last executing test programs: 3.040982044s ago: executing program 1 (id=861): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x6, 0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c00000013000100"/20, @ANYRES32=r3, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_mtu(r0, 0x6, 0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c00000013000100"/20, @ANYRES32=r3, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) (async) 2.764951221s ago: executing program 1 (id=866): r0 = socket(0x10, 0x80002, 0x0) unshare(0xc040480) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) 2.561276305s ago: executing program 1 (id=869): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa880088879f"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) (async) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa880088879f"], 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) (async) 2.291906635s ago: executing program 1 (id=873): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x7, @empty, 0xc040}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9, 0x11, r1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) read(r2, &(0x7f0000002240)=""/4107, 0x100b) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x3d0, 0xd0, 0xd0, 0x1a0, 0x3d0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@dev, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x302}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0, @local}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 2.096932903s ago: executing program 0 (id=876): pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x18, &(0x7f0000000080)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x1, 0xe79d967978616ad0, 0x9, 0x0, 0x0, 0xfffffffffffffffc}, @generic={0x78, 0x9, 0x3, 0x101, 0xc9d}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @generic={0x3, 0x3, 0xf, 0x3147}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x5, 0x6, 0x0, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.095204629s ago: executing program 4 (id=877): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000800000009000000c18800004000000013404e0a9efacda6d99d9cd544ca0346a8f5e06f1c3fd31dd4e4f1c4691c2c57e41caa21522b6230c2f02ec049328ba3d4230182b3ac523951bd9f8e525f58a10a953f25cd151b7de1a9b9383b54f207cd2524f2e1853aa7e925c594f122c3fda2d28aa50d67475de0beac33f8b59f31a21cf9b44cfaddecf949307eb1e19be4a49a65e4c0bfc4fc1ceb8f91", @ANYRES32=0x1, @ANYBLOB="ad0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000400"/28], 0x50) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r1}, 0xfdb0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8993, &(0x7f0000000040)={'bond0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000a40)={r11, 0x6e, 0x1, 'E'}, 0x9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r13, 0x1, 0x70bd2a, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000002c0)={'batadv0\x00', 0x1}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000300)={r11, 0x1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000007000000000000000400000081220000", @ANYRES32=r1, @ANYBLOB="020000080000000000000000040000000000007a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000100"/28], 0x50) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="5800000300001100e422000000000100804824cabecc4b381eaadc000000400100000064009400050028925aaa000000c672a00000000000feff3c707f8f00ffc9f3daeab7972a2eb7db553fe95cb9f39c074009dd7fb14bdd5f4a5f83ba32fa518f3e2c312044d0b6cc8d2a8129e380cc034cf91f5a63a9e25ae3459adfa309893e248b49797fe60afae39cd8b79cb23c311825b411a4e4682cdf50e04de8f84310af5700"/188, 0xbc}], 0x1) 1.985571451s ago: executing program 0 (id=879): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x60, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3434}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3ff}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) 1.833174344s ago: executing program 3 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) getsockopt(r1, 0xd, 0x52c485dd, &(0x7f0000000180)=""/75, &(0x7f0000000100)=0x4b) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="00410000000000000c002b8008000100", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4041045}, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x6a4, @loopback, 0x80200008}, 0x1c) listen(r6, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xac00, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x30, r9, 0xc4fc9e906872308b, 0x0, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000000c0)={'batadv_slave_1\x00', @broadcast}) 1.755654879s ago: executing program 4 (id=882): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000380)=0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000008d830000000000000a20000000000a01030000000000000000010000000900010073797a310000000014000000030a01020000000000000000010000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a300000000020000480140003006e657464657673696d30000000000000080001400000000d140000001100010000000000000000000000000a"], 0xa8}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e0001525926c5000000000007000000"], 0x14}}, 0x0) sendmsg$tipc(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="62801171a1b356e415ca0eb7856e1c262097aa3979bafd051961edc7793df8780301cc318f2b08c31cb5ca17369bd4cc07ac7eab72fbb40ac26858f5bc49c6127e49a81ff5594921ad907d32840afddab780ffc618132fe9dd46695153ce679e497eb1efd5eb9ce797991c2a018b63f665113532abcea80e185278dc71ccd76e63176b2c769ffd1c580101559e95c6cb9f59aa", 0x93}], 0x1, 0x0, 0x0, 0x24004000}, 0x50) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030030cc0902110000000000000000000000030006000040000002000003ac1e0001000000000000000002000100000000000000f5000000000008001900000000000a004e20100001ffff02000000000000010f0000000a004f2100000005fc0000000000000000000000000000013cf2000002001300ff00ed0027bd70000735000026218ebcd1652b6428431bd67458f5c1d3853b718024ceae2a0def27051ba25ebcd47ffa136901"], 0x88}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYBLOB="2414c6369781164ef798a0acd5", @ANYBLOB="000000000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r11) (async) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002000000f8a288e3bf6a864f000000000000000000"], 0x48) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8=r4, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) (async) getpeername$packet(r4, &(0x7f0000004900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) (async) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000005f80)={@multicast2, @remote}, &(0x7f0000005fc0)=0xc) 1.731659643s ago: executing program 3 (id=883): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5, 0x1, 'H'}]}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5, 0x1, 'H'}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0xffff}, {0xffff, 0xffe0}, {0xc, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x98}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x5c62}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x400e0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x4c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8ec2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8ec2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x40) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) 1.648463065s ago: executing program 0 (id=885): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x7, 0x1000, 0x100c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r1, 0x0) shutdown(r0, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000a80)) sendmmsg$unix(r0, &(0x7f00000015c0), 0x0, 0x0) 1.48913299s ago: executing program 4 (id=886): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x8, 0x7, 0x5, 0x8, 0xd, 0xe, 0xd6, 0x2, 0x6, [0x9cd, 0x517, 0x9, 0x2, 0x400, 0x8, 0x10000, 0x1], [0x2, 0x6]}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001100010000000000fcdbdf2507000e7d", @ANYRES32=r6, @ANYBLOB="80000100000000001c001a801800048014000a80080001000000000008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4044081}, 0x48010) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x3c, 0x19, 0x200, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x20, 0x5, 0xfc, 0x3, 0xff, 0x1, 0x2700}, [@RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0xc, 0x4, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000055}, 0x20044090) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xc4a2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x1, 0x6}, &(0x7f0000000180)=0x90) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000408000300", @ANYRES32=r3, @ANYBLOB="08009f00d74e06d90500180130000000050019010c00000008002600851600000800a10007000000"], 0x44}}, 0x0) 1.463468706s ago: executing program 0 (id=887): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@bridge_delneigh={0x6c, 0x1d, 0x4, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x0, 0x15a, 0xa}, [@NDA_DST_IPV4={0x8, 0x1, @private=0xa010100}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_LINK_NETNSID={0x8, 0xa, 0xfffff872}, @NDA_PROTOCOL={0x5, 0xc, 0xa7}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0xd4db}]}, 0x6c}}, 0x4008800) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESHEX=r1, @ANYRES16=r0], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESHEX=r1, @ANYRES16=r0], 0x48}}, 0x0) 1.413159252s ago: executing program 3 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x37, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellinkprop={0x3c, 0x6d, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21010, 0x10}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.401976089s ago: executing program 2 (id=889): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611000000002a2763600080000f80532400f5ba7f8f88ff80b4b57d4d58431af4ed4b9e18700"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.353978971s ago: executing program 1 (id=890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5610067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r3) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'rose0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x1) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x80fe}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000840)=""/73, 0x49}, {&(0x7f0000002980)=""/4094, 0xffe}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/47, 0x2f}, {&(0x7f0000000b00)=""/207, 0xcf}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x20}, 0x80000000}], 0x4, 0x40002242, 0x0) 1.181148131s ago: executing program 0 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5f}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009"], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0x2, 0x0, 0x0, @private1}, 0xf) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@gettaction={0x120, 0x32, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x120}}, 0x0) socket$alg(0x26, 0x5, 0x0) 1.151326709s ago: executing program 2 (id=892): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x2, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x800}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x4010) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) listen(r7, 0x9) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x8000, 0x20, 0x1, 0x2, {{0x21, 0x4, 0x1, 0x19, 0x84, 0x67, 0x0, 0x52, 0x4, 0x0, @multicast1, @empty, {[@rr={0x7, 0x1b, 0xdc, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @local, @remote]}, @timestamp={0x44, 0x24, 0x20, 0x0, 0x2, [0x4, 0x8, 0x7, 0x0, 0x49, 0x3, 0x68b6, 0x5]}, @lsrr={0x83, 0x7, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0xac, [@dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x40}]}, @noop, @generic={0xd7, 0x8, "58e55def00d4"}]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x78, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2b, 0x6, "a1ff91a2ba35b13ede5b2cbbc78b0448d4c3ef68798786de00608814296d7d9506d71281ad8b4b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xcc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa76}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x80, 0x2, 0xa, 0x106, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x54, 0x6, "8a8128758ddad21ce3fecba4089f33774dc5cad2284a8bad2dde2ac0d3f86b78b9171c1707e84343cdf9e7be140ba5dd4525cd289de75ffe93e74e9a5bf81c86aad3334c8452381bf915f5fc77fa35ed"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2f0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc045) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x10}}) 1.105248643s ago: executing program 4 (id=893): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000040), 0x10) (async) bind$can_raw(r3, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x1, 0x1, 0x3, 0x3a, {{0x1a, 0x4, 0x2, 0x2, 0x68, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x44, 0xffffffffffffffff, [{0x5, 0xa, "e230ea06d25678d6"}, {0x1, 0x10, "16b9665108f0125330a4a594bcc1"}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x6, "b30779e4"}, {0x0, 0xd, "58a2ca646492a87e113e76"}, {0x7, 0xd, "092bea674dfa480954ba2d"}]}, @generic={0x86, 0xf, "3f3f44f23e0eadf98477a48f63"}, @end]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "721d260eadcfcedb"}, 0x10}, 0x1, 0x0, 0x0, 0x844}, 0x44094) 1.041201443s ago: executing program 3 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="047405000000000008001b0003000000140003006272696465655f736c6176655f30"], 0x3c}, 0x1, 0x0, 0x0, 0x408c5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 943.549083ms ago: executing program 1 (id=895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f00000002c0)=0xffff0000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x1e8, 0xa8, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x88}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) r6 = socket$kcm(0x2, 0x2, 0x2) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) r9 = socket(0x1f, 0x5, 0x6) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f00000001c0)=0x510b, 0x4) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0xfd}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4089, 0xff9}, {&(0x7f0000000440)=""/151, 0xa3}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000002c40)=""/4092, 0xffc}, {&(0x7f0000000a40)=""/157, 0x93}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x45}], 0x5, 0x40008062, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100767469002c00028008000500ac1414330800020000800000080006000000000008000100", @ANYRES32], 0x58}}, 0x40) 889.025659ms ago: executing program 0 (id=896): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) accept(r1, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x32, 0x300, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x3ffe, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x3a1200, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x38, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x4805}, 0x0) r5 = socket(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)="4107a3e28484088477100fe8ab6445c0df6c46a06368d5a24053b107cfb7d7345f0ec9cd72d66680b14b2b6e564a55a9f01140d763d20c4f236b289f") 729.180731ms ago: executing program 4 (id=897): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x4}}, 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0x60, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xd1e2}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}]}}}}}}, 0x96) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000000aa37fb0e22"], 0x0) 563.324997ms ago: executing program 2 (id=898): r0 = socket$l2tp(0x2, 0x2, 0x73) accept(r0, &(0x7f0000000000)=@in, &(0x7f0000000100)=0x80) (async) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'macvlan0\x00', {0x2, 0x0, @initdev}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf250a000000080001007063690011000200303030303a30303a"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x10) 562.361817ms ago: executing program 3 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 514.037929ms ago: executing program 3 (id=900): syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4f80000}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x1a, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xd3}, @jmp={0x5, 0x1, 0x6, 0x8, 0xb, 0xfffffffffffffff5, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @ldst={0x1, 0x0, 0x4, 0x9, 0x0, 0xfffffffffffffff0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9}, 0x8) 482.0482ms ago: executing program 2 (id=901): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xfffffffffffffd4b}}}]}]}, 0x48}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x10) 309.151931ms ago: executing program 4 (id=902): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x5, 0x3, 0x2, 0xc, 0x0, 0x70bd25, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}}, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x80002, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x3) (async) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x580d5476}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) sendmsg$inet(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="98", 0x1}], 0x1}, 0x8001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000064c0)=0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) (async) getpeername$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x28}}, 0xc090) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 255.718247ms ago: executing program 2 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000020000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000001000085000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pread64(r0, &(0x7f0000000280)=""/135, 0x87, 0x3) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=904): ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[], 0x68}}, 0x20068041) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x3}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'pim6reg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x2, r5}) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r6) (async) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r8, 0x0, 0x41) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. [ 69.744256][ T5824] cgroup: Unknown subsys name 'net' [ 69.858030][ T5824] cgroup: Unknown subsys name 'cpuset' [ 69.866174][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.394127][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.746446][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.753003][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.787474][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.796498][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.821333][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.829811][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.837858][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.847004][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.855528][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.863277][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.881167][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.883750][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.890776][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.903265][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.904998][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.919168][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.927182][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.931754][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.935586][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.945303][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.950411][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.956499][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.964095][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.970764][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.977059][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.987290][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.993245][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.998289][ T5147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.011922][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.013671][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.027443][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.029760][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.377952][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 74.540525][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 74.647611][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.655111][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.662576][ T5842] bridge_slave_0: entered allmulticast mode [ 74.669936][ T5842] bridge_slave_0: entered promiscuous mode [ 74.680263][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.688081][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.696514][ T5842] bridge_slave_1: entered allmulticast mode [ 74.703208][ T5842] bridge_slave_1: entered promiscuous mode [ 74.719403][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 74.798368][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 74.817537][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.831552][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.865263][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.872461][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.880484][ T5835] bridge_slave_0: entered allmulticast mode [ 74.887773][ T5835] bridge_slave_0: entered promiscuous mode [ 74.917200][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.924446][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.931678][ T5835] bridge_slave_1: entered allmulticast mode [ 74.938751][ T5835] bridge_slave_1: entered promiscuous mode [ 74.971159][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 75.002334][ T5842] team0: Port device team_slave_0 added [ 75.035781][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.047480][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.058111][ T5842] team0: Port device team_slave_1 added [ 75.118638][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.126042][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.133299][ T5845] bridge_slave_0: entered allmulticast mode [ 75.140522][ T5845] bridge_slave_0: entered promiscuous mode [ 75.180238][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.187599][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.199131][ T5845] bridge_slave_1: entered allmulticast mode [ 75.206501][ T5845] bridge_slave_1: entered promiscuous mode [ 75.229409][ T5835] team0: Port device team_slave_0 added [ 75.238299][ T5835] team0: Port device team_slave_1 added [ 75.246326][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.253292][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.279795][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.335188][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.342258][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.368540][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.402074][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.410252][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.418096][ T5838] bridge_slave_0: entered allmulticast mode [ 75.426053][ T5838] bridge_slave_0: entered promiscuous mode [ 75.434532][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.441661][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.449121][ T5838] bridge_slave_1: entered allmulticast mode [ 75.459443][ T5838] bridge_slave_1: entered promiscuous mode [ 75.487976][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.525886][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.532965][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.559531][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.584223][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.602417][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.610415][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.618197][ T5846] bridge_slave_0: entered allmulticast mode [ 75.625357][ T5846] bridge_slave_0: entered promiscuous mode [ 75.642370][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.649819][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.676220][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.699218][ T5842] hsr_slave_0: entered promiscuous mode [ 75.706003][ T5842] hsr_slave_1: entered promiscuous mode [ 75.712834][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.720483][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.728111][ T5846] bridge_slave_1: entered allmulticast mode [ 75.735464][ T5846] bridge_slave_1: entered promiscuous mode [ 75.745101][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.757156][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.781976][ T5845] team0: Port device team_slave_0 added [ 75.819379][ T5845] team0: Port device team_slave_1 added [ 75.846828][ T5838] team0: Port device team_slave_0 added [ 75.855479][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.884000][ T5838] team0: Port device team_slave_1 added [ 75.908094][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.956796][ T5835] hsr_slave_0: entered promiscuous mode [ 75.963215][ T5835] hsr_slave_1: entered promiscuous mode [ 75.973195][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.981392][ T5835] Cannot create hsr debugfs directory [ 76.011162][ T5846] team0: Port device team_slave_0 added [ 76.017505][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.025083][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.051428][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.064811][ T5843] Bluetooth: hci1: command tx timeout [ 76.070482][ T5849] Bluetooth: hci3: command tx timeout [ 76.083010][ T5840] Bluetooth: hci0: command tx timeout [ 76.097769][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.105410][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.132961][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.143759][ T5840] Bluetooth: hci2: command tx timeout [ 76.149720][ T5840] Bluetooth: hci4: command tx timeout [ 76.164711][ T5846] team0: Port device team_slave_1 added [ 76.175665][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.182654][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.208712][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.230025][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.237383][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.263676][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.304293][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.311314][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.337401][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.368583][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.375883][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.402132][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.465025][ T5845] hsr_slave_0: entered promiscuous mode [ 76.471194][ T5845] hsr_slave_1: entered promiscuous mode [ 76.481615][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.489563][ T5845] Cannot create hsr debugfs directory [ 76.554530][ T5838] hsr_slave_0: entered promiscuous mode [ 76.560769][ T5838] hsr_slave_1: entered promiscuous mode [ 76.569475][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.577429][ T5838] Cannot create hsr debugfs directory [ 76.655360][ T5846] hsr_slave_0: entered promiscuous mode [ 76.661613][ T5846] hsr_slave_1: entered promiscuous mode [ 76.668012][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.675740][ T5846] Cannot create hsr debugfs directory [ 76.849572][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.860701][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.875495][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.908863][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.995115][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.011202][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.022226][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.045015][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.105509][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.120737][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.154980][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.167825][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.221536][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.251701][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.267819][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.281979][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.361544][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.395004][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.412328][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.442222][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.460974][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.476545][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.499262][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.518485][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.541798][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.549130][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.560647][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.567811][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.615203][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.622377][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.631487][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.638674][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.756199][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.775159][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.797795][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.844055][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.851211][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.882021][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.898575][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.905779][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.937394][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.957602][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.965422][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.023068][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.030318][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.096680][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.139511][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.146769][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.164805][ T5849] Bluetooth: hci3: command tx timeout [ 78.170284][ T5843] Bluetooth: hci1: command tx timeout [ 78.176302][ T5840] Bluetooth: hci0: command tx timeout [ 78.194835][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.202433][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.224445][ T5840] Bluetooth: hci4: command tx timeout [ 78.229914][ T5843] Bluetooth: hci2: command tx timeout [ 78.283383][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.300945][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.357851][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.439335][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.537729][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.588744][ T5835] veth0_vlan: entered promiscuous mode [ 78.651605][ T5835] veth1_vlan: entered promiscuous mode [ 78.750403][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.782366][ T5838] veth0_vlan: entered promiscuous mode [ 78.823013][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.838755][ T5838] veth1_vlan: entered promiscuous mode [ 78.847299][ T5835] veth0_macvtap: entered promiscuous mode [ 78.858436][ T5835] veth1_macvtap: entered promiscuous mode [ 78.920373][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.952412][ T5845] veth0_vlan: entered promiscuous mode [ 78.965086][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.977219][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.987260][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.996419][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.005826][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.033863][ T5838] veth0_macvtap: entered promiscuous mode [ 79.052495][ T5845] veth1_vlan: entered promiscuous mode [ 79.067236][ T5838] veth1_macvtap: entered promiscuous mode [ 79.110343][ T5846] veth0_vlan: entered promiscuous mode [ 79.133297][ T5842] veth0_vlan: entered promiscuous mode [ 79.162444][ T5846] veth1_vlan: entered promiscuous mode [ 79.172229][ T5842] veth1_vlan: entered promiscuous mode [ 79.196395][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.209060][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.221578][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.277656][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.295096][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.306834][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.319629][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.331125][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.351133][ T5845] veth0_macvtap: entered promiscuous mode [ 79.367607][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.377251][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.386125][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.395370][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.434670][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.438092][ T5846] veth0_macvtap: entered promiscuous mode [ 79.442529][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.455524][ T5845] veth1_macvtap: entered promiscuous mode [ 79.465877][ T5846] veth1_macvtap: entered promiscuous mode [ 79.515128][ T5842] veth0_macvtap: entered promiscuous mode [ 79.531662][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.543689][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.553833][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.564393][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.576799][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.601990][ T5842] veth1_macvtap: entered promiscuous mode [ 79.641555][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.666249][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.677348][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.689177][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.702173][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.712743][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.726618][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.734960][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.749643][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.766340][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.766614][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.779713][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.804965][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.821493][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.836007][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.846745][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.857557][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.874311][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.890454][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.935263][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.965112][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.975271][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.984664][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.994438][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.007671][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.016768][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.026050][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.035224][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.052584][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.084681][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.184582][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.206413][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.221444][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.235541][ T5843] Bluetooth: hci3: command tx timeout [ 80.241004][ T5843] Bluetooth: hci0: command tx timeout [ 80.246464][ T5840] Bluetooth: hci1: command tx timeout [ 80.256840][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.266799][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.277284][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.287344][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.298458][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.308776][ T5843] Bluetooth: hci2: command tx timeout [ 80.308786][ T5849] Bluetooth: hci4: command tx timeout [ 80.315491][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.330749][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.341923][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.375555][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.394233][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.411307][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.422417][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.435155][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.446754][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.457153][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.468899][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.492220][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.523117][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.539518][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.561225][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.570498][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.633845][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.645829][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.667548][ T5929] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 80.676615][ T5928] ip6t_rpfilter: unknown options [ 80.733207][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.749768][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.892578][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.914980][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.963993][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.990424][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.082881][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.120888][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.197416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.210209][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.597056][ T5962] Zero length message leads to an empty skb [ 81.805076][ T5970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 81.917715][ T5970] geneve2: entered promiscuous mode [ 81.942169][ T5970] geneve2: entered allmulticast mode [ 82.086520][ T5976] netlink: 'syz.2.13': attribute type 11 has an invalid length. [ 82.304073][ T5849] Bluetooth: hci1: command tx timeout [ 82.304140][ T5843] Bluetooth: hci3: command tx timeout [ 82.310221][ T5840] Bluetooth: hci0: command tx timeout [ 82.384117][ T5849] Bluetooth: hci4: command tx timeout [ 82.389600][ T5849] Bluetooth: hci2: command tx timeout [ 82.461060][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.489915][ T5982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.490158][ T5984] syz.0.17 uses old SIOCAX25GETINFO [ 82.667291][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 82.717074][ T5995] netlink: 48 bytes leftover after parsing attributes in process `syz.4.21'. [ 82.929194][ T6003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.929866][ T6004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.013046][ T29] audit: type=1800 audit(1738910418.065:2): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="blkio.bfq.io_wait_time" dev="tmpfs" ino=43 res=0 errno=0 [ 83.026378][ T6008] netlink: 'syz.2.26': attribute type 2 has an invalid length. [ 83.373287][ T6028] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.376012][ T6030] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 83.401996][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 83.474252][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 83.787496][ T6046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.796065][ T6041] lo: entered promiscuous mode [ 83.804375][ T6041] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 83.812026][ T6041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.994166][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'. [ 84.003107][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 84.023825][ T6055] Unsupported ieee802154 address type: 0 [ 84.050991][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'. [ 84.074933][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 84.362636][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'. [ 84.426558][ T6081] sctp: [Deprecated]: syz.4.45 (pid 6081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.426558][ T6081] Use struct sctp_sack_info instead [ 84.491503][ T6080] sctp: [Deprecated]: syz.4.45 (pid 6080) Use of int in max_burst socket option. [ 84.491503][ T6080] Use struct sctp_assoc_value instead [ 84.615363][ T6074] veth1_macvtap: left promiscuous mode [ 84.640238][ T6078] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 84.650652][ T6078] netlink: 'syz.1.46': attribute type 3 has an invalid length. [ 84.662258][ T6078] NCSI netlink: No device for ifindex 813332851 [ 86.034412][ T6102] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 86.121918][ T6106] Illegal XDP return value 4294945693 on prog (id 8) dev N/A, expect packet loss! [ 86.260754][ T6111] netlink: 'syz.0.53': attribute type 11 has an invalid length. [ 86.952195][ T6144] netlink: 'syz.4.64': attribute type 11 has an invalid length. [ 87.008955][ T6149] __nla_validate_parse: 5 callbacks suppressed [ 87.008979][ T6149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.65'. [ 87.207705][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 87.455724][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 88.109400][ T6190] netlink: 'syz.0.78': attribute type 5 has an invalid length. [ 88.266631][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 88.544294][ T6217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'. [ 88.768936][ T6228] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 88.782502][ T6228] netlink: 224 bytes leftover after parsing attributes in process `syz.4.87'. [ 88.923697][ T6233] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.90'. [ 88.963776][ T6233] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 89.298404][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 89.312609][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 89.583555][ T6262] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 89.606957][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.618440][ T6263] netlink: 204 bytes leftover after parsing attributes in process `syz.3.97'. [ 89.984040][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.281988][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.323872][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.360824][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.377900][ T6297] x_tables: duplicate underflow at hook 3 [ 90.411871][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.426460][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.439079][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.452484][ T6288] syz.4.103 (6288) used greatest stack depth: 18360 bytes left [ 91.027771][ T6320] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 91.033927][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.515431][ T6345] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 91.584377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.769720][ T6356] tipc: Started in network mode [ 91.799412][ T6356] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 91.855071][ T6356] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 91.881632][ T6356] tipc: Enabled bearer , priority 10 [ 91.898674][ T6358] netlink: 'syz.4.122': attribute type 10 has an invalid length. [ 91.948149][ T6358] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.235540][ T25] cfg80211: failed to load regulatory.db [ 92.334969][ T6383] __nla_validate_parse: 6 callbacks suppressed [ 92.334989][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 92.459766][ T6391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.855940][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 92.875407][ T29] audit: type=1800 audit(1738910427.925:3): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="memory.events" dev="tmpfs" ino=158 res=0 errno=0 [ 92.898493][ T5888] tipc: Node number set to 1 [ 92.980567][ T6411] netlink: 'syz.4.135': attribute type 10 has an invalid length. [ 93.112194][ T6411] team0: Port device netdevsim0 added [ 93.302300][ T6425] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 93.885362][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.142'. [ 93.937296][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 94.153147][ T5921] net_ratelimit: 4 callbacks suppressed [ 94.153171][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.167056][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.357319][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 94.427863][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 94.441497][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 94.525675][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 94.784828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.797231][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.065462][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 95.183767][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.195773][ T6520] Bluetooth: MGMT ver 1.23 [ 95.402122][ T6528] netlink: 84 bytes leftover after parsing attributes in process `syz.0.157'. [ 95.433750][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.234451][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.301110][ T6563] vlan2: entered promiscuous mode [ 96.572117][ T6573] netlink: 'syz.2.169': attribute type 3 has an invalid length. [ 96.616744][ T6575] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 96.816791][ T6584] ªªªªªª: renamed from vlan0 (while UP) [ 96.869136][ T6586] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 96.878777][ T6586] vlan0: entered allmulticast mode [ 96.887633][ T6586] veth0_vlan: entered allmulticast mode [ 96.909228][ T6586] team0: Port device vlan0 added [ 97.145226][ T6594] x_tables: duplicate underflow at hook 3 [ 97.183884][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.263891][ T5849] Bluetooth: hci0: command tx timeout [ 97.275785][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.452845][ T6608] netlink: 'syz.3.179': attribute type 49 has an invalid length. [ 97.692257][ T6614] IPv6: sit1: Disabled Multicast RS [ 97.750436][ T6614] delete_channel: no stack [ 97.973126][ T6615] "syz.2.181" (6615) uses obsolete ecb(arc4) skcipher [ 98.083164][ T6626] __nla_validate_parse: 3 callbacks suppressed [ 98.083185][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 98.322613][ T6637] nbd: must specify a device to reconfigure [ 98.340698][ T6637] x_tables: unsorted entry at hook 2 [ 98.394717][ T6637] xt_limit: Overflow, try lower: 0/0 [ 98.528236][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 98.721212][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 98.728626][ T6646] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.140045][ T6663] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.196'. [ 99.152463][ T6662] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.196'. [ 99.208153][ T6662] sch_fq: defrate 0 ignored. [ 99.344146][ T5921] net_ratelimit: 4 callbacks suppressed [ 99.344166][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.596305][ T6678] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 99.650170][ T6678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.723751][ T6683] bond1: (slave gretap1): making interface the new active one [ 99.732520][ T6683] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.969067][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 100.015142][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 100.234016][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.383734][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.503883][ T6717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.721214][ T6722] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.977379][ T5889] IPVS: starting estimator thread 0... [ 100.989405][ T6725] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 101.114260][ T6731] IPVS: using max 19 ests per chain, 45600 per kthread [ 101.294503][ T6743] netlink: 'syz.1.217': attribute type 14 has an invalid length. [ 101.297941][ T6741] netlink: 'syz.2.218': attribute type 3 has an invalid length. [ 101.334857][ T6741] netlink: 224 bytes leftover after parsing attributes in process `syz.2.218'. [ 101.356726][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.217'. [ 101.395109][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.413791][ T6744] batadv_slave_0: entered promiscuous mode [ 101.436912][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.540303][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 101.975062][ T6764] netlink: 'syz.2.226': attribute type 39 has an invalid length. [ 101.985568][ T6764] veth0_macvtap: left promiscuous mode [ 102.056746][ T6772] netlink: 'syz.2.226': attribute type 11 has an invalid length. [ 102.465722][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.212844][ T6814] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 103.236425][ T6816] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 103.264560][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.310156][ T6816] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 103.493116][ T6827] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 103.503704][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.819307][ T6846] trusted_key: syz.3.251 sent an empty control message without MSG_MORE. [ 104.098676][ T6856] __nla_validate_parse: 2 callbacks suppressed [ 104.098696][ T6856] netlink: 152 bytes leftover after parsing attributes in process `syz.4.254'. [ 104.384431][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.463718][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 104.553643][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.660064][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.668955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.688803][ T6869] can: request_module (can-proto-0) failed. [ 104.726114][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.747301][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.761469][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.770574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.917068][ T6880] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 104.963534][ T6880] netlink: 'syz.3.262': attribute type 2 has an invalid length. [ 105.025145][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.093782][ T6889] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.140695][ T6888] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.192856][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'. [ 105.281349][ T6897] netlink: 'syz.1.266': attribute type 4 has an invalid length. [ 105.450824][ T6904] netlink: 'syz.2.269': attribute type 20 has an invalid length. [ 105.561921][ T6907] netlink: 76 bytes leftover after parsing attributes in process `syz.2.269'. [ 105.583670][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.685085][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 105.711023][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.745674][ T6913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.815850][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.848492][ T6913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.971844][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.273'. [ 106.028847][ T6924] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 106.037244][ T6919] netlink: 57553 bytes leftover after parsing attributes in process `syz.3.273'. [ 106.059472][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 106.142319][ T6931] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 106.154531][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 106.481261][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 106.546712][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 106.555802][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 108.504041][ T7021] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20003 [ 108.524751][ T7020] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20003 [ 109.657748][ T7074] veth0: entered promiscuous mode [ 109.744135][ T25] net_ratelimit: 9 callbacks suppressed [ 109.744156][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.769403][ T7079] netlink: 'syz.3.315': attribute type 2 has an invalid length. [ 109.789432][ T7074] veth0: left promiscuous mode [ 109.911667][ T7081] __nla_validate_parse: 1 callbacks suppressed [ 109.911688][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 109.951736][ T7081] bridge_slave_1: left allmulticast mode [ 109.961586][ T7081] bridge_slave_1: left promiscuous mode [ 109.979790][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.001779][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 110.011936][ T7081] bridge_slave_0: left allmulticast mode [ 110.073538][ T7081] bridge_slave_0: left promiscuous mode [ 110.103765][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.143954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.155748][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.480099][ T7102] netlink: 52 bytes leftover after parsing attributes in process `syz.3.319'. [ 110.579538][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.319'. [ 110.792099][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.824017][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.145440][ T7164] ip6gre1: entered allmulticast mode [ 112.708793][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.716970][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 112.862103][ T7180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.875356][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.929012][ T7180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.956058][ T7180] bond0 (unregistering): Released all slaves [ 112.983980][ T7181] bond0: entered promiscuous mode [ 112.989054][ T7181] bond_slave_0: entered promiscuous mode [ 112.995409][ T7181] bond_slave_1: entered promiscuous mode [ 113.190138][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.355393][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.566676][ T7220] sctp: [Deprecated]: syz.1.356 (pid 7220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.566676][ T7220] Use struct sctp_sack_info instead [ 113.607596][ T7222] sctp: [Deprecated]: syz.1.356 (pid 7222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.607596][ T7222] Use struct sctp_sack_info instead [ 113.904916][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.974295][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.363'. [ 114.085825][ T7248] bridge0: port 3(vlan2) entered blocking state [ 114.092823][ T7248] bridge0: port 3(vlan2) entered disabled state [ 114.127268][ T7248] vlan2: entered allmulticast mode [ 114.173262][ T7248] vlan2: left allmulticast mode [ 114.427569][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 114.520494][ T7279] bond0: entered promiscuous mode [ 114.554766][ T7279] bond_slave_0: entered promiscuous mode [ 114.573188][ T7279] bond_slave_1: entered promiscuous mode [ 114.887161][ T7299] netlink: 'syz.1.379': attribute type 16 has an invalid length. [ 114.930500][ T7299] netlink: 'syz.1.379': attribute type 17 has an invalid length. [ 114.943955][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.162977][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 115.425532][ T7323] netlink: 44 bytes leftover after parsing attributes in process `syz.4.387'. [ 115.456251][ T7323] netlink: 43 bytes leftover after parsing attributes in process `syz.4.387'. [ 115.465748][ T7324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 115.471091][ T7323] netlink: 'syz.4.387': attribute type 6 has an invalid length. [ 115.508836][ T7323] netlink: 'syz.4.387': attribute type 5 has an invalid length. [ 115.534692][ T7323] netlink: 43 bytes leftover after parsing attributes in process `syz.4.387'. [ 115.959645][ T7349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.970025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.986492][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.061117][ T7354] veth1_macvtap: left promiscuous mode [ 116.149433][ T7359] xt_hashlimit: max too large, truncated to 1048576 [ 116.192786][ T7359] No such timeout policy "syz1" [ 116.201854][ T7360] No such timeout policy "syz1" [ 116.253726][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.340213][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.399'. [ 116.393195][ T7366] netlink: 156 bytes leftover after parsing attributes in process `syz.4.399'. [ 116.532406][ T7375] SET target dimension over the limit! [ 116.791891][ T7381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.991518][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.409'. [ 117.092886][ T7400] vxcan1: tx address claim with dlc 4 [ 117.206172][ T7406] netlink: 'syz.2.413': attribute type 9 has an invalid length. [ 117.480802][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.417'. [ 117.604117][ T7425] netlink: 32 bytes leftover after parsing attributes in process `syz.3.419'. [ 117.615051][ T7425] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 117.638734][ T7422] IPVS: length: 80 != 8 [ 117.739272][ T7431] xt_l2tp: v2 doesn't support IP mode [ 117.891764][ T7436] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 117.920982][ T7436] netlink: 'syz.0.424': attribute type 2 has an invalid length. [ 117.947227][ T7441] sctp: [Deprecated]: syz.1.427 (pid 7441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.947227][ T7441] Use struct sctp_sack_info instead [ 118.021364][ T7436] IPv6: sit1: Disabled Multicast RS [ 118.108573][ T7446] openvswitch: netlink: Flow key attr not present in new flow. [ 118.637768][ T7474] macvlan2: entered allmulticast mode [ 118.648587][ T7474] veth1_vlan: entered allmulticast mode [ 118.670557][ T7474] veth1_vlan: left allmulticast mode [ 118.732677][ T7479] veth0_to_hsr: invalid flags given to default FDB implementation [ 119.397777][ T7498] IPVS: Unknown mcast interface: syzkaller0 [ 119.511543][ T7513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.821733][ T7529] raw_sendmsg: syz.4.453 forgot to set AF_INET. Fix it! [ 120.004979][ T7536] ipip0: entered allmulticast mode [ 120.079699][ T5209] udevd[5209]: worker [5856] terminated by signal 33 (Unknown signal 33) [ 120.156076][ T5209] udevd[5209]: worker [5856] failed while handling '/devices/virtual/block/loop4' [ 120.162958][ T7547] netlink: zone id is out of range [ 120.184674][ T7547] netlink: del zone limit has 8 unknown bytes [ 120.357071][ T7552] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 120.614825][ T7571] __nla_validate_parse: 6 callbacks suppressed [ 120.614846][ T7571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 120.940919][ T7583] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 121.091635][ T7586] [H: renamed from veth0_vlan (while UP) [ 121.329990][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 121.530688][ T7588] team0 (unregistering): Port device team_slave_0 removed [ 121.563189][ T7588] team0 (unregistering): Port device team_slave_1 removed [ 121.572482][ T7609] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 121.624203][ T5209] udevd[5209]: worker [5857] terminated by signal 33 (Unknown signal 33) [ 121.633066][ T5209] udevd[5209]: worker [5857] failed while handling '/devices/virtual/net/lapb7' [ 121.848000][ T7613] netlink: 84 bytes leftover after parsing attributes in process `syz.4.475'. [ 122.167539][ T7632] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.285784][ T7633] xt_ecn: cannot match TCP bits for non-tcp packets [ 122.304665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.310823][ T7633] xt_ecn: cannot match TCP bits for non-tcp packets [ 122.325026][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 122.354434][ T7646] netlink: 'syz.4.482': attribute type 4 has an invalid length. [ 122.618974][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.486'. [ 122.628300][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.486'. [ 122.662492][ T7652] gretap0: entered promiscuous mode [ 122.675930][ T7652] gretap0: left promiscuous mode [ 122.685530][ T7655] netlink: 'syz.2.487': attribute type 33 has an invalid length. [ 122.704766][ T7655] netlink: 152 bytes leftover after parsing attributes in process `syz.2.487'. [ 122.793155][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 123.286603][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 123.304313][ T7679] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.421520][ T7679] tipc: Enabled bearer , priority 0 [ 123.494090][ T7678] tipc: Resetting bearer [ 123.532083][ T7696] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 123.585498][ T7704] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 124.974510][ T7678] tipc: Disabling bearer [ 124.991251][ T7698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.146530][ T7714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.503'. [ 125.299973][ T7718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.393666][ T7724] netlink: 'syz.4.507': attribute type 10 has an invalid length. [ 125.465248][ T7730] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 125.494159][ T7731] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 125.600312][ T7734] bond2: entered promiscuous mode [ 125.644059][ T7734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.999369][ T7755] __nla_validate_parse: 4 callbacks suppressed [ 125.999390][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 126.183244][ T7762] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 126.262056][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.522'. [ 126.299443][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.522'. [ 126.348965][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.522'. [ 126.386134][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 126.403679][ T7774] tipc: Started in network mode [ 126.410240][ T7774] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 126.441201][ T7765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.446338][ T7774] tipc: Enabled bearer , priority 0 [ 126.687154][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'. [ 126.735738][ T7790] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 126.761203][ T7793] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.527'. [ 126.761949][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 126.802780][ T7793] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 126.820082][ T7794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'. [ 126.834336][ T7792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'. [ 127.563608][ T5889] tipc: Node number set to 10136234 [ 127.722292][ T7849] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 127.973104][ T7860] sctp: [Deprecated]: syz.0.550 (pid 7860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.973104][ T7860] Use struct sctp_sack_info instead [ 128.040269][ T7863] IPv6: sit1: Disabled Multicast RS [ 128.157278][ T7869] syzkaller1: entered promiscuous mode [ 128.170925][ T7869] syzkaller1: entered allmulticast mode [ 128.179094][ T7867] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 128.186677][ T5921] IPVS: starting estimator thread 0... [ 128.283583][ T7871] IPVS: using max 18 ests per chain, 43200 per kthread [ 129.786137][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.926516][ T7950] bridge_slave_1 (unregistering): left allmulticast mode [ 129.934291][ T7950] bridge_slave_1 (unregistering): left promiscuous mode [ 129.944894][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.181379][ T7977] tipc: Enabling of bearer rejected, already enabled [ 131.121994][ T8007] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 131.131732][ T8007] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 131.151279][ T8012] __nla_validate_parse: 22 callbacks suppressed [ 131.151299][ T8012] netlink: 96 bytes leftover after parsing attributes in process `syz.3.592'. [ 131.406068][ T8028] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 131.430033][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 131.464123][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 131.573275][ T8035] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 132.509485][ T8074] x_tables: duplicate underflow at hook 3 [ 132.695776][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 132.747921][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.618'. [ 132.963196][ T8093] netlink: 72 bytes leftover after parsing attributes in process `syz.2.620'. [ 132.973351][ T8096] netlink: 76 bytes leftover after parsing attributes in process `syz.3.621'. [ 133.000626][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 133.044604][ T8099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.113292][ T8099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.135335][ T8099] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 133.148139][ T8099] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 133.189329][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.385925][ T8108] netlink: 5692 bytes leftover after parsing attributes in process `syz.4.625'. [ 133.470969][ T8117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.679931][ T8137] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 133.711849][ T8134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.720907][ T8134] bond0: (slave bond1): Enslaving as an active interface with an up link [ 133.722846][ T8137] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 133.762900][ T8142] bridge0: port 2(ipvlan2) entered blocking state [ 133.769685][ T8142] bridge0: port 2(ipvlan2) entered disabled state [ 133.776704][ T8142] ipvlan2: entered allmulticast mode [ 133.782150][ T8142] bridge0: entered allmulticast mode [ 133.803059][ T8142] ipvlan2: left allmulticast mode [ 133.808323][ T8142] bridge0: left allmulticast mode [ 134.085662][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 134.267572][ T8166] netlink: 'syz.2.637': attribute type 10 has an invalid length. [ 134.314240][ T8166] vlan0: entered allmulticast mode [ 134.363207][ T8166] veth0_vlan: entered allmulticast mode [ 134.439705][ T8166] team0: Port device vlan0 added [ 134.700719][ T8185] netlink: 'syz.3.643': attribute type 2 has an invalid length. [ 134.817782][ T8190] bond1: entered promiscuous mode [ 134.825685][ T8190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.112839][ T8198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.121105][ T8198] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 135.137370][ T8198] bond1: (slave vti0): Error -95 calling set_mac_address [ 135.392832][ T8217] netlink: 'syz.0.652': attribute type 7 has an invalid length. [ 135.411089][ T8215] netlink: 'syz.3.650': attribute type 2 has an invalid length. [ 135.462863][ T8215] "syz.3.650" (8215) uses obsolete ecb(arc4) skcipher [ 135.489647][ T8218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.733656][ T8228] syzkaller1: entered promiscuous mode [ 135.743731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.757882][ T8228] syzkaller1: entered allmulticast mode [ 135.898697][ T8244] netlink: 'syz.1.660': attribute type 3 has an invalid length. [ 135.948299][ T8246] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.379987][ T8271] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 136.491322][ T8279] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 136.541613][ T8281] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 136.674514][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.704708][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.804536][ T8293] __nla_validate_parse: 12 callbacks suppressed [ 136.804557][ T8293] netlink: 71 bytes leftover after parsing attributes in process `syz.0.674'. [ 137.101044][ T8311] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 137.129464][ T8311] netlink: 209800 bytes leftover after parsing attributes in process `syz.3.678'. [ 137.150903][ T8314] openvswitch: netlink: IPv6 tunnel dst address is zero [ 137.513660][ T8332] netlink: 56 bytes leftover after parsing attributes in process `syz.2.683'. [ 137.559012][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 137.654132][ T8341] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.664097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.000848][ T8355] ax25_connect(): syz.2.690 uses autobind, please contact jreuter@yaina.de [ 138.584173][ T8403] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.838834][ T8409] : entered promiscuous mode [ 138.923928][ T8414] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.955397][ T8414] : entered promiscuous mode [ 138.983977][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 139.162479][ T8425] veth0_macvtap: left promiscuous mode [ 139.210905][ T8425] macvtap0: entered promiscuous mode [ 139.235559][ T8425] macvtap0: entered allmulticast mode [ 139.421472][ T8435] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 139.544440][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 139.628686][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 139.639437][ T8453] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.712'. [ 139.662737][ T8453] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.769425][ T8456] bond0: (slave wlan1): Releasing backup interface [ 139.873047][ T8453] netlink: 41 bytes leftover after parsing attributes in process `syz.1.712'. [ 139.975421][ T8464] dvmrp0: entered allmulticast mode [ 140.126259][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 140.290620][ T8482] netdevsim netdevsim1: Direct firmware load for . [ 140.290620][ T8482] failed with error -2 [ 140.340624][ T8482] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 140.340624][ T8482] [ 140.430489][ T8492] netlink: 'syz.3.722': attribute type 4 has an invalid length. [ 140.472583][ T8492] netlink: 'syz.3.722': attribute type 4 has an invalid length. [ 141.384127][ T8546] unknown channel width for channel at 909000KHz? [ 141.410905][ T8546] unknown channel width for channel at 909000KHz? [ 141.443826][ T8552] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 141.463617][ T8546] unknown channel width for channel at 909000KHz? [ 141.850737][ T8568] __nla_validate_parse: 5 callbacks suppressed [ 141.850758][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 142.192117][ T8589] netlink: 224 bytes leftover after parsing attributes in process `syz.0.752'. [ 142.516906][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 142.779210][ T8622] netlink: 'syz.2.758': attribute type 19 has an invalid length. [ 142.896518][ T8624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.760'. [ 142.954254][ T8624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.760'. [ 143.137116][ T8641] netlink: 'syz.4.764': attribute type 10 has an invalid length. [ 143.176589][ T8641] syz_tun: entered promiscuous mode [ 143.207925][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 143.287778][ T8641] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 143.534397][ T8659] tipc: Can't bind to reserved service type 0 [ 144.059590][ T8682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.777'. [ 144.071828][ T8684] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 144.150586][ T8682] netlink: 68 bytes leftover after parsing attributes in process `syz.2.777'. [ 144.568291][ T8701] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.639216][ T8699] xt_CT: No such helper "syz1" [ 144.687471][ T8704] x_tables: duplicate underflow at hook 1 [ 145.437613][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 145.454697][ T8741] netlink: 'syz.1.796': attribute type 2 has an invalid length. [ 145.462625][ T8741] netlink: 'syz.1.796': attribute type 1 has an invalid length. [ 145.472853][ T8741] netlink: 'syz.1.796': attribute type 2 has an invalid length. [ 145.509992][ T8741] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 145.552798][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.798'. [ 146.006601][ T8770] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 146.017353][ T8771] bond0: entered promiscuous mode [ 146.036273][ T8771] batadv0: entered promiscuous mode [ 146.045635][ T8771] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 146.060637][ T8771] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 146.448705][ T8792] ipvlan2: entered allmulticast mode [ 146.507324][ T8795] netlink: 'syz.4.812': attribute type 16 has an invalid length. [ 146.528009][ T8795] netlink: 'syz.4.812': attribute type 17 has an invalid length. [ 146.635904][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.884089][ T8804] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 146.891861][ T8804] netlink: 'syz.1.815': attribute type 4 has an invalid length. [ 146.901800][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.913676][ T8804] __nla_validate_parse: 56 callbacks suppressed [ 146.913695][ T8804] netlink: 188 bytes leftover after parsing attributes in process `syz.1.815'. [ 146.936279][ T8804] NCSI netlink: No device for ifindex 458760 [ 147.207771][ T8833] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 147.227615][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.240766][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.257602][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.273016][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.293632][ T8833] geneve0: entered promiscuous mode [ 147.372102][ T8833] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 147.423983][ T8833] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 147.425749][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.448905][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.512351][ T8833] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 147.543150][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.558551][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 147.570731][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 148.486462][ T8895] netlink: 'syz.4.837': attribute type 11 has an invalid length. [ 148.611075][ T8897] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 148.612061][ T8896] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 148.837875][ T8907] netlink: 'syz.4.839': attribute type 11 has an invalid length. [ 149.910556][ T8959] openvswitch: netlink: Message has 91 unknown bytes. [ 150.551023][ T8997] validate_nla: 63 callbacks suppressed [ 150.551043][ T8997] netlink: 'syz.0.865': attribute type 33 has an invalid length. [ 150.876824][ T9017] batadv_slave_1: entered promiscuous mode [ 150.883134][ T9017] batadv_slave_1: entered allmulticast mode [ 151.123142][ T9032] ipt_REJECT: TCP_RESET invalid for non-tcp [ 151.157253][ T9029] batadv0: mtu less than device minimum [ 151.684425][ T9019] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 151.842721][ T9070] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 151.864228][ T9070] netlink: 'syz.3.888': attribute type 2 has an invalid length. [ 152.047766][ T9080] __nla_validate_parse: 197 callbacks suppressed [ 152.047788][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'. [ 152.207368][ T9089] bridee_slave_0: renamed from lo (while UP) [ 152.525852][ T9108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 152.549524][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 152.776259][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 152.801857][ T9124] tc_dump_action: action bad kind [ 153.010031][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.053729][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.072792][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.220759][ T9133] ================================================================== [ 153.228895][ T9133] BUG: KASAN: slab-use-after-free in sk_filter_trim_cap+0x270/0xa80 [ 153.237036][ T9133] Read of size 8 at addr ffff88807c538178 by task syz.2.904/9133 [ 153.244789][ T9133] [ 153.247157][ T9133] CPU: 0 UID: 0 PID: 9133 Comm: syz.2.904 Not tainted 6.13.0-syzkaller-09724-g2a64c96356c8 #0 [ 153.247182][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.247199][ T9133] Call Trace: [ 153.247207][ T9133] [ 153.247215][ T9133] dump_stack_lvl+0x241/0x360 [ 153.247243][ T9133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.247264][ T9133] ? __pfx__printk+0x10/0x10 [ 153.247296][ T9133] ? _printk+0xd5/0x120 [ 153.247326][ T9133] ? __virt_addr_valid+0x183/0x530 [ 153.247357][ T9133] ? __virt_addr_valid+0x183/0x530 [ 153.247388][ T9133] print_report+0x169/0x550 [ 153.247419][ T9133] ? __virt_addr_valid+0x183/0x530 [ 153.247448][ T9133] ? __virt_addr_valid+0x183/0x530 [ 153.247477][ T9133] ? __virt_addr_valid+0x45f/0x530 [ 153.247518][ T9133] ? __phys_addr+0xba/0x170 [ 153.247546][ T9133] ? sk_filter_trim_cap+0x270/0xa80 [ 153.247575][ T9133] kasan_report+0x143/0x180 [ 153.247603][ T9133] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 153.247624][ T9133] ? sk_filter_trim_cap+0x270/0xa80 [ 153.247673][ T9133] ? sk_filter_trim_cap+0x1b3/0xa80 [ 153.247700][ T9133] sk_filter_trim_cap+0x270/0xa80 [ 153.247732][ T9133] ? __pfx___alloc_skb+0x10/0x10 [ 153.247759][ T9133] ? __alloc_skb+0x28f/0x440 [ 153.247786][ T9133] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 153.247815][ T9133] ? read_tsc+0x9/0x20 [ 153.247837][ T9133] ? ktime_get_with_offset+0x24b/0x2a0 [ 153.247860][ T9133] ? skb_push+0x97/0x100 [ 153.247884][ T9133] sock_queue_rcv_skb_reason+0x28/0xf0 [ 153.247922][ T9133] mgmt_cmd_status+0x28d/0x4d0 [ 153.247949][ T9133] cmd_complete_rsp+0x114/0x180 [ 153.247977][ T9133] mgmt_pending_foreach+0xd1/0x130 [ 153.247999][ T9133] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 153.248027][ T9133] __mgmt_power_off+0x183/0x430 [ 153.248054][ T9133] ? __pfx___mgmt_power_off+0x10/0x10 [ 153.248085][ T9133] ? __mutex_trylock_common+0x183/0x2e0 [ 153.248106][ T9133] ? __pfx___might_resched+0x10/0x10 [ 153.248131][ T9133] ? __pfx___mutex_trylock_common+0x10/0x10 [ 153.248154][ T9133] ? rcu_is_watching+0x15/0xb0 [ 153.248173][ T9133] ? trace_contention_end+0x3c/0x120 [ 153.248193][ T9133] ? __mutex_lock+0x397/0x1010 [ 153.248223][ T9133] ? __mutex_unlock_slowpath+0x227/0x800 [ 153.248251][ T9133] ? hci_dev_close_sync+0x5c8/0x11c0 [ 153.248272][ T9133] ? __pfx___mutex_lock+0x10/0x10 [ 153.248298][ T9133] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.248327][ T9133] ? lockdep_hardirqs_on+0x99/0x150 [ 153.248351][ T9133] ? _raw_spin_unlock_irq+0x2e/0x50 [ 153.248372][ T9133] ? drain_workqueue+0x2d3/0x3a0 [ 153.248399][ T9133] ? hci_discovery_set_state+0x57/0x180 [ 153.248425][ T9133] hci_dev_close_sync+0x6c4/0x11c0 [ 153.248450][ T9133] hci_dev_close+0x112/0x210 [ 153.248477][ T9133] sock_do_ioctl+0x158/0x460 [ 153.248502][ T9133] ? __pfx_sock_do_ioctl+0x10/0x10 [ 153.248533][ T9133] sock_ioctl+0x626/0x8e0 [ 153.248556][ T9133] ? __pfx_sock_ioctl+0x10/0x10 [ 153.248577][ T9133] ? __fget_files+0x2a/0x410 [ 153.248600][ T9133] ? __fget_files+0x2a/0x410 [ 153.248622][ T9133] ? __pfx_sock_ioctl+0x10/0x10 [ 153.248644][ T9133] __se_sys_ioctl+0xf5/0x170 [ 153.248672][ T9133] do_syscall_64+0xf3/0x230 [ 153.248698][ T9133] ? clear_bhb_loop+0x35/0x90 [ 153.248729][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.248757][ T9133] RIP: 0033:0x7fcac0d8cde9 [ 153.248781][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.248798][ T9133] RSP: 002b:00007fcac1b84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.248828][ T9133] RAX: ffffffffffffffda RBX: 00007fcac0fa5fa0 RCX: 00007fcac0d8cde9 [ 153.248843][ T9133] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 153.248855][ T9133] RBP: 00007fcac0e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.248868][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.248879][ T9133] R13: 0000000000000000 R14: 00007fcac0fa5fa0 R15: 00007ffc3d52b508 [ 153.248908][ T9133] [ 153.248915][ T9133] [ 153.638940][ T9133] Allocated by task 6519: [ 153.643295][ T9133] kasan_save_track+0x3f/0x80 [ 153.648015][ T9133] __kasan_kmalloc+0x98/0xb0 [ 153.652723][ T9133] __kmalloc_noprof+0x285/0x4c0 [ 153.657596][ T9133] sk_prot_alloc+0xe0/0x210 [ 153.662138][ T9133] sk_alloc+0x38/0x370 [ 153.666237][ T9133] bt_sock_alloc+0x3c/0x340 [ 153.670759][ T9133] hci_sock_create+0xa1/0x190 [ 153.675461][ T9133] bt_sock_create+0x161/0x230 [ 153.680166][ T9133] __sock_create+0x4c0/0xa30 [ 153.684828][ T9133] __sys_socket+0x150/0x3c0 [ 153.689369][ T9133] __x64_sys_socket+0x7a/0x90 [ 153.694082][ T9133] do_syscall_64+0xf3/0x230 [ 153.698612][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.704933][ T9133] [ 153.707272][ T9133] Freed by task 9134: [ 153.711260][ T9133] kasan_save_track+0x3f/0x80 [ 153.715971][ T9133] kasan_save_free_info+0x40/0x50 [ 153.721120][ T9133] __kasan_slab_free+0x59/0x70 [ 153.725924][ T9133] kfree+0x196/0x430 [ 153.729842][ T9133] __sk_destruct+0x479/0x5f0 [ 153.734476][ T9133] mgmt_pending_remove+0x13e/0x1a0 [ 153.739621][ T9133] mgmt_pending_foreach+0xd1/0x130 [ 153.744768][ T9133] mgmt_index_removed+0x133/0x390 [ 153.749840][ T9133] hci_sock_bind+0xcce/0x1150 [ 153.754552][ T9133] __sys_bind+0x1e4/0x290 [ 153.758906][ T9133] __x64_sys_bind+0x7a/0x90 [ 153.763435][ T9133] do_syscall_64+0xf3/0x230 [ 153.767977][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.773904][ T9133] [ 153.776246][ T9133] The buggy address belongs to the object at ffff88807c538000 [ 153.776246][ T9133] which belongs to the cache kmalloc-2k of size 2048 [ 153.790327][ T9133] The buggy address is located 376 bytes inside of [ 153.790327][ T9133] freed 2048-byte region [ffff88807c538000, ffff88807c538800) [ 153.804242][ T9133] [ 153.806590][ T9133] The buggy address belongs to the physical page: [ 153.813034][ T9133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c539000 pfn:0x7c538 [ 153.823136][ T9133] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.831840][ T9133] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 153.840399][ T9133] page_type: f5(slab) [ 153.844403][ T9133] raw: 00fff00000000240 ffff88801ac42000 ffffea0001879c10 ffffea000084b210 [ 153.853013][ T9133] raw: ffff88807c539000 0000000000080004 00000000f5000000 0000000000000000 [ 153.861622][ T9133] head: 00fff00000000240 ffff88801ac42000 ffffea0001879c10 ffffea000084b210 [ 153.870324][ T9133] head: ffff88807c539000 0000000000080004 00000000f5000000 0000000000000000 [ 153.879027][ T9133] head: 00fff00000000003 ffffea0001f14e01 ffffffffffffffff 0000000000000000 [ 153.887737][ T9133] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 153.896428][ T9133] page dumped because: kasan: bad access detected [ 153.902876][ T9133] page_owner tracks the page as allocated [ 153.908607][ T9133] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3487, tgid 3487 (kworker/u8:9), ts 78506338780, free_ts 78499788239 [ 153.929825][ T9133] post_alloc_hook+0x1f4/0x240 [ 153.934643][ T9133] get_page_from_freelist+0x365c/0x37a0 [ 153.940231][ T9133] __alloc_frozen_pages_noprof+0x292/0x710 [ 153.946080][ T9133] alloc_pages_mpol+0x311/0x660 [ 153.950958][ T9133] allocate_slab+0x8f/0x3a0 [ 153.955491][ T9133] ___slab_alloc+0xc27/0x14a0 [ 153.960197][ T9133] __slab_alloc+0x58/0xa0 [ 153.964552][ T9133] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 153.970992][ T9133] kmalloc_reserve+0x111/0x2a0 [ 153.975795][ T9133] pskb_expand_head+0x1f0/0x1380 [ 153.978350][ T9141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.980754][ T9133] netlink_trim+0x1d6/0x2e0 [ 153.980787][ T9133] netlink_broadcast_filtered+0x76/0x12a0 [ 153.999899][ T9133] nlmsg_notify+0xfb/0x1c0 [ 154.004360][ T9133] netdev_state_change+0x139/0x1a0 [ 154.009512][ T9133] linkwatch_do_dev+0x112/0x170 [ 154.014412][ T9133] __linkwatch_run_queue+0x44f/0x6c0 [ 154.019768][ T9133] page last free pid 5910 tgid 5910 stack trace: [ 154.026109][ T9133] free_frozen_pages+0xe0d/0x10e0 [ 154.031170][ T9133] __slab_free+0x2c2/0x380 [ 154.035633][ T9133] qlist_free_all+0x9a/0x140 [ 154.040260][ T9133] kasan_quarantine_reduce+0x14f/0x170 [ 154.045762][ T9133] __kasan_slab_alloc+0x23/0x80 [ 154.050663][ T9133] kmem_cache_alloc_noprof+0x1d9/0x380 [ 154.056158][ T9133] getname_flags+0xb7/0x540 [ 154.060695][ T9133] do_sys_openat2+0xd2/0x1d0 [ 154.065318][ T9133] __x64_sys_openat+0x247/0x2a0 [ 154.070241][ T9133] do_syscall_64+0xf3/0x230 [ 154.074787][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.080738][ T9133] [ 154.083175][ T9133] Memory state around the buggy address: [ 154.088844][ T9133] ffff88807c538000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.096943][ T9133] ffff88807c538080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.105038][ T9133] >ffff88807c538100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.113142][ T9133] ^ [ 154.121159][ T9133] ffff88807c538180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.129258][ T9133] ffff88807c538200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.137391][ T9133] ================================================================== [ 154.181487][ T9133] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.188745][ T9133] CPU: 0 UID: 0 PID: 9133 Comm: syz.2.904 Not tainted 6.13.0-syzkaller-09724-g2a64c96356c8 #0 [ 154.199023][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.209124][ T9133] Call Trace: [ 154.212434][ T9133] [ 154.215397][ T9133] dump_stack_lvl+0x241/0x360 [ 154.220116][ T9133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.225358][ T9133] ? __pfx__printk+0x10/0x10 [ 154.230000][ T9133] ? preempt_schedule+0xe1/0xf0 [ 154.234935][ T9133] ? vscnprintf+0x5d/0x90 [ 154.239299][ T9133] panic+0x349/0x880 [ 154.243240][ T9133] ? check_panic_on_warn+0x21/0xb0 [ 154.248398][ T9133] ? __pfx_panic+0x10/0x10 [ 154.252884][ T9133] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 154.258907][ T9133] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 154.265283][ T9133] ? print_report+0x502/0x550 [ 154.270021][ T9133] check_panic_on_warn+0x86/0xb0 [ 154.275009][ T9133] ? sk_filter_trim_cap+0x270/0xa80 [ 154.280263][ T9133] end_report+0x77/0x160 [ 154.284641][ T9133] kasan_report+0x154/0x180 [ 154.289187][ T9133] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 154.294663][ T9133] ? sk_filter_trim_cap+0x270/0xa80 [ 154.299888][ T9133] ? sk_filter_trim_cap+0x1b3/0xa80 [ 154.305272][ T9133] sk_filter_trim_cap+0x270/0xa80 [ 154.310316][ T9133] ? __pfx___alloc_skb+0x10/0x10 [ 154.315272][ T9133] ? __alloc_skb+0x28f/0x440 [ 154.319875][ T9133] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 154.325435][ T9133] ? read_tsc+0x9/0x20 [ 154.329517][ T9133] ? ktime_get_with_offset+0x24b/0x2a0 [ 154.334994][ T9133] ? skb_push+0x97/0x100 [ 154.339250][ T9133] sock_queue_rcv_skb_reason+0x28/0xf0 [ 154.344894][ T9133] mgmt_cmd_status+0x28d/0x4d0 [ 154.349672][ T9133] cmd_complete_rsp+0x114/0x180 [ 154.354532][ T9133] mgmt_pending_foreach+0xd1/0x130 [ 154.359667][ T9133] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 154.365062][ T9133] __mgmt_power_off+0x183/0x430 [ 154.369960][ T9133] ? __pfx___mgmt_power_off+0x10/0x10 [ 154.375355][ T9133] ? __mutex_trylock_common+0x183/0x2e0 [ 154.380916][ T9133] ? __pfx___might_resched+0x10/0x10 [ 154.386225][ T9133] ? __pfx___mutex_trylock_common+0x10/0x10 [ 154.392246][ T9133] ? rcu_is_watching+0x15/0xb0 [ 154.397016][ T9133] ? trace_contention_end+0x3c/0x120 [ 154.402315][ T9133] ? __mutex_lock+0x397/0x1010 [ 154.407115][ T9133] ? __mutex_unlock_slowpath+0x227/0x800 [ 154.412847][ T9133] ? hci_dev_close_sync+0x5c8/0x11c0 [ 154.418141][ T9133] ? __pfx___mutex_lock+0x10/0x10 [ 154.423178][ T9133] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.429171][ T9133] ? lockdep_hardirqs_on+0x99/0x150 [ 154.434389][ T9133] ? _raw_spin_unlock_irq+0x2e/0x50 [ 154.439597][ T9133] ? drain_workqueue+0x2d3/0x3a0 [ 154.444546][ T9133] ? hci_discovery_set_state+0x57/0x180 [ 154.450188][ T9133] hci_dev_close_sync+0x6c4/0x11c0 [ 154.455309][ T9133] hci_dev_close+0x112/0x210 [ 154.459929][ T9133] sock_do_ioctl+0x158/0x460 [ 154.464533][ T9133] ? __pfx_sock_do_ioctl+0x10/0x10 [ 154.469654][ T9133] sock_ioctl+0x626/0x8e0 [ 154.473988][ T9133] ? __pfx_sock_ioctl+0x10/0x10 [ 154.478847][ T9133] ? __fget_files+0x2a/0x410 [ 154.483461][ T9133] ? __fget_files+0x2a/0x410 [ 154.488070][ T9133] ? __pfx_sock_ioctl+0x10/0x10 [ 154.492928][ T9133] __se_sys_ioctl+0xf5/0x170 [ 154.497530][ T9133] do_syscall_64+0xf3/0x230 [ 154.502039][ T9133] ? clear_bhb_loop+0x35/0x90 [ 154.506732][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.512638][ T9133] RIP: 0033:0x7fcac0d8cde9 [ 154.517060][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.536674][ T9133] RSP: 002b:00007fcac1b84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.545099][ T9133] RAX: ffffffffffffffda RBX: 00007fcac0fa5fa0 RCX: 00007fcac0d8cde9 [ 154.553076][ T9133] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 154.561054][ T9133] RBP: 00007fcac0e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.569028][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.577035][ T9133] R13: 0000000000000000 R14: 00007fcac0fa5fa0 R15: 00007ffc3d52b508 [ 154.585021][ T9133] [ 154.588386][ T9133] Kernel Offset: disabled [ 154.592722][ T9133] Rebooting in 86400 seconds..