47ab0e836339cb89fb034cde6aba33812a672eb2af52899375aaf295f9d96b96d8953df6f0c30f46cea61bf2125d921dca238e95ff15e26a64df73e6dc6491133e23f0f3cb15f8e7860172f36971ca3f74a28f397884d1f8d1b63ab3cd2f0d54ae5a4a0dede0f88d379922481cc42fa02af2b1ccabc53c3de2b6f06d39da7dba0b2ad576fe0dbd4241823bc9d10d26ee2b18616c9698d6d346e6e42154596f299e61be41b038950f23f5a0e92e17376220f94766309600817e351351879b72f9072312766800e", 0xe5}, {&(0x7f0000003d40)="0bb367b88cdfadc91a76e6c8cce2c103d5e0b028a551e31d8be729018492bba13bb7a7c1050b3088171314c71cd12f738afc9b98ffd6cb0946c5ac74e07af7f00b05e9a457f7841063d1e25f26555fb15d7265006389ba1e12231a68a06983663f930f03ec3d9d81be75d9dd84c611ad7d78e0c7f66a43198b13c52bff2c53e1fa9f5e748afc77ad2d9a1760b795fd7904b143aaf2b7d96c36efc38678cae2916f8c82818abc1405e2fbfdddf1ceffc79c187501be43c1672c3b2dbd7a7526024809dd84876830ed819d9d18396fd3e9163a6ff3a7d4cb3846879a4fafa01f9c185387a73caeefbf26d844a0cfd5ece8", 0xf0}, {&(0x7f0000003e40)="128e9c69de99d0e988339cc8a96f549812b8e6f0b07df09ae2ff077266c0370d5da372242bd7bd24f68aee754436cc1af3f5255c704faa", 0x37}, {&(0x7f0000003e80)="9f03e67309deb32c96488e40e5de78f14ae4f15c391e514ab0593ed6535df9ca2b8c627eae4af69a83270e839a90e43e6ab0680ab9bfd31c9d0ed3a3a856f02adc540524dff301ef6422e7cc530d3bc59786fcbf928f9d9287bd0764", 0x5c}], 0xa, &(0x7f0000003fc0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x680c}, @iv={0x30, 0x117, 0x2, 0x18, "57453247eb5ce6e3055e4c5760e4ec20b02592bace2a183b"}], 0x60, 0x800}], 0x5, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000004180)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x2, 0x5, 0x4, 0x0, 0x2, 0xc60, 0x2}, &(0x7f0000004240)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000004280)={r8, 0x0, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000042c0)=[@in6={0xa, 0x4e20, 0x4, @private0, 0x5}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x7, @private0, 0x6}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x401}], 0x90) 1.090434242s ago: executing program 4 (id=6292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd250}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x190, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x154, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1b8}}, 0x40004) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x40}}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8805) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x6, 0x0, 0x0) setsockopt(r5, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000580)={0x8, 0x7, 0x10, 0x6, 0x6}, 0x14) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="000127bd7000fbc9df250400000014000300ff01000000000000000000000000000114000200000000000000000000000000000000011400060069703667726530000000000000000000140002000000000000006d000000000000000000140003002001000000000000000000000000000208000500ffffffff0500010000000000"], 0x88}}, 0x8890) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18085100000000090000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00d0ff0000000000660000000000000018000000f8ffffff00000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1.040439873s ago: executing program 0 (id=6293): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRESHEX, @ANYBLOB="00000000000033d0f8f5a8287bcb7633fc9ef40b300011660800000000000018000000000000000000000000001000950000000000000036be660000000001180100002020782500000067881deef0f338a96bb4e2ababd15c00002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x8}, 0x94) 976.324581ms ago: executing program 1 (id=6294): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b5"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000040000000000000000000000000000000000000feffffff00000000"]}, 0x108) write(r1, &(0x7f0000000a80)="801cad8df93020108fd2461d71ec08539ce3850dda18387a38056e7b4100a4141e0225946b13a0ebd569244a8a0baa0eee685f4621e72e7efda6db97b1c61cc8fad0ff5e75917c70913f8a2f38008bfa8e874c732ee111b25c086414d2651771e71372b42d772147887ef2c91c9d7ef60a2514fb666f4c1f0934e8785d54759c856afb3ec0553eaf9f6987fb7a0c162324558f249d4d0cb3c2bb8860f00a093b7724c89cd8c2d2faa15100b7f644fd4a9b7a430d36a342a5b1a1127ae5f046cd1ec61ff0b2ebb2247405699f7608ffb179d533cc7948d6d09736eeca9f2a31d53d62a40953f218fb010a5d5d80eba3", 0xef) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYRES8=r2, @ANYRESDEC=r3, @ANYBLOB="01002dbd7000ffdbdf25010000000c00060002000000000000000c00080005000000000000000c000600000000000000000008000100000000000c0008000300000000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x440c0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x58}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0xfffd, 0x7ffe}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000003c0)=0xfffffffffffffffe, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f00000014c0)=""/145, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x4e, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 912.155267ms ago: executing program 3 (id=6295): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @empty, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}}, 0x4008005) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 822.210868ms ago: executing program 0 (id=6296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, 0x20000}}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 709.114086ms ago: executing program 2 (id=6297): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 572.045392ms ago: executing program 2 (id=6298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x40) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0xb, 0xb, 0x86, 0x20, @remote, @local, 0x1, 0x40, 0x401, 0x10}}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x27, r6}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r7, 0xf24, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000700)={0xffff, 0x3, 0x20d, 0xfff, 0x9, 0x2, 0x9082, 0x8a, r11}, 0x20) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x4}, {0x3, 0x6, 0x1}, 0xb, 0x9}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "c705"}}, @common=@srh={{0x30}, {0x3b, 0x2, 0x6, 0x7f, 0xb5, 0xc00, 0x80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x3}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@ah={{0x30}, {[0x4d6, 0x4d6], 0xc, 0x51}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r13 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r13, &(0x7f0000000c00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000c40)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x1, 0x1, 0x400, 0x3, 0x40080224, r6}) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x3e8, 0x3e8, 0x1b8, 0x3e8, 0x1b8, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, &(0x7f0000000cc0), {[{{@ipv6={@empty, @private0, [0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xff], 'tunl0\x00', 'tunl0\x00', {0xff}, {}, 0x33, 0x0, 0x6, 0x1e}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0xd, @ipv6=@private0, 0x4e23}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0xffffffff, 0x0, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'wlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x3b, 0x0, 0x0, 0x18}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x7}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0xffffff57, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x43, 0x44}}, @common=@mh={{0x28}, {"f454"}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0xff}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x18}, [0xff000000, 0xb308ba4859ac9214, 0xffffff, 0xffffffff], [0xffffff, 0x0, 0xffffffff, 0xffffff00], '\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x4, 0x1a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000001380)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x21, r6}) ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f00000014c0)={r4, &(0x7f00000013c0)='syztnl1\x00', 0x220800, &(0x7f0000001400)={@align=0x3, {0x3b, 0x3729, 0x0, 0x7}}, 0x10000, &(0x7f0000001440), &(0x7f0000001480)=0xff}) setsockopt$inet6_udp_int(r14, 0x11, 0x67, &(0x7f0000001500)=0x8000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000001540)=0x2000, 0x4) r15 = syz_genetlink_get_family_id$nfc(&(0x7f00000015c0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r15, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 571.373655ms ago: executing program 3 (id=6299): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x4, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x40044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) splice(r3, 0x0, r5, 0x0, 0x10d00, 0xf) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="c8090000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf25000000000800050000000000b40008800c00008006000500060000003800008008000a000100000006000500ac00000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c180000801400040002004e23e000000100000000000000005400008008000a000100000024000200b33fdc1d3bc005f2e32022bac8911c082223484c64568be19320c6752caa6779240001000000000000000000000000000000000000000000000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000bc0808809c040080240001000000000000000000000000000000000000000000000000000000000000000000240001000000000000000000000000000000000000000000000000000000000000000000240002007f39f5f17625b1fa4514e2b0461c8277316010dd3992c2e9be497b29f36f6f0e2c040980a00000800600010002000000080002007f0000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000200000008000200640101010500030003000000060001000a00000014000200fc020000000000000000000000000001050003000300000070000080060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000a0000001400020000000000000000000000000000000001050003000200000030010080060001000200000008000200e00000020500030001000000060001000200000008000200ac1414bb0500030003000000060001000200000008000200e00000010500030001000000060001000200000008000200e00000020500030000000000060001000a00000014000200200100000000000000000000000000020500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000a00000014000200000000000000000000000000000000000500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200fe80000000000000000000000000001a0500030000000000060001000200000008000200ac1414140500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000a00000014000200fc01000000000000000000000000000005000300020000000600010002000000080002007f0000010500030001000000060001000200000008000200ac14142e0500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200640101000500030001000000060001000a00000014000200fc00000000000000000000000000000005000300030000000600010002000000080002007f00000105000300010000001c0000800600010002000000080002007f000001050003000100000088000080060001000200000008000200ffffffff0500030002000000060001000200000008000200ac1414aa0500030001000000060001000200000008000200640101010500030003000000060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000200000008000200ffffffff0500030003000000340000800600010002000000080002006401010205000300000000000600010002000000080002000000000005000300010000001c000080060001000200000008000200ac1414bb0500030001000000500000800600050000750000240002000253cf3ef49c1188c3fe60932124b3bccb9779ffa3e56e940b235e9d24b5a31c200004000a004e2200000009fc010000000000000000000000000000ff0000007402008008000a0001000000240002006786c93c5703c561c14c6db43a3851c212948354fe913c2c2167c347c73ddaf924000200d4af5889293932c14ce36932e87a94356c4e55d5e137e3ea00bc54351d1325b91400040002004e22e000000100000000000000001400040002004e20e0000001000000000000000008000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bcc01098034000080060001000200000008000200640101000500030002000000060001000200000008000200640101000500030000000000c4000080060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200ffffffff0500030002000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200ffffffff0500030001000000060001000a00000014000200fe800000000000000000ff5cc26adaf8fc23030002000000d0000080060001000a00000014000200fe80000000000000000000000000003c0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a000000140002002001000000008bbd2ef1b41b118e1a35915bfc000000000000000000010500030001000000060001000200000008000200000000000500030001000000060001000a0000001400020000000000000000000000ffff7f0000010500030002000000060001000a00000014000200fc01000000000000000000000000000005000300030000005000008008000300020000004400098040000080060001000a00000014000200ff01000000000000000000000000000105000300030000000600010002000000080002000000000005000300010000004c0000801400040002004e24ac1414bb000000000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000600000008000a00010000004c00008024000200e658f3cf249070e7c7000dbb361ef342e41d6507e9890715a6ef5bb82d2e3efa24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b700000800800030004000000200004000a004e2100000005ff01000000000000000000000000000101000000200004000a004e2200000008fc000000000000000000000000000001c100000008000a000100000008000300030000001400040002004e247f0000010000000000000000180008801400008008000a0001000000080003000600000098f02a2545d630e889416a6438fedc15fcb95a8801c1f8040c0441cf8016cca3ea273603de49174c541b3c8010fbab5f18c76d4cca364dd30464d40b6978d85a5b40da5eeb40f1be73f396a509ee97ed6bf32db1cd46216e17c07535fb624149b5be8974d265d3469b926324a5dfe0a28f32caa2555e51f3005554721ab45eb1da4a43708a3f"], 0x9c8}, 0x1, 0x0, 0x0, 0x2000c850}, 0x800) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r6, 0x29, 0x1e, &(0x7f0000000040), 0x4) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) (rerun: 64) 570.991421ms ago: executing program 0 (id=6300): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@remote, 0xffff}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0x2}, {0x0, 0x3, 0xfffffffc}, 0x0, 0x4000, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x4, {{'ecb(arc4)\x00'}}}]}, 0x180}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x14, 0x3b, 0x400, 0x70bd29, 0x25dfdbfb, {0x18}}, 0x14}}, 0xc814) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x8c, "662fa2018b7354b7ec1d14ce56d0bace7fdd4f47186289d79199bb16dff2ba0e20145197afbff71f415eea39da9bf53a472ca776bc7623e9c343e5fc53d2ac57bf2a21971ff5d2d205c1331e2c65b366a373bf3cf5bf66d900b0eb566572cd5bef04300de10336b67764319960eb4ea61b47d57db273e962b0153f9b67fcceef19c56694df8762629d9bb68b"}, &(0x7f00000003c0)=0x94) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0xd6, 0x401, 0x0, 0x0, 0x92d, 0x0, 0x3, 0x9, r5}, &(0x7f0000000480)=0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r0, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r0, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "b4ba7e823d91f27c0d53cf45054de6d9958b68a18f3700", "7deac18e1f7678564e2896a02f72993c", {"7c97b59eb9bd220f0c844fd420f39c3b", "86ce4689b7fa369af4410842d4e530e1"}}}}}}}, 0x0) 545.491581ms ago: executing program 4 (id=6301): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x29}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x4000000000, 0x0, 0x1}, &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) listen(r1, 0x29) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="7a0a00ff00000000711061000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r3}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 385.71413ms ago: executing program 0 (id=6302): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000040000100fcff1616104900000300000004004880100001800c0010800400088004000e"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffb}]}, 0x20}}, 0x8000) 243.815088ms ago: executing program 3 (id=6303): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000300)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000280), &(0x7f0000000000)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r7, 0x25, 0x2, @val=@iter={&(0x7f00000005c0)=@cgroup={0x3, r0, 0xffffffffffffffff}, 0x10}}, 0x20) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) syz_emit_ethernet(0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa001a00e10000884701018bd3d9e40400"], 0x0) 188.176301ms ago: executing program 0 (id=6304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0xe8}}, 0x0) 104.652763ms ago: executing program 2 (id=6305): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB="596ae6e3ea7f719e1c7e89194750f3e762e201d8c693eb5e73"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000340), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20040894}, 0x4008000) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010026bdb106ffdbdff0ffffff00", @ANYRES32=0x0, @ANYBLOB="08200400000004001400350076657468315f766c616e000000000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)=""/226, 0xc4, 0xe2, 0x1, 0x1, 0x10000}, 0x28) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'veth1_vlan\x00', 0x7c2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) readv(0xffffffffffffffff, &(0x7f0000000300), 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x6, 0x2) socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x81f0fc4c3cef18bd, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a000004090001ff010000310000000008000540000000024a00020073797a310000000008000a40fffffffc08000c4000000005140000001100010000000000000000000100000aa6194e80c8e3129adb81338b8c135696186a48b0e9f33dd62eff4603298a2436aa59bbf0d450aaa540c1a45636ab5d20565e750f5c2bec3058d08e593ed930b729423786d6aa063f80aaa7ea47b03a2500f6572843c7fef4440ae808f5b9bb1931344da46bf2c8a67cd9dbb8521ce3335f517743ff7425b2ec030ba40dc9d345738d76d593ef5ad620f8e7"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 0 (id=6306): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r4, &(0x7f0000000880), 0x0}, 0x20) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x15) (rerun: 32) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) (rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000140)=0x600000, 0x4) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80800) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a0300000000000000000007000000090001f172797a300000000068000000090a000000000700fffd08000a0000000900010073797a300000000008000540000000072c0011800c000100636f756e746572001c0002800c00000000000c0002400000000000000000140000001000010000000000000200000084000a0000e8000000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, @private1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7fff, 0x0, 0x0, 0x0, 0x800fffffff9, 0x80}) (async, rerun: 32) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) kernel console output (not intermixed with test programs): fx_ref_tracker_alloc+0x10/0x10 [ 686.818716][T25853] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 686.818826][T25853] ? dev_get_by_index+0x22/0x2e0 [ 686.818883][T25853] ? dev_get_by_index+0x22/0x2e0 [ 686.818957][T25853] raw_sendmsg+0x319/0xf90 [ 686.819088][T25853] ? __pfx_raw_sendmsg+0x10/0x10 [ 686.819173][T25853] ? aa_sock_msg_perm+0xf1/0x1b0 [ 686.819248][T25853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 686.819320][T25853] ? __pfx_raw_sendmsg+0x10/0x10 [ 686.819377][T25853] ____sys_sendmsg+0xa68/0xad0 [ 686.819487][T25853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.819603][T25853] ? import_iovec+0x73/0xa0 [ 686.819712][T25853] ___sys_sendmsg+0x2a5/0x360 [ 686.819814][T25853] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.819988][T25853] ? __fget_files+0x2a/0x420 [ 686.820064][T25853] ? __fget_files+0x3a0/0x420 [ 686.820178][T25853] __x64_sys_sendmsg+0x1bd/0x2a0 [ 686.820275][T25853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 686.820314][T25853] ? __pfx_ksys_write+0x10/0x10 [ 686.820345][T25853] do_syscall_64+0x14d/0xf80 [ 686.820373][T25853] ? trace_irq_disable+0x3b/0x150 [ 686.820402][T25853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.820423][T25853] ? clear_bhb_loop+0x40/0x90 [ 686.820449][T25853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.820469][T25853] RIP: 0033:0x7fba9eb9c799 [ 686.820490][T25853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.820509][T25853] RSP: 002b:00007fba9fae2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.820531][T25853] RAX: ffffffffffffffda RBX: 00007fba9ee15fa0 RCX: 00007fba9eb9c799 [ 686.820586][T25853] RDX: 0000000004000855 RSI: 0000200000000080 RDI: 0000000000000003 [ 686.820642][T25853] RBP: 00007fba9fae2090 R08: 0000000000000000 R09: 0000000000000000 [ 686.820697][T25853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.820747][T25853] R13: 00007fba9ee16038 R14: 00007fba9ee15fa0 R15: 00007fffec946d08 [ 686.820841][T25853] [ 687.134090][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 687.518593][T25882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4965'. [ 687.583453][T25876] lo speed is unknown, defaulting to 1000 [ 687.673178][T25885] syzkaller0: entered promiscuous mode [ 687.681531][T25885] syzkaller0: entered allmulticast mode [ 687.778668][T25890] netlink: 'syz.1.4968': attribute type 11 has an invalid length. [ 687.824126][T25890] netlink: 'syz.1.4968': attribute type 4 has an invalid length. [ 687.831935][T25890] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.4968'. [ 688.282748][T25909] netlink: 'syz.0.4975': attribute type 89 has an invalid length. [ 688.509367][T25920] syzkaller0: entered promiscuous mode [ 688.520435][T25920] syzkaller0: entered allmulticast mode [ 688.554968][T25920] macsec1: entered promiscuous mode [ 688.632951][T25928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4981'. [ 688.769718][T25928] lo speed is unknown, defaulting to 1000 [ 688.928434][T25932] FAULT_INJECTION: forcing a failure. [ 688.928434][T25932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.003831][T25932] CPU: 0 UID: 0 PID: 25932 Comm: syz.4.4983 Not tainted syzkaller #0 PREEMPT(full) [ 689.003860][T25932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.003871][T25932] Call Trace: [ 689.003878][T25932] [ 689.003885][T25932] dump_stack_lvl+0xe8/0x150 [ 689.003916][T25932] should_fail_ex+0x412/0x560 [ 689.003941][T25932] _copy_from_iter+0x3b0/0x1670 [ 689.003967][T25932] ? skb_ext_add+0x148/0x8f0 [ 689.003994][T25932] ? skb_ext_add+0x148/0x8f0 [ 689.004018][T25932] ? __pfx__copy_from_iter+0x10/0x10 [ 689.004057][T25932] ? skb_ext_add+0x3b3/0x8f0 [ 689.004083][T25932] ? dev_get_by_index+0x22/0x2e0 [ 689.004102][T25932] ? skb_put+0x11b/0x210 [ 689.004129][T25932] raw_sendmsg+0x3db/0xf90 [ 689.004160][T25932] ? __pfx_raw_sendmsg+0x10/0x10 [ 689.004184][T25932] ? lockdep_hardirqs_on+0x7a/0x110 [ 689.004209][T25932] ? aa_sock_msg_perm+0xf1/0x1b0 [ 689.004233][T25932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.004257][T25932] ? __pfx_raw_sendmsg+0x10/0x10 [ 689.004280][T25932] ____sys_sendmsg+0xa68/0xad0 [ 689.004320][T25932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.004358][T25932] ? import_iovec+0x73/0xa0 [ 689.004388][T25932] ___sys_sendmsg+0x2a5/0x360 [ 689.004418][T25932] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.004472][T25932] ? __fget_files+0x2a/0x420 [ 689.004497][T25932] ? __fget_files+0x3a0/0x420 [ 689.004531][T25932] __x64_sys_sendmsg+0x1bd/0x2a0 [ 689.004561][T25932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.004594][T25932] ? rcu_is_watching+0x15/0xb0 [ 689.004632][T25932] do_syscall_64+0x14d/0xf80 [ 689.004658][T25932] ? trace_irq_disable+0x3b/0x150 [ 689.004685][T25932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.004704][T25932] ? clear_bhb_loop+0x40/0x90 [ 689.004726][T25932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.004745][T25932] RIP: 0033:0x7f609eb9c799 [ 689.004763][T25932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.004779][T25932] RSP: 002b:00007f609fb38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.004800][T25932] RAX: ffffffffffffffda RBX: 00007f609ee15fa0 RCX: 00007f609eb9c799 [ 689.004814][T25932] RDX: 0000000004000855 RSI: 0000200000000080 RDI: 0000000000000003 [ 689.004826][T25932] RBP: 00007f609fb38090 R08: 0000000000000000 R09: 0000000000000000 [ 689.004838][T25932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.004849][T25932] R13: 00007f609ee16038 R14: 00007f609ee15fa0 R15: 00007ffd2cc043b8 [ 689.004878][T25932] [ 689.414784][T25937] lo speed is unknown, defaulting to 1000 [ 689.445416][T25944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4987'. [ 689.518174][T25946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4989'. [ 689.812092][T25961] geneve4: entered promiscuous mode [ 689.912459][T25961] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.965898][T25969] FAULT_INJECTION: forcing a failure. [ 689.965898][T25969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.011326][T25969] CPU: 0 UID: 0 PID: 25969 Comm: syz.1.4997 Not tainted syzkaller #0 PREEMPT(full) [ 690.011349][T25969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.011359][T25969] Call Trace: [ 690.011366][T25969] [ 690.011373][T25969] dump_stack_lvl+0xe8/0x150 [ 690.011400][T25969] should_fail_ex+0x412/0x560 [ 690.011422][T25969] _copy_from_iter+0x3b0/0x1670 [ 690.011446][T25969] ? skb_ext_add+0x148/0x8f0 [ 690.011476][T25969] ? skb_ext_add+0x148/0x8f0 [ 690.011497][T25969] ? __pfx__copy_from_iter+0x10/0x10 [ 690.011520][T25969] ? skb_ext_add+0x3b3/0x8f0 [ 690.011541][T25969] ? dev_get_by_index+0x22/0x2e0 [ 690.011557][T25969] ? skb_put+0x11b/0x210 [ 690.011580][T25969] raw_sendmsg+0x3db/0xf90 [ 690.011608][T25969] ? __pfx_raw_sendmsg+0x10/0x10 [ 690.011631][T25969] ? aa_sock_msg_perm+0xf1/0x1b0 [ 690.011651][T25969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.011670][T25969] ? __pfx_raw_sendmsg+0x10/0x10 [ 690.011687][T25969] ____sys_sendmsg+0xa68/0xad0 [ 690.011717][T25969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.011747][T25969] ? import_iovec+0x73/0xa0 [ 690.011771][T25969] ___sys_sendmsg+0x2a5/0x360 [ 690.011799][T25969] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.011879][T25969] ? __fget_files+0x2a/0x420 [ 690.011911][T25969] ? __fget_files+0x3a0/0x420 [ 690.011953][T25969] __x64_sys_sendmsg+0x1bd/0x2a0 [ 690.011994][T25969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 690.012025][T25969] ? __pfx_ksys_write+0x10/0x10 [ 690.012049][T25969] do_syscall_64+0x14d/0xf80 [ 690.012071][T25969] ? trace_irq_disable+0x3b/0x150 [ 690.012093][T25969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.012108][T25969] ? clear_bhb_loop+0x40/0x90 [ 690.012128][T25969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.012143][T25969] RIP: 0033:0x7f1a7959c799 [ 690.012157][T25969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.012170][T25969] RSP: 002b:00007f1a7a42a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.012186][T25969] RAX: ffffffffffffffda RBX: 00007f1a79815fa0 RCX: 00007f1a7959c799 [ 690.012198][T25969] RDX: 0000000004000855 RSI: 0000200000000080 RDI: 0000000000000003 [ 690.012207][T25969] RBP: 00007f1a7a42a090 R08: 0000000000000000 R09: 0000000000000000 [ 690.012217][T25969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.012225][T25969] R13: 00007f1a79816038 R14: 00007f1a79815fa0 R15: 00007ffce57678d8 [ 690.012250][T25969] [ 690.263653][T25962] syzkaller0: entered promiscuous mode [ 690.269262][T25962] syzkaller0: entered allmulticast mode [ 690.561221][T25961] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.658161][T25979] lo speed is unknown, defaulting to 1000 [ 690.707631][T25961] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.854141][T25961] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.953404][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 690.961484][ C1] lec:lec_tx_timeout: lec0 [ 691.202209][T26021] netlink: 'syz.3.5007': attribute type 8 has an invalid length. [ 691.402057][T21983] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.475554][T26032] FAULT_INJECTION: forcing a failure. [ 691.475554][T26032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.506134][T26033] xt_hashlimit: max too large, truncated to 1048576 [ 691.523515][T21978] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.527210][T26032] CPU: 1 UID: 0 PID: 26032 Comm: syz.1.5010 Not tainted syzkaller #0 PREEMPT(full) [ 691.527297][T26032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.527332][T26032] Call Trace: [ 691.527362][T26032] [ 691.527384][T26032] dump_stack_lvl+0xe8/0x150 [ 691.527491][T26032] should_fail_ex+0x412/0x560 [ 691.527577][T26032] _copy_to_user+0x31/0xb0 [ 691.527662][T26032] simple_read_from_buffer+0xe1/0x170 [ 691.527761][T26032] proc_fail_nth_read+0x1bb/0x230 [ 691.527902][T26032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.527999][T26032] ? rw_verify_area+0x2a6/0x4d0 [ 691.528054][T26032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.528145][T26032] vfs_read+0x20c/0xa70 [ 691.528197][T26032] ? fdget_pos+0x246/0x320 [ 691.528300][T26032] ? __pfx___mutex_lock+0x10/0x10 [ 691.528396][T26032] ? __pfx_vfs_read+0x10/0x10 [ 691.528461][T26032] ? __fget_files+0x2a/0x420 [ 691.528549][T26032] ? __fget_files+0x3a0/0x420 [ 691.528616][T26032] ? __fget_files+0x2a/0x420 [ 691.528721][T26032] ksys_read+0x150/0x270 [ 691.528790][T26032] ? __pfx_ksys_read+0x10/0x10 [ 691.528877][T26032] do_syscall_64+0x14d/0xf80 [ 691.528953][T26032] ? trace_irq_disable+0x3b/0x150 [ 691.529035][T26032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.529084][T26032] ? clear_bhb_loop+0x40/0x90 [ 691.529159][T26032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.529214][T26032] RIP: 0033:0x7f1a7955cfce [ 691.529278][T26032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 691.529332][T26032] RSP: 002b:00007f1a7a429fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 691.529410][T26032] RAX: ffffffffffffffda RBX: 00007f1a7a42a6c0 RCX: 00007f1a7955cfce [ 691.529467][T26032] RDX: 000000000000000f RSI: 00007f1a7a42a0a0 RDI: 0000000000000004 [ 691.529507][T26032] RBP: 00007f1a7a42a090 R08: 0000000000000000 R09: 0000000000000000 [ 691.529539][T26032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.529571][T26032] R13: 00007f1a79816038 R14: 00007f1a79815fa0 R15: 00007ffce57678d8 [ 691.529666][T26032] [ 691.833002][T21982] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.865892][T21982] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.903648][T26041] __nla_validate_parse: 6 callbacks suppressed [ 691.903670][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5012'. [ 692.007787][T26049] lo speed is unknown, defaulting to 1000 [ 692.085237][T26052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.151059][T26059] netlink: 'syz.0.5015': attribute type 9 has an invalid length. [ 692.363640][T24673] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 692.466609][T26065] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 692.594887][T26062] syzkaller0: entered promiscuous mode [ 692.600490][T26062] syzkaller0: entered allmulticast mode [ 692.609890][T26083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5021'. [ 692.619461][T24673] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 692.825076][T26094] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5026'. [ 693.078520][T26104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5027'. [ 695.178808][T21982] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 695.411230][T26120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5028'. [ 695.433949][T26122] netlink: 'syz.3.5029': attribute type 16 has an invalid length. [ 695.441850][T26122] netlink: 'syz.3.5029': attribute type 17 has an invalid length. [ 695.671011][T26122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 695.749853][T26133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5033'. [ 695.855592][T26143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5037'. [ 695.867497][T26145] IPVS: length: 132 != 8 [ 696.087662][T26154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5040'. [ 696.156084][T26155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5041'. [ 696.259607][T21982] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 696.279895][T21982] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 696.280036][T26164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5044'. [ 696.316713][T26167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.346226][T26164] netlink: 'syz.0.5044': attribute type 5 has an invalid length. [ 696.399187][T26167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.712383][T26190] syzkaller0: entered promiscuous mode [ 696.730922][T26190] syzkaller0: entered allmulticast mode [ 696.908567][T26202] syzkaller0: entered promiscuous mode [ 696.915278][T26202] syzkaller0: entered allmulticast mode [ 696.954024][T26203] lo speed is unknown, defaulting to 1000 [ 696.975265][T24704] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 697.079427][T26219] __nla_validate_parse: 4 callbacks suppressed [ 697.079451][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5059'. [ 697.108895][T26198] lo speed is unknown, defaulting to 1000 [ 697.274115][T26230] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 697.439027][T26225] lo speed is unknown, defaulting to 1000 [ 697.671720][T26244] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5063'. [ 697.733568][T26244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5063'. [ 698.027241][T26252] netlink: 'syz.1.5066': attribute type 1 has an invalid length. [ 698.042551][T26252] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5066'. [ 698.282019][T26268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5071'. [ 698.316704][T26271] netlink: 'syz.0.5069': attribute type 1 has an invalid length. [ 698.328099][T26271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5069'. [ 698.328919][T26272] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5070'. [ 698.350888][T26268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5071'. [ 698.389187][T26268] xt_connbytes: Forcing CT accounting to be enabled [ 698.417805][T26242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5064'. [ 698.434462][T26271] vlan4: entered promiscuous mode [ 698.444103][T26271] bond0: entered promiscuous mode [ 698.731126][T26287] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5072'. [ 699.009913][T26284] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 699.509820][T26309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 699.573763][T26312] netlink: 'syz.4.5080': attribute type 13 has an invalid length. [ 699.685323][T26322] netlink: 'syz.0.5082': attribute type 3 has an invalid length. [ 699.713995][T26322] netlink: 'syz.0.5082': attribute type 2 has an invalid length. [ 699.721896][T26322] netlink: 'syz.0.5082': attribute type 2 has an invalid length. [ 699.815771][T26327] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:0 [ 699.995562][T26340] netlink: 'syz.4.5089': attribute type 1 has an invalid length. [ 700.253574][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 700.888624][T26381] netlink: 'syz.2.5102': attribute type 3 has an invalid length. [ 700.909541][T26384] lo speed is unknown, defaulting to 1000 [ 701.166291][T26391] sctp: [Deprecated]: syz.3.5104 (pid 26391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 701.166291][T26391] Use struct sctp_sack_info instead [ 702.275281][T26428] lo speed is unknown, defaulting to 1000 [ 702.368276][T26433] __nla_validate_parse: 15 callbacks suppressed [ 702.368298][T26433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5119'. [ 702.462399][T26433] lo speed is unknown, defaulting to 1000 [ 702.482997][T26433] lo speed is unknown, defaulting to 1000 [ 702.495461][T26433] lo speed is unknown, defaulting to 1000 [ 702.758149][T26440] pim6reg: entered allmulticast mode [ 703.088519][ T24] lo speed is unknown, defaulting to 1000 [ 703.095998][T26433] infiniband syz0: set down [ 703.102307][T26433] infiniband syz0: added lo [ 703.186575][T26433] RDS/IB: syz0: added [ 703.191962][T26433] smc: adding ib device syz0 with port count 1 [ 703.238867][T26433] smc: ib device syz0 port 1 has no pnetid [ 703.257500][ T24] lo speed is unknown, defaulting to 1000 [ 703.270835][T26433] lo speed is unknown, defaulting to 1000 [ 703.304388][T26440] pim6reg: left allmulticast mode [ 703.849224][T26433] lo speed is unknown, defaulting to 1000 [ 703.988397][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5132'. [ 704.118255][T26479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5133'. [ 704.557178][T26503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5139'. [ 704.610712][T26433] lo speed is unknown, defaulting to 1000 [ 704.632183][T26484] lo speed is unknown, defaulting to 1000 [ 704.867979][T26511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5140'. [ 705.189211][T26433] lo speed is unknown, defaulting to 1000 [ 705.202572][T26518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5143'. [ 705.215763][T26518] netlink: 'syz.3.5143': attribute type 21 has an invalid length. [ 705.224062][T26518] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5143'. [ 705.248387][T26520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5144'. [ 705.412886][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5145'. [ 705.582255][T26529] netlink: 'syz.4.5147': attribute type 3 has an invalid length. [ 705.591243][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5147'. [ 705.711069][T26484] lo speed is unknown, defaulting to 1000 [ 705.914212][T26549] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 705.944187][ T51] block nbd6: Receive control failed (result -32) [ 705.945422][T17012] block nbd7: Receive control failed (result -32) [ 706.211814][T26433] lo speed is unknown, defaulting to 1000 [ 706.887621][T26433] lo speed is unknown, defaulting to 1000 [ 707.013641][T26588] bridge10: entered promiscuous mode [ 707.201444][T26593] syzkaller0: entered promiscuous mode [ 707.215162][T26593] syzkaller0: entered allmulticast mode [ 707.237836][T26593] tipc: Enabled bearer , priority 0 [ 707.304109][T26433] lo speed is unknown, defaulting to 1000 [ 707.436184][T26591] tipc: Resetting bearer [ 707.737049][T26591] tipc: Disabling bearer [ 707.807912][T26606] __nla_validate_parse: 200 callbacks suppressed [ 707.807933][T26606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5169'. [ 707.925575][T26612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5171'. [ 708.134981][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 708.229019][T26626] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5175'. [ 708.241558][T26626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5175'. [ 708.253581][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 708.289749][T26626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5175'. [ 708.466354][T26641] netlink: 'syz.3.5179': attribute type 1 has an invalid length. [ 708.503584][T26646] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5180'. [ 708.921724][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5187'. [ 709.577850][T26692] FAULT_INJECTION: forcing a failure. [ 709.577850][T26692] name failslab, interval 1, probability 0, space 0, times 0 [ 709.591429][T26692] CPU: 1 UID: 0 PID: 26692 Comm: syz.1.5195 Not tainted syzkaller #0 PREEMPT(full) [ 709.591460][T26692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.591474][T26692] Call Trace: [ 709.591483][T26692] [ 709.591492][T26692] dump_stack_lvl+0xe8/0x150 [ 709.591530][T26692] should_fail_ex+0x412/0x560 [ 709.591564][T26692] should_failslab+0xa8/0x100 [ 709.591595][T26692] __kmalloc_noprof+0xe8/0x760 [ 709.591619][T26692] ? rcu_is_watching+0x15/0xb0 [ 709.591649][T26692] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 709.591695][T26692] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 709.591738][T26692] genl_family_rcv_msg_doit+0xd9/0x330 [ 709.591780][T26692] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 709.591822][T26692] ? apparmor_capable+0x126/0x170 [ 709.591957][T26692] ? bpf_lsm_capable+0x9/0x20 [ 709.591986][T26692] ? security_capable+0x7e/0x2c0 [ 709.592047][T26692] genl_rcv_msg+0x61c/0x7a0 [ 709.592089][T26692] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.592127][T26692] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 709.592185][T26692] ? __lock_acquire+0x6b5/0x2cf0 [ 709.592227][T26692] netlink_rcv_skb+0x232/0x4b0 [ 709.592255][T26692] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.592289][T26692] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.592338][T26692] ? down_read+0x272/0x2e0 [ 709.592371][T26692] ? genl_rcv+0xd/0x40 [ 709.592404][T26692] genl_rcv+0x28/0x40 [ 709.592433][T26692] netlink_unicast+0x80f/0x9b0 [ 709.592468][T26692] ? __pfx_netlink_unicast+0x10/0x10 [ 709.592494][T26692] ? netlink_sendmsg+0x650/0xb40 [ 709.592519][T26692] ? skb_put+0x11b/0x210 [ 709.592554][T26692] netlink_sendmsg+0x813/0xb40 [ 709.592593][T26692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.592625][T26692] ? aa_sock_msg_perm+0xf1/0x1b0 [ 709.592659][T26692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 709.592685][T26692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.592710][T26692] ____sys_sendmsg+0xa68/0xad0 [ 709.592752][T26692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.592795][T26692] ? import_iovec+0x73/0xa0 [ 709.592830][T26692] ___sys_sendmsg+0x2a5/0x360 [ 709.592877][T26692] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.592950][T26692] ? __fget_files+0x2a/0x420 [ 709.592982][T26692] ? __fget_files+0x3a0/0x420 [ 709.593046][T26692] __x64_sys_sendmsg+0x1bd/0x2a0 [ 709.593083][T26692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.593126][T26692] ? __pfx_ksys_write+0x10/0x10 [ 709.593164][T26692] do_syscall_64+0x14d/0xf80 [ 709.593193][T26692] ? trace_irq_disable+0x3b/0x150 [ 709.593223][T26692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.593246][T26692] ? clear_bhb_loop+0x40/0x90 [ 709.593274][T26692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.593294][T26692] RIP: 0033:0x7f1a7959c799 [ 709.593315][T26692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.593333][T26692] RSP: 002b:00007f1a7a42a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.593355][T26692] RAX: ffffffffffffffda RBX: 00007f1a79815fa0 RCX: 00007f1a7959c799 [ 709.593371][T26692] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 709.593383][T26692] RBP: 00007f1a7a42a090 R08: 0000000000000000 R09: 0000000000000000 [ 709.593396][T26692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.593408][T26692] R13: 00007f1a79816038 R14: 00007f1a79815fa0 R15: 00007ffce57678d8 [ 709.593442][T26692] [ 710.242911][T26704] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 710.265676][T26705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5200'. [ 710.286964][T26706] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 710.362570][T26708] Cannot find del_set index 2 as target [ 710.370250][T26706] Cannot find del_set index 2 as target [ 710.388215][T26711] syzkaller0: entered promiscuous mode [ 710.393855][T26711] syzkaller0: entered allmulticast mode [ 710.552660][T26714] bond6: entered allmulticast mode [ 710.772218][T26729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5206'. [ 710.941693][T26742] netlink: 'syz.2.5210': attribute type 3 has an invalid length. [ 711.031980][T26744] x_tables: duplicate underflow at hook 1 [ 711.612083][T26776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.769993][T26784] 8021q: VLANs not supported on ip6gre0 [ 711.860123][T26787] vlan0: entered allmulticast mode [ 711.879125][T26787] bridge_slave_0: entered allmulticast mode [ 711.892281][T26787] bridge0: port 1(vlan0) entered blocking state [ 711.912645][T26787] bridge0: port 1(vlan0) entered disabled state [ 711.996511][T26790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.050735][T26796] netlink: 'syz.1.5227': attribute type 64 has an invalid length. [ 712.578160][T26813] netlink: 'syz.1.5231': attribute type 29 has an invalid length. [ 712.754914][T26826] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 712.789836][T26830] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 712.798562][T26830] openvswitch: netlink: Message has 8 unknown bytes. [ 712.832865][T26826] __nla_validate_parse: 5 callbacks suppressed [ 712.832886][T26826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5234'. [ 712.967961][T26839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5237'. [ 712.988939][T26800] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5228'. [ 713.038772][T26842] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 713.053203][T26843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5239'. [ 713.102584][T26845] syzkaller0: entered promiscuous mode [ 713.112756][T26847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5241'. [ 713.122498][T26845] syzkaller0: entered allmulticast mode [ 713.633261][T26872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5247'. [ 713.750558][T26876] openvswitch: netlink: IPv4 tun info is not correct [ 713.782308][T26876] openvswitch: netlink: IPv4 tun info is not correct [ 713.901898][T26892] netlink: 'syz.1.5252': attribute type 21 has an invalid length. [ 713.910066][T26892] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5252'. [ 713.936140][T26892] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5252'. [ 714.510644][T26930] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5261'. [ 714.537697][T26930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5261'. [ 714.618466][T10396] lec:lec_start_xmit: lec0:No lecd attached [ 715.249463][T26960] lo speed is unknown, defaulting to 1000 [ 715.302108][T26960] lo speed is unknown, defaulting to 1000 [ 716.191063][T26982] bridge0: entered promiscuous mode [ 716.256123][T26982] bridge0: port 1(macvtap1) entered blocking state [ 716.268559][T26982] bridge0: port 1(macvtap1) entered disabled state [ 716.309228][T26982] macvtap1: entered allmulticast mode [ 716.326022][T26982] bridge0: entered allmulticast mode [ 716.359724][T26982] macvtap1: left allmulticast mode [ 716.384879][T26982] bridge0: left allmulticast mode [ 716.425485][T26982] bridge0: left promiscuous mode [ 716.579422][T17012] block nbd8: Receive control failed (result -32) [ 716.725910][T27023] syzkaller0: entered promiscuous mode [ 716.746686][T27023] syzkaller0: entered allmulticast mode [ 716.757179][T27029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.866981][T27030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 716.914617][T27038] netlink: 'syz.2.5291': attribute type 11 has an invalid length. [ 717.020254][T27036] bond6: Unable to set up delay as MII monitoring is disabled [ 717.039504][T27036] bond6 (unregistering): Released all slaves [ 717.064954][T27046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.081173][T27024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.290157][T27057] FAULT_INJECTION: forcing a failure. [ 717.290157][T27057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.332170][T27057] CPU: 0 UID: 0 PID: 27057 Comm: syz.0.5295 Not tainted syzkaller #0 PREEMPT(full) [ 717.332212][T27057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.332227][T27057] Call Trace: [ 717.332237][T27057] [ 717.332247][T27057] dump_stack_lvl+0xe8/0x150 [ 717.332287][T27057] should_fail_ex+0x412/0x560 [ 717.332320][T27057] _copy_from_user+0x2d/0xb0 [ 717.332376][T27057] kstrtouint_from_user+0xd6/0x180 [ 717.332406][T27057] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 717.332451][T27057] proc_fail_nth_write+0x8e/0x210 [ 717.332483][T27057] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 717.332519][T27057] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 717.332550][T27057] vfs_write+0x29a/0xb90 [ 717.332584][T27057] ? __pfx_vfs_write+0x10/0x10 [ 717.332608][T27057] ? __fget_files+0x2a/0x420 [ 717.332644][T27057] ? __fget_files+0x3a0/0x420 [ 717.332673][T27057] ? __fget_files+0x2a/0x420 [ 717.332714][T27057] ksys_write+0x150/0x270 [ 717.332739][T27057] ? __pfx_ksys_write+0x10/0x10 [ 717.332775][T27057] do_syscall_64+0x14d/0xf80 [ 717.332806][T27057] ? trace_irq_disable+0x3b/0x150 [ 717.332836][T27057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.332858][T27057] ? clear_bhb_loop+0x40/0x90 [ 717.332885][T27057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.332907][T27057] RIP: 0033:0x7ff79b55cfce [ 717.332929][T27057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.332947][T27057] RSP: 002b:00007ff79c413fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.332971][T27057] RAX: ffffffffffffffda RBX: 00007ff79c4146c0 RCX: 00007ff79b55cfce [ 717.332987][T27057] RDX: 0000000000000001 RSI: 00007ff79c4140a0 RDI: 0000000000000003 [ 717.333001][T27057] RBP: 00007ff79c414090 R08: 0000000000000000 R09: 0000000000000000 [ 717.333014][T27057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.333027][T27057] R13: 00007ff79b816038 R14: 00007ff79b815fa0 R15: 00007ffdb2888ce8 [ 717.333063][T27057] [ 717.684964][T27056] syzkaller0: entered promiscuous mode [ 717.690602][T27056] syzkaller0: entered allmulticast mode [ 718.408507][T27110] hsr0: entered promiscuous mode [ 718.415741][T27110] __nla_validate_parse: 8 callbacks suppressed [ 718.415763][T27110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5311'. [ 718.433465][T27110] hsr_slave_0: left promiscuous mode [ 718.440474][T27110] hsr_slave_1: left promiscuous mode [ 718.451647][T27110] hsr0 (unregistering): left promiscuous mode [ 719.006785][T27138] netlink: 'syz.0.5320': attribute type 1 has an invalid length. [ 719.015104][T27138] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5320'. [ 719.120393][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5323'. [ 719.221118][T27152] openvswitch: netlink: Tunnel attr 523 out of range max 16 [ 719.297434][T27158] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5325'. [ 719.370103][T27164] netlink: 'syz.1.5329': attribute type 1 has an invalid length. [ 719.385472][T27164] netlink: 'syz.1.5329': attribute type 2 has an invalid length. [ 719.538593][T27171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5331'. [ 719.556194][T27174] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 719.679637][T27176] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 719.863896][T27189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5336'. [ 719.933351][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 719.941470][ C1] lec:lec_tx_timeout: lec0 [ 719.977739][T27203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5339'. [ 720.190613][T27207] 8021q: VLANs not supported on lo [ 720.246724][T27207] syzkaller0: entered promiscuous mode [ 720.267379][T27207] syzkaller0: entered allmulticast mode [ 720.435952][T27216] sctp: [Deprecated]: syz.0.5345 (pid 27216) Use of int in max_burst socket option. [ 720.435952][T27216] Use struct sctp_assoc_value instead [ 720.610089][T27220] tipc: Enabled bearer , priority 10 [ 720.723092][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5348'. [ 720.757115][T27226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5347'. [ 720.850162][T27233] SET target dimension over the limit! [ 720.936107][T27237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5351'. [ 721.109845][T27244] team0: Device macsec2 is already an upper device of the team interface [ 721.268415][T27258] bond2: option mode: unable to set because the bond device has slaves [ 721.310008][T27258] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 721.335813][T27258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.388370][T27262] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode [ 721.729359][T27282] .`: (slave dummy0): Releasing backup interface [ 722.097040][T27300] nbd: must specify an index to disconnect [ 722.159680][T27305] netlink: 'syz.2.5374': attribute type 1 has an invalid length. [ 722.196619][T27305] 8021q: adding VLAN 0 to HW filter on device bond10 [ 722.216228][T27305] macvlan0: entered promiscuous mode [ 722.221677][T27305] macvlan0: entered allmulticast mode [ 722.228174][T27305] bond10: entered allmulticast mode [ 722.234003][T27305] bond10: entered promiscuous mode [ 722.254380][T27305] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 722.276864][T27305] team0: Port device macvlan0 added [ 722.333963][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 722.791189][T27338] netlink: 'syz.1.5384': attribute type 1 has an invalid length. [ 722.812854][T27338] netlink: 'syz.1.5384': attribute type 1 has an invalid length. [ 722.832001][T27335] 0X: left allmulticast mode [ 722.844762][T27335] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 723.161992][T27358] batman_adv: batadv0: Removing interface: macvtap1 [ 723.427154][T27369] lo speed is unknown, defaulting to 1000 [ 723.454140][T27369] lo speed is unknown, defaulting to 1000 [ 723.701312][T27387] : entered promiscuous mode [ 723.884218][T27399] __nla_validate_parse: 11 callbacks suppressed [ 723.884238][T27399] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5396'. [ 723.904361][T27399] netlink: 'syz.0.5396': attribute type 5 has an invalid length. [ 723.914805][T27390] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.039473][T27390] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.115349][T27390] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.177778][T27405] netlink: 'syz.3.5400': attribute type 9 has an invalid length. [ 724.195448][T27390] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.219271][T27403] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 724.229153][T27403] syzkaller1: linktype set to 768 [ 724.253545][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 724.516383][T21982] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.534957][T27413] syzkaller0: entered promiscuous mode [ 724.540536][T27413] syzkaller0: entered allmulticast mode [ 724.564130][T21979] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.610403][T27430] Cannot find add_set index 3 as target [ 724.654154][T27428] netlink: 'syz.2.5407': attribute type 5 has an invalid length. [ 724.684462][T21982] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.208497][T21979] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.317480][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5411'. [ 725.342743][T27448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5411'. [ 725.409339][T27448] netlink: 'syz.2.5411': attribute type 1 has an invalid length. [ 725.475305][T27448] veth9: entered promiscuous mode [ 725.637654][T27462] : renamed from vlan0 (while UP) [ 725.797420][T27468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5418'. [ 725.830947][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5418'. [ 725.845669][T27470] xt_HMARK: spi-set and port-set can't be combined [ 725.896317][T27478] netlink: 'syz.2.5422': attribute type 9 has an invalid length. [ 725.904154][T27470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5419'. [ 725.925059][T27478] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.5422'. [ 726.019769][T27475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5421'. [ 726.231245][T27489] : renamed from vlan0 [ 726.469369][T27494] lo speed is unknown, defaulting to 1000 [ 726.495028][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5426'. [ 726.541612][T27494] lo speed is unknown, defaulting to 1000 [ 726.657070][T27504] lo speed is unknown, defaulting to 1000 [ 726.832621][T27534] tipc: Enabled bearer , priority 14 [ 726.846851][T27534] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5435'. [ 726.877026][T27534] 0X: renamed from caif0 [ 726.903073][T27534] tipc: Disabling bearer [ 726.931335][T27534] 0X: entered allmulticast mode [ 726.947133][T27534] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 727.460642][T27555] sctp: [Deprecated]: syz.1.5443 (pid 27555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.460642][T27555] Use struct sctp_sack_info instead [ 727.668580][T27547] erspan1: entered promiscuous mode [ 727.680869][T27504] lo speed is unknown, defaulting to 1000 [ 728.505225][T27596] xt_bpf: check failed: parse error [ 728.678673][T27604] netlink: 'syz.1.5455': attribute type 1 has an invalid length. [ 728.885395][T27606] 8021q: adding VLAN 0 to HW filter on device bond9 [ 728.932863][T27604] 8021q: adding VLAN 0 to HW filter on device bond9 [ 728.983867][T27604] bond9: (slave geneve5): making interface the new active one [ 728.993058][T27604] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 729.026936][T21982] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 729.082750][T21982] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 729.120754][T27616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 729.164885][T21982] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 729.232353][T21982] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 729.557211][T27632] : renamed from vlan0 (while UP) [ 729.612925][T27639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.648098][T24673] lo speed is unknown, defaulting to 1000 [ 729.658640][T24673] syz2: Port: 1 Link DOWN [ 729.916729][T27660] __nla_validate_parse: 4 callbacks suppressed [ 729.916750][T27660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5471'. [ 730.247915][T27672] netlink: 'syz.0.5475': attribute type 2 has an invalid length. [ 730.617991][T27693] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 730.672115][T27698] netlink: 'syz.0.5483': attribute type 10 has an invalid length. [ 730.687330][T27698] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5483'. [ 730.718758][T27698] bridge0: port 1(bond0) entered blocking state [ 730.728887][T27698] bridge0: port 1(bond0) entered disabled state [ 730.750738][T27705] netlink: 'syz.0.5483': attribute type 21 has an invalid length. [ 730.788309][T27698] bond0: entered allmulticast mode [ 730.795911][T27705] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5483'. [ 730.826484][T27693] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 730.854729][T27705] netlink: 'syz.0.5483': attribute type 3 has an invalid length. [ 730.863186][T27705] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5483'. [ 730.914166][T27693] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 731.062643][T27693] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 731.150467][T27723] netlink: 'syz.4.5490': attribute type 1 has an invalid length. [ 731.198269][T21982] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 731.232591][T21982] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 731.269635][T21982] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 731.306184][T21982] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 731.368449][T27726] syzkaller0: entered promiscuous mode [ 731.374382][T27726] syzkaller0: entered allmulticast mode [ 731.730136][T27732] lo speed is unknown, defaulting to 1000 [ 731.749907][T27732] lo speed is unknown, defaulting to 1000 [ 732.035112][T27751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5498'. [ 732.277537][T27759] syzkaller0: mtu less than device minimum [ 732.917939][T27791] batadv_slave_0: Caught tx_queue_len zero misconfig [ 733.194042][T27806] lo speed is unknown, defaulting to 1000 [ 733.212661][T27806] lo speed is unknown, defaulting to 1000 [ 733.833994][T27838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'. [ 734.235292][T27853] netlink: 'syz.4.5526': attribute type 1 has an invalid length. [ 734.402424][T27858] bond7: entered promiscuous mode [ 734.408904][T27858] bond7: entered allmulticast mode [ 734.439131][T27858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 734.462824][T27853] netlink: 'syz.4.5526': attribute type 32 has an invalid length. [ 734.475542][T27862] batadv0: entered promiscuous mode [ 734.481518][T27862] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 734.568983][T27864] bridge11: entered promiscuous mode [ 734.595480][T27864] bridge11: entered allmulticast mode [ 734.601744][T27864] bond7: (slave bridge11): Enslaving as a backup interface with an up link [ 734.624187][T21978] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 734.711429][T27877] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5532'. [ 734.721144][T27877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5532'. [ 734.754882][T21984] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 735.091193][T27899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5534'. [ 735.146452][T27868] lo speed is unknown, defaulting to 1000 [ 735.241670][T27868] lo speed is unknown, defaulting to 1000 [ 735.274909][T27865] lo speed is unknown, defaulting to 1000 [ 735.449440][T27917] x_tables: duplicate underflow at hook 2 [ 735.526053][T27917] netlink: 'syz.1.5539': attribute type 1 has an invalid length. [ 735.563412][T27917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5539'. [ 735.722265][T27920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5540'. [ 735.860709][T27865] lo speed is unknown, defaulting to 1000 [ 735.965142][T27928] openvswitch: netlink: Flow actions attr not present in new flow. [ 735.990674][T27929] openvswitch: netlink: Flow actions attr not present in new flow. [ 736.000591][ T30] audit: type=1800 audit(1772572511.152:12): pid=27923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5541" name="memory.events" dev="tmpfs" ino=2823 res=0 errno=0 [ 736.575264][T27958] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5546'. [ 737.071862][T27933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5545'. [ 737.249393][T27953] syzkaller1: entered promiscuous mode [ 737.274767][T27953] syzkaller1: entered allmulticast mode [ 737.292329][T27970] tipc: Enabling of bearer rejected, already enabled [ 737.666904][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5551'. [ 738.047834][T27999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5556'. [ 738.355459][T28002] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 738.678479][T28021] syzkaller0: entered promiscuous mode [ 738.697761][T28021] syzkaller0: entered allmulticast mode [ 738.912250][T28040] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 738.985049][T28036] tipc: Enabling of bearer rejected, failed to enable media [ 739.261923][T28059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5576'. [ 739.319072][T28063] netlink: 'syz.4.5578': attribute type 6 has an invalid length. [ 739.331219][T28065] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5578'. [ 739.744913][T28089] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 739.752859][T28089] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 739.780004][T28089] tipc: Enabled bearer , priority 0 [ 739.895474][T28095] sctp: [Deprecated]: syz.0.5588 (pid 28095) Use of int in maxseg socket option. [ 739.895474][T28095] Use struct sctp_assoc_value instead [ 740.217419][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5595'. [ 740.251911][T28118] bond0: (slave bond_slave_0): Releasing backup interface [ 740.290958][T28124] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5598'. [ 740.299421][T28118] bond0: (slave bond_slave_1): Releasing backup interface [ 740.365554][T28118] team0: Port device team_slave_0 removed [ 740.402975][T28118] team0: Port device team_slave_1 removed [ 740.410081][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5599'. [ 740.420712][T28118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.420753][T28118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.442369][T28118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.465219][T28118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.476228][T28118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 740.675513][T28139] netlink: 'syz.2.5603': attribute type 13 has an invalid length. [ 740.675687][T28138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5602'. [ 740.749887][T28145] netlink: 'syz.1.5604': attribute type 1 has an invalid length. [ 740.757356][T28139] netlink: 'syz.2.5603': attribute type 13 has an invalid length. [ 740.809680][T28151] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5604'. [ 741.154530][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 741.171849][T28171] netlink: 'syz.0.5609': attribute type 21 has an invalid length. [ 741.212117][T28181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5609'. [ 741.250014][T28168] syzkaller0: entered promiscuous mode [ 741.272737][T28168] syzkaller0: entered allmulticast mode [ 741.299377][T28172] netlink: 340 bytes leftover after parsing attributes in process `syz.4.5611'. [ 741.582139][T28195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5616'. [ 741.617993][T28195] xfrm1: entered allmulticast mode [ 741.821058][T28208] netlink: 'syz.0.5621': attribute type 21 has an invalid length. [ 741.831384][T28208] netlink: 'syz.0.5621': attribute type 3 has an invalid length. [ 741.988136][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5624'. [ 742.080802][T28223] netlink: 'syz.0.5625': attribute type 49 has an invalid length. [ 742.609237][T28254] netlink: 'syz.3.5637': attribute type 58 has an invalid length. [ 742.889714][T28268] IPVS: set_ctl: invalid protocol: 58 172.20.20.31:20004 [ 743.160063][T28285] netlink: 'syz.2.5645': attribute type 1 has an invalid length. [ 743.349095][T28291] 8021q: adding VLAN 0 to HW filter on device bond11 [ 743.590687][T28304] bridge0: entered allmulticast mode [ 744.348900][ T30] audit: type=1804 audit(1772572519.512:13): pid=28344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5661" name="/newroot/523/cgroup.controllers" dev="tmpfs" ino=2679 res=1 errno=0 [ 744.410807][ T30] audit: type=1800 audit(1772572519.512:14): pid=28344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5661" name="cgroup.controllers" dev="tmpfs" ino=2679 res=0 errno=0 [ 745.006695][T28334] bridge_slave_0: left promiscuous mode [ 745.399878][T28360] validate_nla: 2 callbacks suppressed [ 745.399913][T28360] netlink: 'syz.4.5664': attribute type 1 has an invalid length. [ 745.745297][T28334] bond1: left promiscuous mode [ 745.779125][T28334] geneve2: left promiscuous mode [ 745.809462][T28334] veth1_to_hsr: left allmulticast mode [ 745.816035][T28334] macvtap2: left promiscuous mode [ 745.821130][T28334] macvtap2: left allmulticast mode [ 745.847063][T28334] team1: left promiscuous mode [ 745.851928][T28334] team1: left allmulticast mode [ 745.868169][T28334] team2: left promiscuous mode [ 745.872988][T28334] team2: left allmulticast mode [ 745.894066][T28334] bond9: left promiscuous mode [ 745.899363][T28334] wireguard0: left promiscuous mode [ 745.944239][T28334] bond10: left allmulticast mode [ 745.949281][T28334] bond10: left promiscuous mode [ 745.955651][T28334] macvlan0: left promiscuous mode [ 745.960748][T28334] macvlan0: left allmulticast mode [ 746.023824][T28341] hsr_slave_0: left promiscuous mode [ 746.040859][T28341] hsr_slave_1: left promiscuous mode [ 746.088770][T28360] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 746.162912][T21977] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.182798][T21977] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 746.192022][T21977] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.202203][T21977] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.212750][T21977] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 746.222055][T21977] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.244152][T28373] veth0: entered promiscuous mode [ 746.250114][T28370] veth0: left promiscuous mode [ 746.256608][T21977] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.265661][T21977] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 746.294021][T21977] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.302475][T21977] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.351767][T21977] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 746.367999][T21977] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.564695][T28387] nbd9: detected capacity change from 0 to 127 [ 746.597112][T17012] block nbd9: Receive control failed (result -104) [ 746.926997][T28419] netlink: 'syz.4.5678': attribute type 1 has an invalid length. [ 746.952335][T28419] bond8: entered promiscuous mode [ 746.958270][T28419] 8021q: adding VLAN 0 to HW filter on device bond8 [ 746.969554][T28419] __nla_validate_parse: 15 callbacks suppressed [ 746.969570][T28419] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5678'. [ 746.999185][T28419] bond8: (slave bridge12): making interface the new active one [ 747.007085][T28419] bridge12: entered promiscuous mode [ 747.014856][T28419] bond8: (slave bridge12): Enslaving as an active interface with an up link [ 747.297864][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.309228][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 747.655259][T28446] lo speed is unknown, defaulting to 1000 [ 747.666666][T28446] lo speed is unknown, defaulting to 1000 [ 747.722885][T28451] lo speed is unknown, defaulting to 1000 [ 747.818468][T28457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5688'. [ 748.126325][T28451] lo speed is unknown, defaulting to 1000 [ 748.456453][T28481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5694'. [ 748.614934][T28483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5695'. [ 748.852130][T28485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5696'. [ 749.105841][T28493] bridge13: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 749.172219][T28499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5699'. [ 749.303023][T28498] lo speed is unknown, defaulting to 1000 [ 749.328502][T28502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5700'. [ 749.350492][T28498] lo speed is unknown, defaulting to 1000 [ 749.570165][T28506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5701'. [ 749.736312][T28516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5704'. [ 749.797299][T28517] bond9: option tlb_dynamic_lb: invalid value (48) [ 749.815163][T28517] bond9 (unregistering): Released all slaves [ 749.893707][T28516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5704'. [ 750.038268][T17012] block nbd10: Receive control failed (result -32) [ 750.279508][T28537] openvswitch: netlink: IP tunnel dst address not specified [ 750.427633][T28545] syzkaller0: entered promiscuous mode [ 750.433199][T28545] syzkaller0: entered allmulticast mode [ 751.053806][T28574] netlink: 'syz.3.5719': attribute type 2 has an invalid length. [ 751.538165][T28601] gre0: entered promiscuous mode [ 751.574833][T28601] gre0: entered allmulticast mode [ 751.709242][T28610] netlink: set zone limit has 4 unknown bytes [ 751.938539][T28619] sock: sock_timestamping_bind_phc: sock not bind to device [ 751.978267][T28619] __nla_validate_parse: 9 callbacks suppressed [ 751.978293][T28619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5731'. [ 751.993988][T28619] IPVS: Unknown mcast interface: vcan0 [ 752.020048][T28623] netlink: 'syz.4.5730': attribute type 6 has an invalid length. [ 752.087307][T28619] xt_CT: No such helper "syz0" [ 752.198418][T28636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5734'. [ 752.276006][T28642] bond0: left allmulticast mode [ 752.291636][T28642] bridge0: port 1(bond0) entered disabled state [ 752.340953][T28642] bond1: (slave wireguard0): Releasing backup interface [ 752.373123][T28642] wireguard0: left promiscuous mode [ 752.469972][ T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 752.629128][T28655] syzkaller1: entered allmulticast mode [ 752.644085][T28665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5741'. [ 752.681865][T28670] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 752.690021][T28670] netlink: 'syz.2.5742': attribute type 2 has an invalid length. [ 752.699264][T28670] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 752.713904][T28670] netlink: 'syz.2.5742': attribute type 2 has an invalid length. [ 752.730744][T28670] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5742'. [ 752.749067][T28665] bond7: entered promiscuous mode [ 752.764165][T28665] 8021q: adding VLAN 0 to HW filter on device bond7 [ 752.779373][T28670] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 752.805390][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5742'. [ 752.838983][T28670] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 752.847886][T28680] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5744'. [ 752.882474][T28673] 8021q: adding VLAN 0 to HW filter on device bond8 [ 752.891163][T28673] bond8: entered promiscuous mode [ 752.894203][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 752.904391][ C1] lec:lec_tx_timeout: lec0 [ 752.909017][T28673] bond7: (slave bond8): Enslaving as an active interface with an up link [ 752.953628][ T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 753.080024][T28680] netlink: 'syz.3.5744': attribute type 11 has an invalid length. [ 753.099769][T28680] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5744'. [ 753.262375][T28684] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 753.340311][T28680] gretap3: entered promiscuous mode [ 753.419877][T28698] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.5748'. [ 753.640479][T28721] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 753.659391][T28721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5752'. [ 754.190140][T28757] lo speed is unknown, defaulting to 1000 [ 754.190298][T28761] netlink: 'syz.4.5761': attribute type 39 has an invalid length. [ 754.212316][T28757] lo speed is unknown, defaulting to 1000 [ 754.801195][T28786] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5764'. [ 754.912040][T28785] 0{X: renamed from gretap0 (while UP) [ 754.959625][T28785] 0{X: entered allmulticast mode [ 754.986929][T28785] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 755.256765][T28780] lo speed is unknown, defaulting to 1000 [ 755.298028][T28780] lo speed is unknown, defaulting to 1000 [ 755.613594][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 755.985739][T28823] lo speed is unknown, defaulting to 1000 [ 756.029803][T28821] lo speed is unknown, defaulting to 1000 [ 756.206381][T28823] lo speed is unknown, defaulting to 1000 [ 756.640351][T28821] lo speed is unknown, defaulting to 1000 [ 756.956829][T28852] netlink: 'syz.0.5782': attribute type 7 has an invalid length. [ 756.995052][T28852] netlink: 'syz.0.5782': attribute type 8 has an invalid length. [ 758.095881][T28876] lo speed is unknown, defaulting to 1000 [ 758.126837][T28876] lo speed is unknown, defaulting to 1000 [ 758.256327][T28887] __nla_validate_parse: 4 callbacks suppressed [ 758.256351][T28887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5790'. [ 758.955586][T28904] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5796'. [ 758.977822][T28904] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5796'. [ 758.990357][T28905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5795'. [ 759.235208][T28905] bond11: (slave vcan1): The slave device specified does not support setting the MAC address [ 759.286163][T28905] bond11: (slave vcan1): Error -95 calling set_mac_address [ 759.656835][T28924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5799'. [ 760.720702][T28961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5810'. [ 761.277009][T28978] tipc: Enabling of bearer rejected, already enabled [ 761.872827][T29004] lo speed is unknown, defaulting to 1000 [ 761.881665][T29004] lo speed is unknown, defaulting to 1000 [ 761.930833][T29006] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5820'. [ 761.940266][T29006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5820'. [ 761.949974][T29006] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5820'. [ 761.972373][T29006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5820'. [ 763.501709][T29035] syzkaller0: entered promiscuous mode [ 763.573578][T29035] syzkaller0: entered allmulticast mode [ 763.676542][T29035] tipc: Started in network mode [ 763.681508][T29035] tipc: Node identity 02b777fad4ec, cluster identity 4711 [ 763.691486][T29035] tipc: Enabled bearer , priority 0 [ 763.753578][T29034] tipc: Resetting bearer [ 763.866425][T29034] tipc: Disabling bearer [ 764.169091][T29039] syzkaller0: entered promiscuous mode [ 764.179475][T29039] syzkaller0: entered allmulticast mode [ 764.368661][T29045] tipc: Enabled bearer , priority 0 [ 764.380131][T29044] macvlan0: mtu less than device minimum [ 764.447316][T29038] tipc: Resetting bearer [ 764.555626][T29050] __nla_validate_parse: 1 callbacks suppressed [ 764.555652][T29050] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5831'. [ 764.632166][T29038] tipc: Disabling bearer [ 764.702465][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 764.708344][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.714537][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.720134][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.752617][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 764.759235][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.765266][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.793757][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.799415][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.858802][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 764.864601][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 764.880006][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.900379][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 764.913881][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 764.995903][T29063] bond12: option lacp_rate: invalid value (128) [ 765.023114][T29069] netlink: 2236 bytes leftover after parsing attributes in process `syz.1.5833'. [ 765.070147][T29063] bond12 (unregistering): Released all slaves [ 765.114136][T29073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5834'. [ 765.196933][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 765.202332][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 765.316412][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 765.323739][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 765.329922][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 765.343066][T29075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.380292][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 765.386520][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 765.392265][T29057] dvmrp1: tun_chr_ioctl cmd 21731 [ 765.462541][T29056] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 765.556253][T29082] sctp: [Deprecated]: syz.1.5840 (pid 29082) Use of int in max_burst socket option deprecated. [ 765.556253][T29082] Use struct sctp_assoc_value instead [ 765.647619][T29082] : renamed from vlan0 [ 765.717490][T29083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5839'. [ 765.817963][T29087] bridge0: entered promiscuous mode [ 765.850895][T28874] Set syz1 is full, maxelem 65536 reached [ 765.855527][T29087] vlan0: entered promiscuous mode [ 765.924345][T29083] lo speed is unknown, defaulting to 1000 [ 765.938528][T29083] lo speed is unknown, defaulting to 1000 [ 766.024778][T29095] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5845'. [ 766.275299][T29107] syzkaller0: entered promiscuous mode [ 766.301587][T29107] syzkaller0: entered allmulticast mode [ 766.979133][T29130] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5853'. [ 767.228681][T29137] bond12: entered promiscuous mode [ 767.240366][T29137] 8021q: adding VLAN 0 to HW filter on device bond12 [ 767.275141][T29139] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5854'. [ 767.443919][T29143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.788147][T29153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5859'. [ 768.236898][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.248467][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.266592][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.275487][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.283515][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 768.351991][T17012] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.368382][T17012] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.376122][T17012] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.426670][T17012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.436069][T17012] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 768.618154][T29169] lo speed is unknown, defaulting to 1000 [ 768.629798][T29182] netlink: 'syz.3.5867': attribute type 10 has an invalid length. [ 768.645353][T29169] lo speed is unknown, defaulting to 1000 [ 768.703655][T29183] netlink: 'syz.3.5867': attribute type 10 has an invalid length. [ 768.730362][T29182] team0: Port device dummy0 added [ 768.796537][T29183] team0: Port device dummy0 removed [ 768.818093][T29183] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 769.041477][T29187] lo speed is unknown, defaulting to 1000 [ 769.075531][T29190] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 769.296721][T29187] lo speed is unknown, defaulting to 1000 [ 769.871103][T29218] netlink: 'syz.4.5878': attribute type 1 has an invalid length. [ 769.893457][T29218] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5878'. [ 770.495892][T17012] Bluetooth: hci1: command tx timeout [ 770.602596][T29226] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 770.616671][T29226] bond13 (unregistering): Released all slaves [ 770.676645][T29239] tipc: Enabling of bearer rejected, already enabled [ 770.707905][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5882'. [ 770.729326][T29245] tipc: Resetting bearer [ 770.748053][T29169] chnl_net:caif_netlink_parms(): no params data found [ 771.116362][T29250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5884'. [ 771.512776][T29169] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.569456][T29169] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.584879][T29169] bridge_slave_0: entered allmulticast mode [ 771.601839][T29169] bridge_slave_0: entered promiscuous mode [ 771.619358][T29169] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.628742][T29281] netlink: 'syz.3.5891': attribute type 1 has an invalid length. [ 771.644747][T29169] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.668421][T29169] bridge_slave_1: entered allmulticast mode [ 771.687902][T29169] bridge_slave_1: entered promiscuous mode [ 771.702640][T29283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5893'. [ 771.716167][T29280] tipc: Resetting bearer [ 771.734982][T29289] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5893'. [ 771.817053][T29169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.841263][T29169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.926742][T21981] tipc: Resetting bearer [ 771.995774][T29169] team0: Port device team_slave_0 added [ 772.028163][T29169] team0: Port device team_slave_1 added [ 772.079836][T29169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.087449][T29169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.130440][T29169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.144339][T29169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.151672][T29169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.180735][T29169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.251463][T29169] hsr_slave_0: entered promiscuous mode [ 772.259459][T29169] hsr_slave_1: entered promiscuous mode [ 772.474393][T29304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5896'. [ 772.573354][T17012] Bluetooth: hci1: command tx timeout [ 772.763826][T29308] nbd: must specify an index to disconnect [ 772.906015][T29311] netlink: 'syz.1.5899': attribute type 1 has an invalid length. [ 772.926434][T29313] netlink: 'syz.1.5899': attribute type 1 has an invalid length. [ 773.038608][T29311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5899'. [ 773.088692][T29313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5899'. [ 773.166932][T29305] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5897'. [ 773.203220][T29313] bond13 (unregistering): Released all slaves [ 773.295050][T29317] lo speed is unknown, defaulting to 1000 [ 773.415199][T29317] lo speed is unknown, defaulting to 1000 [ 773.582555][T29169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 773.650959][T29169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 773.772730][T29169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 773.880559][T29169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 774.180643][T29331] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5904'. [ 774.390483][T29169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.438290][T29169] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.460752][T21977] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.468048][T21977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.508311][T21977] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.515551][T21977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.654373][T17012] Bluetooth: hci1: command tx timeout [ 775.225536][T29169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.442231][T21978] tipc: Resetting bearer [ 775.480556][T29169] veth0_vlan: entered promiscuous mode [ 775.521467][T29169] veth1_vlan: entered promiscuous mode [ 775.625471][T29169] veth0_macvtap: entered promiscuous mode [ 775.714650][T29169] veth1_macvtap: entered promiscuous mode [ 775.881545][T29169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.917426][T29169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.988961][T21981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.023935][T21981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.051249][T21981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.081970][T21981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.128348][T29370] macsec0: entered allmulticast mode [ 776.142380][T29370] veth1_macvtap: entered allmulticast mode [ 776.161752][T29370] macsec0: left allmulticast mode [ 776.188603][T29370] veth1_macvtap: left allmulticast mode [ 776.424820][T21981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.432722][T21981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.575026][T21981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.610969][T21981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.739015][T17012] Bluetooth: hci1: command tx timeout [ 776.747661][ T1759] block nbd9: Possible stuck request ffff888026f58000: control (read@0,1024B). Runtime 30 seconds [ 776.760828][ T1759] block nbd9: Possible stuck request ffff888026f58200: control (read@1024,1024B). Runtime 30 seconds [ 776.771903][ T1759] block nbd9: Possible stuck request ffff888026f58400: control (read@2048,1024B). Runtime 30 seconds [ 776.783009][ T1759] block nbd9: Possible stuck request ffff888026f58600: control (read@3072,1024B). Runtime 30 seconds [ 777.336023][T29411] sctp: [Deprecated]: syz.4.5921 (pid 29411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 777.336023][T29411] Use struct sctp_sack_info instead [ 777.706752][T29426] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 778.189910][T29451] sctp: [Deprecated]: syz.4.5933 (pid 29451) Use of int in max_burst socket option deprecated. [ 778.189910][T29451] Use struct sctp_assoc_value instead [ 778.276874][T29454] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 778.286999][T29441] syzkaller0: entered promiscuous mode [ 778.292555][T29441] syzkaller0: entered allmulticast mode [ 778.634692][T17012] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 778.645535][T17012] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 778.655442][T17012] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 778.665474][T17012] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 778.679446][T17012] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 779.538214][T10396] lec:lec_start_xmit: lec0:No lecd attached [ 780.744500][T17012] Bluetooth: hci5: command tx timeout [ 781.928129][T29485] tipc: Enabling of bearer rejected, failed to enable media [ 781.941982][T29497] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 782.034771][T29463] lo speed is unknown, defaulting to 1000 [ 782.042792][T29463] lo speed is unknown, defaulting to 1000 [ 782.602982][T29526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5949'. [ 782.626628][T29521] lo speed is unknown, defaulting to 1000 [ 782.669973][T29521] lo speed is unknown, defaulting to 1000 [ 782.735133][T29534] netlink: 'syz.3.5950': attribute type 3 has an invalid length. [ 782.753087][T29534] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5950'. [ 782.823617][T17012] Bluetooth: hci5: command tx timeout [ 783.008062][T29544] pim6reg: entered allmulticast mode [ 783.051137][T29544] pim6reg: left allmulticast mode [ 783.145027][T29463] chnl_net:caif_netlink_parms(): no params data found [ 783.417927][T29463] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.426247][T29463] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.435619][T29463] bridge_slave_0: entered allmulticast mode [ 783.444327][T29463] bridge_slave_0: entered promiscuous mode [ 783.469810][T29463] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.483136][T29463] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.491043][T29463] bridge_slave_1: entered allmulticast mode [ 783.503950][T29463] bridge_slave_1: entered promiscuous mode [ 783.522672][T29554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5947'. [ 783.622439][T29463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.638611][T29463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.711358][T29568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5957'. [ 783.721576][T29463] team0: Port device team_slave_0 added [ 783.746258][T29569] : entered promiscuous mode [ 783.755717][T29566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5957'. [ 783.766463][T29562] netlink: 'syz.2.5956': attribute type 9 has an invalid length. [ 783.782830][T29463] team0: Port device team_slave_1 added [ 783.835306][T29569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5958'. [ 783.977952][T29463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.985361][T29463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.036322][T29463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.076199][T29463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.083651][T29463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.126429][T29463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.148880][T29583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5961'. [ 784.341500][T29463] hsr_slave_0: entered promiscuous mode [ 784.368875][T29463] hsr_slave_1: entered promiscuous mode [ 784.403983][T29463] debugfs: 'hsr0' already exists in 'hsr' [ 784.410218][T29463] Cannot create hsr debugfs directory [ 784.759785][T29598] lo speed is unknown, defaulting to 1000 [ 784.782991][T29598] lo speed is unknown, defaulting to 1000 [ 784.893521][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 784.901646][ C1] lec:lec_tx_timeout: lec0 [ 784.913528][T17012] Bluetooth: hci5: command tx timeout [ 785.038391][T29463] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 785.096258][T29613] netlink: 'syz.4.5968': attribute type 1 has an invalid length. [ 785.142738][T29613] 8021q: adding VLAN 0 to HW filter on device bond9 [ 785.272489][T29615] bond9: (slave veth11): Enslaving as an active interface with a down link [ 785.414609][T29613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.436815][T29613] bond9: (slave batadv0): making interface the new active one [ 785.464326][T29613] batadv0: entered promiscuous mode [ 785.473959][T29613] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 785.613144][T29463] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 785.757286][T29463] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 785.882863][T29463] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 786.177608][T29639] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5974'. [ 786.311699][T29463] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 786.357008][T29641] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5975'. [ 786.389523][T29463] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 786.409611][T29463] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 786.434600][T29463] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 786.763217][T29463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.821561][T29661] lo speed is unknown, defaulting to 1000 [ 786.848057][T29463] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.861364][T29661] lo speed is unknown, defaulting to 1000 [ 786.872417][T21978] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.879710][T21978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.955010][T21977] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.962299][T21977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.976186][T17012] Bluetooth: hci5: command tx timeout [ 787.077279][T29672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5984'. [ 787.098422][T29670] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003 [ 787.287210][T29679] sctp: [Deprecated]: syz.3.5986 (pid 29679) Use of int in maxseg socket option. [ 787.287210][T29679] Use struct sctp_assoc_value instead [ 787.341374][T29680] x_tables: duplicate underflow at hook 2 [ 787.535473][T29463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.563118][T29692] netlink: set zone limit has 8 unknown bytes [ 787.563159][T29690] netlink: set zone limit has 8 unknown bytes [ 787.693731][T29693] lo speed is unknown, defaulting to 1000 [ 787.869342][T29693] lo speed is unknown, defaulting to 1000 [ 787.889710][T29463] veth0_vlan: entered promiscuous mode [ 787.992266][T29463] veth1_vlan: entered promiscuous mode [ 788.097203][T29463] veth0_macvtap: entered promiscuous mode [ 788.113667][T29463] veth1_macvtap: entered promiscuous mode [ 788.171646][T29463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.199567][T29463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.237582][T21979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.263188][T29711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5993'. [ 788.278814][T21979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.287865][T21979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.304220][T21979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.494790][T21984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.523053][T21984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.588082][T21984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.598259][T21984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.772545][T29701] lo speed is unknown, defaulting to 1000 [ 788.909049][T29719] bpq0: entered promiscuous mode [ 788.919465][T29719] bpq0: entered allmulticast mode [ 788.929892][T29701] lo speed is unknown, defaulting to 1000 [ 789.481746][T17012] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 789.492171][T17012] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 789.500441][T17012] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 789.510154][T17012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 789.519315][T17012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.565774][T29740] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 789.671101][T29737] lo speed is unknown, defaulting to 1000 [ 789.711693][T29737] lo speed is unknown, defaulting to 1000 [ 789.840341][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 789.858043][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 789.884387][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 789.904103][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 789.934353][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 789.953931][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 789.983635][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 790.009584][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 790.022361][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 790.055542][T29744] tipc: Resetting bearer [ 790.105283][ T9585] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 790.268255][T29751] syzkaller1: entered promiscuous mode [ 790.281141][T29751] syzkaller1: entered allmulticast mode [ 790.340677][T29758] netlink: 'syz.0.6006': attribute type 3 has an invalid length. [ 790.356626][T29758] netlink: 'syz.0.6006': attribute type 3 has an invalid length. [ 790.495865][ T9624] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 790.849964][T29770] syz_tun: entered promiscuous mode [ 790.999358][T29737] chnl_net:caif_netlink_parms(): no params data found [ 791.419170][T29737] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.440794][T29737] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.472193][T29737] bridge_slave_0: entered allmulticast mode [ 791.484730][T29800] netlink: 'syz.4.6017': attribute type 2 has an invalid length. [ 791.502957][T29737] bridge_slave_0: entered promiscuous mode [ 791.519751][T29800] netlink: 'syz.4.6017': attribute type 2 has an invalid length. [ 791.582490][T29737] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.608220][T29737] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.616751][ T51] Bluetooth: hci3: command tx timeout [ 791.626718][T29737] bridge_slave_1: entered allmulticast mode [ 791.635879][T29737] bridge_slave_1: entered promiscuous mode [ 791.711157][T29737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.728419][T29737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.798041][T29737] team0: Port device team_slave_0 added [ 791.807189][T29737] team0: Port device team_slave_1 added [ 791.883633][T29825] sctp: [Deprecated]: syz.0.6025 (pid 29825) Use of int in max_burst socket option. [ 791.883633][T29825] Use struct sctp_assoc_value instead [ 791.910730][T29737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.927169][T29737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.959823][T29737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.982508][T29817] lo speed is unknown, defaulting to 1000 [ 791.990126][T29817] lo speed is unknown, defaulting to 1000 [ 792.161079][T29826] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.168964][T29826] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.390270][T29826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.408559][T29826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.534934][T29737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.553613][T29737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.581126][T29737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.637505][T21978] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.663366][T21978] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.672399][T21978] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.740685][T21978] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.764488][T29839] netlink: 'syz.1.6028': attribute type 46 has an invalid length. [ 792.900994][T29737] hsr_slave_0: entered promiscuous mode [ 792.908645][T29737] hsr_slave_1: entered promiscuous mode [ 792.915367][T29737] debugfs: 'hsr0' already exists in 'hsr' [ 792.921157][T29737] Cannot create hsr debugfs directory [ 793.215939][T29847] vlan2: entered promiscuous mode [ 793.221767][T29847] bond0: entered promiscuous mode [ 793.239460][T29847] bond_slave_0: entered promiscuous mode [ 793.255280][T29847] bond_slave_1: entered promiscuous mode [ 793.375335][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 793.696371][ T51] Bluetooth: hci3: command tx timeout [ 793.762020][T29885] __nla_validate_parse: 133 callbacks suppressed [ 793.762043][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6038'. [ 793.784441][T29879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6038'. [ 793.887539][T29879] vlan2: entered promiscuous mode [ 793.892737][T29879] team0: entered promiscuous mode [ 793.898125][T29879] team_slave_0: entered promiscuous mode [ 793.904986][T29879] team_slave_1: entered promiscuous mode [ 793.990243][T29885] vlan2: entered promiscuous mode [ 794.090705][T29737] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.123533][T29737] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.166153][T29882] lo speed is unknown, defaulting to 1000 [ 794.183222][T29882] lo speed is unknown, defaulting to 1000 [ 794.395630][T29737] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.417696][T29737] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.609492][T29737] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.622902][T29737] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.717340][T29737] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.727518][T29737] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.916378][T29901] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 794.925866][T29913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6047'. [ 794.944005][T29901] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 794.957226][T29901] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 795.029985][T29908] pim6reg: entered allmulticast mode [ 795.045758][T29916] netlink: 'syz.2.6048': attribute type 30 has an invalid length. [ 795.380804][T29916] bond1: option arp_missed_max: invalid value (0) [ 795.407286][T29916] bond1: option arp_missed_max: allowed values 1 - 255 [ 795.449459][T29916] bond1 (unregistering): Released all slaves [ 795.571691][T29919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6049'. [ 795.774457][ T51] Bluetooth: hci3: command tx timeout [ 795.781143][T29737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 795.844140][T29737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 795.902332][T29737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 795.931385][T29737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 796.134929][T29950] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6055'. [ 796.190696][T29950] netlink: 'syz.1.6055': attribute type 1 has an invalid length. [ 796.220974][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6057'. [ 796.253353][T29950] Cannot find set identified by id 0 to match [ 796.281539][T29737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.321085][T29737] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.355970][T21981] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.363381][T21981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.411568][T21984] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.418853][T21984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.684051][T21977] batadv0: left promiscuous mode [ 796.749046][T29974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6062'. [ 796.867634][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6063'. [ 797.001924][T29737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.139503][T29737] veth0_vlan: entered promiscuous mode [ 797.180596][T29737] veth1_vlan: entered promiscuous mode [ 797.254564][T29737] veth0_macvtap: entered promiscuous mode [ 797.278965][T29737] veth1_macvtap: entered promiscuous mode [ 797.335832][T29737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.405305][T29737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.440193][T21981] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.467124][T21984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.490651][T21984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.545021][T21984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.621058][T30000] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6071'. [ 797.633206][T30000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6071'. [ 797.680630][T29997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.701151][T29998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.808446][T21982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.835528][T21982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.869706][ T51] Bluetooth: hci3: command tx timeout [ 797.944900][T21977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.952819][T21977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.006810][T30004] bond10: entered promiscuous mode [ 798.020883][T30004] 8021q: adding VLAN 0 to HW filter on device bond10 [ 798.164285][T30020] netlink: 'syz.4.6076': attribute type 13 has an invalid length. [ 798.298391][T30022] netlink: 'syz.3.5998': attribute type 1 has an invalid length. [ 798.490721][T30033] netlink: 'syz.3.6081': attribute type 7 has an invalid length. [ 798.506888][T30033] netlink: 'syz.3.6081': attribute type 8 has an invalid length. [ 798.523453][T30033] netlink: 'syz.3.6081': attribute type 9 has an invalid length. [ 798.674554][T17012] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.689792][T17012] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.700876][T17012] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.711525][T17012] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.719872][T17012] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 798.829650][T30037] lo speed is unknown, defaulting to 1000 [ 798.856430][T30037] lo speed is unknown, defaulting to 1000 [ 799.022523][T30050] __nla_validate_parse: 6 callbacks suppressed [ 799.022549][T30050] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6085'. [ 799.703004][T30075] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6089'. [ 800.381515][T30037] chnl_net:caif_netlink_parms(): no params data found [ 800.535207][T30098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6094'. [ 800.814246][ T51] Bluetooth: hci0: command tx timeout [ 800.847859][T30037] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.863692][T30037] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.872031][T30037] bridge_slave_0: entered allmulticast mode [ 800.881453][T30037] bridge_slave_0: entered promiscuous mode [ 800.890776][T30037] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.921989][T30037] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.930025][T30037] bridge_slave_1: entered allmulticast mode [ 800.938758][T30037] bridge_slave_1: entered promiscuous mode [ 800.991657][T30037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.019181][T30037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.066601][T30111] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6098'. [ 801.110053][T30107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6096'. [ 801.120361][T30107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6096'. [ 801.179567][T30037] team0: Port device team_slave_0 added [ 801.189492][T30037] team0: Port device team_slave_1 added [ 801.273543][T21984] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.284239][T21984] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.293795][ T9624] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.309138][T30037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.317338][T30037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.344039][T30037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.433198][T30117] veth15: entered promiscuous mode [ 801.444831][T30037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.452288][T30037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.509761][T30037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.629986][T30123] syzkaller1: entered promiscuous mode [ 801.638421][T30123] syzkaller1: entered allmulticast mode [ 801.836857][T30130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6103'. [ 801.873585][ T9586] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.892019][T30132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6104'. [ 801.994880][T30037] hsr_slave_0: entered promiscuous mode [ 802.011248][T30037] hsr_slave_1: entered promiscuous mode [ 802.045548][T30037] debugfs: 'hsr0' already exists in 'hsr' [ 802.051377][T30037] Cannot create hsr debugfs directory [ 802.104886][T30129] lo speed is unknown, defaulting to 1000 [ 802.130861][T30129] lo speed is unknown, defaulting to 1000 [ 802.132699][T30137] Bluetooth: MGMT ver 1.23 [ 802.336237][ T9624] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 802.502967][T30139] syzkaller0: entered promiscuous mode [ 802.519257][T30139] syzkaller0: entered allmulticast mode [ 802.627633][T30142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6106'. [ 802.811934][T30149] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 802.835815][T30037] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.894422][ T51] Bluetooth: hci0: command tx timeout [ 802.937498][T30037] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.050163][T30037] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.157798][T30037] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.363107][T30169] lo speed is unknown, defaulting to 1000 [ 803.400258][T30169] lo speed is unknown, defaulting to 1000 [ 803.518047][T30037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 803.529551][T30037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 803.557125][T30037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 803.574384][T30037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 803.758483][T30037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.797908][T30037] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.843116][T21984] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.850428][T21984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.911147][T21984] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.918414][T21984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.945719][T30185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 804.090706][T30187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6118'. [ 804.123195][T30187] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6118'. [ 804.135102][T30187] netlink: 'syz.4.6118': attribute type 5 has an invalid length. [ 804.143869][T30187] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6118'. [ 804.608374][T30037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.823999][T30212] netlink: 296 bytes leftover after parsing attributes in process `syz.1.6122'. [ 804.984956][ T51] Bluetooth: hci0: command tx timeout [ 805.009709][T30218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6123'. [ 805.177996][T30214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6123'. [ 805.216450][T30219] netlink: 'syz.1.6124': attribute type 4 has an invalid length. [ 805.247235][T30037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.422715][T30037] veth0_vlan: entered promiscuous mode [ 805.440599][T30037] veth1_vlan: entered promiscuous mode [ 805.512777][T30037] veth0_macvtap: entered promiscuous mode [ 805.540038][T30037] veth1_macvtap: entered promiscuous mode [ 805.597894][T30037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.615416][T30229] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 805.641372][T30037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.693574][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 805.708049][T21978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.803040][T21978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.847062][T21978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.906109][T21978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.049838][T21981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.072844][T21981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.108142][T30241] x_tables: duplicate entry at hook 3 [ 806.188635][T21984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.197711][T21984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.226716][T30246] netlink: 'syz.3.6134': attribute type 2 has an invalid length. [ 806.266073][T30246] netlink: 'syz.3.6134': attribute type 11 has an invalid length. [ 806.276731][T30246] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6134'. [ 806.358806][T30251] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.6077'. [ 806.373156][T30250] xt_hashlimit: size too large, truncated to 1048576 [ 806.404960][T30251] syzkaller0: entered promiscuous mode [ 806.423571][T30251] syzkaller0: entered allmulticast mode [ 806.629134][T30257] vlan2: entered allmulticast mode [ 806.635868][T30257] team0: entered allmulticast mode [ 806.641343][T30257] team_slave_0: entered allmulticast mode [ 806.648310][T30257] team_slave_1: entered allmulticast mode [ 806.798903][T30261] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6138'. [ 806.823486][ T1759] block nbd9: Possible stuck request ffff888026f58000: control (read@0,1024B). Runtime 60 seconds [ 806.834974][ T1759] block nbd9: Possible stuck request ffff888026f58200: control (read@1024,1024B). Runtime 60 seconds [ 806.846214][ T1759] block nbd9: Possible stuck request ffff888026f58400: control (read@2048,1024B). Runtime 60 seconds [ 806.857443][ T1759] block nbd9: Possible stuck request ffff888026f58600: control (read@3072,1024B). Runtime 60 seconds [ 806.995846][T30270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.054035][ T51] Bluetooth: hci0: command tx timeout [ 807.092334][T30276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6140'. [ 807.599445][T30308] syzkaller0: entered promiscuous mode [ 807.605230][T30308] syzkaller0: entered allmulticast mode [ 807.651472][T30318] netlink: 'syz.2.6155': attribute type 1 has an invalid length. [ 808.436749][T17012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 808.462119][T17012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 808.494040][T17012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 808.502439][T17012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 808.521242][T17012] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 808.750107][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.760666][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 810.438325][T30319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.450093][T30319] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.462560][T30319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.579025][ T51] Bluetooth: hci4: command tx timeout [ 810.634385][T30327] lo speed is unknown, defaulting to 1000 [ 810.642064][T30327] lo speed is unknown, defaulting to 1000 [ 811.128066][T30356] tipc: Failed to remove unknown binding: 66,1,1/0:2821027054/2821027055 [ 811.164242][T30353] syzkaller0: entered promiscuous mode [ 811.205500][T30353] syzkaller0: entered allmulticast mode [ 811.758865][T30369] netlink: 'syz.3.6170': attribute type 10 has an invalid length. [ 811.794583][T30369] team0: Device ipvlan1 failed to register rx_handler [ 811.819725][T30369] __nla_validate_parse: 3 callbacks suppressed [ 811.819750][T30369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6170'. [ 811.890590][T30369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6170'. [ 811.943034][T30327] chnl_net:caif_netlink_parms(): no params data found [ 811.967530][T30376] netlink: 'syz.3.6170': attribute type 1 has an invalid length. [ 811.992169][T30376] netlink: 352 bytes leftover after parsing attributes in process `syz.3.6170'. [ 812.023585][T30376] netlink: 'syz.3.6170': attribute type 1 has an invalid length. [ 812.042863][T30376] netlink: 352 bytes leftover after parsing attributes in process `syz.3.6170'. [ 812.226475][T30327] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.237280][T30391] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6174'. [ 812.247303][T30327] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.265451][T30327] bridge_slave_0: entered allmulticast mode [ 812.276961][T30327] bridge_slave_0: entered promiscuous mode [ 812.288405][T30394] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6174'. [ 812.300635][T30327] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.309205][T30327] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.316690][T30327] bridge_slave_1: entered allmulticast mode [ 812.324763][T30327] bridge_slave_1: entered promiscuous mode [ 812.379880][T30327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.415564][T30327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.528259][T30327] team0: Port device team_slave_0 added [ 812.547961][T30327] team0: Port device team_slave_1 added [ 812.653966][ T51] Bluetooth: hci4: command tx timeout [ 812.692678][T30327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.711871][T30327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.771680][T30327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.787370][T30406] lo speed is unknown, defaulting to 1000 [ 812.818265][T30406] lo speed is unknown, defaulting to 1000 [ 812.864634][T30327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.881988][T30327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.971746][T30327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.314548][T30327] hsr_slave_0: entered promiscuous mode [ 813.321752][T30327] hsr_slave_1: entered promiscuous mode [ 813.339136][T30327] debugfs: 'hsr0' already exists in 'hsr' [ 813.348111][T30327] Cannot create hsr debugfs directory [ 813.356287][T30422] lo speed is unknown, defaulting to 1000 [ 813.393173][T30422] lo speed is unknown, defaulting to 1000 [ 813.412812][T30439] netlink: 'syz.2.6185': attribute type 9 has an invalid length. [ 813.443024][T30439] netlink: 'syz.2.6185': attribute type 11 has an invalid length. [ 813.457512][T30439] netlink: 'syz.2.6185': attribute type 12 has an invalid length. [ 813.614576][T30445] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6188'. [ 813.757838][T30449] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 813.933439][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms [ 813.941535][ C1] lec:lec_tx_timeout: lec0 [ 814.630903][T30484] mac80211_hwsim hwsim82 syzkaller0: entered promiscuous mode [ 814.641322][T30484] mac80211_hwsim hwsim82 syzkaller0: entered allmulticast mode [ 814.652194][T30483] tipc: Started in network mode [ 814.658091][T30483] tipc: Node identity 080211000001, cluster identity 4711 [ 814.669494][T30483] tipc: Enabled bearer , priority 0 [ 814.733404][ T51] Bluetooth: hci4: command tx timeout [ 814.906746][T30495] xt_hashlimit: size too large, truncated to 1048576 [ 815.143457][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 815.177258][T30327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 815.208063][T30501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6204'. [ 815.230691][T30327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 815.246476][T30327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 815.274418][T30327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 815.289274][T30501] tipc: Started in network mode [ 815.305520][T30501] tipc: Node identity 76940a9f2dda, cluster identity 4711 [ 815.313837][T30501] tipc: Enabled bearer , priority 0 [ 815.355212][T30501] syzkaller0: entered promiscuous mode [ 815.362294][T30501] syzkaller0: entered allmulticast mode [ 815.423516][T30501] tipc: Resetting bearer [ 815.439821][T30500] tipc: Resetting bearer [ 815.468205][T30520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6208'. [ 815.477502][T30520] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6208'. [ 815.495760][T30500] tipc: Disabling bearer [ 815.501775][T30518] netlink: 'syz.1.6207': attribute type 1 has an invalid length. [ 815.702502][T30327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.767763][T30327] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.790835][ T5936] tipc: Node number set to 134418688 [ 815.808385][T21975] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.815683][T21975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.884649][T21977] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.891909][T21977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.006645][T30327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 816.584838][T30566] netlink: 'syz.0.6221': attribute type 3 has an invalid length. [ 816.626152][T30566] netlink: 'syz.0.6221': attribute type 2 has an invalid length. [ 816.704560][T30566] !: entered promiscuous mode [ 816.813500][ T51] Bluetooth: hci4: command tx timeout [ 816.922578][T30327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.075414][T30586] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6226'. [ 817.095477][T30589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6227'. [ 817.131333][T30589] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.139318][T30589] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.170327][T30586] netlink: 'syz.3.6226': attribute type 5 has an invalid length. [ 817.224226][T30592] nbd: must specify at least one socket [ 817.245833][T30596] smc: net device wlan0 erased user defined pnetid SYZ0 [ 817.512985][T30610] netlink: 'syz.2.6234': attribute type 1 has an invalid length. [ 817.593450][T30610] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 817.601500][T30616] vlan2: entered promiscuous mode [ 817.615603][T30616] bridge0: entered promiscuous mode [ 817.639500][T30327] veth0_vlan: entered promiscuous mode [ 817.692985][T30327] veth1_vlan: entered promiscuous mode [ 817.796921][T30327] veth0_macvtap: entered promiscuous mode [ 817.822126][T30327] veth1_macvtap: entered promiscuous mode [ 817.888980][T30327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.904226][T30327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.956924][T30626] netlink: 'syz.1.6238': attribute type 10 has an invalid length. [ 817.973399][T21981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.992268][T30629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6240'. [ 818.002302][T21981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.012303][T30627] netlink: 'syz.1.6238': attribute type 10 has an invalid length. [ 818.012463][T30631] netlink: 'syz.1.6238': attribute type 10 has an invalid length. [ 818.048901][T30626] dummy0: entered promiscuous mode [ 818.054593][T30626] dummy0: entered allmulticast mode [ 818.061897][T30626] team0: Port device dummy0 added [ 818.072235][T21981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.114843][T30631] dummy0: left promiscuous mode [ 818.120069][T30631] dummy0: left allmulticast mode [ 818.143909][T30631] team0: Port device dummy0 removed [ 818.152696][T30631] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 818.186769][T21981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.325070][T30639] syzkaller1: entered promiscuous mode [ 818.330609][T30639] syzkaller1: entered allmulticast mode [ 818.332336][T30641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6242'. [ 818.442696][T30646] FAULT_INJECTION: forcing a failure. [ 818.442696][T30646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.470418][T21975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.498819][T30646] CPU: 0 UID: 0 PID: 30646 Comm: syz.2.6243 Not tainted syzkaller #0 PREEMPT(full) [ 818.498850][T30646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 818.498866][T30646] Call Trace: [ 818.498875][T30646] [ 818.498885][T30646] dump_stack_lvl+0xe8/0x150 [ 818.498926][T30646] should_fail_ex+0x412/0x560 [ 818.498961][T30646] _copy_from_iter+0x1d3/0x1670 [ 818.498991][T30646] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 818.499024][T30646] ? __pfx_policy_nodemask+0x10/0x10 [ 818.499055][T30646] ? __pfx__copy_from_iter+0x10/0x10 [ 818.499090][T30646] ? set_page_refcounted+0xa0/0x1e0 [ 818.499117][T30646] ? page_copy_sane+0x4e/0x270 [ 818.499147][T30646] copy_page_from_iter+0xdd/0x170 [ 818.499180][T30646] tun_get_user+0x1d4b/0x3dd0 [ 818.499345][T30646] ? tun_get_user+0x6ff/0x3dd0 [ 818.499400][T30646] ? aa_file_perm+0x50e/0x15e0 [ 818.499430][T30646] ? __pfx_tun_get_user+0x10/0x10 [ 818.499457][T30646] ? aa_file_perm+0x192/0x15e0 [ 818.499505][T30646] ? ref_tracker_alloc+0x35c/0x4c0 [ 818.499536][T30646] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 818.499568][T30646] ? tun_get+0x1c/0x2f0 [ 818.499602][T30646] ? tun_get+0x1c/0x2f0 [ 818.499630][T30646] ? tun_get+0x1c/0x2f0 [ 818.499662][T30646] tun_chr_write_iter+0x113/0x200 [ 818.499695][T30646] vfs_write+0x61d/0xb90 [ 818.499728][T30646] ? __pfx_vfs_write+0x10/0x10 [ 818.499761][T30646] ? __fget_files+0x2a/0x420 [ 818.499801][T30646] ksys_write+0x150/0x270 [ 818.499827][T30646] ? __pfx_ksys_write+0x10/0x10 [ 818.499866][T30646] do_syscall_64+0x14d/0xf80 [ 818.499900][T30646] ? trace_irq_disable+0x3b/0x150 [ 818.499933][T30646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.499957][T30646] ? clear_bhb_loop+0x40/0x90 [ 818.499984][T30646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.500007][T30646] RIP: 0033:0x7f80c155cfce [ 818.500028][T30646] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 818.500048][T30646] RSP: 002b:00007f80c252bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.500073][T30646] RAX: ffffffffffffffda RBX: 00007f80c252c6c0 RCX: 00007f80c155cfce [ 818.500090][T30646] RDX: 0000000000000016 RSI: 00002000000004c0 RDI: 00000000000000c8 [ 818.500104][T30646] RBP: 00007f80c252c090 R08: 0000000000000000 R09: 0000000000000000 [ 818.500118][T30646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.500132][T30646] R13: 00007f80c1816038 R14: 00007f80c1815fa0 R15: 00007ffe0ffea4e8 [ 818.500167][T30646] [ 818.503139][T21975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.838143][T30647] lo speed is unknown, defaulting to 1000 [ 818.866651][T21982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.876658][T21982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.899918][T30647] lo speed is unknown, defaulting to 1000 [ 818.973553][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 819.012532][T30659] syzkaller1: entered promiscuous mode [ 819.020843][T30659] syzkaller1: entered allmulticast mode [ 819.092222][T30661] netlink: 'syz.2.6247': attribute type 2 has an invalid length. [ 819.161892][T30666] netlink: 'syz.4.6156': attribute type 11 has an invalid length. [ 819.180515][T30666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6156'. [ 819.334197][T30671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6249'. [ 819.343479][T30671] openvswitch: netlink: Flow actions attr not present in new flow. [ 819.557852][T30681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6251'. [ 819.607725][T30687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6252'. [ 819.676307][T30687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6252'. [ 819.719351][T30687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6252'. [ 819.811816][T30692] x_tables: duplicate underflow at hook 1 [ 819.865847][T30694] netlink: 'syz.3.6255': attribute type 3 has an invalid length. [ 819.976426][T30698] bridge_slave_0: left allmulticast mode [ 819.982177][T30698] bridge_slave_0: left promiscuous mode [ 820.057010][T30698] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.090947][T30698] bridge_slave_1: left allmulticast mode [ 820.101055][T30698] bridge_slave_1: left promiscuous mode [ 820.110118][T30698] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.127621][T30698] bond0: (slave bond_slave_0): Releasing backup interface [ 820.158685][T30698] bond0: (slave bond_slave_1): Releasing backup interface [ 820.209331][T30698] team0: Port device team_slave_0 removed [ 820.226573][T30698] team0: Port device team_slave_1 removed [ 820.236142][T30698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.244715][T30698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.262067][T30698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.272163][T30698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.285860][T30698] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 820.350459][T30703] team0: Mode changed to "roundrobin" [ 820.384627][T30718] netlink: 'syz.2.6260': attribute type 1 has an invalid length. [ 820.429522][T30714] sch_fq: defrate 4294967293 ignored. [ 820.467134][T30709] syzkaller1: entered promiscuous mode [ 820.472705][T30709] syzkaller1: entered allmulticast mode [ 820.516949][T30702] lo speed is unknown, defaulting to 1000 [ 820.671270][T30720] vlan2: left promiscuous mode [ 820.701458][T30733] netlink: 'syz.0.6264': attribute type 30 has an invalid length. [ 820.713653][T30720] bond0: left promiscuous mode [ 820.719793][T30720] bond_slave_0: left promiscuous mode [ 820.730041][T30720] bond_slave_1: left promiscuous mode [ 820.740688][T30720] mac80211_hwsim hwsim82 syzkaller0: left promiscuous mode [ 820.755548][T30702] lo speed is unknown, defaulting to 1000 [ 821.473573][T30761] syzkaller0: entered promiscuous mode [ 821.479197][T30761] syzkaller0: entered allmulticast mode [ 821.743625][T30770] xt_nat: multiple ranges no longer supported [ 822.188193][T30800] __nla_validate_parse: 35 callbacks suppressed [ 822.188221][T30800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6283'. [ 822.210210][T30786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.237020][T30792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6281'. [ 822.249357][T30793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6281'. [ 822.475613][T30786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.476628][T30811] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6287'. [ 822.516007][T30814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6288'. [ 822.526592][T30817] tipc: Enabling of bearer rejected, failed to enable media [ 822.619210][T30817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6285'. [ 822.630471][T30786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.680661][T30824] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 822.751383][T30786] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.872027][T30829] x_tables: duplicate underflow at hook 2 [ 822.883759][T30829] validate_nla: 1 callbacks suppressed [ 822.883779][T30829] netlink: 'syz.1.6290': attribute type 3 has an invalid length. [ 822.910399][T30829] xt_addrtype: ipv6 does not support BROADCAST matching [ 822.918067][T30829] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6290'. [ 823.004127][T21983] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.049742][T21977] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.114822][T30835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6292'. [ 823.127147][T21977] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.148819][T30835] netlink: 'syz.4.6292': attribute type 2 has an invalid length. [ 823.154231][T21977] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.214799][T30846] netlink: 'syz.4.6292': attribute type 2 has an invalid length. [ 823.256182][T30835] !9: entered promiscuous mode [ 823.275008][T30846] !9: left promiscuous mode [ 823.437137][T30856] netlink: 'syz.3.6299': attribute type 30 has an invalid length. [ 823.650570][T30872] openvswitch: netlink: IP tunnel dst address not specified [ 823.689488][T30874] x_tables: duplicate underflow at hook 2 [ 823.874068][T30878] netlink: 'syz.3.6303': attribute type 1 has an invalid length. [ 823.894513][T30881] Unknown options in mask b7f2 [ 823.905397][T30878] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6303'. [ 823.967479][T30878] No such timeout policy "syz1" [ 824.094089][ C0] ================================================================== [ 824.102231][ C0] BUG: KASAN: slab-use-after-free in ax25_send_frame+0x67c/0x9f0 [ 824.110009][ C0] Read of size 7 at addr ffff88803ab40008 by task syz.2.6305/30882 [ 824.117944][ C0] [ 824.120309][ C0] CPU: 0 UID: 0 PID: 30882 Comm: syz.2.6305 Not tainted syzkaller #0 PREEMPT(full) [ 824.120338][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 824.120354][ C0] Call Trace: [ 824.120364][ C0] [ 824.120374][ C0] dump_stack_lvl+0xe8/0x150 [ 824.120418][ C0] print_report+0xba/0x230 [ 824.120476][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 824.120500][ C0] kasan_report+0x117/0x150 [ 824.120528][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 824.120556][ C0] kasan_check_range+0x264/0x2c0 [ 824.120582][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 824.120605][ C0] __asan_memcpy+0x29/0x70 [ 824.120638][ C0] ax25_send_frame+0x67c/0x9f0 [ 824.120660][ C0] ? ax25_send_frame+0x326/0x9f0 [ 824.120686][ C0] rose_t0timer_expiry+0x255/0x560 [ 824.120718][ C0] call_timer_fn+0x192/0x640 [ 824.120758][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 824.120784][ C0] ? call_timer_fn+0xd4/0x640 [ 824.120811][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 824.120843][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.120871][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 824.120900][ C0] __run_timer_base+0x652/0x8b0 [ 824.120924][ C0] ? ktime_get+0x45/0x200 [ 824.120952][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 824.120981][ C0] ? sched_clock_cpu+0x74/0x440 [ 824.121021][ C0] run_timer_softirq+0xb7/0x170 [ 824.121047][ C0] handle_softirqs+0x22a/0x870 [ 824.121079][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 824.121111][ C0] __irq_exit_rcu+0x5f/0x150 [ 824.121138][ C0] irq_exit_rcu+0x9/0x30 [ 824.121164][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 824.121195][ C0] [ 824.121203][ C0] [ 824.121212][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 824.121237][ C0] RIP: 0010:unwind_next_frame+0x4a5/0x23c0 [ 824.121279][ C0] Code: e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 66 18 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 79 18 00 00 41 0f b6 44 24 01 <83> e0 07 0f 84 66 15 00 00 83 f8 01 4c 8b 7c 24 50 48 bd 00 00 00 [ 824.121300][ C0] RSP: 0000:ffffc900052bf2f8 EFLAGS: 00000246 [ 824.121322][ C0] RAX: 0000000000000002 RBX: ffffffff90327780 RCX: ffffffff90327784 [ 824.121339][ C0] RDX: ffffffff90b30c0a RSI: ffffffff90b30c0a RDI: ffffffff8c27a9a0 [ 824.121356][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8e7602e0 [ 824.121372][ C0] R10: ffffc900052bf418 R11: ffffffff81b0b100 R12: ffffffff90b30c0e [ 824.121389][ C0] R13: ffffffff90b30c0f R14: ffffc900052bf3c8 R15: ffffffff90327780 [ 824.121415][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 824.121446][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 824.121481][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 824.121512][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 824.121539][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 824.121565][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 824.121588][ C0] arch_stack_walk+0x11b/0x150 [ 824.121632][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 824.121661][ C0] stack_trace_save+0xa9/0x100 [ 824.121682][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 824.121710][ C0] save_stack+0x122/0x230 [ 824.121733][ C0] ? __pfx_save_stack+0x10/0x10 [ 824.121753][ C0] ? post_alloc_hook+0x231/0x280 [ 824.121773][ C0] ? get_page_from_freelist+0x24dc/0x2580 [ 824.121798][ C0] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 824.121822][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 824.121846][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 824.121876][ C0] ? __rmqueue_pcplist+0x18fa/0x1c40 [ 824.121904][ C0] __set_page_owner+0x8d/0x4c0 [ 824.121927][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 824.121948][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 824.121981][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 824.122009][ C0] ? bad_range+0x8b/0x2c0 [ 824.122041][ C0] post_alloc_hook+0x231/0x280 [ 824.122064][ C0] get_page_from_freelist+0x24dc/0x2580 [ 824.122109][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 824.122138][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 824.122165][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 824.122193][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 824.122224][ C0] alloc_pages_mpol+0x232/0x4a0 [ 824.122252][ C0] vma_alloc_folio_noprof+0xea/0x210 [ 824.122280][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 824.122308][ C0] ? do_pte_missing+0x30a5/0x3750 [ 824.122334][ C0] do_pte_missing+0x1656/0x3750 [ 824.122366][ C0] handle_mm_fault+0x1bec/0x3310 [ 824.122411][ C0] ? handle_mm_fault+0xee/0x3310 [ 824.122446][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 824.122475][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 824.122511][ C0] do_user_addr_fault+0xa73/0x1340 [ 824.122544][ C0] ? rcu_is_watching+0x15/0xb0 [ 824.122573][ C0] ? trace_page_fault_user+0x84/0x210 [ 824.122602][ C0] exc_page_fault+0x6a/0xc0 [ 824.122631][ C0] asm_exc_page_fault+0x26/0x30 [ 824.122652][ C0] RIP: 0033:0x7f80c1559944 [ 824.122672][ C0] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 824.122692][ C0] RSP: 002b:00007ffe0ffea490 EFLAGS: 00010246 [ 824.122711][ C0] RAX: 00007f80c24ca000 RBX: 00007f80c24ea6c0 RCX: 00007f80c159c597 [ 824.122728][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f80c24ea6c0 [ 824.122743][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 824.122757][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe0ffea5e0 [ 824.122772][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 824.122797][ C0] [ 824.122806][ C0] [ 824.664718][ C0] Allocated by task 24058: [ 824.669147][ C0] kasan_save_track+0x3e/0x80 [ 824.673865][ C0] __kasan_kmalloc+0x93/0xb0 [ 824.678508][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 824.684006][ C0] rose_add_node+0x23c/0xf00 [ 824.688652][ C0] rose_rt_ioctl+0xd35/0x12a0 [ 824.693386][ C0] rose_ioctl+0x3fb/0x8f0 [ 824.697767][ C0] sock_do_ioctl+0x101/0x320 [ 824.702416][ C0] sock_ioctl+0x5c6/0x7f0 [ 824.706783][ C0] __se_sys_ioctl+0xfc/0x170 [ 824.711400][ C0] do_syscall_64+0x14d/0xf80 [ 824.716022][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.721974][ C0] [ 824.724327][ C0] Freed by task 30844: [ 824.728414][ C0] kasan_save_track+0x3e/0x80 [ 824.733122][ C0] kasan_save_free_info+0x46/0x50 [ 824.738184][ C0] __kasan_slab_free+0x5c/0x80 [ 824.742983][ C0] kfree+0x1c1/0x630 [ 824.746922][ C0] rose_timer_expiry+0x4cb/0x600 [ 824.751930][ C0] call_timer_fn+0x192/0x640 [ 824.756576][ C0] __run_timer_base+0x652/0x8b0 [ 824.761477][ C0] run_timer_softirq+0xb7/0x170 [ 824.766363][ C0] handle_softirqs+0x22a/0x870 [ 824.771177][ C0] __irq_exit_rcu+0x5f/0x150 [ 824.775814][ C0] irq_exit_rcu+0x9/0x30 [ 824.780088][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 824.785766][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 824.791784][ C0] [ 824.794131][ C0] The buggy address belongs to the object at ffff88803ab40000 [ 824.794131][ C0] which belongs to the cache kmalloc-512 of size 512 [ 824.808217][ C0] The buggy address is located 8 bytes inside of [ 824.808217][ C0] freed 512-byte region [ffff88803ab40000, ffff88803ab40200) [ 824.821872][ C0] [ 824.824223][ C0] The buggy address belongs to the physical page: [ 824.830661][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ab40 [ 824.839458][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 824.847988][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 824.855569][ C0] page_type: f5(slab) [ 824.859581][ C0] raw: 00fff00000000040 ffff88813fea3c80 dead000000000100 dead000000000122 [ 824.868185][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 824.876790][ C0] head: 00fff00000000040 ffff88813fea3c80 dead000000000100 dead000000000122 [ 824.885479][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 824.894167][ C0] head: 00fff00000000002 ffffea0000ead001 00000000ffffffff 00000000ffffffff [ 824.902945][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 824.911662][ C0] page dumped because: kasan: bad access detected [ 824.918108][ C0] page_owner tracks the page as allocated [ 824.923839][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 20009, tgid 20008 (syz.4.3482), ts 501633274075, free_ts 501214455400 [ 824.945403][ C0] post_alloc_hook+0x231/0x280 [ 824.950205][ C0] get_page_from_freelist+0x24dc/0x2580 [ 824.955785][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 824.961637][ C0] allocate_slab+0x77/0x660 [ 824.966179][ C0] refill_objects+0x331/0x3c0 [ 824.970877][ C0] __pcs_replace_empty_main+0x2b9/0x620 [ 824.976464][ C0] __kmalloc_cache_noprof+0x392/0x660 [ 824.981870][ C0] __ipv6_dev_mc_inc+0x44f/0xa50 [ 824.986879][ C0] ipv6_add_dev+0xe43/0x13a0 [ 824.991510][ C0] addrconf_notify+0x771/0x1050 [ 824.996385][ C0] notifier_call_chain+0x1be/0x400 [ 825.001543][ C0] register_netdevice+0x173a/0x1cf0 [ 825.006772][ C0] nsim_create+0xb92/0x1100 [ 825.011408][ C0] __nsim_dev_port_add+0x72a/0xb50 [ 825.016550][ C0] nsim_dev_port_add_all+0x37/0xf0 [ 825.021693][ C0] nsim_dev_reload_up+0x45f/0x7c0 [ 825.026766][ C0] page last free pid 9593 tgid 9593 stack trace: [ 825.033110][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 825.038278][ C0] __slab_free+0x263/0x2b0 [ 825.042720][ C0] qlist_free_all+0x97/0x100 [ 825.047333][ C0] kasan_quarantine_reduce+0x148/0x160 [ 825.052857][ C0] __kasan_slab_alloc+0x22/0x80 [ 825.057765][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 825.063714][ C0] __alloc_skb+0x1d0/0x7d0 [ 825.068178][ C0] mld_newpack+0x14c/0xc90 [ 825.072617][ C0] add_grhead+0x5a/0x2a0 [ 825.076896][ C0] add_grec+0x1452/0x1740 [ 825.081255][ C0] mld_ifc_work+0x6e6/0xe70 [ 825.085784][ C0] process_scheduled_works+0xb02/0x1830 [ 825.091365][ C0] worker_thread+0xa50/0xfc0 [ 825.095980][ C0] kthread+0x388/0x470 [ 825.100063][ C0] ret_from_fork+0x51e/0xb90 [ 825.104680][ C0] ret_from_fork_asm+0x1a/0x30 [ 825.109517][ C0] [ 825.111871][ C0] Memory state around the buggy address: [ 825.117520][ C0] ffff88803ab3ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.125597][ C0] ffff88803ab3ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.133674][ C0] >ffff88803ab40000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 825.141901][ C0] ^ [ 825.146272][ C0] ffff88803ab40080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 825.154411][ C0] ffff88803ab40100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 825.162511][ C0] ================================================================== [ 825.170875][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 825.178121][ C0] CPU: 0 UID: 0 PID: 30882 Comm: syz.2.6305 Not tainted syzkaller #0 PREEMPT(full) [ 825.187534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 825.197690][ C0] Call Trace: [ 825.201006][ C0] [ 825.203882][ C0] vpanic+0x56c/0xa60 [ 825.207907][ C0] ? __pfx_vpanic+0x10/0x10 [ 825.212448][ C0] ? irqentry_exit+0x59e/0x620 [ 825.217263][ C0] panic+0xc5/0xd0 [ 825.221027][ C0] ? __pfx_panic+0x10/0x10 [ 825.225497][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 825.230487][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 825.235461][ C0] check_panic_on_warn+0x89/0xb0 [ 825.240474][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 825.245451][ C0] end_report+0x73/0x180 [ 825.249734][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 825.254712][ C0] kasan_report+0x128/0x150 [ 825.259275][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 825.264262][ C0] kasan_check_range+0x264/0x2c0 [ 825.269237][ C0] ? ax25_send_frame+0x67c/0x9f0 [ 825.274208][ C0] __asan_memcpy+0x29/0x70 [ 825.278677][ C0] ax25_send_frame+0x67c/0x9f0 [ 825.283492][ C0] ? ax25_send_frame+0x326/0x9f0 [ 825.288470][ C0] rose_t0timer_expiry+0x255/0x560 [ 825.293647][ C0] call_timer_fn+0x192/0x640 [ 825.298300][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 825.304432][ C0] ? call_timer_fn+0xd4/0x640 [ 825.309169][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 825.314339][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 825.319584][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 825.325258][ C0] __run_timer_base+0x652/0x8b0 [ 825.330501][ C0] ? ktime_get+0x45/0x200 [ 825.334877][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 825.340287][ C0] ? sched_clock_cpu+0x74/0x440 [ 825.345183][ C0] run_timer_softirq+0xb7/0x170 [ 825.350080][ C0] handle_softirqs+0x22a/0x870 [ 825.354891][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 825.359699][ C0] __irq_exit_rcu+0x5f/0x150 [ 825.364331][ C0] irq_exit_rcu+0x9/0x30 [ 825.368619][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 825.374302][ C0] [ 825.377386][ C0] [ 825.380358][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 825.386478][ C0] RIP: 0010:unwind_next_frame+0x4a5/0x23c0 [ 825.392341][ C0] Code: e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 66 18 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 79 18 00 00 41 0f b6 44 24 01 <83> e0 07 0f 84 66 15 00 00 83 f8 01 4c 8b 7c 24 50 48 bd 00 00 00 [ 825.411984][ C0] RSP: 0000:ffffc900052bf2f8 EFLAGS: 00000246 [ 825.418110][ C0] RAX: 0000000000000002 RBX: ffffffff90327780 RCX: ffffffff90327784 [ 825.426135][ C0] RDX: ffffffff90b30c0a RSI: ffffffff90b30c0a RDI: ffffffff8c27a9a0 [ 825.434156][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8e7602e0 [ 825.442161][ C0] R10: ffffc900052bf418 R11: ffffffff81b0b100 R12: ffffffff90b30c0e [ 825.450170][ C0] R13: ffffffff90b30c0f R14: ffffc900052bf3c8 R15: ffffffff90327780 [ 825.458185][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 825.464395][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 825.469574][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 825.474744][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 825.480255][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 825.485758][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 825.491952][ C0] arch_stack_walk+0x11b/0x150 [ 825.496767][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 825.502269][ C0] stack_trace_save+0xa9/0x100 [ 825.507076][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 825.512508][ C0] save_stack+0x122/0x230 [ 825.516899][ C0] ? __pfx_save_stack+0x10/0x10 [ 825.521831][ C0] ? post_alloc_hook+0x231/0x280 [ 825.526810][ C0] ? get_page_from_freelist+0x24dc/0x2580 [ 825.532572][ C0] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 825.538593][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 825.543790][ C0] ? vma_alloc_folio_noprof+0xea/0x210 [ 825.549323][ C0] ? __rmqueue_pcplist+0x18fa/0x1c40 [ 825.554665][ C0] __set_page_owner+0x8d/0x4c0 [ 825.559482][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 825.564911][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 825.571057][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 825.576484][ C0] ? bad_range+0x8b/0x2c0 [ 825.580864][ C0] post_alloc_hook+0x231/0x280 [ 825.585669][ C0] get_page_from_freelist+0x24dc/0x2580 [ 825.591355][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 825.596676][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 825.602520][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 825.608884][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 825.614211][ C0] alloc_pages_mpol+0x232/0x4a0 [ 825.619100][ C0] vma_alloc_folio_noprof+0xea/0x210 [ 825.624420][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 825.630355][ C0] ? do_pte_missing+0x30a5/0x3750 [ 825.635419][ C0] do_pte_missing+0x1656/0x3750 [ 825.640310][ C0] handle_mm_fault+0x1bec/0x3310 [ 825.645301][ C0] ? handle_mm_fault+0xee/0x3310 [ 825.650295][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 825.655811][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 825.661064][ C0] do_user_addr_fault+0xa73/0x1340 [ 825.666237][ C0] ? rcu_is_watching+0x15/0xb0 [ 825.671051][ C0] ? trace_page_fault_user+0x84/0x210 [ 825.676466][ C0] exc_page_fault+0x6a/0xc0 [ 825.681019][ C0] asm_exc_page_fault+0x26/0x30 [ 825.685898][ C0] RIP: 0033:0x7f80c1559944 [ 825.690351][ C0] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 825.709995][ C0] RSP: 002b:00007ffe0ffea490 EFLAGS: 00010246 [ 825.716099][ C0] RAX: 00007f80c24ca000 RBX: 00007f80c24ea6c0 RCX: 00007f80c159c597 [ 825.724107][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f80c24ea6c0 [ 825.732123][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 825.740501][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe0ffea5e0 [ 825.748517][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 825.756555][ C0] [ 825.760525][ C0] Kernel Offset: disabled [ 825.764869][ C0] Rebooting in 86400 seconds..