last executing test programs: 4.916898115s ago: executing program 3 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f7c7ced72c81ee29023f2a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x54, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) 4.665138107s ago: executing program 3 (id=2897): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) poll(&(0x7f0000000280), 0x55, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r2, &(0x7f0000000480), 0x0}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000004100010000000000000000000101000000000000040008000400028020000180100004000000000000000000000000000c001c"], 0x40}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0xff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000600)=r7, 0x4) close(0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x25, 0x1, 0x70bd2e, 0x25dfdbfb, {0x5, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f00000002c0)) 4.556359689s ago: executing program 3 (id=2899): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f0000000080)="e1118ce4769b", 0xfdef, 0x800, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x2) epoll_create1(0x80000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x800000000000000, 0x37800, 0x0, 0x800, 0xfffffffffffffffc, 0x80fffff, 0x9}, 0x0, &(0x7f0000000300)={0x1f, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x3, 0x6a9}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000004c0)={{0x3, 0x255}, 0x100, './file0\x00'}) close(0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000680)=0x5da2333f, 0x4) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000006c0)={r4, &(0x7f0000000700), 0x0}, 0x20) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) socket(0x8, 0x3, 0x3) close(0x4) 3.507793399s ago: executing program 0 (id=2906): listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x90, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 3.291548743s ago: executing program 3 (id=2907): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0xa, 0x3, 0x87) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@local, 0x40, r7}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xff, r7}, [@IFA_FLAGS={0x8, 0x8, 0x61d}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001401010010"], 0x0) 3.290522602s ago: executing program 2 (id=2908): setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='&\x00', 0x80000, &(0x7f0000000080)={@align=0xfffffffffffffff7, {0x4b, 0x81, 0xa, 0xfffffffffffffffd}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7ac956fe}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x1, 0x0, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x40, 0x40, 0xffffffff, 0xf}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xed}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0xe5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x4908c908a549379c}, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000400)={0x0, 0x5848d83204ac86a5, 0x2, 0x4}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x59}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) recvfrom$l2tp(r0, &(0x7f0000000540)=""/210, 0xd2, 0x81, &(0x7f0000000640)={0x2, 0x0, @remote}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000780)={r0, &(0x7f0000000680)='ip6gre0\x00', 0x60000, &(0x7f00000006c0)={@align, {0x1, 0x8, 0x5, 0x6}}, 0x8a1c, &(0x7f0000000700), &(0x7f0000000740)=0x9}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x168, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xfd}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6f}]}}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x37}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xbf}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}]}}, @CTA_LABELS_MASK={0x8, 0x17, [0x3ff]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x10000091) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000002880)=[{{&(0x7f0000000a40)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000a80)="6df2a76f36eda0e559e0f19b879f060240df1c704d8c39c4ae8345e0caae8fb8296166c4f9532de0873e3518217973440734bbb08e9446199300adc11a5653f9c32e07c1bbfb1d2b9d834ec83672de119fb033543c1483a5ab5d656f44f531d69b560f872f71e7b3f110f825a66e6f2bc12ce5199f72eb18f5fe0d621617cf9051603561f08542f25ee1a9ad54acece1339b2ef334972e3971836acf7a38c28b848f9536339a38875d830b5e44274222240c588f9cbed231f021c53635be0a48fee204d4d38c8af8380c8731576942102148539defb7640f3e63135ec29f072a735af96c", 0xe4}, {&(0x7f0000000b80)="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", 0x1000}], 0x2, &(0x7f0000001bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x78}}, {{&(0x7f0000001c40)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002140)=[{&(0x7f0000001c80)="8e0fc086ad264392bd8f0b9da85e3033b6e0dd50f5e9492ffb7f7c3d459a527b77805d3c1f61a2f1975d19da34f4deca631d7f7c0197e1f9dd0eead380bcb2b92ffca511d7e2b28906e2b94eb2841c305defee1af14d8755a6992a53c6fa165ad49098775c955134cc27e1497820f050a9a2", 0x72}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)="170b42a759456eb4a222f93c1de0752a1b6475f8dd319fe4115aa285ce64d4ad56a3553ac16c776cf748b766a4be60cc1e3cfa75c35c42fed88f1062fac8afec9a1d04baf597b617fcc021196069b0252fee0e3d425dbe4ae63ac197c1dde9c34495657035fa6340b88de04d583eb60955039720e8f3103d79c198e3100acc60c3de968b894b69574059fda8dc", 0x8d}, {&(0x7f0000001e00)="91c10ed88bcf1ecc9315a61059f4d761b4b250f76cb476f10ffa9ba62110edad1889a688d291665c7d4dfb648ab7b488dc873f135d3c69c24c43800ec39f7c4c33998e0d152f", 0x46}, {&(0x7f0000001e80)="3608db2ddf319ca8003beff0d6deca069379cd3f3a2a095cbe50661bd17b3f594e4c3a", 0x23}, {&(0x7f0000001ec0)="c305787223b5070dd718b13e710fc995e713f61b42ff4233045a1df66410cfda041cd6431f4016c28c1fcd0b42ea732a64162a3cb00b235c67645f69943f00f93615526e0d9c28ceca8c0828465783baf5ac7ce430a0a40bc38e21a507c64bb734", 0x61}, {&(0x7f0000001f40)="3ed109c8166a3d8218afef138da024d36728a5c28cd8e767bb8d4c26f7a2b264220c4d8c0200abce681a9c3a4c4d22c3a8e2d5729c343a082a899278cb0ba4589418b27910acb4852273562d2dbb8cc005e4c242a16f003c6c78a69f5d70687f96441d0b0fb7a54094287fd0e5f91695a346982eb970d2b14d89f1e33af773f06cbfd7a1c185e4bdb5017071ef2cb39ee44d200a94abe4e46fb689692689d8fb96016e4df2c0b68a6b9b5ba5f9211e53a61793d171f5982e4008f1c272f6fdc99bffb2fc6200ff2fcd46c3", 0xcb}, {&(0x7f0000002040)="d524f6a35d46207b0ee7fd8f71c9d1fd417d03aa217e31f8fcd7c5299034c55df69ce72e8d79776da7b92899bb10d200ef233e750e58aee6885dc3e83c75d2993424a87071edd9710cc2507d849d6931f55f94d3a012b9d48f4d0b7aed1944349d28287e4f4c6591100dc931ca88d46a52dcb94099ec6f5c5653699339b8a7b91ae29af2d7fc604a6e4b46005d1a71c220fcf5ff4703fa2f4f4e94aa2fb0f5600888688a545a85d15089519ef5e093c390a11fefafef6e126d7b8e1fe03775fb054c7c3bdea434d72cf517a9d9d125a17caa0a98c412198e478b057fa43681af2f60cd2767ca", 0xe6}], 0x8, &(0x7f00000021c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x88, 0x3, "f1"}, @rr={0x7, 0x13, 0x84, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8385}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010100, @private=0xa010102}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xad, 0x0, 0xd, [0x4, 0x8001]}, @timestamp_addr={0x44, 0x3c, 0xcc, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x6}, {@multicast1, 0x537f}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x5}, {@multicast2, 0x59a}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6dfc}, {@loopback, 0x9}]}, @rr={0x7, 0x23, 0x76, [@multicast2, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @local, @multicast1, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x1, [{@local, 0xfffffffe}]}, @generic={0x82, 0x9, "ef50e95d4f696d"}, @generic={0x82, 0x2}, @noop, @lsrr={0x83, 0xb, 0x31, [@loopback, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x25f8e1f44a164f99, 0x4, "0478"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8f}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xfc, 0x3, 0x4, [{@multicast1, 0x6}, {@local, 0x4}, {@empty, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc0be6a1}]}, @noop, @rr={0x7, 0x13, 0x6f, [@empty, @rand_addr=0x64010101, @local, @loopback]}, @rr={0x7, 0x1b, 0x55, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x34, 0xb5, 0x1, 0x2, [{@rand_addr=0x64010101, 0x5}, {@multicast1, 0xd}, {@local, 0x9}, {@rand_addr=0x64010101, 0x3}, {@private=0x6, 0xffffffff}, {@private=0xa010100, 0x6}]}, @ra={0x94, 0x4}, @generic={0x89, 0xd, "153abe34a34fc68748c9ad"}, @noop]}}}], 0x220}}, {{&(0x7f0000002400)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002440)="af729850fa45b848d3f9d3ed387488f96d3835f42838804c336bf5e3101b38bb3bb57a2ca85ba0ccdafa6d68b59f440a085e8a9fd648f0a41bbd9de436e62290345e590c11d1ee59dca81ed323d0a005d689425ab33add63d1d149cca7f7aaad1d2b", 0x62}, {&(0x7f00000024c0)="fe9da41d8c5956ac91ec844a2ce4a078ea52066ef7b5b1999ab409369ca94776ed0de044aa807dd9737a775240847915b75dee3499efd51fc38186dc56980da09f69c61fef5d580996bbc7e5ff5decfb219f3bddc20ce1ac6987108b575fe28bcc2395e7", 0x64}, {&(0x7f0000002540)="f8ed28acfe9b953ef6ffdbe9a2c3a3b6d62eacfefa010f9fc5795b63aad9163977ac5012eab6af91482b91b3074530da62b143dd5f35d3f243abadb82cdd43402f5ab0bc28da074f6751a0e8e88c9dc1c67aa23e80a5bc2956745d2968cb6f177abc5e530ed51aa8e297ab8a292963db3fbb2cf66c8aed587a3cca0a6fcfc04a03388d0cbffb04444088545fda2cebb2c859ad371bdb028b6bed00cdca95002c8f662d13ab0ef528ed59aca2", 0xac}, {&(0x7f0000002600)="2775141ea005503e1a788dbe849fd4896652799fb2951b46b06a8e0f9beaf47e6c9b5ee8d209c8726939c312874620bba98ac05ba21894886e8aabb31bc3c9228f44acbd2296b8f51ff14e9abbc958a02b7026507b22fda8eb19eccc9685ebdddced326f4edf8975e8", 0x69}], 0x4}}, {{&(0x7f00000026c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002800)=[{&(0x7f0000002700)="9b55bfbc5e5270206c6495b4fc0a187fd422dc8c0513244aafaedfcef4d28990999fbf5419e8cd620c3a44b5a18c1584ec52e3390b2651760c38732622d0c11ed909291cd825edf7adf0b921bc50fc6357d4f7d16abecd7829638784daa5c40bc52950d29c72cf2ef3a7179a3d7e574cfe8af8d12758ad1a242750531b7050cf2ac3ec3a3439bf781147c82168c9253a9d848e25869c67441ec6b91e27ff8ff015626832da413db9bf4d7409d410ef28588158e8eb4408c8a23d3b63bf5c4c2326a31727e3588fed63a1346d79cd8a16ed6c284fd1a81c1fce213031074f7a596d09445509b27f0a39c624308718cb441ed927cc11410668b7", 0xf9}], 0x1, &(0x7f0000002840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @local}}}], 0x20}}], 0x4, 0x24000010) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000002980)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000029c0), &(0x7f0000002a00)=0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a80), r4) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x50, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x800}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40810) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000002e80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002c80)={0x198, r6, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x1}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x148, 0x84, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ba24c9e571d8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2a4c0}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xd}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x401}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x200}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x58}, @NL80211_BAND_LC={0x8, 0x5, 0xfc}, @NL80211_BAND_LC={0x8, 0x5, 0x8}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8040}, 0x20000014) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) syz_emit_ethernet(0x38, &(0x7f0000002ec0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@arp={0x806, @generic={0x30f, 0x88f7, 0x6, 0xf, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "beaeb3f525adcf4c0bba53f40d5286", @local, "d4be58ec377b5f"}}}}, &(0x7f0000002f00)={0x0, 0x1, [0x2a7, 0x574, 0xe83, 0x574]}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000002f40)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000003180)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003140)={&(0x7f0000003000)={0xfc, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_IE={0xa8, 0x2a, [@prep={0x83, 0x1f, {{}, 0x4, 0x6, @device_a, 0xc968, @void, 0x9c, 0x9, @device_a, 0x3}}, @link_id={0x65, 0x12, {@random="bfaee6aaaf7e", @device_b, @device_b}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x6, @void, @void}}, @fast_bss_trans={0x37, 0x65, {0x6b, 0x1, "0acd491633b1f39c0181d879909a8268", "d571c06e1aee92412401ea28862653a72510a7934ad1cfc81e8c5f3faca196c6", "b78bec5818fd0b3e8bca4f755aa52aa90c539e798f5fc5b4a92606df046ac3fa", [{0x3, 0x11, "b157ca5ee0585054b3764b18ba03d3cd01"}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8001}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000010) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000003400)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003240)={0x158, r10, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x101}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17c}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x2, 0x84b, 0x2, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x390c}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x64}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x35b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003440), r11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000004600)={&(0x7f0000003480)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004580)=[{&(0x7f00000034c0)="5634716583fca8c8a7ef389360dbe5095367ef32ff302f375c0ed73b1cc163c3dd6dac68b679f5a12aa366dd3d07104e8fff11ef71", 0x35}, {&(0x7f0000003500)="1d82f525d3624f088bb786024ae1a771deb6bcbf707dde5bcf767b47dd41084d16296e5eeb0633afc1c856f0d98c7dc46fa654e6c201911af19af6efdfc9f64d64188779622ec952395c2cc9279790e99efe087776f9c33b7c623323c3dd5e2e6f73f01fec8cdc8151b00cd48e39caca5ba8f69ab3e263", 0x77}, {&(0x7f0000003580)="66f72f64a7a0099b8cac6767092e1826b0d735b9b02642c4d8568a35792f9127ef46563cce0b497c90d0f2354092d42ad85f7f85e605054de2292273d5a31dbe1140265dc65f5e5cc0037aafd6d7ecf97a80b51df0ba356692a8c49b1bb6649eb2378523ddecaf94d5fdffc95fa4190976dd138306ffeb05c1f6d9cfdf1ce344c6f480b8db5127773c2231f098897b9facb19d39cb3516a44788b89601f78e9821849ed4fdcc5afdbcf27bcfc3f2ac89e64cb160f4f01e7241c5feb42a18601d37c07d02bd0e78f519fd15b8403c786abf30535214ab41eb01885df9e67de64057392bc9bb5b536c81b9277f22a852ef661c67e0a8ad674d9850ca44f44be421a791151594120a3bcf033f50c86467973e788d924ac3dbe266834e814f3a5ab131c688ad755bd2989d063254904a0bf49e1027b8bc7296e9d8d4766ba67a56025b31f12c3b2449d2ed3b5128b2d320a1a33e91b0edf8ec5237cb284edf32369e16a8de954c87f4dee319b88277863f48b1b3cdc3145059a04e05d99fe3d6012c415f4583a15f376a0452eae9436cf0f23d61609aa56635d4177c03954cbd4c7a7e2170d76082f856c1d217c8cc572c00fea481479ca5bb92901dce60d8165a9bbce57ce19851fef6ad5d86617808860c85ed3a72a3e7b2dfd256042507d03b895a318371c9322d3610d5ebac0271346c42a11bd33b9a11102cf13706daf21ecd37445e702dbfd6d5ac8456fdf3b5133a11811e92da04b95f229204d16abafe5d861d4283dfafdc625cc9b118d38996867b595e18971359db1013fff68f0dac3e1862ee85e72ce58609c46152ecf82a62d7e96bbcf696cd406ca11eb58964528799d2a33850f69379ff9f33317cf859e7764c618fbb8e4ccc346e4f31b209ad2e8e07f09bce5eccea70413a1932b801da8bc1e42c89a6ac199326c6c08d612b013364bf27f903c2f5d7912cda6c38b7c7fb343e609295e98aff856e337f30f5de3784c85f344b3a908f90e62d05f220d079cf6883e08357c0ec872c667e5c4d4c0006a615c4cb5fef0103479caf836fe83bf76a4ea6dfd674bfc86beca4900956f1e076189f9597ce02a7c1fbf8867b0419e9a553614b31179aaa38801653d24afb8e84dba153f9d25c384a450de224be8dda6f562f219bddebb9c29895bac9eec0a7231974ea80da943792219ee1fd135b804296334e7a7ed6d308559dd11ad2f4edffffce00d29c43acf1e619f0fb90002664eefc2bd9fafc4d20836cd6aa8badfefad6ea8e27ead267c3e07bbefe4c3fb6c0ad0d6448a4bee7ace19388bb5c0b7ded1f51d3799a55e54f7894ae03ce40c414ac20e655fac100e00c0da3d7ce6fd9ca8ae88673cda4b708e5babe79a7920447ddaf8dec8896692fca04061f622fbe530ae217ee5b13d77070d36e4e8aae61a04c7bf99f766b0498945afcfdee09accfcad19f369847d7913844d09008fa732713be5a2828ebd0079a12532238ea96cb3ea45f41df74210cb0899c605838350127c35332cc29605e5215496c7eef114b39895d57abb2d766c409c9270b90db7a5eb385faadcccb3d6d14bcae3558b9f07056092326022cd1fc0bb10b2c54137fd9048860f52e487e5ba1184d82ae43aa449dd88e35c3ae65f40d035d26e50b1791ea436937fdd25d52ed28fd16af2d3ca7daf3eb51691f3999d9beeb9246763ae3b61e13e63b739ad8dde6359ca1e3fd65a3b35f559af4325d04668a4d1bd16885193553a83cf4e9bbee68ec07af829f163b7c785ccad082628305e0ab2314ebddb18f318182d997fdd1fe6f82ef6d889a4f3eef770798df05cc12c3f822470d6260bb29361db50a106939afc78cc3d25c5ef8ebb7b8d2fe0d8d32239b075219abc1fc202e66a1878a0dd6e9615edf4ac5f2224233d071fd0dd58431a8765a60f2195fd117741ec30a55132019ec07f419f44b54fd558ec636f490c1c81efd0c51bb8721bed13bade750defc06bad8ee202cfe5abc2d798d8b3ec5d6db5c1e9ada6538b679ef8646fbaed7f21ecd08258b7c6b1efe6f90f4fb34eb3c5896f1c46ff55472c2257275d76af491e07f457608e489bb57922c5ab4c9d97736c305d2f9917cae5ca2ba789e33aff1374b15a85314411f260fffd4657aecb42cbd7030ad7b8420364377b216ea3e62ec2911333cb02b298666d1522babd4ccb0460319a980a539b077e8a4eca8a4e032d2ecd2f5e8d389ceee269bc4cee2e141ccd4a182e94b818221e89d0313ad95535a5a5dfcc3af573305d6115bf95c6197c2ff2bc6bf9298ae3869055709d3733a544624329150f719ee065708dbe51b1a8c141ab2741c733fce5d28d88916c8ab5ee93bb1b1fd6796dfddec3784b036343cbcffb2745eca841d8bcca3d5ab44c6eca8572337bde46950554a4fc5d5e282f94767d8117718ebcaadfe08b8e320941287611b79197b75eff66e80887620e5f3ff1f7b90447fea9f1088fbcd165b25796d4a6fd21fb2710a08af85a191d5d64362a692967e781cf86c52c18e77036359f9170aa166d58a567d118cd5d5d1a86363f5ea5ac41164f901a92f12e1716d944369bc5ce0fad3a5a945a95233f1fb043b72eb2a3c7cc5c2d7e28a2cbbe991c36ceaddfe61a74b52a34a2009f458b86745370e8bf531d90d9cd4e35968de51054b997b05ae09a047176ed269cccc968261a884edbb8715cff817c0428aada7de5f7079aa60d42c11cd6ab60badb2d0fe7895fdadd12bcd376768f90e6e1295148781f2d4b7929af51a99a2280753bb204d9a718309d459881460a063e5eecf89ed615b2465746d7991e3f29979ab3e921ed91da39ad74cb09ddebf5e847ddbbde1204b79eb01ac642d9cc7c0a4f2b8431448afa88999a1f850045d5c93b0a3df68ee22feb57ce8adec6886accacf9a551e690d5f1329fafccb547c8066b550eeda6cd974161ba49153b573088a173473663dfa390b3d9d8e1e477959446b3c11ac8e872c4a638bc5963c5c77e1e7a701f41a65611e98ebc304ba345e6be081ca9b81e839b57b98ab5fc87fb8261924551ef41a213e5f8088eb0317764aff9e83555791587789753c6bbde6a223cb7a7b7fe15ac42be2f514aed07d63a0010c2b5b7459ad050531a349c261567006d4943f4d41856d66ca04fb72a2759b42a801457f2cc17b22c360df1c3c867e007be4a49fd67897a543caa26a6d0962240927cdd08a1a0a30b72a9dd5637095b9b997bd9395aa44701e3830d17272056adf619b377f6d8df2e9f642a0c9333f16a9eb4741ff9916a04795abf52069cc5fe121b739e227da8919f16b4cddf2a04ca9500d55fd1ef300bbb5194f828964b091a2bdd61019eb7d47a63da3e90a2e1bae9fb73f2405a5665cf81758cbd37b4541a119febbcc36a9ef68d490900a301443e4bf86dcac4b1a7599558fdb602993ad68bedb51fa1b120429cd95564a674604d9f54082cdd53c4c4d1ff5eaa28bb48fe6665ddfbc6b7735995ecfda72bb596951636aff4ededf12cd772d1bca34c10b202dbb53ef8e0dade172cddc6f4231c40aaaca6ce74891f2bb779f5ec63326deda541d4a364cc3b6113558761bbb322381bdca7e5c46d7681e9297e3d1822ace4019b0684c3cdf6639d1d2f979c6c08b2cfc0dbb8842e77bfe56e303ae220fa0974ca365650e841ad8799e8f99150bf100fbd5dc7cfe273ab6cf2aab626f7b0a8a7059cee820a064e952e010277c1df4a6ea6d7e99b28c7598aa9b007cbad2fb178dda3dda828d1448609e0595a3159b600a265ecff531a5babd5011f6c081031d5099faf2c8efabc84fc89766785d0713a5b8155c37b9a0237146ee9ab6a457b0677d6dcc316102e28a7c6dcc8933b68300cbbefe55573a3a54932e45523d2305d24ba4b5c9768a7196f7e541e359162a1547dc924e0e9699e48a44266fe0b419613b23e370bece5d795e418292ada15ebbafe1751942d765e1b3bc161cc75d7ef616778362777bb1e0f3ed54d857bf0e8e5a35d5b306e361ab744894bb6ec2d1ab28cf36aa05475a1a926982ae9df34436221bfd0a514fbc43e7a7f1be1f33bfd186f0e6acb551d78c329a401c2912c81e050313593fd994bac45215915b7e8fdd69db0c8c9c83b83973ce409364bd42598d73547bca23c03e8008d2f585375399ec4d39580e2210079b43b14269d111734db7eef384a4c418d252fc160a00c5e9b6d200d97f5fdec75a511db665430ef08c8213338d591a3b5550e812cbd4cf82bc97f5a744c00fcbe49e5e5a9622e38baff8efcf3e10e00072580fd591c1d5066642f7a45338632e3ad5ab6c73baaa5ae309f820bc0ced536400cd37229407bc9b6c4dec4fdc3634bb2578708618c0e9f56456637445f3dffbbd2116e477ecc9e249c4e261e8562f87e38ac680786c9b180f18c79dc1bff979599da88d774861815968c0c1638415b9026223e1a1f0894fe236be14d3e46e70041c6bea6a2b7887523ff2bf78ab67b43d19d61d877a9d98f21df3079ada9b3d21f05033fb0ae5bff382d895a29c5ecd1a1ddde786322876684c6092c5f23ab2feb22c4df4426a4236d88e576ef6a528f9ce190ab0ea32684f858d4f180979c8d70cefb17dd1e92e6705a147d6bab840ebf3fdad2bdef6e18b8d274cff7e5fdcda5fdf5eb4737c86a1c0df7a075fa898d8d06ddca4678d1bc37ab14576aaaa1dd58b50c3242227c8b03a59239f9669c0308a00eda694d37a99c1a4278930ca630177b5948beb0b8daa2ecdeee6dceac43da17a2c0e8d34a57498d379fbcce073ae536b7b9ad9a7befc80d695fa3a1d3bfcec4a4aec33f843f673aa98264437d1d01f2a8160970601d345ae39c6b4d75bc4dd732af8f985ae5c0646d521241faf49f98799ee33a26ccf9d223b61b56d04bfd08d4378322c00bcfdd42852e68305bfd93c10a657b8195d1502b26a5125d4f21bdc3f1513486e55901767ec28bbf73d8a29989a8e540d75dc211007517d47086a70adf3d65f5c82e2cfc407143bc112e1793401c5cb431ae49c4a5d0619a38e1dc9b06f27c134749545833e1f31fa95eedb6da18e1d601c9dfa10233e04fc3a8bf093d215afaadbe3c7b33ddaebb9a84255d5bd29506b7040056436551469c15c0ed777169a047d796cddcee64e42d412323c0115f4779d18ec0cdc2a07b51f1ac62625f4bdb1b71d3de2834d9e1d09330edf52a8ce6490e3c287cf5b005c4941a54342498c6b5737b9f42ca6af957ddac1eb17c2dbcf733f682e2c50ab03390f79ff05894bb284963ae3fb5b2fc6a1675e058cd9b386697dbf37ac689f8568e3bbdd0130a69b501b2ad696d8c12af15e06466a8e9a9aad474f8f1253ddf81114a8b1133727462b69e3bceaa28e9f37589e6cb7d89552df5b78726066e255dff0c8ff67293c34907a77613c98b81856ba6abef2d969f70c03edb37ae3472ac8aff88c58d4f76de5a9ec121a9c06dc082a3c6d65bb4316af7c2b9e6df61bd7ada6f081b3b30adcf8978d04e29632efc9a0bbc24af39c3cc55cf4743d767f271341efd7a48f31b7f24e5d63b68747dc416fdeeb484dbd6eeb1040dd79ec0dcea80a21b47325236725340a4cb79abe02d4ffd5302e4ed7379925259fd0176aed36f807d0794b674f6746b863fb0cc45956a58a13d9ad4847335a2c341d18972bb2ecb14a39841caaf91416e67be43970a593641b7508317ae0fe55f18a6d3486076588fe3ff03df7a1f41d70b3320326f198ad96e4b6a3f6e34da5457257a74d6fc59c169fe4d95250b383cb58e46ba12f1c016f56", 0x1000}], 0x3, &(0x7f00000045c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0x48000) 3.287206712s ago: executing program 3 (id=2910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x7, 0x1, 'ct\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4006814}, 0x20000800) 3.286367996s ago: executing program 0 (id=2911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2}, 0x8, 0x10, &(0x7f0000000b80), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0x702, 0x72, 0x0, &(0x7f0000000cc0)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r5, 0x8910, &(0x7f00000007c0)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f00000008c0)={&(0x7f0000000900)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="ea219d9a2b12388a19ea2a9f76a52000000018000109000000000000000002180000f0000008001a0000045046f256631a909a52e7ebbe1d25e1f13f5ac53f03c4d7092b8283492a534a86aebfb896f62afc984829bf47cf4f540052716fce4e9c768a61ea609d000005143482394b1b21a8c2094886bc79162a898ed8da630575ed6540bb1181a46eb93299d32f13269f526b659b2c85f74730c26ba27f09ed1ec897957cc8a8f1b52a6d6162ed25eed55cf1cd4ff889c7c2652c5b56a990c0e98ba663819df63056edd8e0cc994a886831a32b7f800bbc0bdd475589af75930bdde36263a6e9ababb594d1de1d85df53ec5b38e646c8e4cfdcb45eaa6cce981e696fc0426b1eeb8bea2d43ee4f0a3a49ec813f4824048291e62aeabe7afbe4431c4fc8055dc1f454b612add0c727256928dfd014f8d8a1ce383c40aec702c111fa0aea1405f07111c6abfb998aef858415872af08b484f3d7c561d43697339980537f703fd8a054d021ddd546b33c8745b1669d5"], 0x1b}}, 0x200041c0) 3.281702881s ago: executing program 3 (id=2912): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x54}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) (async) 3.140334188s ago: executing program 0 (id=2913): syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x5, 0x6}, "", @value={0xb, 0x0, 0x1, 0x1, 0x1}}, @random="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"}, 0x59a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="d40000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0891040000000000a000128009000100766c616e000000009000028006000100030000000c0002001a000000010000001c0004800c0001005fe7fd35ffffff7f0c00010004000000070000001c0004800c0001000100008057010000000000000000ffff06000000400003800c000100ffff0000070000000c0001000100000030636a5e0c00010001000000040200000c0001000100000009000000bdfd0100100000000000800014000300766c616e30"], 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 2.969761466s ago: executing program 2 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x8c00, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000600)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000640)={'syzkaller0\x00', @random='\x00\a\x00'}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x6}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x66}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xd9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)={0x8}) r8 = socket$inet6(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000140)={0x2}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x0, 0x10, 0x4e24}]}}}]}, 0x3c}}, 0x0) 2.488220922s ago: executing program 0 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.362834983s ago: executing program 1 (id=2920): listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x130, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 2.200260943s ago: executing program 1 (id=2921): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002340)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f00000021c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002200)={@cgroup=r4, r4, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002240)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002280)=r5, 0x4) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002300)={r6, r7, 0x4}, 0x10) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000040), &(0x7f0000000080)=r10}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r8, 0xffffffffffffffff}, 0x4) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0xb, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x101, 0x17f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.116152339s ago: executing program 4 (id=2922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x110a000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x7, @mcast1, 0x1}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xf, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="06"], 0x9) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000240)=@phonet={0x23, 0x5, 0x4, 0x13}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="2700030059feff000600002fb96dbcf7babe05000700810000f5080613008100accb", 0x22}, {&(0x7f0000000340)="8868d2634bb36947ca7391c33b09f28d5f9e36747fa7473d6a1cae43208691e9334404332f05d4ffbccdb3aaa433e7dd1a56bbd071d5feb358c884728f61769d9d3f200417e2e75f543a14a93f5c95f2f9cb3898b6591c6803cefce89b504c75b02ae0633ef826bb3b5eb54ce31ea6ea2d1e8f9afb5accae88d9fc7a4c5f2c27ac00a7587353ed67851434cd3021f605dcef82bd4a", 0x95}, {&(0x7f0000000400)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee74", 0x5a}], 0x3}, 0x8884) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local}) writev(r7, &(0x7f0000000500)=[{&(0x7f0000000540)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000580)="2a637c1b8b3894", 0x7}], 0x2) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x7, 0x1, 'ct\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4006814}, 0x20000800) 2.109231293s ago: executing program 0 (id=2923): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="114353012008ba00000037510800", 0xe, 0x20008014, &(0x7f0000000340)={0x11, 0x17, r1, 0x1, 0x7, 0x6, @broadcast}, 0x14) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x15, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.842159331s ago: executing program 1 (id=2924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000580)=@gcm_128={{0x303}, "00000000008000", "8eff0000099433d7004000", "6a3a05b9", "12772541f8eb02bb"}, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x1, 0xc83, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0xd, 0xfff1}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, 0x0) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) 1.744245992s ago: executing program 2 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)=""/161, 0x84}, {&(0x7f0000000880)=""/4072, 0xfe8}, {&(0x7f0000001880)=""/87}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/45}, {&(0x7f0000001980)=""/83}], 0x2}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}], 0x4000000000000ad, 0x40002022, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r7 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000480)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000500)=0x78) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, r6, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5bc}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x24443dc3bf287a37}, {0x18}, {0x24, 0x1}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xff}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6c, 0xbe, "599d26ec444d2182bd57208ef55e6ce0c5c40f97704ccbad7e9e6a023e3ed23c1fcbc0e174287afaf9136f93e4d3b0cf5a24a40bcf0ad7e793d2771a3083a3fb967383387eed3e180385549061e74d673f55d62ad7e70fe3072efab55d8d1256b0e18c955e4911d2"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x383}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xf, 0x39c}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4b, 0xac, "8f5ef1d7e223465457b8caea81f54f1a9ae1884e8885d9509f1026c2df4382976c7d4ac9d3062e5b88f7046a71f0321bc893fa6ee0a06238e4e0cb429363a536b6b4240d538213"}]}, 0x120}, 0x1, 0x0, 0x0, 0x8840}, 0x802) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000001900)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000001a00)={r10, 0x68}, &(0x7f0000001a40)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000001a80)={r10, 0x101}, &(0x7f0000001ac0)=0x8) 1.673975808s ago: executing program 4 (id=2926): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0xdf, &(0x7f0000000180)={@broadcast, @local, @void, {@llc={0x4, {@llc={0x0, 0xd4, 'c', "2ce4f997fc388270c5ac49581d605e44e35f1ac0993868ccbfaee63066676869ea085f65a6c4c6d100c7bfe60142a2b018295fa77477557b483ed719a3ba460ee15c63bcd327cdc959258ff255a24f96e7cafaf6c3fcdf18c561d565208be12fe746d54c2a9ff916c202dae25fb5b16dadc32632576c83939cd825751e6e033cb4abc47a45521d5738ab2339ef165ed600b567b452c6418ac44f907a720d482dbf242a6326320af6625b87dbc4aaa90dbb278630d2fe3d082ee9892d62be60cb239075233faee30813fb9339fe4a"}}}}}, 0x0) 1.572429656s ago: executing program 1 (id=2927): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2000c5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000070000000000000000000000000098e65997454b16fe36e89b13de25a76f9d30", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) pipe(&(0x7f0000000bc0)={0xffffffffffffffff}) shutdown(r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x215b}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xd7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000200)={0x1100, 0x2, 0x80000008, 0x10003}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r5, &(0x7f00000003c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x5}}}, 0x7) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc1b4, 0x0, 0x0, 0x0, 0x3ab}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffb}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x401, 0x3c, &(0x7f0000000280)=""/60, 0x40f00, 0x6, '\x00', r0, 0x0, r4, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x8, 0x8, 0x100}, 0x10, 0x12552, r4, 0x4, 0x0, &(0x7f0000000700)=[{0x1, 0x2, 0x6, 0x6}, {0x4, 0x4, 0xf}, {0x6, 0x2, 0xc}, {0x3, 0x4, 0x7, 0x5}], 0x10, 0x1bc66579}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 1.432322436s ago: executing program 4 (id=2928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000e80)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000c00), 0x56) sendmsg$kcm(r5, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000d40)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 1.143835453s ago: executing program 1 (id=2929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000300)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f00000003c0)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f0000000540)}], 0x3}}, {{&(0x7f0000000580)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000640)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000680)}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0a0101000000000002"], 0x138}}, {{&(0x7f0000000800)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001380)}, {0x0}, {&(0x7f00000013c0)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f0000001440)}], 0x5}}, {{&(0x7f0000001480)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001580)}, {0x0}], 0x3}}, {{&(0x7f00000015c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001640)="85a020c09399747b4fd7d8c826065244fe9dddb2287f68215529bd4aef0358cfc1dc387d05d3b32e", 0x28}, {0x0}], 0x2}}, {{&(0x7f0000001680)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000016c0)}}], 0x6, 0x200460c0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000001780)={'raw\x00', 0x1000, "4b756008faeb64dfb14dbe6f07ee2638d86597572148573a9179557685b95c8c8790194f05c11dd61c57bc394120bb73811fa577782695ed4d155167d0b6c926d9d9ec8fa26fa5d1691ad48b5a1b141e22ecd6a91643396bc334e6fdf2ce12350f2fd58787d9323f81126ef244ab8be494233127d9f249b8d3e76766ebb1f1cbd8090b93bb141a1665a3f2f21e05385190355177903f7a2ef563e507a05b4dd1ee82485a0a4634df970a3490f46bc7abee1896bb6c11ef63c08b54dd5ecdf8e9ac7b334a54169c1542661941250f6f67276e4f732c0e5c0bafe30edbe48dc12ae460ef7347c4104d47f65feb8828d2731a0bc8cd4c18cff364da40f12aca1dfcfd80d48a9662ddb86332788049faf92dbf95a227199b2705d344d6a910fd9670374e8b4140a7f402a6000d48f0c36d12950a66ad378a377a3cad481cc20d6a132751d3da66b4d7d6afa4865b1e3307345ad2d8ec3ed4fdb12dccaddde3b0abace0911f5655ac6d119674763c0fac44f1715ca00d737f0690dd02b79ac16102f87ead6422661e802185a13815555ec675677d5e2243dcdbd609c43c3c2417f3e5c5b1350f648448d33586283b046396c361af335171670187cd7f9dfb2bca8a89057359ac60e1c20274c1c3e2defa0ae6ebf9b29bbbe690e6c737cdfbf0e4288727c3bb768d1c9eaa028feb9875eaf9c391d02ca519fc185fae7664a4068a91aa8bc54ce94a7bfc8ad507a413f7b3e1557b54af1d2520569b979bcc96261fb5afe7a4d4e49b0bc19fb22aef7bb7c8d1458a09417c481e6f930aa457c7027287d8d7eece5e719c5c77bbf269df9a2fc9a9ad1cd848d52b422ff5a03345aa2e1a53a9badbd3d7a3b4affeec3bb5cc09e9841277e8409eace7ff8aeceafcf56b39cc818baca6ce915623e8993bf8ba7dd483182424dd48fc0bcd36d70808cb1e849f4f540c0091e9ae44f1dd4f9758393515d29c5a4c539def0c071b831a0a1799a5f33736bb2aa4a6839a3c71e2a6b6af1ead379b329fa99a95e9db28ae93d0c6e3eff78d6dafd5fdf689ba29ec002935b8bd783a4bb6084a940de8968cf3c2bbe746da2a36ec4edcb069e307580fce3580c22180b9fa39debd1629e403e0ef9c8dd1ae9f0334c2359802b1dcf1a69686dd1e371701f3f8177082c006d40878f3b6a6797d8941586cb78a6a90e0f0d5e6a2e49fbc1a76418fc152fce394aab82bc62982a76eaab3e4a5626d207d40a35cd9e84ce1f46effa887f3d5954cb3627a20d29eb929e793ae8eff9835dbbf637dcfd7e739e431050b92d031b5fd062591fcd5ebff8a9120d2ba72bd33273cd352de7228404bd58f9adb119fbb334804e516a7f1f2aff9c0af86817e5892c74f080b029344aa3a3135848551d73243a9af2ecb115a02511fcb203721f07e0d5a452e604d19d14a8bac06bac6f74e03f30efb69f3879ecffedb7f1a35239bef89861d977a2c9c9eedd6a93007df32229a573bf41ccee09abd3c527ed90bc3fdead6888783495beac5a8fdd0d0accdd6ce1eaea1d9ada51d91a21a006e587bbe023c8587d21f978559b71a2dee0e976a817f72673188069573cc64c9f70fda478b0da71bd89fcd8e014f7b412e04479cf653447dbd307d002f9e5bb1e3504d1585a8042a141b01475726b8335760374e473b54bda546aa808d7dc7843a10502dcfce3e19ad33d5b5d44fc85ba603dd565626fb984dfb18ee893e99c74d55873c3189f88d9031915ce0bf3a726b7b4efd001b8a96ae39133c90541d1dc14a91b0172dc752efeea2fe5ded01f8402abc9c91f994826c4eabbaf8d09de40a5e4f873809e197c43fda3cbe0be39b9d502db2882f7954ce355740457070e6a1e985e8d2b904728f4f6d8a3553252ea7889f93c3cec57f14f1f931e7bb32b7f9bcadf60c86db27db2463ad6825b00297fa4c3e7ae9835fb1090be6620a21fe34461e65a0014294e8ea83407430e28eaefaefcae419de55bbdbd48fc499522d1d20aade23d4717b95bf237517a0211cb7b759c6083b4e7ea79d5c59b30fb022c337500d35e920f479c0bceb0f4fcfc367cfbb085995f7c1c01cde889a7ab1367c234380b2300e487a4269179711326e5d9a08eab7515c9747ba19240a6fbfd2a7473bb17bd0f372d0926b184822254fd3bf50b7411402b2517a80c2d1175fbf2b676790ee6f6cbdc3b8233a55d3e23c9f3da6546d4fb0d28a74389beb448c62f32f177dbb93310d99796f8875c9f6c1bdd42c2f97008416cd91a08c55558a471f2595f9d9f22e1398e63b85dded76f8ae48c0a00508f0ceaf79f46289e83fe52632ead6c59781fd8c4da7f8bc0c3a28dd6669b8bcdbf55e62c985407cc6afbc9a71f7daa06ca0629f16c59938c16922d9ebf679fcd1754b293bdcb51731a0907533765b028dc3219d3f23b611ce3c9e315aa2d28ca751527c7f5630b77418c6d24216461600b1cf618dabdfd716bbe03ac3bf3ad4f6aecc78f74299b6f3c316bfaaaf8d92bb7c70b24802714bc3a21633df9683edcf8d98b87a12f89610a7606023ec1f85802db0e627305512997306c208bebdb6ea08bab8dca6ad79ef9b3092277ad7dd66dc41041cd0195b25b7f8de422d1899462adf47acb500dd93e6b70c4f84445c5f5274056f8ffd7a574dca72dbc227f36e749b6244a134557bd18056fed0f9a9e69fb40e89b6b26d6d83dd3654e572053fec4f32e38eec682cf2dc11634f3b71c14e85aed053ba94a1f557453905bba866ecb5549948ad556a7963df87e203ffd7f850708de944dbc734378bc271f04586ed742aa82585c032cd71e54fc042d4cf3b3a3d00bfca619a03c6c0c20cfb60f5556cab351d6f792943d900e5a2e20e4672438b9b6c5a39d80f7ace1970b7c9e139240e0ea2b580fce5654e84eccb6d0dc407597566224865d30f2f1b2c45b57c41edcdc5afcacfc4cfef29058970eec53282fc21f43ebfac5df8ca9a11312939fd23fb1d41db881af85e3f19f3a8e88cb8fa72b2c5fe2303e2b9775c06c5585e12a4ef85326015d9167832d96bb097602b3753867ef60837b871bdfc523d485ab92a294625a1f7facf770d4dd1a106374c86c8a26b04b55feeb0b03e92e73bf6d81b164e5da9101fe8147cdb33deadd67a849c901e269bcb6328ab9f27e70befa6a7ca64ef722d1bad5a6a75983788c68379c2d1a0e292fb5babd84e087d1ec92e9e03c3413b9110569d38b89cad680157f58371cf5531e24c1dc4f75e9eb483919b7f6851838bda6885ae447573458c02d76332c5b484bd9a16c0f1567972be604187b0a51e97602ca65145624246674ca27b78a587e08aa40ab3e9405d679c91ab793fbaaa3182c21da37a28a4eda5aaaf6cfd8f8c9e2a312b3ed69ce0787625707585ab5b0eca6342dd637c8c45850ff8cc1fda45fa88e0d880f097229b9f1be314fa33f8e5a3684a9838d42fa3259bbd46f96080c7aff2aeb93b666ae7311794327ea249979c16fa003583ef468e6bdd8ba64cd7005dea5af03f02274c2272dcc83dc474a16d4cb9267b98d1ceaba4b43180175de0b0f8e3ae4fe89e767516b65c50be090e84d76c0e28897a3e6c4fdc6f577ed5dd87689bd73d74441354b6ac8ecb1f24c0aa452ba4a7fa5d76add4012968ad2c4bc011f4472034bafa33012c7f89b786e7512e7f6681342a49aef99d41467a06b89a27ed685e41c2379cd3f8d798e71eb12463a5ef55cc4ea3dae01d47e599f38341fd90371431f28527cab8be0fb30f88849080af2ba109ee3d7d7ee6dba8f3c1e1d9925e09a932098773dcbe7ce9aa0ac97809de0a6185e7ce2117040838f3a4439c32e5aa69fe69a14997db87d5e89bc00e32c7ade44ff69f2b8946f77cc64c7a568d5607fbdb4e58335a63be0762b116d51c335bef9988775ac5624733ccac5ade0ab679b9e02c87d5cdfb57220f57b02806317ff0efd5c3fbdf59c8557468fd3588aba10fc5701688652bcd008ef5c69be5770b1b211b8dd9523cadf1baf023d3f1cbcc8e054d1d559e6619dbda47f91a7c6adf57bc817eacc3fe206b4a8142fc06ce6efe52f4774dfd6083820c170f375fa5040ba9c38f915669a7ee1901fe41289c4df381d235766085986925ceecc6abd4ac87777f87fe2dea84c338cd239a517106a414c84e7e042e8bfa3f53ee882bd8c04cef995529ee546303ca34aed32bf31e67c92279799b56bfb2697567613fac0d4e56a41351b5956a147312ccec4c08648d5dc51b10a00ff1538a90afbd33f1d39340615d51ff7a3e0301eb91ef560dcb7e8b39a35a6ebf9640197014a476428ba95d05c8451cc75bd7eabe4a5ee24198e9d720ec572d5dfc12ed107ff735bd2e905654dcf4130c78a401ebdf208b24793367448d69a28f012193273cddf96d639d5cb1f1d1871f7d76bb8b3fddc9cb527ece3198340914bd2a7ace58af0b2f57e83dbf4353bc55de5860937fab0f9c19491efe7a3c202188cbaec44629e6cf97ab6a2ea6379fc832c4b5e5dfe00dcc096782aa80b47eb7a20aaa8afba300d2a631edc2c1ecbf4ba992b2da7bdbf0891983848b6c4d01873c82b5ee9854c380c06d0ba30397c081f0b336ab72f79853de00d37e6ecc0fc4487a9df7a34d9c77a96d7b9a4399f67cb7e4156c6a411c3d9a059cc8d43a0f7b64e80dcb649bcd606f5065595abb5f76f889e45d0c468a21ac8a12fe4e5f20a49c4372aacc7c258f25e7e0774c769e25dac25e67670d4e3db80adeaf873757d213da5618c1fc54e71313bbde9e52cbe9c3cecded054794732643c9e487becdde428cce6bb4450e48bc4253912d778ed26a31937704e05aac3e1d595447a97e89566d4e262f64221ab73b64abd7cd79cd1343bcd29738f4b25e9df88784459db8a30d0bae005b4aed23c6e9005744b29e22ec8bec8702716fd1f826650fbe4d43ceb6a9c111da81f594c347131dc3b7a8755683b330c1f11074413f401a631c58eb158122711ecc44db567f5b7c9cb694888047c192f5bfa21cbd35ca1848c88276f73803f4961adc898a9ef2f1c38e737f2e1dbc9f8f8fecc83973dfd2f6111e2962fe4bbe4bf3986f032e264f04f48bb90f563f961885891c82adfb87ed86907964530e259afe21d0f96b3c0187b195d515c6e807180a20659f4c5f390d12612add3ee1927c891f1c83499229a38528b62c4b18c99687a732936340e95bd48ae45742126f3a9e883d957135485bb6f62e57582d47bb889b4d1f7ff1157a5d7aefa66af8b090a5584fbb4ee9590b651b2f5e984b8cc9279d6bf2f88135615970c89dbbe49b9231c9570eb86ab8cc132c9c2e4a296d20779a3eb3c2c1503de54074241ac9dd169188bbdf70e677b92b4f1ca0fb61027fead6ac5d010010fa53599e320a436493c765d40a80f7b7d894711429d1b3dfe51f33600e150b40f34acbf5351db51162104f59d3dd7776927702d25f0d7143579fd29843819cf25fc83d055607fa8c33902ff7981cf1957e693d758fd1bd5041d899276cc13f761103157de3e02a83d5787970cbf8a71a98840aea0e3a4a281c9e36a92f8298f14948216c29d71795ef25ac8e120bafb78880af4c43bfa91fbd7756921b44f96d9f2dc9d1856f1a299ba29caf08fe1e43e1642048bc9370404404cc9c199fd5a826eaa7a8fec94c919b12e3e0bf8425f8c333c3a15c14c0c5f63f70e6b062001437556999ea54798d8f3b2fd6a25e998ec90bf88430f6b102d2c8ef25b367f42c1472cf5c284ffbbd4d6c0e9d955d5845c29976462a1f9245d602995efa6f90b604"}, &(0x7f00000027c0)=0x1024) sendmsg$nl_route(r1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x3}}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000680)=0x2, 0x4) connect$pppl2tp(r6, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000540)=0x7ec3, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000008c0)={0x9b0, r7, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xaf86, 0x3a}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x47, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0x39, "1c481361f321bd51e09c706abdfda399c3998de98699191ae4ed01327c2bf657dc9dd656d56b7267b963ebef84e0863f0b9197d902c85febce"}]}, @NL80211_ATTR_PROBE_RESP={0x8a7, 0x91, "42f41cf5db92ca0984da4ff9a02c3e1cb0401afb3543d761a2feca2094a7ad5ed739dc27a72d547143e1c75b4b65dc7a4513865a95dd1a476694022bb6974db931a10f82995d080bf0d43b5d21c9c39241d66d4f7f7ace6326266c7eafc24a60da97c096a8f709241a2a7c0c7295703af19b2af33297dbc82ce08cf7e236f30bd67b26f90b0172d6ba2e1a5d41570a9dace9f0e159f67f77803f73de8ce86d38cf02caa869be5c514d1d84328285d400f1f344ebc049c4cd99a8e394493661057c0eed4edf89c629e88ea0023e12c1de0b1e52afd83d89cd82e47a927c5c811d485830bc1e86ac9419a9b12b3569738a6163f26a3241fb7cf89ad2bc3c8ee2197f94108f55ed20d0e1a8b70f1708ca8b21c124861f9702d8ca4c8105a8976c09624c3a2da5b8253824d46540f0867fb769c9c4ac2ed87e74e5fe408c3fa164c9234271a95049208e0a297c8969973ec953c5e57080f7826dd3b8eba9e984797aaf39e7fba38d0c331d7a782d37c8c719cc42c4d587b732de0fdffb27ba85335b75eab0b27823b95df242e933723ce84a258824be3311819431b1d63ddc8ecf829be5be1a3e1cb4fd9fc229b87927c9c1cea98f32536d61eeae5bd147752ff42d2fd7209e93ec67e29fc80069ef5bd041b01171e2e1c576cb9051c6115b7bdd69e9e942255b8603e11df839795356eb7bee8daaec766ef88be82946a0eabf94819e461f75ed83976d21a1ee41a325b8f51d3ca1b187e7a2b76c899f410226ebe7d4352217a7dde8e2743bb63e024b312fa2ef35c1c7bed20a262507e16ce6de5c55401f9918a13f37d8d1eec46dc5e06f5abb1b7371af35eef33bd76940f5a781be70bbc1024a01064722b28bd528a12abbc9351c3f7aeeaf31e89b0dd5e5279e53a86a6c03db2875c0d73b478c96ff786efc444690936a20f2f56e9fcbc0f519ec340bbd1c3b1c72686d0ff806a021115809343d950d80da230c40d97ac487a3598f4038295d927c192a6743dde56ae5c95aca53366fb493c32bbfe3a0e266a6bcd60b7ce4549b30faabae076965198953dacb9b1cdafe842191d6c661c18eba7eb93614abd3bf45a86d5cc826bebf8675e231dfbfb151301604363777042a35040a8b813b4e118a460d8bde54c404f70527e5fa5531ab6bc7efce339b84697a88d3ac54477352ebb4d7513c4be07140bf48ab52db131d37d1aa8d2a5250df60036b4a716092801797aa4aef710b81c842e3f6da580423cc53c9285a2341320376f5f6dad565b3128496298c93559c91671755994481500e7400637ae9f06022badfa59590b02274496e7fd837098a49dfd2a48bb59ea9ef2b5416f97c7f1ad04b4004d8cba2409d559c3978a242de54e61e64c7ef5b3ca25c145222c91040dfcf790d4376efcca7d6ac5f311f882d8b2fe1953e8e65e8cde2d0e88b9638e7b46f11f509b8d1d89e464b4950ed2b825d640deb8a820dc26ea179b4d1f81aecef5d9581c5cc2694f1f9166e25924746db4775ec6c46b119a1db0c1fe659312eeee1484d40815912c8640068228986ff580732c022c240fe3b15fa783bfce0620f86debd98d672803fd9c0eb314f0b46fc9ca51cd1580349eda037eb4d155df256fe65fb9eb841e798070a082ba65470d5f3abb7bd99a870d9388b77957272b1f2d287b06d3a84b829df62c5d140c960baded6531745c59f15b021d7c0cede8a48b99a93a7d6b7a4f012dddfeb211daad69a805d4453b9517285f1a90f5dcae131fc518b67a318d1fd79975cdeb9c888aedb14c09dd6e00fbf9d454c2af215a119c03a9fb17aabd7513af1c9ee2bb74a40bda34f8a1738acfbaa8725c41575cfdceca44614e81489db9909bd91b662ffb54928e8b73481ba581cb9fa0e07f9ee02b252f2d0c0e2e1134c8a14884c72bb81c9ace4691b80dd34593bc6cae318417e113e476bf68286a6a871c39ef9bc66d7f1b7be7d4a27a396430ff863367a414a06282658206a8e90fa2c1540111a55f87de36050cf63adaf87d53da3af0fcef8a89f00ff31ec9324b189c8c376e3b2703a7dd98c8058bb8ad36d8c18211f2a63262847b4aac5dc37bffb1049cb4fa7cd2cb075ecacf983f8b93a38032d542120cc915b32aa06ccd508ae7d3d64fa5b484952ead0e8f42645fedc1245cf19eb438e81aa504ef855592d1c1d84347c5e81ec64c55550239a03a550ea456e46889580c27c1a2c58d50298e3ffc707f3c9b5fa506b367024b6e5f0eb2b87a2f642cf2f566b5fa6012891047beb1a9634851de448908136a9b0c4e43516aac134272a93beb59c3bf31e247fa38bb4f66676a58cfcc9c978b8f127205d43bbb8e6abc46d727d8ba3df189cadb1348aab7c5688c0f2946d09390c6a9c19126f723f083641ca24e1a9e22c11b0f0f8c72aaf67d62b68c2c33f3027a91e29c4c4a3d8f2384ff816b0fe0198944abf9edc24681cc70843faa0b7f4b27d6eab4826a7bea6a532274e2d2e94918a02c165de579e2914cc834ef4da1adf04618044f0af15ec2dd0fabf2554a01d06a7c3ae520f30d4ca19e199ef16ed0e057a05dceb62bec5181c800c9b0cf513ade0853c0c63181c2216de07cfd47eca5bf341f35d91e825c60786b70f4e42222f7c4dcae54f2ba51de4f0f3413fb6c0c5d651a6dd2f384e455883f90a2c0efbeab5ad2342620b74e5cee348cdd4e7eec8aba467a029c543634ad211b1dd02948a30deeff91eb89cf4ec5529b20c5e373556a7c03c84997f09dab3c3554feb4d58f5b0a25ee12dc1d1e225343f618716864c77badbdf6c2d791572d4b846c5d7d01ae2c7be800ab0e4f00e7561d7a297dba44222d45765b222ef2f9b1b0a4584ada983ec5940fcb7238992771d91db4318603f6515ee2697d1b4cc8280e16e3e918e2943bbd3628627abaa86407e102bf17334dcd0723a93faf2619643b5f324ce018b4ea83b098cf1c9916cb8958fedcde819886a608439e8b37210b1d5a153d30a707f5757ed316e18f156a0037587200c8e929afe3b6e349f8f41413a950feee2f3d5da598eb93aaa1ed84a2dc711a03ba0f39288eba1f5a74afe7526aae986abaa6c6f94f37a3db3b50982d694e784755c6591f06088cb4a58b4"}, @NL80211_ATTR_BEACON_TAIL={0x9e, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @measure_req={0x26, 0x83, {0x9, 0x4, 0x32, "ab9629d82bb0425612ba76de3c4d7137ecf72d5e9d80a52bcf1d576d991840f03f458dd8cdcd51adee7315849ca45516b020c7bcf25e994932f8eead742100bdedf408580690c455fdc33a768fc1b008175dba53eee793c69ad61fc25a854116a575b0121001388e019c3ded014d376770927949b2f566e1afbe1817bf9b4c26"}}, @mic={0x8c, 0x10, {0x80e, "6b0267ebcbb5", @short="602e6d441b0168d8"}}]}]]}, 0x9b0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000880)={0x20, r8, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x20004000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r2, 0xe2f8f000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000001380)={0x1, 0x0, 0x10}, &(0x7f0000001440)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000016c0)={r9, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x8}, 0x90) 1.040900469s ago: executing program 0 (id=2930): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x6, &(0x7f0000000280)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f00000004c0)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) (async) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010050}, 0x4010080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000007c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000800)=[0x0], 0x0, 0x0, 0x1, 0x0, r4}}, 0x40) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r0, r1, 0x1b, 0x0, @val=@uprobe_multi={&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=[0x4, 0x7, 0x4, 0x8000000000, 0xfffffffffffffff7], &(0x7f0000000480)=[0x0, 0x2, 0x5, 0x0], 0x6, 0x5, 0x0, r4}}, 0x40) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f00000005c0)=0x401, 0x4) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000b40)={0x2, 0x4e22, @empty}, 0x67) (async) sendto$inet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000b80)={0x2, 0x0, @remote}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)={0x34, 0x0, 0xb97534d5fe9704cf, 0x70bd29, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r15}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route_sched(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x70, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0xfffffffffffffdcf, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x0, 0x12, 0x4e23}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TTL={0x0, 0x4, 0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x70}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0xfc30) (async) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x8010) 731.949936ms ago: executing program 2 (id=2931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 639.997987ms ago: executing program 4 (id=2932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05080000000000000000010000000900010073797a300000000040000000030a0101000000000000000001000000090003"], 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x29, 0x1, 0xf0bd27, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200c84c}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000009300004800800010000001234140002"], 0xb0}}, 0x0) 609.223758ms ago: executing program 1 (id=2933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_timeval(r2, 0x1, 0x56, &(0x7f0000000140)={0x0, 0x2710}, 0x10) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x101}], 0x1}, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) (async, rerun: 64) shutdown(r0, 0x2) (rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) (async) socket$nl_route(0x10, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0x1, 0x803, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) (async) sendmsg$nl_route(r4, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r0, 0x0, 0x0, 0x20040401, &(0x7f0000000340)={0xa, 0x2, 0x3000, @empty}, 0x1c) (rerun: 64) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 456.058642ms ago: executing program 2 (id=2934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getchain={0x34, 0x66, 0xfcd66a900070b359, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}}, [{0x7, 0xb, 0x8}, {0x8, 0xb, 0x7f8902f8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x601, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0xfff5}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtfilter={0x6c, 0x2c, 0x601, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff2, 0xffff}, {0x1, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x0}, {0xc, 0x0}}}]}]}}]}, 0x6c}}, 0x0) 241.869577ms ago: executing program 4 (id=2935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000002000300f5020800024000001003070001005f7400007a06c512c0210800034000000001b92b939705c99e42b39a6d3caba13aed5bb66296aae0f608c3b184917a97102870b25082b8cd231d725e3d74a9c43be01c95cc812b132861b1782a60800c88acec2044d5014a9a2d92e53949"], 0x2c}, 0x1, 0x0, 0x0, 0x4006814}, 0x20000800) 178.861709ms ago: executing program 2 (id=2936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)="9a79cfc00d459badfcbf31e846f9b2f41c6304", 0xbcdc, r0}, 0x38) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r0, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) (async) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)="9a79cfc00d459badfcbf31e846f9b2f41c6304", 0xbcdc, r0}, 0x38) (async) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r0, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) (async) 0s ago: executing program 4 (id=2937): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x28, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xe) sendmmsg(r4, &(0x7f0000000280), 0x40000000000009f, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x37, &(0x7f00000000c0), &(0x7f0000000100)) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x28, 0x5, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xe) (async) sendmmsg(r4, &(0x7f0000000280), 0x40000000000009f, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$sock_buf(r7, 0x1, 0x37, &(0x7f00000000c0), &(0x7f0000000100)) (async) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) kernel console output (not intermixed with test programs): type 21 has an invalid length. [ 170.884252][T11387] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.884322][T11387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.884340][T11387] IPv6: NLM_F_CREATE should be set when creating new route [ 170.884371][T11387] IPv6: NLM_F_CREATE should be set when creating new route [ 170.884403][T11387] IPv6: NLM_F_CREATE should be set when creating new route [ 170.928976][T11393] sctp: [Deprecated]: syz.1.1441 (pid 11393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.928976][T11393] Use struct sctp_sack_info instead [ 170.929253][T11394] netlink: 'syz.1.1441': attribute type 21 has an invalid length. [ 170.929319][T11394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.964690][T11392] netlink: 'syz.0.1443': attribute type 1 has an invalid length. [ 171.041356][T11392] bond5: entered promiscuous mode [ 171.041721][T11392] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.107658][T11400] bond5: (slave bridge1): making interface the new active one [ 171.107685][T11400] bridge1: entered promiscuous mode [ 171.109724][T11400] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 171.185463][T11404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.439987][T11419] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 172.208796][T11419] bond6 (unregistering): Released all slaves [ 172.466230][T11433] syzkaller0: entered promiscuous mode [ 172.466394][T11433] syzkaller0: entered allmulticast mode [ 172.698838][T11443] syzkaller0: entered promiscuous mode [ 172.698872][T11443] syzkaller0: entered allmulticast mode [ 173.078467][T11467] bridge24: entered promiscuous mode [ 173.078631][T11467] bridge24: entered allmulticast mode [ 173.108507][T11467] team0: Port device bridge24 added [ 173.144697][T11467] bridge0: port 3(team0) entered blocking state [ 173.144766][T11467] bridge0: port 3(team0) entered disabled state [ 173.144907][T11467] team0: entered allmulticast mode [ 173.144926][T11467] team_slave_0: entered allmulticast mode [ 173.144943][T11467] team_slave_1: entered allmulticast mode [ 173.165495][T11467] team0: entered promiscuous mode [ 173.165614][T11467] team_slave_0: entered promiscuous mode [ 173.166025][T11467] team_slave_1: entered promiscuous mode [ 173.202575][T11467] bridge0: port 3(team0) entered blocking state [ 173.202648][T11467] bridge0: port 3(team0) entered forwarding state [ 173.353312][T11478] udevd[11478]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 173.379283][T11478] udevd[11478]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 173.679158][T11500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.679193][T11500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.681909][T11500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.681928][T11500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.686812][T11500] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 173.686832][T11500] batman_adv: batadv0: Removing interface: ipvlan2 [ 174.050131][T11512] syzkaller0: entered promiscuous mode [ 174.050157][T11512] syzkaller0: entered allmulticast mode [ 174.252648][T11530] ip_tables: iptables: counters copy to user failed while replacing table [ 174.273386][T11530] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 174.345411][T11530] bridge3: entered promiscuous mode [ 174.689958][T11557] __nla_validate_parse: 11 callbacks suppressed [ 174.689981][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 174.966591][T11562] netlink: 'syz.1.1488': attribute type 21 has an invalid length. [ 174.966662][T11562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1488'. [ 175.002270][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 175.381818][T11579] xt_hashlimit: invalid interval [ 176.137013][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 176.150820][T11611] syzkaller1: entered promiscuous mode [ 176.150846][T11611] syzkaller1: entered allmulticast mode [ 176.845049][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 176.845133][T11637] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1508'. [ 176.987940][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 177.268079][T11656] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1513'. [ 177.275079][T11656] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 177.287986][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 177.366287][T11656] bridge0: port 1(veth0) entered blocking state [ 177.376061][T11656] bridge0: port 1(veth0) entered disabled state [ 177.376369][T11656] veth0: entered allmulticast mode [ 177.386319][T11656] veth0: entered promiscuous mode [ 177.399686][T11656] bridge0: port 1(veth0) entered blocking state [ 177.399769][T11656] bridge0: port 1(veth0) entered forwarding state [ 177.426169][T11666] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1516'. [ 177.485967][T11664] pimreg: entered allmulticast mode [ 177.515040][ T30] audit: type=1804 audit(1792848374.773:2): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1512" name="/newroot/309/cgroup.controllers" dev="tmpfs" ino=1602 res=1 errno=0 [ 177.515089][ T30] audit: type=1800 audit(1792848374.773:3): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1512" name="cgroup.controllers" dev="tmpfs" ino=1602 res=0 errno=-22 [ 177.606399][T11663] pimreg: left allmulticast mode [ 177.913411][T11690] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 177.943167][T11690] 8021q: adding VLAN 0 to HW filter on device bond7 [ 177.944254][T11690] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 177.972637][T11690] bond7: entered allmulticast mode [ 177.994007][T11690] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 178.005548][T11690] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.509127][T11728] ieee802154 phy1 wpan1: encryption failed: -22 [ 178.531111][T11731] ieee802154 phy1 wpan1: encryption failed: -22 [ 178.875449][T11746] syzkaller1: entered promiscuous mode [ 178.875473][T11746] syzkaller1: entered allmulticast mode [ 179.117967][T11769] FAULT_INJECTION: forcing a failure. [ 179.117967][T11769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.118002][T11769] CPU: 0 UID: 0 PID: 11769 Comm: syz.1.1542 Not tainted syzkaller #0 PREEMPT(full) [ 179.118027][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 179.118040][T11769] Call Trace: [ 179.118047][T11769] [ 179.118056][T11769] dump_stack_lvl+0xe8/0x150 [ 179.118092][T11769] should_fail_ex+0x410/0x560 [ 179.118123][T11769] _copy_from_user+0x2d/0xb0 [ 179.118151][T11769] do_ipt_set_ctl+0x743/0xe20 [ 179.118188][T11769] ? rcu_is_watching+0x16/0xb0 [ 179.118218][T11769] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 179.118251][T11769] ? rcu_is_watching+0x16/0xb0 [ 179.118283][T11769] ? __mutex_unlock_slowpath+0x731/0x900 [ 179.118313][T11769] ? __mutex_unlock_slowpath+0x731/0x900 [ 179.118346][T11769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.118376][T11769] ? rcu_is_watching+0x16/0xb0 [ 179.118404][T11769] ? lock_release+0x4b/0x3c0 [ 179.118428][T11769] nf_setsockopt+0x26f/0x290 [ 179.118459][T11769] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 179.118483][T11769] do_sock_setsockopt+0x17c/0x1b0 [ 179.118512][T11769] __x64_sys_setsockopt+0x13d/0x1b0 [ 179.118541][T11769] do_syscall_64+0x166/0x520 [ 179.118569][T11769] ? trace_irq_disable+0x3b/0x140 [ 179.118594][T11769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.118615][T11769] ? clear_bhb_loop+0x70/0xc0 [ 179.118639][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.118660][T11769] RIP: 0033:0x7fd73219f559 [ 179.118678][T11769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.118697][T11769] RSP: 002b:00007fd733147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.118721][T11769] RAX: ffffffffffffffda RBX: 00007fd732425fa0 RCX: 00007fd73219f559 [ 179.118744][T11769] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 179.118757][T11769] RBP: 00007fd733147090 R08: 00000000000002c0 R09: 0000000000000000 [ 179.118771][T11769] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 179.118785][T11769] R13: 00007fd732426038 R14: 00007fd732425fa0 R15: 00007ffc21d36be8 [ 179.118811][T11769] [ 179.468538][T11779] bond0: (slave gtp0): refused to change device type [ 179.571497][T11789] bond0: (slave gtp0): refused to change device type [ 179.907012][T11807] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 179.923181][T11807] __nla_validate_parse: 12 callbacks suppressed [ 179.923202][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 179.997006][T11815] gtp1: entered promiscuous mode [ 179.997157][T11815] gtp1: entered allmulticast mode [ 180.133826][T11820] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 180.135759][T11811] IPVS: starting estimator thread 0... [ 180.217282][T11824] IPVS: using max 42 ests per chain, 100800 per kthread [ 180.223734][T11829] FAULT_INJECTION: forcing a failure. [ 180.223734][T11829] name failslab, interval 1, probability 0, space 0, times 0 [ 180.223769][T11829] CPU: 0 UID: 0 PID: 11829 Comm: syz.2.1558 Not tainted syzkaller #0 PREEMPT(full) [ 180.223795][T11829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 180.223810][T11829] Call Trace: [ 180.223818][T11829] [ 180.223827][T11829] dump_stack_lvl+0xe8/0x150 [ 180.223865][T11829] should_fail_ex+0x410/0x560 [ 180.223897][T11829] should_failslab+0xa8/0x100 [ 180.223934][T11829] __kvmalloc_node_noprof+0x171/0x820 [ 180.223968][T11829] ? xt_alloc_table_info+0x40/0xb0 [ 180.223989][T11829] ? xt_alloc_table_info+0x40/0xb0 [ 180.224013][T11829] xt_alloc_table_info+0x40/0xb0 [ 180.224035][T11829] do_ipt_set_ctl+0x962/0xe20 [ 180.224073][T11829] ? rcu_is_watching+0x16/0xb0 [ 180.224106][T11829] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 180.224141][T11829] ? rcu_is_watching+0x16/0xb0 [ 180.224175][T11829] ? __mutex_unlock_slowpath+0x731/0x900 [ 180.224206][T11829] ? __mutex_unlock_slowpath+0x731/0x900 [ 180.224237][T11829] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.224270][T11829] ? rcu_is_watching+0x16/0xb0 [ 180.224298][T11829] ? lock_release+0x4b/0x3c0 [ 180.224324][T11829] nf_setsockopt+0x26f/0x290 [ 180.224357][T11829] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.224383][T11829] do_sock_setsockopt+0x17c/0x1b0 [ 180.224413][T11829] __x64_sys_setsockopt+0x13d/0x1b0 [ 180.224444][T11829] do_syscall_64+0x166/0x520 [ 180.224473][T11829] ? trace_irq_disable+0x3b/0x140 [ 180.224499][T11829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.224522][T11829] ? clear_bhb_loop+0x70/0xc0 [ 180.224548][T11829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.224569][T11829] RIP: 0033:0x7f88b359f559 [ 180.224588][T11829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.224607][T11829] RSP: 002b:00007f88b43ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.224630][T11829] RAX: ffffffffffffffda RBX: 00007f88b3825fa0 RCX: 00007f88b359f559 [ 180.224653][T11829] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 180.224666][T11829] RBP: 00007f88b43ec090 R08: 00000000000002c0 R09: 0000000000000000 [ 180.224681][T11829] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 180.224696][T11829] R13: 00007f88b3826038 R14: 00007f88b3825fa0 R15: 00007ffdb1fa9dd8 [ 180.224723][T11829] [ 180.873832][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 180.970111][T11878] FAULT_INJECTION: forcing a failure. [ 180.970111][T11878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.970150][T11878] CPU: 0 UID: 0 PID: 11878 Comm: syz.1.1571 Not tainted syzkaller #0 PREEMPT(full) [ 180.970177][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 180.970191][T11878] Call Trace: [ 180.970212][T11878] [ 180.970221][T11878] dump_stack_lvl+0xe8/0x150 [ 180.970258][T11878] should_fail_ex+0x410/0x560 [ 180.970290][T11878] _copy_from_user+0x2d/0xb0 [ 180.970320][T11878] copy_from_sockptr_offset+0x66/0xa0 [ 180.970376][T11878] do_ipt_set_ctl+0x991/0xe20 [ 180.970413][T11878] ? rcu_is_watching+0x16/0xb0 [ 180.970442][T11878] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 180.970476][T11878] ? rcu_is_watching+0x16/0xb0 [ 180.970515][T11878] ? __mutex_unlock_slowpath+0x731/0x900 [ 180.970546][T11878] ? __mutex_unlock_slowpath+0x731/0x900 [ 180.970578][T11878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.970618][T11878] ? rcu_is_watching+0x16/0xb0 [ 180.970647][T11878] ? lock_release+0x4b/0x3c0 [ 180.970674][T11878] nf_setsockopt+0x26f/0x290 [ 180.970706][T11878] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.970731][T11878] do_sock_setsockopt+0x17c/0x1b0 [ 180.970761][T11878] __x64_sys_setsockopt+0x13d/0x1b0 [ 180.970792][T11878] do_syscall_64+0x166/0x520 [ 180.970821][T11878] ? trace_irq_disable+0x3b/0x140 [ 180.970848][T11878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.970871][T11878] ? clear_bhb_loop+0x70/0xc0 [ 180.970896][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.970918][T11878] RIP: 0033:0x7fd73219f559 [ 180.970955][T11878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.970976][T11878] RSP: 002b:00007fd733147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.971015][T11878] RAX: ffffffffffffffda RBX: 00007fd732425fa0 RCX: 00007fd73219f559 [ 180.971051][T11878] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 180.971064][T11878] RBP: 00007fd733147090 R08: 00000000000002c0 R09: 0000000000000000 [ 180.971079][T11878] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 180.971094][T11878] R13: 00007fd732426038 R14: 00007fd732425fa0 R15: 00007ffc21d36be8 [ 180.971122][T11878] [ 181.261843][T11889] syzkaller0: entered promiscuous mode [ 181.261891][T11889] syzkaller0: entered allmulticast mode [ 181.264515][T11889] tipc: Enabled bearer , priority 0 [ 181.311754][T11891] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.335535][T11889] tipc: Resetting bearer [ 181.335633][T11889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.335673][T11889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.335692][T11889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.335732][T11889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.335790][T11889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.335874][T11889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.335903][T11889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.424298][T11886] netlink: 'syz.3.1570': attribute type 2 has an invalid length. [ 181.609439][T11909] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 181.632248][T11912] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 181.681057][T11914] veth0: left allmulticast mode [ 181.681084][T11914] veth0: left promiscuous mode [ 181.681341][T11914] bridge0: port 1(veth0) entered disabled state [ 181.729018][T11916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'. [ 181.919545][T11923] netlink: 'syz.1.1581': attribute type 11 has an invalid length. [ 181.999768][T11925] FAULT_INJECTION: forcing a failure. [ 181.999768][T11925] name failslab, interval 1, probability 0, space 0, times 0 [ 181.999805][T11925] CPU: 0 UID: 0 PID: 11925 Comm: syz.4.1582 Not tainted syzkaller #0 PREEMPT(full) [ 181.999831][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 181.999845][T11925] Call Trace: [ 181.999854][T11925] [ 181.999862][T11925] dump_stack_lvl+0xe8/0x150 [ 181.999900][T11925] should_fail_ex+0x410/0x560 [ 181.999933][T11925] should_failslab+0xa8/0x100 [ 181.999968][T11925] __kvmalloc_node_noprof+0x171/0x820 [ 181.999999][T11925] ? do_ipt_set_ctl+0x962/0xe20 [ 182.000031][T11925] ? do_sock_setsockopt+0x17c/0x1b0 [ 182.000057][T11925] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 182.000084][T11925] ? do_syscall_64+0x166/0x520 [ 182.000113][T11925] ? translate_table+0x193/0x1f80 [ 182.000142][T11925] ? translate_table+0x193/0x1f80 [ 182.000177][T11925] translate_table+0x193/0x1f80 [ 182.000221][T11925] ? __pfx_translate_table+0x10/0x10 [ 182.000258][T11925] ? rcu_is_watching+0x16/0xb0 [ 182.000287][T11925] ? lock_acquire+0x58/0x350 [ 182.000310][T11925] ? xt_alloc_table_info+0x40/0xb0 [ 182.000332][T11925] ? rcu_is_watching+0x16/0xb0 [ 182.000361][T11925] ? lock_release+0x4b/0x3c0 [ 182.000383][T11925] ? __might_fault+0xaf/0x130 [ 182.000405][T11925] ? __might_fault+0xcb/0x130 [ 182.000430][T11925] ? _copy_from_user+0x94/0xb0 [ 182.000462][T11925] do_ipt_set_ctl+0xa53/0xe20 [ 182.000498][T11925] ? rcu_is_watching+0x16/0xb0 [ 182.000534][T11925] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 182.000569][T11925] ? rcu_is_watching+0x16/0xb0 [ 182.000604][T11925] ? __mutex_unlock_slowpath+0x731/0x900 [ 182.000635][T11925] ? __mutex_unlock_slowpath+0x731/0x900 [ 182.000666][T11925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.000698][T11925] ? rcu_is_watching+0x16/0xb0 [ 182.000728][T11925] ? lock_release+0x4b/0x3c0 [ 182.000753][T11925] nf_setsockopt+0x26f/0x290 [ 182.000786][T11925] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 182.000811][T11925] do_sock_setsockopt+0x17c/0x1b0 [ 182.000840][T11925] __x64_sys_setsockopt+0x13d/0x1b0 [ 182.000871][T11925] do_syscall_64+0x166/0x520 [ 182.000898][T11925] ? trace_irq_disable+0x3b/0x140 [ 182.000925][T11925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.000947][T11925] ? clear_bhb_loop+0x70/0xc0 [ 182.000972][T11925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.000994][T11925] RIP: 0033:0x7f1b1c79f559 [ 182.001014][T11925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.001034][T11925] RSP: 002b:00007f1b1d6db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.001058][T11925] RAX: ffffffffffffffda RBX: 00007f1b1ca25fa0 RCX: 00007f1b1c79f559 [ 182.001075][T11925] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 182.001089][T11925] RBP: 00007f1b1d6db090 R08: 00000000000002c0 R09: 0000000000000000 [ 182.001103][T11925] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 182.001118][T11925] R13: 00007f1b1ca26038 R14: 00007f1b1ca25fa0 R15: 00007fff1f8f7668 [ 182.001145][T11925] [ 182.496086][T11932] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 182.670877][T11944] syzkaller1: entered promiscuous mode [ 182.670901][T11944] syzkaller1: entered allmulticast mode [ 182.703197][T11944] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1588'. [ 182.752302][T11944] ipvlan1: entered promiscuous mode [ 182.970394][T11956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1593'. [ 183.018024][T11956] netlink: 'syz.0.1593': attribute type 10 has an invalid length. [ 183.018050][T11956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1593'. [ 183.018243][T11956] dummy0: entered promiscuous mode [ 183.119400][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 183.119424][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 183.654476][T12010] xt_check_table_hooks: 23 callbacks suppressed [ 183.654500][T12010] x_tables: duplicate entry at hook 1 [ 183.686975][T12012] x_tables: duplicate entry at hook 1 [ 183.724616][T12016] team0: Mode changed to "random" [ 183.933726][T12033] xt_hashlimit: size too large, truncated to 1048576 [ 184.035611][T12040] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1609'. [ 184.103753][T12050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1618'. [ 184.663915][T12077] veth0: entered promiscuous mode [ 184.758889][T12077] veth0: left promiscuous mode [ 184.978871][T12087] Bluetooth: MGMT ver 1.23 [ 185.044986][T12087] __nla_validate_parse: 1 callbacks suppressed [ 185.045008][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1628'. [ 185.058495][T12087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1628'. [ 185.079356][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 185.105156][T12086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.117514][T11814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.117690][T11814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.147483][ T5743] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.342053][T12112] lo speed is unknown, defaulting to 1000 [ 185.343212][T12112] lo speed is unknown, defaulting to 1000 [ 185.343772][T12112] lo speed is unknown, defaulting to 1000 [ 185.388297][ C0] net_ratelimit: 13 callbacks suppressed [ 185.388321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.463947][T12111] ip_tables: iptables: counters copy to user failed while replacing table [ 185.550565][T12112] infiniband syz0: set down [ 185.550624][T12112] infiniband syz0: added lo [ 185.568248][T12112] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 185.568290][T12112] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 185.568335][T12112] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 185.629896][ T5743] lo speed is unknown, defaulting to 1000 [ 185.631876][T12112] RDS/IB: syz0: added [ 185.631915][T12112] smc: adding ib device syz0 with port count 1 [ 185.631935][T12112] smc: ib device syz0 port 1 has no pnetid [ 185.633931][ T5743] lo speed is unknown, defaulting to 1000 [ 185.635794][T12112] lo speed is unknown, defaulting to 1000 [ 185.673857][ T5743] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.835317][T12121] netlink: 'syz.1.1639': attribute type 1 has an invalid length. [ 185.903874][T12112] lo speed is unknown, defaulting to 1000 [ 185.906923][T12125] netlink: 'syz.3.1640': attribute type 28 has an invalid length. [ 185.906946][T12125] netlink: 'syz.3.1640': attribute type 3 has an invalid length. [ 185.906962][T12125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1640'. [ 186.004771][T12123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.017928][T12123] bond6: (slave bond7): making interface the new active one [ 186.019923][T12123] bond6: (slave bond7): Enslaving as an active interface with an up link [ 186.031125][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1639'. [ 186.083929][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 186.107326][ T5729] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.115334][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1641'. [ 186.115567][T12128] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 186.125362][T12128] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1641'. [ 186.189434][T12112] lo speed is unknown, defaulting to 1000 [ 186.332844][T12112] lo speed is unknown, defaulting to 1000 [ 186.427446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.427540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.502845][T12112] lo speed is unknown, defaulting to 1000 [ 186.872462][T12157] lo: entered promiscuous mode [ 186.874085][T12157] gre0: entered promiscuous mode [ 187.187135][T12157] 0ªî{X¹¦: entered promiscuous mode [ 187.187311][T12157] 0ªî{X¹¦: left allmulticast mode [ 187.272913][T12157] erspan0: entered promiscuous mode [ 187.293658][T12157] ip_vti0: entered promiscuous mode [ 187.295264][T12157] ip6_vti0: entered promiscuous mode [ 187.310182][T12157] sit0: entered promiscuous mode [ 187.468196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.524290][T12157] ip6tnl0: entered promiscuous mode [ 187.561076][T12157] ip6gre0: entered promiscuous mode [ 187.596951][T12157] syz_tun: entered promiscuous mode [ 187.603722][T12157] ip6gretap0: entered promiscuous mode [ 187.641362][T12157] vcan0: entered promiscuous mode [ 187.669438][T12157] bond0: entered promiscuous mode [ 187.669462][T12157] bond_slave_0: entered promiscuous mode [ 187.681865][T12157] bond_slave_1: entered promiscuous mode [ 187.712471][T12157] team0: entered promiscuous mode [ 187.712498][T12157] team_slave_0: entered promiscuous mode [ 187.712648][T12157] team_slave_1: entered promiscuous mode [ 187.714040][T12157] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 187.812271][T12157] dummy0: entered promiscuous mode [ 187.916828][T12157] nlmon0: entered promiscuous mode [ 187.982459][T12157] batadv0: entered promiscuous mode [ 188.028576][T12157] vxcan0: entered promiscuous mode [ 188.045024][T12157] vxcan1: entered promiscuous mode [ 188.060807][T12157] veth0: entered promiscuous mode [ 188.096833][T12157] veth1: entered promiscuous mode [ 188.134788][T12157] wg0: entered promiscuous mode [ 188.159456][T12157] wg1: entered promiscuous mode [ 188.160199][T12157] wg2: entered promiscuous mode [ 188.193379][T12157] veth0_to_bridge: entered promiscuous mode [ 188.230706][T12157] bridge_slave_0: entered promiscuous mode [ 188.258902][T12157] veth1_to_bridge: entered promiscuous mode [ 188.295183][T12157] bridge_slave_1: entered promiscuous mode [ 188.322097][T12157] veth0_to_bond: entered promiscuous mode [ 188.358772][T12157] veth1_to_bond: entered promiscuous mode [ 188.361346][T12157] veth0_to_team: entered promiscuous mode [ 188.382039][T12157] veth1_to_team: entered promiscuous mode [ 188.507941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.508240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.548382][T12157] veth0_to_batadv: entered promiscuous mode [ 188.550355][T12157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.551099][T12157] batadv_slave_0: entered promiscuous mode [ 188.553716][T12157] veth1_to_batadv: entered promiscuous mode [ 188.555606][T12157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.555654][T12157] batadv_slave_1: entered promiscuous mode [ 188.601409][T12157] xfrm0: entered promiscuous mode [ 188.750173][T12157] veth0_to_hsr: entered promiscuous mode [ 188.802621][T12157] veth1_to_hsr: entered promiscuous mode [ 188.856682][T12157] hsr0: entered promiscuous mode [ 188.891196][T12157] veth1_virt_wifi: entered promiscuous mode [ 188.926771][T12157] veth0_virt_wifi: entered promiscuous mode [ 188.961544][T12157] virt_wifi0: entered promiscuous mode [ 189.024348][T12157] vlan0: entered promiscuous mode [ 189.058491][T12157] vlan1: entered promiscuous mode [ 189.067343][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.100693][T12157] macvlan0: entered promiscuous mode [ 189.136349][T12157] macvlan1: entered promiscuous mode [ 189.170087][T12157] ipvlan0: entered promiscuous mode [ 189.234992][T12157] macvtap0: entered promiscuous mode [ 189.272163][T12157] macsec0: entered promiscuous mode [ 189.306414][T12157] geneve0: entered promiscuous mode [ 189.343164][T12157] geneve1: entered promiscuous mode [ 189.378171][T12157] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 189.405785][T12157] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 189.446497][T12157] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 189.474551][T12157] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 189.501998][T12157] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 189.502149][T12157] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 189.540283][T12157] bond1: entered promiscuous mode [ 189.540309][T12157] bond2: entered promiscuous mode [ 189.540462][T12157] gretap1: entered promiscuous mode [ 189.540578][T12157] bond1: left allmulticast mode [ 189.540593][T12157] bond2: left allmulticast mode [ 189.540638][T12157] gretap1: left allmulticast mode [ 189.547662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.547700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.628076][T12157] xfrm1: entered promiscuous mode [ 189.628284][T12157] dvmrp1: entered promiscuous mode [ 189.666543][T12157] ip6erspan0: entered promiscuous mode [ 189.692943][T12157] bridge1: entered promiscuous mode [ 189.732023][T12157] bareudp0: entered promiscuous mode [ 189.759230][T12157] vlan2: entered promiscuous mode [ 189.784867][T12157] veth2: entered promiscuous mode [ 189.785011][T12157] veth3: entered promiscuous mode [ 189.785194][T12157] ip6gre1: entered promiscuous mode [ 189.822758][T12157] veth4: entered promiscuous mode [ 189.822917][T12157] veth5: entered promiscuous mode [ 189.823025][T12157] veth6: entered promiscuous mode [ 189.823131][T12157] veth7: entered promiscuous mode [ 189.823238][T12157] veth8: entered promiscuous mode [ 189.823362][T12157] veth9: entered promiscuous mode [ 189.823478][T12157] batadv1: entered promiscuous mode [ 189.823588][T12157] bond4: entered promiscuous mode [ 189.823794][T12157] ipip0: entered promiscuous mode [ 189.882183][T12157] bond5: entered promiscuous mode [ 189.882209][T12157] bridge3: entered promiscuous mode [ 189.912191][T12157] vlan3: entered promiscuous mode [ 189.928259][T12157] vxlan0: entered promiscuous mode [ 189.951771][T12157] sit1: entered promiscuous mode [ 189.951904][T12157] mac80211_hwsim hwsim8 pim6reg0: entered promiscuous mode [ 189.952089][T12157] tipc: Resetting bearer [ 189.952475][T12157] syzkaller0: left allmulticast mode [ 189.986047][T12157] gtp0: entered promiscuous mode [ 189.986396][T12157] vxlan1: entered promiscuous mode [ 190.015267][T12157] bond6: entered promiscuous mode [ 190.015292][T12157] bond7: entered promiscuous mode [ 190.049409][T12165] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 190.057347][T11811] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.057385][T11811] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.057412][T11811] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 49111 - 0 [ 190.061083][T11814] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.061164][T11814] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.061222][T11814] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 49111 - 0 [ 190.061314][T11814] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.061388][T11814] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.061453][T11814] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 49111 - 0 [ 190.061544][T11814] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.061616][T11814] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.061679][T11814] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 49111 - 0 [ 190.458632][T12222] syzkaller0: entered promiscuous mode [ 190.458656][T12222] syzkaller0: entered allmulticast mode [ 190.503228][T12214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1660'. [ 190.503262][T12214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1660'. [ 190.593598][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 190.687679][T12221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1664'. [ 190.745452][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1666'. [ 191.016779][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1668'. [ 191.071803][T12254] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 191.102751][T12250] xt_hashlimit: size too large, truncated to 1048576 [ 191.146417][T12254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.204615][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 191.234808][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1672'. [ 191.278295][T12257] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 191.279982][T12252] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 191.283550][T12264] v: renamed from vlan1 (while UP) [ 191.499709][T12267] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.503706][T12267] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 191.593621][T12267] bond7: entered promiscuous mode [ 191.593945][T12267] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.652046][T12280] ip_tables: iptables: counters copy to user failed while replacing table [ 191.694108][T12287] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1676'. [ 191.811722][T12267] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.812666][T12267] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 191.812691][T12267] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 191.848116][T12267] bond7: (slave ip6gre1): making interface the new active one [ 191.848146][T12267] ip6gre1: entered promiscuous mode [ 191.849862][T12267] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 192.002614][T12301] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1682'. [ 192.168341][T12305] FAULT_INJECTION: forcing a failure. [ 192.168341][T12305] name failslab, interval 1, probability 0, space 0, times 0 [ 192.168379][T12305] CPU: 0 UID: 0 PID: 12305 Comm: syz.4.1683 Not tainted syzkaller #0 PREEMPT(full) [ 192.168405][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.168420][T12305] Call Trace: [ 192.168428][T12305] [ 192.168439][T12305] dump_stack_lvl+0xe8/0x150 [ 192.168479][T12305] should_fail_ex+0x410/0x560 [ 192.168513][T12305] should_failslab+0xa8/0x100 [ 192.168549][T12305] __kvmalloc_node_noprof+0x171/0x820 [ 192.168581][T12305] ? __nf_register_net_hook+0x1f1/0x940 [ 192.168612][T12305] ? nf_hook_entries_grow+0x287/0x740 [ 192.168639][T12305] ? nf_hook_entries_grow+0x287/0x740 [ 192.168674][T12305] nf_hook_entries_grow+0x287/0x740 [ 192.168701][T12305] ? __pfx_lock_release+0x1/0x10 [ 192.168731][T12305] __nf_register_net_hook+0x26f/0x940 [ 192.168767][T12305] nf_register_net_hook+0xb2/0x190 [ 192.168796][T12305] nf_register_net_hooks+0x44/0x1b0 [ 192.168835][T12305] nf_ct_netns_do_get+0x3bf/0x5c0 [ 192.168865][T12305] ? synproxy_pernet+0x45/0x270 [ 192.168891][T12305] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 192.168922][T12305] ? lock_release+0x4b/0x3c0 [ 192.168944][T12305] ? rcu_is_watching+0x16/0xb0 [ 192.168997][T12305] ? synproxy_pernet+0x45/0x270 [ 192.169021][T12305] ? nf_ct_netns_get+0xe9/0x320 [ 192.169052][T12305] synproxy_tg4_check+0xee/0x210 [ 192.169079][T12305] xt_check_target+0x619/0xca0 [ 192.169106][T12305] ? __pfx_xt_check_target+0x10/0x10 [ 192.169129][T12305] ? pcpu_alloc_noprof+0x1036/0x1900 [ 192.169160][T12305] ? xt_find_target+0x20f/0x260 [ 192.169198][T12305] translate_table+0x1789/0x1f80 [ 192.169244][T12305] ? __pfx_translate_table+0x10/0x10 [ 192.169278][T12305] ? rcu_is_watching+0x16/0xb0 [ 192.169308][T12305] ? lock_acquire+0x58/0x350 [ 192.169333][T12305] ? rcu_is_watching+0x16/0xb0 [ 192.169365][T12305] ? __might_fault+0xcb/0x130 [ 192.169391][T12305] ? _copy_from_user+0x94/0xb0 [ 192.169422][T12305] do_ipt_set_ctl+0xa53/0xe20 [ 192.169460][T12305] ? rcu_is_watching+0x16/0xb0 [ 192.169489][T12305] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 192.169524][T12305] ? rcu_is_watching+0x16/0xb0 [ 192.169559][T12305] ? __mutex_unlock_slowpath+0x731/0x900 [ 192.169591][T12305] ? __mutex_unlock_slowpath+0x731/0x900 [ 192.169623][T12305] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.169654][T12305] ? rcu_is_watching+0x16/0xb0 [ 192.169683][T12305] ? lock_release+0x4b/0x3c0 [ 192.169709][T12305] nf_setsockopt+0x26f/0x290 [ 192.169741][T12305] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.169767][T12305] do_sock_setsockopt+0x17c/0x1b0 [ 192.169798][T12305] __x64_sys_setsockopt+0x13d/0x1b0 [ 192.169836][T12305] do_syscall_64+0x166/0x520 [ 192.169865][T12305] ? trace_irq_disable+0x3b/0x140 [ 192.169891][T12305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.169915][T12305] ? clear_bhb_loop+0x70/0xc0 [ 192.169940][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.169963][T12305] RIP: 0033:0x7f1b1c79f559 [ 192.169983][T12305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.170003][T12305] RSP: 002b:00007f1b1d6db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.170028][T12305] RAX: ffffffffffffffda RBX: 00007f1b1ca25fa0 RCX: 00007f1b1c79f559 [ 192.170045][T12305] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 192.170059][T12305] RBP: 00007f1b1d6db090 R08: 00000000000002c0 R09: 0000000000000000 [ 192.170074][T12305] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 192.170088][T12305] R13: 00007f1b1ca26038 R14: 00007f1b1ca25fa0 R15: 00007fff1f8f7668 [ 192.170115][T12305] [ 192.809495][T12309] netlink: NAT attribute has 8 unknown bytes [ 192.809529][T12309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.239228][T12342] netlink: 'syz.0.1695': attribute type 178 has an invalid length. [ 193.267409][T12342] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 193.329771][T12349] FAULT_INJECTION: forcing a failure. [ 193.329771][T12349] name failslab, interval 1, probability 0, space 0, times 0 [ 193.329809][T12349] CPU: 0 UID: 0 PID: 12349 Comm: syz.4.1697 Not tainted syzkaller #0 PREEMPT(full) [ 193.329835][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.329850][T12349] Call Trace: [ 193.329858][T12349] [ 193.329868][T12349] dump_stack_lvl+0xe8/0x150 [ 193.329907][T12349] should_fail_ex+0x410/0x560 [ 193.329939][T12349] should_failslab+0xa8/0x100 [ 193.329977][T12349] __kvmalloc_node_noprof+0x171/0x820 [ 193.330010][T12349] ? __nf_register_net_hook+0x1f1/0x940 [ 193.330039][T12349] ? nf_hook_entries_grow+0x287/0x740 [ 193.330064][T12349] ? nf_hook_entries_grow+0x287/0x740 [ 193.330094][T12349] nf_hook_entries_grow+0x287/0x740 [ 193.330121][T12349] ? rcu_force_quiescent_state+0x161/0x240 [ 193.330159][T12349] __nf_register_net_hook+0x26f/0x940 [ 193.330194][T12349] nf_register_net_hook+0xb2/0x190 [ 193.330221][T12349] nf_register_net_hooks+0x44/0x1b0 [ 193.330251][T12349] nf_synproxy_ipv4_init+0x7a/0xe0 [ 193.330285][T12349] synproxy_tg4_check+0x137/0x210 [ 193.330311][T12349] xt_check_target+0x619/0xca0 [ 193.330337][T12349] ? __pfx_xt_check_target+0x10/0x10 [ 193.330369][T12349] ? pcpu_alloc_noprof+0x1036/0x1900 [ 193.330397][T12349] ? xt_find_target+0x20f/0x260 [ 193.330437][T12349] translate_table+0x1789/0x1f80 [ 193.330515][T12349] ? __pfx_translate_table+0x10/0x10 [ 193.330548][T12349] ? rcu_is_watching+0x16/0xb0 [ 193.330578][T12349] ? lock_acquire+0x58/0x350 [ 193.330604][T12349] ? rcu_is_watching+0x16/0xb0 [ 193.330641][T12349] ? __might_fault+0xcb/0x130 [ 193.330667][T12349] ? _copy_from_user+0x94/0xb0 [ 193.330701][T12349] do_ipt_set_ctl+0xa53/0xe20 [ 193.330746][T12349] ? rcu_is_watching+0x16/0xb0 [ 193.330776][T12349] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 193.330811][T12349] ? rcu_is_watching+0x16/0xb0 [ 193.330847][T12349] ? __mutex_unlock_slowpath+0x731/0x900 [ 193.330880][T12349] ? __mutex_unlock_slowpath+0x731/0x900 [ 193.330912][T12349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.330946][T12349] ? rcu_is_watching+0x16/0xb0 [ 193.330975][T12349] ? lock_release+0x4b/0x3c0 [ 193.331002][T12349] nf_setsockopt+0x26f/0x290 [ 193.331034][T12349] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 193.331061][T12349] do_sock_setsockopt+0x17c/0x1b0 [ 193.331092][T12349] __x64_sys_setsockopt+0x13d/0x1b0 [ 193.331124][T12349] do_syscall_64+0x166/0x520 [ 193.331153][T12349] ? trace_irq_disable+0x3b/0x140 [ 193.331181][T12349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.331204][T12349] ? clear_bhb_loop+0x70/0xc0 [ 193.331230][T12349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.331253][T12349] RIP: 0033:0x7f1b1c79f559 [ 193.331273][T12349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.331293][T12349] RSP: 002b:00007f1b1d6db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.331318][T12349] RAX: ffffffffffffffda RBX: 00007f1b1ca25fa0 RCX: 00007f1b1c79f559 [ 193.331335][T12349] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 193.331350][T12349] RBP: 00007f1b1d6db090 R08: 00000000000002c0 R09: 0000000000000000 [ 193.331364][T12349] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000002 [ 193.331379][T12349] R13: 00007f1b1ca26038 R14: 00007f1b1ca25fa0 R15: 00007fff1f8f7668 [ 193.331407][T12349] [ 193.956138][T12364] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.969192][T12361] Cannot find set identified by id 4 to match [ 194.020691][T12366] ip_tables: iptables: counters copy to user failed while replacing table [ 194.274558][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.534351][T12400] ip_tables: iptables: counters copy to user failed while replacing table [ 194.581977][T12400] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 194.582002][T12400] netlink: 'syz.1.1715': attribute type 3 has an invalid length. [ 195.186049][T12433] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 195.363277][T12435] x_tables: duplicate underflow at hook 2 [ 195.512601][T12452] __nla_validate_parse: 9 callbacks suppressed [ 195.512626][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1731'. [ 195.514920][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 195.630341][T12460] ip_tables: iptables: counters copy to user failed while replacing table [ 195.635217][T12459] ip_tables: iptables: counters copy to user failed while replacing table [ 195.823826][T12473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.860911][T12477] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1737'. [ 195.955536][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 195.967627][T12483] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 196.015554][T12486] x_tables: duplicate underflow at hook 2 [ 196.062943][T12488] netlink: 'syz.0.1743': attribute type 4 has an invalid length. [ 196.064134][T12488] netlink: 'syz.0.1743': attribute type 4 has an invalid length. [ 196.112517][T12481] x_tables: duplicate underflow at hook 1 [ 196.211216][T12492] netlink: 'syz.0.1744': attribute type 9 has an invalid length. [ 196.211241][T12492] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.1744'. [ 196.319416][T12506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1748'. [ 196.398985][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1748'. [ 196.423088][T12503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1746'. [ 196.474010][T12520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1748'. [ 196.562179][T12519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1749'. [ 196.562219][T12519] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 196.883651][T12544] ip_tables: iptables: counters copy to user failed while replacing table [ 197.101061][T12567] netlink: 'syz.0.1757': attribute type 12 has an invalid length. [ 197.332957][T12583] geneve0: entered allmulticast mode [ 197.467248][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.537065][T12590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.625693][T12601] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 197.636190][T12601] ip_tables: iptables: counters copy to user failed while replacing table [ 198.335530][T12653] ip_tables: iptables: counters copy to user failed while replacing table [ 198.351764][T12654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.365889][T12654] netlink: 'syz.4.1785': attribute type 13 has an invalid length. [ 199.024267][T12688] veth1_macvtap: left promiscuous mode [ 199.276314][T12697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.340361][T12702] sctp: [Deprecated]: syz.1.1799 (pid 12702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.340361][T12702] Use struct sctp_sack_info instead [ 199.779922][T12728] netlink: 'syz.2.1806': attribute type 9 has an invalid length. [ 199.948792][T12738] ip6_vti0: left promiscuous mode [ 199.975424][T12738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 200.115564][T12746] bond4: entered allmulticast mode [ 200.116102][T12746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.303727][T12758] netlink: 'syz.3.1814': attribute type 3 has an invalid length. [ 200.469471][T12768] lo: left promiscuous mode [ 200.469613][T12768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.597944][T12774] netlink: 'syz.1.1819': attribute type 1 has an invalid length. [ 200.715521][T12783] netlink: 'syz.1.1822': attribute type 15 has an invalid length. [ 200.747552][ T62] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 200.747600][ T62] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 200.747635][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 200.747669][ T62] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 200.758611][T12784] __nla_validate_parse: 15 callbacks suppressed [ 200.758634][T12784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1818'. [ 201.023897][T12797] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1828'. [ 201.023929][T12797] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1828'. [ 201.311726][T12818] validate_nla: 1 callbacks suppressed [ 201.311749][T12818] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 201.422918][T12828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1832'. [ 201.572662][T12835] netdevsim0: mtu less than device minimum [ 201.619905][T12843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.960612][T12862] ip6t_srh: unknown srh invflags 4000 [ 202.066841][T12872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 202.066899][T12872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 202.250008][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1846'. [ 202.315706][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1844'. [ 202.894449][T12922] x_tables: duplicate entry at hook 3 [ 202.912543][T12923] x_tables: duplicate entry at hook 3 [ 202.915206][T12923] SET target dimension over the limit! [ 202.994763][T12927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1855'. [ 203.302988][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1865'. [ 203.363378][T12950] netlink: 'syz.0.1865': attribute type 3 has an invalid length. [ 203.396045][T12954] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.431040][T12954] ip_tables: iptables: counters copy to user failed while replacing table [ 203.718568][T12969] netlink: 'syz.1.1870': attribute type 1 has an invalid length. [ 204.023528][T12986] ip_tables: iptables: counters copy to user failed while replacing table [ 204.068788][T12988] FAULT_INJECTION: forcing a failure. [ 204.068788][T12988] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 204.068866][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.0.1875 Not tainted syzkaller #0 PREEMPT(full) [ 204.068893][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.068908][T12988] Call Trace: [ 204.068916][T12988] [ 204.068925][T12988] dump_stack_lvl+0xe8/0x150 [ 204.068972][T12988] should_fail_ex+0x410/0x560 [ 204.069003][T12988] prepare_alloc_pages+0x21e/0x5f0 [ 204.069035][T12988] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 204.069068][T12988] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 204.069100][T12988] ? __pfx_policy_nodemask+0x10/0x10 [ 204.069133][T12988] ? __get_vm_area_node+0x155/0x2f0 [ 204.069155][T12988] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 204.069178][T12988] ? vzalloc_noprof+0xb2/0xe0 [ 204.069200][T12988] ? __do_replace+0xb2/0x990 [ 204.069230][T12988] ? do_ipt_set_ctl+0xb3c/0xe20 [ 204.069260][T12988] ? do_sock_setsockopt+0x17c/0x1b0 [ 204.069287][T12988] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 204.069311][T12988] ? do_syscall_64+0x166/0x520 [ 204.069337][T12988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.069360][T12988] alloc_pages_mpol+0x21e/0x390 [ 204.069393][T12988] alloc_pages_noprof+0xb1/0x2b0 [ 204.069427][T12988] get_free_pages_noprof+0xf/0x80 [ 204.069455][T12988] __kasan_populate_vmalloc+0x38/0x1c0 [ 204.069489][T12988] ? do_raw_spin_unlock+0xf5/0x200 [ 204.069524][T12988] alloc_vmap_area+0xd10/0x1410 [ 204.069556][T12988] ? __pfx_alloc_vmap_area+0x10/0x10 [ 204.069576][T12988] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 204.069608][T12988] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 204.069631][T12988] ? __get_vm_area_node+0x155/0x2f0 [ 204.069651][T12988] __get_vm_area_node+0x200/0x2f0 [ 204.069673][T12988] __vmalloc_node_range_noprof+0x343/0x1540 [ 204.069694][T12988] ? __do_replace+0xb2/0x990 [ 204.069734][T12988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.069757][T12988] ? __do_replace+0xb2/0x990 [ 204.069783][T12988] vzalloc_noprof+0xb2/0xe0 [ 204.069802][T12988] ? __do_replace+0xb2/0x990 [ 204.069829][T12988] __do_replace+0xb2/0x990 [ 204.069856][T12988] ? rcu_is_watching+0x16/0xb0 [ 204.069883][T12988] ? __pfx___do_replace+0x10/0x10 [ 204.069940][T12988] ? _copy_from_user+0x94/0xb0 [ 204.069966][T12988] do_ipt_set_ctl+0xb3c/0xe20 [ 204.069996][T12988] ? rcu_is_watching+0x16/0xb0 [ 204.070030][T12988] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 204.070073][T12988] ? rcu_is_watching+0x16/0xb0 [ 204.070101][T12988] ? __mutex_unlock_slowpath+0x731/0x900 [ 204.070125][T12988] ? __mutex_unlock_slowpath+0x731/0x900 [ 204.070151][T12988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.070176][T12988] ? rcu_is_watching+0x16/0xb0 [ 204.070200][T12988] ? lock_release+0x4b/0x3c0 [ 204.070220][T12988] nf_setsockopt+0x26f/0x290 [ 204.070247][T12988] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 204.070266][T12988] do_sock_setsockopt+0x17c/0x1b0 [ 204.070290][T12988] __x64_sys_setsockopt+0x13d/0x1b0 [ 204.070315][T12988] do_syscall_64+0x166/0x520 [ 204.070337][T12988] ? trace_irq_disable+0x3b/0x140 [ 204.070358][T12988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.070376][T12988] ? clear_bhb_loop+0x70/0xc0 [ 204.070396][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.070414][T12988] RIP: 0033:0x7f2cda99f559 [ 204.070430][T12988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.070447][T12988] RSP: 002b:00007f2cd8bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.070467][T12988] RAX: ffffffffffffffda RBX: 00007f2cdac25fa0 RCX: 00007f2cda99f559 [ 204.070480][T12988] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 204.070491][T12988] RBP: 00007f2cd8bf6090 R08: 00000000000002c0 R09: 0000000000000000 [ 204.070503][T12988] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000002 [ 204.070514][T12988] R13: 00007f2cdac26038 R14: 00007f2cdac25fa0 R15: 00007ffe8a245678 [ 204.070535][T12988] [ 204.074554][T12988] syz.0.1875: vmalloc error: size 64, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.074636][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.0.1875 Not tainted syzkaller #0 PREEMPT(full) [ 204.074659][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.074672][T12988] Call Trace: [ 204.074679][T12988] [ 204.074687][T12988] dump_stack_lvl+0xe8/0x150 [ 204.074722][T12988] warn_alloc+0x24d/0x270 [ 204.074751][T12988] ? __pfx_warn_alloc+0x10/0x10 [ 204.074777][T12988] ? kfree+0x1c5/0x650 [ 204.074802][T12988] ? __get_vm_area_node+0x219/0x2f0 [ 204.074828][T12988] __vmalloc_node_range_noprof+0x36b/0x1540 [ 204.074868][T12988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.074897][T12988] ? __do_replace+0xb2/0x990 [ 204.074929][T12988] vzalloc_noprof+0xb2/0xe0 [ 204.074960][T12988] ? __do_replace+0xb2/0x990 [ 204.074991][T12988] __do_replace+0xb2/0x990 [ 204.075025][T12988] ? rcu_is_watching+0x16/0xb0 [ 204.075056][T12988] ? __pfx___do_replace+0x10/0x10 [ 204.075089][T12988] ? _copy_from_user+0x94/0xb0 [ 204.075121][T12988] do_ipt_set_ctl+0xb3c/0xe20 [ 204.075157][T12988] ? rcu_is_watching+0x16/0xb0 [ 204.075187][T12988] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 204.075217][T12988] ? rcu_is_watching+0x16/0xb0 [ 204.075249][T12988] ? __mutex_unlock_slowpath+0x731/0x900 [ 204.075279][T12988] ? __mutex_unlock_slowpath+0x731/0x900 [ 204.075309][T12988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.075338][T12988] ? rcu_is_watching+0x16/0xb0 [ 204.075365][T12988] ? lock_release+0x4b/0x3c0 [ 204.075390][T12988] nf_setsockopt+0x26f/0x290 [ 204.075421][T12988] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 204.075445][T12988] do_sock_setsockopt+0x17c/0x1b0 [ 204.075473][T12988] __x64_sys_setsockopt+0x13d/0x1b0 [ 204.075504][T12988] do_syscall_64+0x166/0x520 [ 204.075531][T12988] ? trace_irq_disable+0x3b/0x140 [ 204.075557][T12988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.075579][T12988] ? clear_bhb_loop+0x70/0xc0 [ 204.075604][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.075626][T12988] RIP: 0033:0x7f2cda99f559 [ 204.075644][T12988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.075663][T12988] RSP: 002b:00007f2cd8bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.075686][T12988] RAX: ffffffffffffffda RBX: 00007f2cdac25fa0 RCX: 00007f2cda99f559 [ 204.075703][T12988] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 204.075717][T12988] RBP: 00007f2cd8bf6090 R08: 00000000000002c0 R09: 0000000000000000 [ 204.075732][T12988] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000002 [ 204.075747][T12988] R13: 00007f2cdac26038 R14: 00007f2cdac25fa0 R15: 00007ffe8a245678 [ 204.075774][T12988] [ 204.075792][T12988] Mem-Info: [ 204.075802][T12988] active_anon:5509 inactive_anon:0 isolated_anon:0 [ 204.075802][T12988] active_file:0 inactive_file:42775 isolated_file:0 [ 204.075802][T12988] unevictable:0 dirty:57 writeback:0 [ 204.075802][T12988] slab_reclaimable:12022 slab_unreclaimable:103208 [ 204.075802][T12988] mapped:29261 shmem:523 pagetables:3437 [ 204.075802][T12988] sec_pagetables:0 bounce:0 [ 204.075802][T12988] kernel_misc_reclaimable:0 [ 204.075802][T12988] free:1314554 free_pcp:9398 free_cma:0 [ 204.075866][T12988] Node 0 active_anon:22036kB inactive_anon:0kB active_file:0kB inactive_file:170896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117044kB dirty:228kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13524kB pagetables:13600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 204.075927][T12988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 204.075989][T12988] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.076289][T12988] lowmem_reserve[]: 0 2466 2466 2466 2466 [ 204.076330][T12988] Node 0 DMA32 free:1294176kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22036kB inactive_anon:0kB active_file:0kB inactive_file:170896kB unevictable:0kB writepending:228kB zspages:0kB present:3129332kB managed:2526008kB mlocked:0kB bounce:0kB free_pcp:37592kB local_pcp:20168kB free_cma:0kB [ 204.076397][T12988] lowmem_reserve[]: 0 0 0 0 0 [ 204.076434][T12988] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.076497][T12988] lowmem_reserve[]: 0 0 0 0 0 [ 204.076536][T12988] Node 1 Normal free:3948680kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.076600][T12988] lowmem_reserve[]: 0 0 0 0 0 [ 204.076638][T12988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.076771][T12988] Node 0 DMA32: 258*4kB (UME) 1823*8kB (UME) 1186*16kB (UME) 1382*32kB (UM) 974*64kB (UM) 768*128kB (UM) 568*256kB (UM) 222*512kB (UME) 41*1024kB (UME) 8*2048kB (UME) 180*4096kB (UM) = 1294176kB [ 204.076956][T12988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 204.077074][T12988] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 6*16kB (UM) 9*32kB (UM) 9*64kB (UM) 5*128kB (UM) 6*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3948680kB [ 204.086573][T12988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.086625][T12988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.086669][T12988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.086712][T12988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.086754][T12988] 43294 total pagecache pages [ 204.089268][T12988] 0 pages in swap cache [ 204.089299][T12988] Free swap = 124996kB [ 204.089321][T12988] Total swap = 124996kB [ 204.089344][T12988] 2097051 pages RAM [ 204.089365][T12988] 0 pages HighMem/MovableOnly [ 204.089385][T12988] 433933 pages reserved [ 204.089406][T12988] 0 pages cma reserved [ 205.626360][T13005] ip_tables: iptables: counters copy to user failed while replacing table [ 206.153895][T13031] ip_tables: iptables: counters copy to user failed while replacing table [ 206.642017][T13062] __nla_validate_parse: 69 callbacks suppressed [ 206.642050][T13062] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1896'. [ 206.645297][T13067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1898'. [ 206.646305][T13067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1898'. [ 206.720663][T13070] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1899'. [ 206.810040][T13077] FAULT_INJECTION: forcing a failure. [ 206.810040][T13077] name failslab, interval 1, probability 0, space 0, times 0 [ 206.810076][T13077] CPU: 0 UID: 0 PID: 13077 Comm: syz.0.1901 Not tainted syzkaller #0 PREEMPT(full) [ 206.810101][T13077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.810115][T13077] Call Trace: [ 206.810122][T13077] [ 206.810132][T13077] dump_stack_lvl+0xe8/0x150 [ 206.810168][T13077] should_fail_ex+0x410/0x560 [ 206.810200][T13077] should_failslab+0xa8/0x100 [ 206.810233][T13077] __kmalloc_node_noprof+0xfb/0x720 [ 206.810259][T13077] ? __get_vm_area_node+0x200/0x2f0 [ 206.810281][T13077] ? __get_vm_area_node+0x283/0x2f0 [ 206.810300][T13077] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 206.810324][T13077] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 206.810361][T13077] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 206.810402][T13077] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.810430][T13077] ? __do_replace+0xb2/0x990 [ 206.810462][T13077] vzalloc_noprof+0xb2/0xe0 [ 206.810484][T13077] ? __do_replace+0xb2/0x990 [ 206.810515][T13077] __do_replace+0xb2/0x990 [ 206.810547][T13077] ? rcu_is_watching+0x16/0xb0 [ 206.810577][T13077] ? __pfx___do_replace+0x10/0x10 [ 206.810607][T13077] ? _copy_from_user+0x94/0xb0 [ 206.810635][T13077] do_ipt_set_ctl+0xb3c/0xe20 [ 206.810667][T13077] ? rcu_is_watching+0x16/0xb0 [ 206.810693][T13077] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 206.810724][T13077] ? rcu_is_watching+0x16/0xb0 [ 206.810754][T13077] ? __mutex_unlock_slowpath+0x731/0x900 [ 206.810783][T13077] ? __mutex_unlock_slowpath+0x731/0x900 [ 206.810812][T13077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.810841][T13077] ? rcu_is_watching+0x16/0xb0 [ 206.810871][T13077] ? lock_release+0x4b/0x3c0 [ 206.810915][T13077] nf_setsockopt+0x26f/0x290 [ 206.810948][T13077] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 206.810973][T13077] do_sock_setsockopt+0x17c/0x1b0 [ 206.811004][T13077] __x64_sys_setsockopt+0x13d/0x1b0 [ 206.811035][T13077] do_syscall_64+0x166/0x520 [ 206.811063][T13077] ? trace_irq_disable+0x3b/0x140 [ 206.811088][T13077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.811109][T13077] ? clear_bhb_loop+0x70/0xc0 [ 206.811134][T13077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.811155][T13077] RIP: 0033:0x7f2cda99f559 [ 206.811174][T13077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.811193][T13077] RSP: 002b:00007f2cd8bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.811217][T13077] RAX: ffffffffffffffda RBX: 00007f2cdac25fa0 RCX: 00007f2cda99f559 [ 206.811233][T13077] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 206.811247][T13077] RBP: 00007f2cd8bf6090 R08: 00000000000002c0 R09: 0000000000000000 [ 206.811260][T13077] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000002 [ 206.811274][T13077] R13: 00007f2cdac26038 R14: 00007f2cdac25fa0 R15: 00007ffe8a245678 [ 206.811310][T13077] [ 207.188076][T13083] Bluetooth: hci0: unsupported parameter 5134 [ 207.188102][T13083] Bluetooth: hci0: unsupported parameter 8192 [ 207.188117][T13083] Bluetooth: hci0: unsupported parameter 5134 [ 207.188131][T13083] Bluetooth: hci0: unsupported parameter 8192 [ 207.276636][T13087] geneve3: entered allmulticast mode [ 207.310759][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.310805][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.310839][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.310882][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.731188][T13099] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 207.778329][T13099] bond5: entered promiscuous mode [ 207.779151][T13099] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.860676][T13108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.863965][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 207.865515][T13108] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 207.865538][T13108] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 207.910767][T13108] bond5: (slave gre1): making interface the new active one [ 207.910794][T13108] gre1: entered promiscuous mode [ 207.913742][T13108] bond5: (slave gre1): Enslaving as an active interface with an up link [ 207.974919][T13099] bond5 (unregistering): (slave gre1): Releasing backup interface [ 207.974949][T13099] gre1: left promiscuous mode [ 208.009484][T13117] FAULT_INJECTION: forcing a failure. [ 208.009484][T13117] name failslab, interval 1, probability 0, space 0, times 0 [ 208.009521][T13117] CPU: 0 UID: 0 PID: 13117 Comm: syz.4.1914 Not tainted syzkaller #0 PREEMPT(full) [ 208.009546][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 208.009559][T13117] Call Trace: [ 208.009567][T13117] [ 208.009576][T13117] dump_stack_lvl+0xe8/0x150 [ 208.009612][T13117] should_fail_ex+0x410/0x560 [ 208.009642][T13117] should_failslab+0xa8/0x100 [ 208.009674][T13117] __kmalloc_noprof+0xf9/0x710 [ 208.009700][T13117] ? do_replace_table+0x91/0x610 [ 208.009721][T13117] ? do_replace_table+0x91/0x610 [ 208.009741][T13117] ? net_generic+0x1e/0x240 [ 208.009762][T13117] do_replace_table+0x91/0x610 [ 208.009787][T13117] xt_replace_table+0x2c/0x140 [ 208.009809][T13117] __do_replace+0x161/0x990 [ 208.009845][T13117] ? rcu_is_watching+0x16/0xb0 [ 208.009875][T13117] ? __pfx___do_replace+0x10/0x10 [ 208.009907][T13117] ? _copy_from_user+0x94/0xb0 [ 208.009937][T13117] do_ipt_set_ctl+0xb3c/0xe20 [ 208.009971][T13117] ? rcu_is_watching+0x16/0xb0 [ 208.009999][T13117] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 208.010030][T13117] ? rcu_is_watching+0x16/0xb0 [ 208.010070][T13117] ? __mutex_unlock_slowpath+0x731/0x900 [ 208.010099][T13117] ? __mutex_unlock_slowpath+0x731/0x900 [ 208.010129][T13117] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.010159][T13117] ? rcu_is_watching+0x16/0xb0 [ 208.010186][T13117] ? lock_release+0x4b/0x3c0 [ 208.010211][T13117] nf_setsockopt+0x26f/0x290 [ 208.010241][T13117] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 208.010266][T13117] do_sock_setsockopt+0x17c/0x1b0 [ 208.010294][T13117] __x64_sys_setsockopt+0x13d/0x1b0 [ 208.010322][T13117] do_syscall_64+0x166/0x520 [ 208.010349][T13117] ? trace_irq_disable+0x3b/0x140 [ 208.010373][T13117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.010395][T13117] ? clear_bhb_loop+0x70/0xc0 [ 208.010418][T13117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.010439][T13117] RIP: 0033:0x7f1b1c79f559 [ 208.010457][T13117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.010476][T13117] RSP: 002b:00007f1b1d6db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.010499][T13117] RAX: ffffffffffffffda RBX: 00007f1b1ca25fa0 RCX: 00007f1b1c79f559 [ 208.010514][T13117] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 208.010527][T13117] RBP: 00007f1b1d6db090 R08: 00000000000002c0 R09: 0000000000000000 [ 208.010540][T13117] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000002 [ 208.010554][T13117] R13: 00007f1b1ca26038 R14: 00007f1b1ca25fa0 R15: 00007fff1f8f7668 [ 208.010580][T13117] [ 208.342839][T13099] bond5 (unregistering): Released all slaves [ 208.502137][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'. [ 208.790483][T13141] netlink: 'syz.0.1923': attribute type 3 has an invalid length. [ 208.790507][T13141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'. [ 208.816694][T13145] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1924'. [ 208.828576][T13148] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1924'. [ 208.856344][T13150] ip_tables: iptables: counters copy to user failed while replacing table [ 209.159734][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'. [ 209.428479][T13176] syzkaller0: entered promiscuous mode [ 209.428645][T13176] syzkaller0: entered allmulticast mode [ 209.673840][T13181] ip_tables: iptables: counters copy to user failed while replacing table [ 210.121596][T13197] xt_CONNSECMARK: invalid mode: 0 [ 210.234918][T13200] smc: net device lo applied user defined pnetid SYZ0 [ 210.234947][T13200] smc: smcd device lo applied user defined pnetid SYZ0 [ 210.322515][T13203] syzkaller0: entered promiscuous mode [ 210.322538][T13203] syzkaller0: entered allmulticast mode [ 210.485118][T13208] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.485161][T13208] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.662088][T13208] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.662130][T13208] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.774893][T13208] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.774937][T13208] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.902303][T13208] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.902344][T13208] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.158022][T11810] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.158060][T11810] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.208217][ T63] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.208257][ T63] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.208302][ T63] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.208329][ T63] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.208362][ T63] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.208389][ T63] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.558227][T13267] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.581760][T13252] xt_hashlimit: size too large, truncated to 1048576 [ 211.878230][T13271] nbd0: detected capacity change from 274877906944 to 0 [ 212.129408][T13288] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 212.129443][T13288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.215010][T13291] openvswitch: netlink: Message has 8 unknown bytes. [ 212.317686][T13299] openvswitch: netlink: Message has 8 unknown bytes. [ 212.446190][T13313] netlink: 'syz.1.1968': attribute type 11 has an invalid length. [ 212.446215][T13313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1968'. [ 212.523505][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 212.741668][T13324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1971'. [ 212.741701][T13324] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 212.806513][T13325] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1971'. [ 212.806543][T13325] openvswitch: netlink: Message has 512 unknown bytes. [ 212.806954][T13325] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1971'. [ 212.806974][T13325] openvswitch: netlink: Message has 512 unknown bytes. [ 212.845523][T13325] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1971'. [ 212.858970][T13325] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1971'. [ 212.861555][T13325] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1971'. [ 212.865366][T13325] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1971'. [ 212.865752][T13325] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1971'. [ 213.265594][T13354] bond5: entered promiscuous mode [ 213.312757][T13358] macvlan3: entered promiscuous mode [ 213.312921][T13358] macvlan3: entered allmulticast mode [ 213.331535][T13358] bond5: (slave macvlan3): Opening slave failed [ 213.396080][T13355] syzkaller1: entered promiscuous mode [ 213.396253][T13355] syzkaller1: entered allmulticast mode [ 214.135149][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.198598][T13399] net_ratelimit: 33 callbacks suppressed [ 214.198623][T13399] ip_tables: iptables: counters copy to user failed while replacing table [ 214.933955][T13434] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 215.109642][T13449] syzkaller1: entered promiscuous mode [ 215.109802][T13449] syzkaller1: entered allmulticast mode [ 215.129330][T13449] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 215.369481][T13458] ip_tables: iptables: counters copy to user failed while replacing table [ 216.168155][T13513] ip_tables: iptables: counters copy to user failed while replacing table [ 216.393290][T13524] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 216.475134][T13522] ip_tables: iptables: counters copy to user failed while replacing table [ 216.595786][T13526] sctp: [Deprecated]: syz.2.2016 (pid 13526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.595786][T13526] Use struct sctp_sack_info instead [ 216.724850][T13536] syzkaller0: entered allmulticast mode [ 217.099817][T13389] udevd[13389]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 217.165768][T13566] netlink: 'syz.0.2028': attribute type 29 has an invalid length. [ 217.546988][T13588] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 217.595003][T13585] syzkaller0: entered promiscuous mode [ 217.595029][T13585] syzkaller0: entered allmulticast mode [ 217.752566][T13603] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 217.754574][T13603] __nla_validate_parse: 38 callbacks suppressed [ 217.754594][T13603] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.2037'. [ 217.996437][T13611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2038'. [ 218.075810][T13612] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.087998][T13615] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 218.088022][T13615] netlink: 'syz.4.2041': attribute type 2 has an invalid length. [ 219.032093][T13657] syz_tun: entered allmulticast mode [ 219.045989][T13656] syz_tun: left allmulticast mode [ 219.202427][T13666] netlink: get zone limit has 4 unknown bytes [ 219.316518][T13670] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2054'. [ 219.379931][T13675] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 219.379964][T13675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.384023][T13678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.716566][T13689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'. [ 219.815366][T13693] ip_tables: iptables: counters copy to user failed while replacing table [ 219.842170][T13693] raw_sendmsg: syz.4.2062 forgot to set AF_INET. Fix it! [ 220.327630][T13710] 8021q: adding VLAN 0 to HW filter on device bond8 [ 220.640517][T13724] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2067'. [ 220.694856][T13724] bond9 (unregistering): Released all slaves [ 220.751686][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 221.083562][T13736] 8021q: adding VLAN 0 to HW filter on device bond10 [ 221.099679][T13738] syzkaller1: entered promiscuous mode [ 221.099705][T13738] syzkaller1: entered allmulticast mode [ 221.281233][T13754] openvswitch: netlink: Missing key (keys=d0, expected=500) [ 221.284553][T13754] openvswitch: netlink: Missing key (keys=d0, expected=500) [ 221.584455][T13776] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2079'. [ 221.599837][T13762] netlink: 'syz.0.2074': attribute type 8 has an invalid length. [ 221.684848][T13780] sctp: [Deprecated]: syz.1.2077 (pid 13780) Use of int in max_burst socket option. [ 221.684848][T13780] Use struct sctp_assoc_value instead [ 221.705914][T13777] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2076'. [ 221.721050][T13777] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2076'. [ 221.957858][T13801] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2085'. [ 221.976456][T13805] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 222.476740][T13825] ip_tables: iptables: counters copy to user failed while replacing table [ 222.628770][T13835] netlink: 'syz.4.2095': attribute type 1 has an invalid length. [ 222.803394][T13838] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 222.823981][T13835] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.497382][T13882] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 223.525414][T13885] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 223.561940][T13887] __nla_validate_parse: 4 callbacks suppressed [ 223.561964][T13887] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2107'. [ 223.812254][T13897] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2109'. [ 223.815438][T13896] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2109'. [ 224.014946][T13912] ip6t_frag: unknown flags 6 [ 224.062625][T13912] nftables ruleset with unbound set [ 224.164565][T13921] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2116'. [ 224.164639][T13921] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2116'. [ 224.378773][T13922] netlink: 'syz.4.2115': attribute type 8 has an invalid length. [ 224.378797][T13922] sch_fq: defrate 0 ignored. [ 224.516010][T13937] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.529345][T13937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2119'. [ 224.529379][T13937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2119'. [ 224.589509][T13931] netlink: 2980 bytes leftover after parsing attributes in process `syz.0.2117'. [ 225.042537][T13947] netlink: 'syz.2.2123': attribute type 1 has an invalid length. [ 225.900223][T13990] netlink: 'syz.4.2136': attribute type 4 has an invalid length. [ 226.140609][T14006] netlink: 'syz.1.2137': attribute type 2 has an invalid length. [ 226.191746][T14008] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2139'. [ 226.366705][T14008] syzkaller0: entered promiscuous mode [ 226.366731][T14008] syzkaller0: entered allmulticast mode [ 226.557223][T14020] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 226.721783][T14019] tipc: Enabling of bearer rejected, already enabled [ 226.976814][T14039] netlink: 'syz.4.2145': attribute type 4 has an invalid length. [ 227.022219][T14042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2146'. [ 227.168011][T14053] bridge0: port 3(gretap0) entered blocking state [ 227.170099][T14053] bridge0: port 3(gretap0) entered disabled state [ 227.170408][T14053] gretap0: entered allmulticast mode [ 227.187711][T14048] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 227.551829][T14066] netlink: 'syz.4.2151': attribute type 32 has an invalid length. [ 228.184555][T14066] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 228.311864][T14070] netlink: 'syz.1.2154': attribute type 21 has an invalid length. [ 228.534001][T14092] team0: Cannot enslave team device to itself [ 229.544581][T14131] Cannot find set identified by id 65534 to match [ 229.974532][T14158] __nla_validate_parse: 5 callbacks suppressed [ 229.974553][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2176'. [ 229.974571][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2176'. [ 230.022499][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'. [ 230.037896][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'. [ 230.154311][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2182'. [ 230.294214][T14180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2184'. [ 230.294408][T14180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2184'. [ 230.294560][T14180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2184'. [ 230.294710][T14180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2184'. [ 230.294864][T14180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2184'. [ 230.351590][T14181] tipc: Enabling of bearer rejected, media not registered [ 230.375174][T14177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.816188][T14208] netlink: 'syz.3.2193': attribute type 21 has an invalid length. [ 230.916717][T14208] netlink: 'syz.3.2193': attribute type 6 has an invalid length. [ 230.985260][T14226] ip6t_srh: unknown srh match flags 4000 [ 232.336378][T14287] ip6erspan0: entered allmulticast mode [ 233.378992][T14362] xt_hashlimit: size too large, truncated to 1048576 [ 233.700791][T14382] syzkaller0: left promiscuous mode [ 233.700843][T14382] syzkaller0: left allmulticast mode [ 234.035367][T14401] netlink: 'syz.4.2242': attribute type 1 has an invalid length. [ 234.117607][T14401] bond10: entered promiscuous mode [ 234.120672][T14401] 8021q: adding VLAN 0 to HW filter on device bond10 [ 234.195434][T14408] netlink: NAT attribute has 8 unknown bytes [ 234.195466][T14408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.236563][T14401] 8021q: adding VLAN 0 to HW filter on device bond10 [ 234.237872][T14401] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 234.237933][T14401] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 234.265382][T14401] bond10: (slave ip6gre2): making interface the new active one [ 234.265408][T14401] ip6gre2: entered promiscuous mode [ 234.281490][T14401] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 234.449775][T14408] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 234.504023][T14438] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 234.861896][T14453] netlink: 'syz.1.2260': attribute type 1 has an invalid length. [ 235.064489][T14453] 8021q: adding VLAN 0 to HW filter on device bond11 [ 235.093956][T14479] __nla_validate_parse: 139 callbacks suppressed [ 235.093979][T14479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2267'. [ 235.093998][T14479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2267'. [ 235.096080][T14479] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2267'. [ 235.096109][T14479] tc_dump_action: action bad kind [ 235.282505][T14489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2269'. [ 235.321752][T14503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2269'. [ 235.509373][T14512] xt_hashlimit: overflow, try lower: 3/0 [ 235.772797][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2280'. [ 235.808691][T14538] netlink: zone id is out of range [ 235.808723][T14538] netlink: zone id is out of range [ 235.808732][T14538] netlink: zone id is out of range [ 235.808741][T14538] netlink: zone id is out of range [ 235.808749][T14538] netlink: zone id is out of range [ 235.808757][T14538] netlink: zone id is out of range [ 235.856706][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 235.856744][T14529] netlink: 'syz.1.2278': attribute type 10 has an invalid length. [ 235.856763][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2278'. [ 235.942739][T14541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2281'. [ 235.995650][T14543] tc_dump_action: action bad kind [ 236.003768][T14544] tc_dump_action: action bad kind [ 236.426125][T14566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2290'. [ 236.426151][T14566] bridge: RTM_NEWNEIGH with invalid ether address [ 236.662233][T14576] netlink: 'syz.3.2293': attribute type 20 has an invalid length. [ 236.704275][T14576] netlink: 'syz.3.2293': attribute type 20 has an invalid length. [ 236.798138][ T63] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.798185][ T63] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.798220][ T63] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.798253][ T63] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.851192][T14588] ip_tables: iptables: counters copy to user failed while replacing table [ 236.918931][T14594] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 237.090197][T14610] ip_tables: iptables: counters copy to user failed while replacing table [ 237.849469][T14653] IPVS: set_ctl: invalid protocol: 396 172.20.20.187:20000 [ 238.291740][T14682] Bluetooth: hci0: unsupported parameter 5135 [ 238.291767][T14682] Bluetooth: hci0: unsupported parameter 8192 [ 238.291782][T14682] Bluetooth: hci0: unsupported parameter 5135 [ 238.291796][T14682] Bluetooth: hci0: unsupported parameter 8192 [ 238.554126][T14697] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 238.752697][T14710] netlink: 'syz.1.2334': attribute type 3 has an invalid length. [ 238.752720][T14710] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 238.792713][T14719] netlink: 'syz.1.2334': attribute type 3 has an invalid length. [ 238.792743][T14719] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 239.182670][T14744] netlink: 'syz.3.2341': attribute type 2 has an invalid length. [ 239.383444][T14763] netlink: 'syz.0.2347': attribute type 1 has an invalid length. [ 240.086398][T14811] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 240.086441][T14811] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 240.086487][T14811] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 240.227508][ T63] smbdirect: ib_dev[syz2] removed [ 240.506008][T14841] __nla_validate_parse: 16 callbacks suppressed [ 240.506032][T14841] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2373'. [ 240.670049][T14850] macvlan0: entered promiscuous mode [ 240.774428][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 240.862461][T14863] netlink: 'syz.0.2378': attribute type 32 has an invalid length. [ 240.862485][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 240.883649][T14857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2377'. [ 240.884986][T14856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2377'. [ 240.915891][T14863] bond9: option coupled_control: invalid value (192) [ 240.926388][T14863] bond9 (unregistering): Released all slaves [ 241.049485][ T1177] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.049555][ T1177] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.049602][ T1177] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.049633][ T1177] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.269387][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'. [ 241.269415][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'. [ 241.270016][T14889] net_ratelimit: 1 callbacks suppressed [ 241.270039][T14889] TC_ACT_REPEAT abuse ? [ 241.455812][T14899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.497023][T14900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2388'. [ 241.597278][T14905] netlink: 'syz.0.2389': attribute type 3 has an invalid length. [ 241.597304][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 241.819911][T14916] openvswitch: netlink: Unknown key attributes 20 [ 242.750872][ T30] audit: type=1800 audit(1792848440.023:4): pid=14986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2409" name="memory.events" dev="tmpfs" ino=2652 res=0 errno=-22 [ 242.753399][ T30] audit: type=1804 audit(1792848440.023:5): pid=14986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2409" name="/newroot/514/memory.events" dev="tmpfs" ino=2652 res=1 errno=0 [ 242.860571][T14989] netlink: zone id is out of range [ 242.860588][T14989] netlink: zone id is out of range [ 242.864577][T14989] netlink: 'syz.0.2410': attribute type 30 has an invalid length. [ 242.913612][T14989] bond9: option arp_missed_max: invalid value (0) [ 242.913639][T14989] bond9: option arp_missed_max: allowed values 1 - 255 [ 242.942197][T14989] bond9 (unregistering): Released all slaves [ 243.048920][T14997] bond9: entered promiscuous mode [ 243.049106][T14997] bond9: entered allmulticast mode [ 243.053885][T14997] 8021q: adding VLAN 0 to HW filter on device bond9 [ 243.536210][T15039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2424'. [ 243.810777][T15050] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 243.875172][T15052] xt_NETMAP: bad MAP_IPS. [ 243.904751][T15056] netlink: 'syz.0.2431': attribute type 1 has an invalid length. [ 243.959260][T15056] 8021q: adding VLAN 0 to HW filter on device bond10 [ 243.964508][T15061] ip6t_frag: unknown flags 6 [ 244.061917][T15063] bond10: (slave gretap1): making interface the new active one [ 244.075833][T15063] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 244.269015][T15077] netlink: 'syz.1.2436': attribute type 8 has an invalid length. [ 244.684668][T15107] netlink: 'syz.2.2447': attribute type 83 has an invalid length. [ 244.760176][T15109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.034941][T15160] openvswitch: netlink: Missing valid actions attribute. [ 246.034971][T15160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.290025][T15173] __nla_validate_parse: 5 callbacks suppressed [ 246.290046][T15173] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2467'. [ 246.334796][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2462'. [ 246.334825][T15178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2462'. [ 246.334842][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2462'. [ 246.334974][T15178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2462'. [ 246.334990][T15178] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2462'. [ 246.529764][T15184] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 246.529797][T15184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.788416][T15198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2474'. [ 247.033792][T15216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2478'. [ 247.042506][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2479'. [ 247.042595][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2479'. [ 247.586449][T15253] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 247.629992][T15253] bond6: entered promiscuous mode [ 247.630469][T15253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.027273][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.425797][T15285] xt_hashlimit: size too large, truncated to 1048576 [ 248.461260][T15286] xt_l2tp: missing protocol rule (udp|l2tpip) [ 248.479871][T15288] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.480027][T15288] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.492813][T15288] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.493026][T15288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.493541][T15288] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.493770][T15288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.500744][T15288] bridge0: entered promiscuous mode [ 248.500818][T15288] bridge0: entered allmulticast mode [ 249.423757][T15333] veth0: entered promiscuous mode [ 249.622641][T15330] veth0: left promiscuous mode [ 249.776535][T15349] openvswitch: netlink: Message has 8 unknown bytes. [ 249.910288][T15360] netlink: 'syz.1.2510': attribute type 1 has an invalid length. [ 249.910308][T15360] netlink: 'syz.1.2510': attribute type 2 has an invalid length. [ 250.983627][T15424] netlink: 'syz.0.2530': attribute type 83 has an invalid length. [ 251.032024][T15424] bond11 (unregistering): Released all slaves [ 251.117761][T15432] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.464262][T15454] __nla_validate_parse: 86 callbacks suppressed [ 251.464286][T15454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2538'. [ 251.651365][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.651538][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.651690][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.651840][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.652014][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.652171][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.652330][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.654096][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.654263][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 251.854552][T15466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.940114][T15466] netlink: 'syz.3.2542': attribute type 22 has an invalid length. [ 251.940280][T15466] netlink: 'syz.3.2542': attribute type 22 has an invalid length. [ 252.206028][T15486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.252188][T15489] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 252.339197][T15489] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.392259][T15499] netlink: 'syz.0.2552': attribute type 4 has an invalid length. [ 252.430392][T15501] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 252.436603][T15489] bond7: (slave geneve2): making interface the new active one [ 252.453349][T15489] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 252.453587][T15505] netlink: 'syz.0.2552': attribute type 4 has an invalid length. [ 252.542201][T15499] bond2: (slave lo): Releasing backup interface [ 252.550549][T15499] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 252.559752][T15499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.641593][T15510] tipc: Enabled bearer , priority 11 [ 252.776463][T15514] netlink: Invalid conntrack helper [ 252.776489][T15514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.924032][T15524] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 252.951977][T15526] macsec0: default FDB implementation only supports local addresses [ 253.285460][T15538] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.477917][T15557] netlink: 'syz.4.2568': attribute type 1 has an invalid length. [ 253.521058][T15557] sctp: [Deprecated]: syz.4.2568 (pid 15557) Use of int in maxseg socket option. [ 253.521058][T15557] Use struct sctp_assoc_value instead [ 253.842550][T15574] team0: Port device wg2 added [ 254.304686][T15600] x_tables: duplicate underflow at hook 3 [ 254.740819][T15619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.770140][T15619] bond2: (slave bond0): Enslaving as an active interface with an up link [ 255.042650][T15643] validate_nla: 1 callbacks suppressed [ 255.042670][T15643] netlink: 'syz.0.2582': attribute type 4 has an invalid length. [ 255.082484][T15643] .`: renamed from bond0 (while UP) [ 255.364309][T15657] tipc: Enabling of bearer rejected, failed to enable media [ 255.529493][T15660] netlink: 'syz.0.2596': attribute type 21 has an invalid length. [ 255.606097][T15669] netlink: 'syz.0.2596': attribute type 2 has an invalid length. [ 255.645125][T15672] syzkaller1: entered promiscuous mode [ 255.645152][T15672] syzkaller1: entered allmulticast mode [ 255.662817][T15672] IPv6: addrconf: prefix option has invalid lifetime [ 255.709737][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.789141][T15704] __nla_validate_parse: 126 callbacks suppressed [ 283.789164][T15704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2605'. [ 283.836821][T15707] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2602'. [ 283.982985][T15713] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2607'. [ 284.403559][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 284.403597][T15740] netlink: 'syz.1.2613': attribute type 10 has an invalid length. [ 284.403615][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 284.444371][T15740] geneve4: entered promiscuous mode [ 284.444397][T15740] geneve4: entered allmulticast mode [ 284.642741][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 285.098114][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2623'. [ 285.385422][T15796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.385442][T15796] IPv6: NLM_F_CREATE should be set when creating new route [ 285.417410][T15792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.423732][T15792] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.452196][T15792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.542678][T15792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.546200][T15792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.565264][T15792] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 285.583959][T15793] IPv6: sit2: Disabled Multicast RS [ 285.718003][T12183] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 285.743538][T12200] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 285.842899][T15806] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 285.842930][T15806] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 286.129295][ T1177] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.309911][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 286.331745][T15837] bridge6: entered allmulticast mode [ 286.508888][ T5729] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.641965][ T1177] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.751624][T12200] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.892445][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'. [ 287.042531][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2647'. [ 287.147841][ T1177] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.148011][ T1177] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.301397][T15875] netlink: 'syz.1.2651': attribute type 21 has an invalid length. [ 287.373110][T15875] bond12: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 287.374281][T15875] bond12 (unregistering): Released all slaves [ 287.765597][T15903] netlink: 'syz.3.2660': attribute type 5 has an invalid length. [ 287.791204][T11812] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.791351][T11812] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.965437][T15905] bond12: option resend_igmp: invalid value (32767) [ 287.965464][T15905] bond12: option resend_igmp: allowed values 0 - 255 [ 288.011748][T15905] bond12 (unregistering): Released all slaves [ 288.273218][T15924] bond8: entered promiscuous mode [ 288.282854][T15924] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.436435][T15941] ip_tables: iptables: counters copy to user failed while replacing table [ 288.458902][T15943] netlink: 'syz.2.2672': attribute type 29 has an invalid length. [ 288.497624][T15949] syzkaller0: entered promiscuous mode [ 288.497648][T15949] syzkaller0: entered allmulticast mode [ 288.662479][T15956] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 288.859159][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2678'. [ 288.883325][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 288.931193][T15969] bond0: Invalid ad_actor_system MAC address. [ 288.931216][T15969] bond0: option ad_actor_system: invalid value (1) [ 288.932546][T15969] bond0 (unregistering): Released all slaves [ 289.113909][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 289.174802][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 289.222043][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 289.408309][T15991] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.577916][T16004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2692'. [ 289.726649][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 289.726791][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 289.726928][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 289.729094][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 289.766181][T16012] ip_tables: iptables: counters copy to user failed while replacing table [ 289.916331][T16024] syzkaller1: entered promiscuous mode [ 289.916357][T16024] syzkaller1: entered allmulticast mode [ 291.041855][T16087] netlink: 'syz.1.2710': attribute type 7 has an invalid length. [ 291.041879][T16087] netlink: 'syz.1.2710': attribute type 8 has an invalid length. [ 291.147507][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 291.147531][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.947288][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 292.218572][T16141] syzkaller0: entered promiscuous mode [ 292.218599][T16141] syzkaller0: entered allmulticast mode [ 292.463261][T16154] xt_hashlimit: size too large, truncated to 1048576 [ 293.014221][T16173] ipt_ECN: cannot use operation on non-tcp rule [ 293.123181][T16176] syzkaller0: entered promiscuous mode [ 293.123208][T16176] syzkaller0: entered allmulticast mode [ 293.541817][T16186] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 293.541848][T16186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.600093][T16190] syzkaller0: entered promiscuous mode [ 293.600143][T16190] syzkaller0: entered allmulticast mode [ 293.787936][T16199] netlink: 'syz.1.2742': attribute type 62 has an invalid length. [ 293.828881][T16203] netlink: 'syz.1.2742': attribute type 62 has an invalid length. [ 293.932290][T16201] netlink: 'syz.2.2740': attribute type 1 has an invalid length. [ 293.932312][T16201] netlink: 'syz.2.2740': attribute type 3 has an invalid length. [ 293.932325][T16201] __nla_validate_parse: 38 callbacks suppressed [ 293.932337][T16201] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2740'. [ 294.148876][T16217] ªªªªª»: renamed from dummy0 (while UP) [ 294.259636][T16220] xt_IDLETIMER: label is empty or not nul-terminated [ 294.288298][T16223] tunl0: entered promiscuous mode [ 294.291550][T16223] netlink: 'syz.0.2748': attribute type 3 has an invalid length. [ 294.291580][T16223] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2748'. [ 294.293598][T16223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2748'. [ 294.460890][T16225] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2747'. [ 294.492495][T16231] xt_IDLETIMER: label is empty or not nul-terminated [ 294.525919][T16238] syzkaller0: entered promiscuous mode [ 294.525948][T16238] syzkaller0: entered allmulticast mode [ 294.543248][T16225] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2747'. [ 295.159686][T16260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2758'. [ 295.159725][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'. [ 295.265099][T16266] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2760'. [ 295.352009][T16273] team0: left allmulticast mode [ 295.352031][T16273] team_slave_0: left allmulticast mode [ 295.352048][T16273] team_slave_1: left allmulticast mode [ 295.352609][T16273] team0: left promiscuous mode [ 295.352626][T16273] team_slave_0: left promiscuous mode [ 295.352769][T16273] team_slave_1: left promiscuous mode [ 295.355761][T16273] bridge0: port 3(team0) entered disabled state [ 295.419428][T16273] team0: Cannot enslave team device to itself [ 295.474574][T16281] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 295.559711][T16283] syzkaller0: entered promiscuous mode [ 295.559736][T16283] syzkaller0: entered allmulticast mode [ 295.971972][T16304] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2770'. [ 296.060649][T16312] netlink: 'syz.2.2775': attribute type 11 has an invalid length. [ 296.122676][T16303] netlink: Failed to add vcan0 helper -22 [ 296.122742][T16303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.215419][T16319] pim6reg: entered allmulticast mode [ 296.216060][T16323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2778'. [ 296.219314][T16319] pim6reg: left allmulticast mode [ 296.240155][T16323] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.240225][T16323] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 296.521082][T16337] syzkaller0: entered promiscuous mode [ 296.521131][T16337] syzkaller0: entered allmulticast mode [ 297.144859][T16369] netlink: 'syz.3.2791': attribute type 2 has an invalid length. [ 297.556524][T16392] netlink: 'syz.1.2797': attribute type 3 has an invalid length. [ 297.576585][T16391] syzkaller0: entered promiscuous mode [ 297.576613][T16391] syzkaller0: entered allmulticast mode [ 297.859512][T12183] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.876125][T16395] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 298.130195][T16412] netlink: 'syz.3.2803': attribute type 15 has an invalid length. [ 298.669012][T12183] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.119412][T16459] __nla_validate_parse: 7 callbacks suppressed [ 299.119432][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 299.119533][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2817'. [ 299.867897][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.901606][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2825'. [ 299.952784][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.955294][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.955767][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.960488][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.966915][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.079638][T16491] netlink: 'syz.2.2830': attribute type 1 has an invalid length. [ 300.079661][T16491] nbd: error processing sock list [ 300.107186][T16496] smc: removing ib device rxe0 [ 300.118360][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.122904][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.128007][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.158973][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.160994][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.248820][T16496] smbdirect: ib_dev[rxe0] removed [ 300.507233][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.423094][T16483] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 301.539689][T16483] lo speed is unknown, defaulting to 1000 [ 301.642210][T16551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2840'. [ 301.769306][T16556] nbd2: detected capacity change from 0 to 63 [ 301.786551][T16556] block nbd2: NBD_DISCONNECT [ 301.786801][T16556] block nbd2: Disconnected due to user request. [ 301.786857][T16556] block nbd2: shutting down sockets [ 301.830172][T16558] pim6reg527: entered allmulticast mode [ 301.831123][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 301.844676][ C1] blk_print_req_error: 24 callbacks suppressed [ 301.844696][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.844765][ C1] buffer_io_error: 23 callbacks suppressed [ 301.844778][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 301.844805][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.844856][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 301.844875][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.844944][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 301.844964][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.845025][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 301.845201][ T1957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.845229][ T1957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 301.845313][ T1957] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.845338][ T1957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 301.845408][ T1957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.845481][ T1957] Buffer I/O error on dev nbd2, logical block 2, async page read [ 301.845691][ T1957] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.845759][ T1957] Buffer I/O error on dev nbd2, logical block 3, async page read [ 301.845994][ T1957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.846058][ T1957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 301.847297][T16561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 301.848280][ T1957] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 301.848367][ T1957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 301.857745][T16508] ldm_validate_partition_table(): Disk read failed. [ 301.864164][T16508] Dev nbd2: unable to read RDB block 0 [ 301.879434][T16508] nbd2: unable to read partition table [ 301.935443][T16508] ldm_validate_partition_table(): Disk read failed. [ 301.945581][T16508] Dev nbd2: unable to read RDB block 0 [ 301.985453][T16508] nbd2: unable to read partition table [ 302.113487][T16564] netlink: 'syz.3.2843': attribute type 1 has an invalid length. [ 302.113512][T16564] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2843'. [ 302.187219][ T5620] Bluetooth: hci5: command tx timeout [ 302.499804][T16573] sctp: [Deprecated]: syz.3.2846 (pid 16573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.499804][T16573] Use struct sctp_sack_info instead [ 302.643606][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2847'. [ 302.696899][T16587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2850'. [ 302.836255][T16591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2851'. [ 302.985766][T16483] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.985898][T16483] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.986010][T16483] bridge_slave_0: entered allmulticast mode [ 302.987004][T16483] bridge_slave_0: entered promiscuous mode [ 303.019498][T16483] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.019623][T16483] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.019749][T16483] bridge_slave_1: entered allmulticast mode [ 303.020888][T16483] bridge_slave_1: entered promiscuous mode [ 303.070603][T16483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.072791][T16483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.112376][T16483] team0: Port device team_slave_0 added [ 303.114752][T16483] team0: Port device team_slave_1 added [ 303.145672][T16483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.145692][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.145719][T16483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.147009][T16483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.147024][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.184155][T16483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.288226][T16605] bridge7: entered promiscuous mode [ 303.288387][T16605] bridge7: entered allmulticast mode [ 303.551547][T16483] hsr_slave_0: entered promiscuous mode [ 303.598287][T16483] hsr_slave_1: entered promiscuous mode [ 303.599689][T16483] debugfs: 'hsr0' already exists in 'hsr' [ 303.599707][T16483] Cannot create hsr debugfs directory [ 304.184373][T16483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 304.184414][T16483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.256166][T16665] netlink: 'syz.4.2868': attribute type 21 has an invalid length. [ 304.256192][T16665] __nla_validate_parse: 7 callbacks suppressed [ 304.256206][T16665] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2868'. [ 304.256271][T16665] netlink: 'syz.4.2868': attribute type 5 has an invalid length. [ 304.256295][T16665] netlink: 'syz.4.2868': attribute type 6 has an invalid length. [ 304.256310][T16665] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2868'. [ 304.277713][ T5620] Bluetooth: hci5: command tx timeout [ 304.372876][T16483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 304.372913][T16483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.516879][T16483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 304.516922][T16483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.649426][T16483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 304.649468][T16483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.181380][T16483] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.210475][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.214214][T16483] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.251241][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.257302][T16483] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.285718][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.301852][T16483] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.328442][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.359712][T16694] ip_tables: iptables: counters copy to user failed while replacing table [ 305.669540][T16710] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 305.671250][T16483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.714520][T16483] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.755130][T11808] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.755204][T11808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.792813][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2881'. [ 305.792845][T16712] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2881'. [ 305.792862][T16712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2881'. [ 305.860577][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.860647][T11810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.910269][T16717] bridge0: left allmulticast mode [ 306.348309][ T5620] Bluetooth: hci5: command tx timeout [ 306.354518][T16732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2887'. [ 306.546675][T16742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2888'. [ 306.571669][T16742] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2888'. [ 306.602304][T16742] netlink: 'syz.2.2888': attribute type 1 has an invalid length. [ 306.739819][T16742] bond3: entered promiscuous mode [ 306.740125][T16742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.023791][T16764] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2893'. [ 307.023815][T16764] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2893'. [ 307.545667][T16483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.561457][T16774] tipc: Enabling of bearer rejected, failed to enable media [ 307.579718][T16776] netlink: 'syz.0.2896': attribute type 7 has an invalid length. [ 307.806446][T16483] veth0_vlan: entered promiscuous mode [ 307.839738][T16483] veth1_vlan: entered promiscuous mode [ 307.931779][T16483] veth0_macvtap: entered promiscuous mode [ 307.952107][T16483] veth1_macvtap: entered promiscuous mode [ 308.037599][T16790] bond4: entered allmulticast mode [ 308.040930][T16790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.084505][T16793] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.085905][T16793] macvlan2: entered allmulticast mode [ 308.095418][T16793] bond4: (slave macvlan2): Enslaving as a backup interface with a down link [ 308.140616][T16790] ip6gretap1: entered allmulticast mode [ 308.141109][T16790] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 308.182470][T16483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.248438][T11814] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 308.350649][T16483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.358033][T11810] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 308.427240][ T5620] Bluetooth: hci5: command tx timeout [ 308.450488][T11808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.450533][T11808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.450567][T11808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.450600][T11808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.690697][T11814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.690721][T11814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.832086][T11811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.832109][T11811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.902178][T16818] netlink: 'syz.4.2909': attribute type 1 has an invalid length. [ 309.041879][T16818] bond11: (slave bridge7): making interface the new active one [ 309.045319][T16818] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 309.142655][T16835] vlan0: entered promiscuous mode [ 309.355480][T16840] syzkaller0: entered promiscuous mode [ 309.355639][T16840] syzkaller0: entered allmulticast mode [ 309.607235][ T4941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.607782][ T4941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.608293][ T4941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.611098][ T4941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.612125][ T4941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.773235][T16848] __nla_validate_parse: 7 callbacks suppressed [ 309.773257][T16848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2916'. [ 309.962238][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 310.024015][T16867] x_tables: duplicate underflow at hook 2 [ 310.772398][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.776463][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.794536][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.918163][T16851] infiniband rxe0: set active [ 310.918208][T12183] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.918255][T16851] infiniband rxe0: added rxe_eth0 [ 310.944809][T16851] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 310.944848][T16851] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 310.946071][T16851] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 311.062456][T16851] RDS/IB: rxe0: added [ 311.062497][T16851] smc: adding ib device rxe0 with port count 1 [ 311.062516][T16851] smc: ib device rxe0 port 1 has no pnetid [ 311.090109][ T991] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.090761][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.195962][T16907] syzkaller0: entered promiscuous mode [ 311.196127][T16907] syzkaller0: entered allmulticast mode [ 311.627496][ T5620] Bluetooth: hci1: command tx timeout [ 311.628887][T16917] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2930'. [ 311.693032][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.796673][T16929] netlink: 'syz.4.2932': attribute type 1 has an invalid length. [ 311.796697][T16929] netlink: 'syz.4.2932': attribute type 2 has an invalid length. [ 311.796711][T16929] netlink: 'syz.4.2932': attribute type 3 has an invalid length. [ 311.796726][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2932'. [ 311.858757][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.992717][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.998020][T16935] netlink: 'syz.2.2934': attribute type 11 has an invalid length. [ 312.019644][T16935] netlink: 'syz.2.2934': attribute type 1 has an invalid length. [ 312.227690][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.580176][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.592753][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3910 [ 312.592844][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1177, name: kworker/u8:8 [ 312.592894][ C1] preempt_count: 101, expected: 0 [ 312.592953][ C1] RCU nest depth: 1, expected: 0 [ 312.592999][ C1] INFO: lockdep is turned off. [ 312.593020][ C1] Preemption disabled at: [ 312.593032][ C1] [<0000000000000000>] 0x0 [ 312.593141][ C1] CPU: 1 UID: 0 PID: 1177 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 312.593204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 312.593253][ C1] Workqueue: bat_events batadv_tt_purge [ 312.593332][ C1] Call Trace: [ 312.593362][ C1] [ 312.593383][ C1] dump_stack_lvl+0xe8/0x150 [ 312.593473][ C1] __might_resched+0x36a/0x4c0 [ 312.593551][ C1] lock_sock_nested+0x56/0x100 [ 312.593576][ C1] x25_kill_by_neigh+0x10d/0x250 [ 312.593601][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 312.593629][ C1] ? rcu_is_watching+0x16/0xb0 [ 312.593659][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 312.593680][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 312.593700][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 312.593725][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 312.593749][ C1] lapbeth_napi_poll+0x42/0x90 [ 312.593774][ C1] __napi_poll+0xaa/0x330 [ 312.593858][ C1] net_rx_action+0x61d/0xf50 [ 312.593958][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 312.594020][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 312.594110][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 312.594181][ C1] ? rcu_is_watching+0x16/0xb0 [ 312.594271][ C1] handle_softirqs+0x265/0x8d0 [ 312.594353][ C1] ? process_scheduled_works+0x97a/0x1630 [ 312.594419][ C1] ? batadv_tt_local_purge+0x277/0x300 [ 312.594479][ C1] do_softirq+0x77/0xd0 [ 312.594539][ C1] [ 312.594559][ C1] [ 312.594580][ C1] __local_bh_enable_ip+0x100/0x140 [ 312.594643][ C1] batadv_tt_local_purge+0x277/0x300 [ 312.594713][ C1] ? process_scheduled_works+0x97a/0x1630 [ 312.594792][ C1] batadv_tt_purge+0x35/0xa40 [ 312.594854][ C1] ? rcu_is_watching+0x16/0xb0 [ 312.594932][ C1] ? process_scheduled_works+0x97a/0x1630 [ 312.595003][ C1] process_scheduled_works+0xc3d/0x1630 [ 312.595117][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.595189][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 312.595300][ C1] ? assign_work+0x3cf/0x5d0 [ 312.595386][ C1] worker_thread+0xa47/0xfb0 [ 312.595492][ C1] kthread+0x38b/0x480 [ 312.595552][ C1] ? __pfx_worker_thread+0x10/0x10 [ 312.595622][ C1] ? __pfx_kthread+0x10/0x10 [ 312.595674][ C1] ret_from_fork+0x514/0xb70 [ 312.595739][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 312.595799][ C1] ? __switch_to+0xc78/0x1410 [ 312.595883][ C1] ? __pfx_kthread+0x10/0x10 [ 312.595955][ C1] ret_from_fork_asm+0x1a/0x30 [ 312.596029][ C1] [ 313.303887][T16851] lo speed is unknown, defaulting to 1000 [ 313.415168][T16851] rxe_eth0 speed is unknown, defaulting to 1000 [ 313.717153][ T5620] Bluetooth: hci1: command tx timeout [ 313.754192][T16851] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.754392][T16851] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.754502][T16851] bridge_slave_0: entered allmulticast mode [ 313.755640][T16851] bridge_slave_0: entered promiscuous mode [ 313.789210][T16851] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.789291][T16851] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.789508][T16851] bridge_slave_1: entered allmulticast mode [ 313.791604][T16851] bridge_slave_1: entered promiscuous mode [ 313.842373][T16851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.844713][T16851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.885400][T16851] team0: Port device team_slave_0 added [ 313.894802][T16851] team0: Port device team_slave_1 added [ 313.921526][T16851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.921546][T16851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.921576][T16851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.923095][T16851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.923109][T16851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.923138][T16851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.051849][T16851] hsr_slave_0: entered promiscuous mode [ 314.052677][T16851] hsr_slave_1: entered promiscuous mode [ 314.053249][T16851] debugfs: 'hsr0' already exists in 'hsr' [ 314.053268][T16851] Cannot create hsr debugfs directory [ 314.193630][T16851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.193673][T16851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.257803][T16851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.257843][T16851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.324845][T16851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.324899][T16851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.406220][T16851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.406261][T16851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.505983][T16851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.519021][T16851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.519824][T16851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.526001][T16851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.526814][T16851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.560621][T16851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.561664][T16851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.564050][T16851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.660810][T16851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.692740][T16851] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.710941][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.711017][T11810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.716252][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.716327][T11810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.165986][T16851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.223213][T16851] veth0_vlan: entered promiscuous mode [ 315.245635][T16851] veth1_vlan: entered promiscuous mode [ 315.281528][T16851] veth0_macvtap: entered promiscuous mode [ 315.285474][T16851] veth1_macvtap: entered promiscuous mode [ 315.314010][T16851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.330923][T16851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.389147][ T1177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.389407][ T1177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.389446][ T1177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.389482][ T1177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.443681][T11814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.443705][T11814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.489513][T11810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.489529][T11810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.787329][ T5620] Bluetooth: hci1: command tx timeout [ 315.867386][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 317.147248][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.148397][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 317.165389][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.867304][ T5620] Bluetooth: hci1: command tx timeout