last executing test programs: 10.743743842s ago: executing program 2 (id=3738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c00000440428011000100686d61289205e0c6c26b588100000000480002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10.719019549s ago: executing program 2 (id=3739): close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000032c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe40400000056bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630000000002232017810e743bdaf879946547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb50409fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4d8521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060fd2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3bca426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db00000000000001f915268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde0000000000000000000000000628a663ed417be6ff5b172cba4a1ec629a39ec253c087b1e9ce84e25b8717ae8581bf28c16a8bbda8d1c4b3d5b4ce7e147003e"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) listen(r1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000600030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x6) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000240)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', r7, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7d, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast1}}}}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000140)="6ce373a2368dc22bbba9b103b3ce65de", 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xffffffffffffffff}, 0x4000) recvfrom(r4, &(0x7f0000000340)=""/60, 0x3c, 0x101, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaa8aac4864ef7a30800490000b8240064000000879078ac1414bbb614140c8907efe000000d860600000000000000e44604210000"], 0x0) 8.525917861s ago: executing program 0 (id=3755): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000000140)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800f85227ef4029000000008000"/35, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800f85227ef4029000000008000"/35, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd29, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x14040001}, 0x800) accept4(r2, &(0x7f0000000280)=@isdn, &(0x7f0000000340)=0x80, 0x800) (async) accept4(r2, &(0x7f0000000280)=@isdn, &(0x7f0000000340)=0x80, 0x800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x7, &(0x7f0000001e00)=""/4088}, 0x90) 8.48322227s ago: executing program 3 (id=3756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="eb28925bea5dac856e2e244e2dc68118088588799334a932312e86cd119ab1389054e70fe8915cd60e254069fbbfddd089dbde9ec1d48f1737cae182b6f2c66b8e68107feb1a565b6e4ee7dec889a058f2caf23175b6731627011566b381b26e89d02f29af58ea765ef7628046b20c70e3fde637e282f6209b58a3ae", @ANYRESHEX=r1], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r9, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f0000000440)=@llc={0x1a, 0x0, 0x4, 0x7, 0xb, 0x5, @multicast}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)="9b938544b0e8d3ac357a46733a6be4ad6668fbb273f40d42a6dceca1f6d25d57ed5dfc66945bf074cef6d92d04500f26651c3cc22ab6e108fcfd035408398003eb2ecc95fae7887e40465bf6e57fb0bb3e1557277c500eb03d99e228605870cc69d80e7ee88fa9770d7c1dbcf3b58b9ba85ee223f3ee", 0x76}, {&(0x7f0000000640)="abd4a87a3942578624c9ffbdbbacc37efad3d2c2", 0x14}], 0x2, &(0x7f00000006c0)=[{0xc8, 0x110, 0x1, "baae5214112012c659c8b9ae8f466207d551e948cd440c120af0a93ee7ea69b72493f2b4b9cb1fc3b2efb0e0c49db06f714f2825650883b6df2f30c7289319b3c67488c8a83bfc1f44c169e1acc12c65fd9c77c857bd3836a35e10e41a5b9f909bf04e07df07112b1fa95f47e630925e5d171eed0a43a2aa8ef98469d193e4cb19781a6227c7a720011d774f29b6df36d168c8f806e7bb2d549db928dbc06d53be5fd88c70968c95277c9e03bff18e426f53edb4cb"}, {0x88, 0x0, 0xff, "9194157555c4a5c6be1a7ce4263bad48f29d6f9c402d4bd1305e9ec9651e55de8d412acd45e6f7c4541f9b36491bd36afc1d3057dc4b580f00a80d25a0fdeb64025d0061d5f62eeac8b14bf79f225acb63f2b419cc12f48a471a8cd6c0f516b61ba490db3179d69914768d4440d1802b4b"}, {0xc8, 0x139, 0x9, "d0f1cbe0f31cf883f8bfbca67e637185ab2680910e4fe6114d2b80e8b13ce5c792108655a978e242adc5b3a1605752cff8b21a88b2b3731e0c8c1386bc44dfa0bbf4c79c76aa5d7c48fe0b87e05ca11a44e6f37b9253761fd650278e1e43dc8362085e40dccf6c070d37bb5ac2bb37664f1c3c02a6d8b8c19e57e634d692134424432b670bb8b42782542a1d78e4bcacfd78c2dbbec0583ab227be8b03274e3fc4fac7899e29b1668c4f12985cf783e2de5051326223baef"}, {0xb0, 0x0, 0x4, "33430a18ed0ae8318b65e759e249820dbba0eb4e566619bffc353904832cbb628082a5217272d6c403e33d13d2a9d0302b83905bf98d03b03058eba528a68476751b397d25fb930b48c62d21c35cbb2c5fdc03933499bc2abb385c3811c39abc47935867189fbfdd71e2f0878ece0f5f549367b3698c8194b01d5984eb4583b27d394c65a323ffd129c3f62d9408c521fd4b5255da8e447092243ba6d1"}], 0x2c8}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, r11, 0x0, 0x3, 0x54, 0x0, "4abebf369eb8e9d253c7cc8bc29e3cef107fc9f599befdeb3fac9f4eb4cf8604b8c134086312a9aaa147fe622ccb9f8bb18142a3d5da913208b3ed4f7aa2b6", 0x13}, 0x60) 8.35684982s ago: executing program 0 (id=3757): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c00400000000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) (async, rerun: 32) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003280)=ANY=[], &(0x7f0000001140)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) (async) sendmmsg$inet(r4, &(0x7f00000002c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)}}, {{&(0x7f0000001400)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001800)}}, {{&(0x7f0000001880)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000200)}}], 0x3, 0x20000044) (async, rerun: 32) close(r4) (async, rerun: 32) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) write(0xffffffffffffffff, 0x0, 0xfffffffffffffe9b) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000015c0)={0x6, 'wg1\x00', {0x392}, 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x4, &(0x7f0000001180)=ANY=[@ANYRES16=r3], &(0x7f0000000140)='GPL\x00', 0x2000, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffd36) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) (async) r7 = gettid() (async) r8 = socket(0x10, 0x803, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB="0898050007500500080013008771d0e1e6e98786e9fb5a06178813f9615800ab61a7764e2e0cee745bd61b36c439ad21d254b160a32f7e36357701926668808986fda913f6859dd0b68af79e5ab66e4b99a513bd36518264d114", @ANYRES32=r7, @ANYBLOB="14003500766574fc4758a0616376746170000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 7.719538193s ago: executing program 0 (id=3758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002abd7000fbdbdf250b00000008000400450a00002400068008000700", @ANYRES32=r5, @ANYBLOB="0500020050be000008000300e00000020500020004000000"], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x4, 0x0, 0xffffffff, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) recvfrom$packet(r1, &(0x7f00000004c0)=""/1, 0x1, 0x2122, &(0x7f0000000540)={0x11, 0xf6, r2, 0x1, 0x8, 0x6, @local}, 0x14) sendmmsg$sock(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6e, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000003c0)='cpuacct.usage_user\x00', 0x0, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0x0) 6.995375797s ago: executing program 2 (id=3761): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xee}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x81) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040005}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x0, 0x7, [0x4, 0xb, 0x7f, 0x81, 0x4, 0x5, 0xcfd6]}, &(0x7f0000000380)=0x16) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000003c0)={r7, 0x35cf}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x1, &(0x7f0000000400)=0x9, 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r10, 0x0, 0xce, &(0x7f0000000440), &(0x7f0000000480)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000000840)={r9, &(0x7f0000000740)='wlan1\x00', 0x52002, &(0x7f0000000780)={@_ha_fsid={[0x2, 0x5]}, {0xf5, 0x4, 0x2, 0x10000}}, 0x4, &(0x7f00000007c0), &(0x7f0000000800)}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x1fffc, 0x0}, 0x8) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7ff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0xa, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x0, 0x7, 0x3, 0x30, 0x4}, @ldst={0x2, 0x2, 0x1, 0x3, 0x6, 0xffffffffffffffda, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x73}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @jmp={0x5, 0x1, 0xd, 0x3, 0xb, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0x4, 0xb, 0xffffffffffffffe0, 0xffffffffffffffff}]}, &(0x7f0000000540)='GPL\x00', 0x941, 0xf3, &(0x7f0000000580)=""/243, 0x41100, 0x10, '\x00', r11, @sock_ops=0x3, r12, 0x8, &(0x7f0000000880)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x7, 0x8, 0x8}, 0x10, r13, r3, 0x5, &(0x7f00000009c0)=[r14], &(0x7f0000000a00)=[{0x3, 0x5, 0x10, 0x1}, {0x4, 0x2, 0xf}, {0x3, 0x4, 0x6, 0x2}, {0x1, 0x3, 0x1, 0x4}, {0x4, 0x5, 0xa44a, 0xc}], 0x10, 0x9}, 0x94) ioctl$NS_GET_OWNER_UID(r12, 0xb704, &(0x7f0000000b80)=0x0) sendmsg$nl_xfrm(r12, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)=@flushpolicy={0x1ac, 0x1d, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@multicast1, 0x0, 0x2}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2c}}, @policy={0xac, 0x7, {{@in6=@local, @in=@empty, 0x4e24, 0x1, 0x4e20, 0xffdf, 0xa, 0x80, 0x20, 0x3a, r11, r15}, {0x8, 0x2bc5, 0x3fc00000000, 0x5, 0x3, 0x6, 0x40, 0xf}, {0x8, 0x69, 0x80000000, 0x9}, 0xa9cc, 0x6e6bb6, 0x0, 0x1, 0x3, 0x3}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @algo_comp={0x98, 0x3, {{'lzs\x00'}, 0x280, "8bfc1bba7184dab799e38f89c1701015a629b38e418a6485e6902a893ffe5d4cd22f4e0c19482535404be5435b93baa9e3062d17d62d77cb4360623d2f79b3d393fe28e2709665ba3d45bde992095178"}}, @etimer_thresh={0x8, 0xc, 0x6}, @mark={0xc, 0x15, {0x35075c, 0x28}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80080}, 0x20040050) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r12, 0x84, 0x4, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000e80)={0x0, 0x8, 0x1, [0x5, 0x40, 0x5, 0x19, 0x6], [0x9, 0xfcc7, 0x0, 0x8, 0xff, 0x4, 0x5d, 0xfffffffffffffffe, 0x6, 0x5, 0x100000000000, 0x6, 0x2, 0x6c, 0x9, 0xffffffff, 0xffffffffffffffff, 0x4, 0x8, 0xbbc5, 0x9d, 0x53, 0x3, 0xffffffff, 0x0, 0x1, 0x6, 0x40000000, 0x4, 0x5, 0x5, 0x28000000000000, 0x9, 0x7, 0x3, 0x3, 0xb, 0x7fff, 0x10, 0x3, 0x9, 0x800000000000000, 0x9, 0x9, 0x0, 0x6a, 0x4, 0x7, 0x5, 0x4000, 0x7, 0x67, 0x0, 0x5, 0x3, 0xcbaf, 0xb, 0x100000000, 0xfffffffffffffeff, 0x28, 0x768, 0x6, 0x8, 0x8001, 0x1450de36, 0x1ff, 0xfffffffffffffc00, 0x76, 0x6, 0x4, 0xb3b, 0x4c, 0x8, 0x8, 0x1, 0x6, 0x80000000, 0x1, 0x9, 0x7e391db0, 0x7fffffffffffffff, 0x1, 0x5, 0x7, 0x9, 0x0, 0x2, 0xe5, 0xfffffffffffff699, 0x6, 0x401, 0x0, 0x3, 0x6, 0x7, 0x8, 0x2, 0x6, 0x5, 0x9, 0x0, 0x9, 0xc, 0x0, 0x5, 0x7, 0x0, 0x188, 0x3, 0x2400000000, 0x4, 0xd48, 0x7, 0x3, 0x6, 0x2, 0x8000, 0x1000, 0x1d, 0x5, 0x7]}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f00000012c0)={r16, "f26b67206ced88f910be542d92097bd9"}) openat$ppp(0xffffffffffffff9c, &(0x7f00000022c0), 0x232680, 0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r17, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) 5.387132745s ago: executing program 0 (id=3767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0x37, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0xacd069602f05cd2b}}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1fc, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$FITHAW(r0, 0xc0045878) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x14, r7, 0xf21, 0x0, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x2) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24044010}, 0x80) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x11) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="010628bd7000fedbdf250b000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x1050}, 0x24008010) 5.28851616s ago: executing program 2 (id=3768): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'xfrm0\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001002bbd700000000100e00000020000000000000000000000000000000000000000000000000000000000000000000200000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000fe0f00008d00070073b4ffffffffffffffffffffffffffff0000000000000000000100001000000000000000190000200200000000000000fffffffffffffffffeffffff000000000000000300000000bc812289a79650db0ca3588fc133827421a9d6502001f8ad2215eeb16106e6ee5d43ae2d036a458a76fe"], 0xb8}}, 0x4004) (async, rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x324}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @multicast1}, {0x2, 0x20, @empty}, 0x363, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x14, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000002580), &(0x7f00000025c0)=0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000001400180008ac0f0006ac0f0009ac0f0006ac0f00"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0xf30, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x200480c0) (async) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}]}, 0x2c}}, 0x4000000) 5.287719549s ago: executing program 4 (id=3769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c80), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004d00)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@deltaction={0x140, 0x31, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd017}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1b75}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1d}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.90894092s ago: executing program 4 (id=3772): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x18, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}]]}, {0x4}, {0xc, 0xb}, {0x1, 0xa, {0x20}}}}]}]}, 0x8c}}, 0x0) 4.869088475s ago: executing program 2 (id=3773): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfffffffe, @private1, 0x9}]}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x9, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18060000000018ffff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[@ANYRES8=r3], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001240)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0xa0, 0x330, 0x330, 0x330, 0x198, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x6f, @broadcast, 0x4e22}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x6, 0x4, 0x4, 0x1, 0x2], 0x4, 0x2}}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x4, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe38) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e21, 0x10001, @mcast2, 0x7}}}, 0x84) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004680)}, 0x8004) r6 = socket(0x40000000015, 0x5, 0x0) unshare(0x26020400) getsockopt$sock_buf(r6, 0x1, 0x37, 0x0, &(0x7f0000000700)=0x5b) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x201, 0x4) sendmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, 0x94, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="c6303487e79345aa2b46106c4a19b4c70c437e6f5a9e341fe0ff4d77dfcd5a7104f84b3d660ed287026877ab8b9968b7b42ebf42e1b7a92929060f92fa8f9caf3e8d347a03e5a399806d1fd9bc2dcb0d49888953d2383f4268e69bfee32b316cd2c421", 0x63}], 0x1}, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000680)="76eaabd9ab9df51ed6fb6e14c23982ef00000000000000040000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.463754418s ago: executing program 2 (id=3774): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x80000, 0x5b78) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000580)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 4.413971292s ago: executing program 0 (id=3775): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000200}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000700000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.134058502s ago: executing program 0 (id=3776): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xc, 0xa, 0xa, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000258800bd376ea080dbee1ff16cd9a123c2a78744c25c00e3b32f100b39a3ac54a6b7e3776e895533c65135e5042dd4aace2f27d96a62a5fa9c1bcb271b9762e25ed34764703f6862cd068aa55a1769af4adafa0d777a8f9275918298fd5d556f10ccfc0445809e5bcf01f3b153e123d2e68c003f0657301f0e3c402237b5264915cf8bb3"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x15c, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4060}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d0310000000000000020000000000ff0600902000200600150002000000180016801400010001001600000000003c00040007506100"], 0x3c}}, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x40000000, 0x3, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r0) 2.376123791s ago: executing program 4 (id=3777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x44, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{0x1, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)='%pK \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000017c0)={&(0x7f0000000000)="7837fb7a886ceda1fb2c4f7821f047369b5c5d3249efd24f", &(0x7f00000005c0)=""/247, &(0x7f00000006c0)="fe55db729583011d9d689630486ab1591dd5960172bb25dce548042fe9ff38840047be174203c5f77ff55051017c7ee81ea9477066e5579a", &(0x7f0000000700)="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", 0x4, r1}, 0x38) 2.372728164s ago: executing program 3 (id=3778): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f00000008c0)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x8, [@multicast2, @empty]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000090000009c9900000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x22, &(0x7f0000000140)=""/34, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) 2.247644782s ago: executing program 4 (id=3780): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100000000000000000000000030005003c00000002000000ac1e0001000000000000000003000600000000000200a03f0000120000000200000000000000000006000000000000000000000000000000fe80000000000000000000000000002400"/116], 0x80}}, 0x0) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) unshare(0x22020600) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x100, 0xc8, 0x8, 0x100, 0x5803, 0x210, 0x2e8, 0x2e8, 0x210, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x1, 0x4}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x69, 0x5}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xbb709000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x72, &(0x7f00000002c0)=""/209, 0x0, 0x21, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r6, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34}, 0x2f) 2.242066575s ago: executing program 3 (id=3781): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="410000000500"}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0xfe, "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"}, &(0x7f00000004c0)=0x106) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000008850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, [0x1, 0x480000000, 0x7, 0x8000000000000000, 0x4, 0x275, 0x9, 0x6, 0x1, 0xfff, 0x3, 0xffff, 0x6, 0xffff, 0x34e]}, &(0x7f0000000600)=0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x32, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x70}, 0x1, 0x7}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.710689262s ago: executing program 4 (id=3785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000ad00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) sendmmsg$inet(r5, &(0x7f0000005200), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x1000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x60}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.439622456s ago: executing program 1 (id=3787): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7, 0x7, 0x100, 0xa83, {{0x48, 0x4, 0x3, 0x0, 0x120, 0x67, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x21, 0x1, 0x3, [{@multicast1, 0xfffffffb}, {@rand_addr=0x64010102}, {@broadcast, 0x5d80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xa}, {@empty, 0x4}, {@remote, 0xd4fa}, {@rand_addr=0x64010102, 0x4}]}, @end, @timestamp_addr={0x44, 0x44, 0x16, 0x1, 0x5, [{@multicast1, 0xe}, {@private=0xa010101, 0x2}, {@rand_addr=0x64010101, 0xff}, {@empty, 0xfffffff9}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x1}, {@multicast2, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x29, 0x3, 0x0, [{@local, 0x9}, {@multicast1, 0x7}, {@multicast1, 0x9646}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010102, 0x6}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x36, 0x3, [{0x2, 0x9, "25ef5548c2fd97"}, {0x6, 0xa, "c14fa8468e607942"}, {0x1, 0xc, "21136a0c54b75ba698ff"}, {0x2, 0xc, "f4c99f49e5ecae95c5e6"}, {0x1, 0x5, "015cbf"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0x3, "9e"}, @noop, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x0, [{@remote, 0x6}]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x16c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8f, 0xa8, @random="495c8176fceec564e1a6f667bec2e61399fbce410f7440568478f44f9db98254d76c4b327ae20074bb8369a13f04d87d456fea35f21c13c2d6f4bed3ce56104b976f57b29cb6db651a66128d3d10a675edf86264cfa64d9e8341fcbc295cb85ed6160744d8b212b34b92df83d4009005380dec7c730ef6a4c5d914dd96407a686b8b9718cd52a976b0f702"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x71, 0xa8, @random="155f0099b569fb59dff086c014663e0a58439627b1a706d347e76619f126835a419d5665a10b0de685fda4f5d5222f03a9048dc2b329c3237cbb277a345fd7d336580a07b131e59ab153d139ecb0d235a0ea76be3fa9b37f198734fb7d68fc900d6fe5e4b542722592ddec541e"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x16c}}, 0x4000894) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1f, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000640)='GPL\x00', 0x9, 0x43, &(0x7f0000000680)=""/67, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x7, 0xfffffffb, 0x1e}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x1], &(0x7f00000007c0)=[{0x4, 0x1, 0x3, 0x4}, {0x2, 0x4, 0x2}, {0x1, 0x1, 0xb, 0x3}, {0x2, 0x2, 0x3}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffff7fff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000015c0)={{r4, &(0x7f0000000d80)='\\%\\]\x00', 0x202, &(0x7f0000000dc0)={@_ha_fsid={[0x8, 0x8]}, {0x3, 0x7f, 0x5, 0x4f}}, 0x7ff, &(0x7f0000000e00)={@_ha_fsid}, &(0x7f0000000e40)=0xc8}, 0x9, &(0x7f0000001480)=[{0x2, 0xa5e9, &(0x7f0000000e80)='devlink\x00', &(0x7f0000000ec0)}, {0x3, 0x503f, &(0x7f0000000f00)='!+!:[\x00', &(0x7f0000000f40)="b8819c700ff72dfc53611333cda14450fc0422fa6ffcb3fcadc7d1e57a8a29b2680849a2519d0bd72b9772cdcef4715b17f5874cbdd7db964773868e93de92a69e00dcd791a3529ff2b51500e147241f8286aca155707784e2fd9d6216", 0x5d}, {0x2, 0x80000000, &(0x7f0000000fc0)='\x00', &(0x7f0000001000)="4dae15b7aff8138797da623d4881daeeb9dc3b78e8a72ff2bc", 0x19, 0x22}, {0x1, 0x7, &(0x7f0000001040)='}\\%\x00', &(0x7f0000001080)="e11a05e450ba205faebb2c72920098b92b84d083603a99f755b2b47ba7ffe69c84cc139304db927a", 0x28, 0x10}, {0x0, 0x8, &(0x7f00000010c0)='%#\x00', &(0x7f0000001100)="02a41a66e79088bf62f1b83b23032dca7c6de6a176ad043ff08c34fe44561af4b62c69ce2084c3249fa029f7fbe437bed82e496b8cd859d17aa74900954e360e7409d5caf3331c3395913c3fbf696d05ef4c0e6d1e1a941c2f92f23d71dd6bc392397bc2f572b626a34be146fcfe365b4f432358dcedf2f6fdbb5acc8667580497efb052590b90117b57568de9a98edab1a031c37d60", 0x96, 0xa}, {0x0, 0x401, &(0x7f00000011c0)='\x00', &(0x7f0000001200)="c92f0a9d88da8ebcb951a6cce5e6f1b1bee1ea66242a2954cc23d83671f5a943b678812c678f8ad7f9d344803ad1edad9a9ba0f8378f8287f215a7c695ff948b54f08b07853bcda2fc39bbeac38533568e5c85464bd463144f9ba9cabb82dc1ff5cb5fdfc56555", 0x67, 0x8}, {0x3, 0x3, &(0x7f0000001280)='GPL\x00', &(0x7f00000012c0)="629aaa8fe841abb1b89de9cc9ddc35d4611fef0b9c25ae90397d6962c36a01a6a5aa30a6d84c058f0a8f298c492ce55350a4ab0c07e23680e5efe1b3d99ff9a817e279c08502ab2ca17e3e9001d5e7f23f54354d75f206a6daa5c867ec129eca14773d6d6d583e32a055f15172466ea94224246961b05f552de8e726", 0x7c, 0x10}, {0x3, 0x3, &(0x7f0000001340)='pci\x00', &(0x7f0000001380)="f53c738bcd91e5ecd82e987bdcda216854bab299af3d2a1ea5315d67df783107eb9061c445128d5dfb599340103beb1bec0fb0fb738ac4021f54a071fc1f16217811d2b816d9687e70778a2b9b8f8474", 0x50, 0x2}, {0x47a644d8ee43da47, 0x8, &(0x7f0000001400)='\x00', &(0x7f0000001440)="ad86aaa4b9d419b31adf5d3a19f2e3b7e2", 0x11, 0x1}]}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x100, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x40, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x18, 0x11, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7747, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='GPL\x00', 0xcad6, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x10, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000001740)=[r6, r7, r8, r9, r0, r10, 0x1, 0x1, r11], 0x0, 0x10, 0x10001}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r13 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001900)={r12, r1, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000001840)='./file0\x00', &(0x7f0000001880), &(0x7f00000018c0)=[0x5, 0x3], 0x2, 0x0, 0x0, r13}}, 0x40) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000001980), r9) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r9, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r14, 0x700, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4883}, 0x8000) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r15, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x6c, r16, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xdb0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000001c00)={@private, @initdev, 0x0}, &(0x7f0000001c40)=0xc) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000001c80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @ipv4={'\x00', '\xff\xff', @empty}, 0x400, 0xbf39, 0x7, 0x100, 0x5, 0x200, r17}) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000001d00)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002e80)={r18, 0x20, &(0x7f0000002e40)={&(0x7f0000001d80)=""/183, 0xb7, 0x0, &(0x7f0000001e40)=""/4096, 0x1000}}, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xc5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x48c4}, 0x0) 1.021389979s ago: executing program 1 (id=3788): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000000e56b5eaf4d59a8414800000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ffffffffffa61cfdf5942ae2a13ec84b53a573ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009"], 0x90) close(0x3) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002fbd7040fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="05802f20001000000000000001"], 0x2c}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f92, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x3e, &(0x7f0000000040)="d84f", 0x2) sendto$inet6(r7, &(0x7f0000000800)="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", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, 0x0, 0x0) 1.013141113s ago: executing program 3 (id=3789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b7000000cc000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61491800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) r1 = socket(0x10, 0x80002, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x43, 0x107, 0xfffffffe, 0x4, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4044855}, 0x8001) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="0a0001"], 0x48}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="18170000", @ANYRES32, @ANYBLOB="000000000000000005050700050000009500000000000000186a00000b000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000aa0200000000000085000000860000000ed97e9ab6edc6dee3ffdb8797c8f2b1e57dbd8d3e0c6b98be28980c0e5de49b324568bdbe6eb2625a8a0671d3a6a3a66307fd27efdb"], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x7, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x40, 0x1f00}, 0x10}, 0x94) (async) r5 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x194, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x14c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x8c, 0x1, [@m_mirred={0x58, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xb, 0x6, "d527360c37d81b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0xac, 0x1, [@m_ctinfo={0xa8, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0x73, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 747.79415ms ago: executing program 1 (id=3790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1d, &(0x7f0000000600)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @generic={0x3, 0x0, 0x2, 0x8, 0xfffffc14}, @generic={0x8, 0x2, 0x1, 0x2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x60b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @alu={0x7, 0x1, 0x5, 0x17, 0x1, 0xfffffffffffffff0, 0xfffffffffffffffc}], &(0x7f0000000700)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xb, 0x9f14, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000007c0)=[{0x3, 0x4, 0xd, 0x8}, {0x4, 0xbca, 0x4, 0x9}, {0x3, 0x5, 0x10, 0x7}, {0x0, 0x4, 0x4, 0xb}, {0x3, 0x1, 0x6, 0xa}, {0x4, 0x2, 0xd, 0xc}, {0x4, 0x3, 0x1, 0x8}, {0x5, 0x5, 0xa, 0x4}, {0x0, 0x5, 0xe, 0x9}], 0x10, 0xff}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980)={r1, r0}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xc4}}, 0x4000040) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$FICLONE(r7, 0x40049409, r4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xffffffffffffffff, "d44c0f5a109d7677412e7eb9661442398f829d2d489681fdbebd2e14997f3865", 0x4, 0x80, 0xe93, 0xb9}, 0x3c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0) r11 = socket(0x2, 0x80805, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r12}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa966}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x3, 0x6, 0x1a29, 0x1, 0xacca, 0xa, 0x1]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080090}, 0xc000) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000d885}, 0x4000080) 714.366446ms ago: executing program 1 (id=3791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0xfffffffffffffdcb, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfff}]}, 0x34}}, 0x0) 621.988121ms ago: executing program 3 (id=3792): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b20000000ffdbdf25030000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000a00026811bb87"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff7) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) ioctl$TUNGETVNETLE(r1, 0x4004743b, &(0x7f0000001a00)) 442.957269ms ago: executing program 1 (id=3793): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, 0x0, 0x0, 0x0, 0x94, &(0x7f0000000180)=""/148}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) (async) close(r0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6801000000010103000000000000000003000000700002802c00018014000300fe88000000000000000000000000010114000400fe8000000000000000000000000000aa0c000280050001002100000006000340000300002c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000aa08001a400000000408001a40000003490c000f8008000240000000ff7000068014000380060001004e240000060002004e2000001400040000000000000000000000ffffe000000108000200ac14143714000400fe8000000000000000000000000000bb0800010300000002080002000a01010008000100ac1414aa08000100ac1e000106001240000100000800154000000002480001800c000280050001002f0000000c00028005000100880000002c00018014c1c14ded8000000000000000000000000000bb14000400000000000000000000000000000000005471643f0d1082dbf886d9efda1726d205758f65c7b8a521def3d296e91748d6c263c74dd44e678384aee59bfb182feb4bb4ece45461218ec104750bb9eb037ba0da45f0a5a61694087e0b462ec04ad29e29771d7641795852b39663397957278412f075c3faed308621d3da322da3e5d69009f4a2e1bce037f90c9618687b02c9d79cbf8181e8e7f488350b0839b5258561386f82c31afa74a558fd27bd578863016499019911520b30a9827c232b42e7f496a8b45e7676c42d26cf4b45c1caa933e6e463d19972110bdf94cfa98c38041a9948e8dedebf43e25849dba28ccd00cb1e38d63e985a0d62710fe919bc0bdf734e8a028392d2e5b94a36d281fe544ef8d86bfe7e5b8deb819e53daa384ecb491bc0bd5fef5644cfab1e72014988538e4df35adbb5528f83dde6e053a962a3af891902c582673505cd21716705c1f39f0"], 0x168}}, 0x44000) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x18, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0bd547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 321.506051ms ago: executing program 1 (id=3794): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)="84fa51", 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008044) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r2, 0x29, 0x1e, 0x0, 0x15) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000001c0)=0x20121, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008001f000759b465"], 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 213.043402ms ago: executing program 4 (id=3795): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r4, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) socket$nl_audit(0x10, 0x3, 0x9) (async) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) r10 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r10, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) r12 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 0s ago: executing program 3 (id=3796): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async) sendto$inet6(r0, 0x0, 0x0, 0xfff5, &(0x7f0000000180)={0xa, 0xe21, 0x1, @loopback={0xff00000000000000}, 0xbf}, 0x1c) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 20000 - 0 [ 329.414952][ T144] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.503980][T14243] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 329.529938][ T9210] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.541100][ T9210] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 329.550086][ T9210] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.559231][ T9210] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.710706][ T9210] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.727544][ T9210] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 329.737209][ T9210] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.747274][ T9210] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.768513][T14248] bond12: (slave bridge8): making interface the new active one [ 329.777120][T14248] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 329.838984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.849657][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.887335][ T7668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.521949][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.671525][T14251] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 331.684542][T14243] bond12: entered promiscuous mode [ 331.689854][T14243] bridge8: entered promiscuous mode [ 331.695663][T14243] bond12: entered allmulticast mode [ 331.700916][T14243] bridge8: entered allmulticast mode [ 331.708423][T14243] 8021q: adding VLAN 0 to HW filter on device bond12 [ 331.856774][ T48] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.901230][ T48] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 331.934255][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.936547][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 331.983658][ T48] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 332.051554][T14278] bond7: Unable to set down delay as MII monitoring is disabled [ 332.063328][T14278] bond7 (unregistering): Released all slaves [ 332.242358][T14295] __nla_validate_parse: 5 callbacks suppressed [ 332.242377][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2224'. [ 332.374223][T14296] lo speed is unknown, defaulting to 1000 [ 332.577079][T14316] macvlan1: entered promiscuous mode [ 332.606156][T14316] macvlan1: entered allmulticast mode [ 332.632669][T14316] veth1_vlan: entered allmulticast mode [ 332.931033][T14346] sctp: [Deprecated]: syz.4.2231 (pid 14346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.931033][T14346] Use struct sctp_sack_info instead [ 332.959483][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.001815][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 333.043362][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 333.092941][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2233'. [ 333.364038][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 333.576175][T14383] veth0: entered promiscuous mode [ 333.659783][ T30] audit: type=1804 audit(1778429079.201:9): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2242" name="/newroot/464/memory.events" dev="tmpfs" ino=2393 res=1 errno=0 [ 333.811703][ T1223] IPVS: starting estimator thread 0... [ 333.909520][T14393] IPVS: using max 29 ests per chain, 69600 per kthread [ 333.996325][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.060618][T14404] netlink: 'syz.0.2249': attribute type 4 has an invalid length. [ 334.076055][T14404] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2249'. [ 334.416166][ T7659] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.556147][ T7659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.617606][T14429] tipc: Enabling of bearer rejected, already enabled [ 334.671063][T14432] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 334.804178][T14432] bond13: entered promiscuous mode [ 334.826368][T14432] 8021q: adding VLAN 0 to HW filter on device bond13 [ 334.841941][T14434] netlink: 'syz.1.2259': attribute type 10 has an invalid length. [ 334.845457][ T7659] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.855140][T14437] netlink: 188156 bytes leftover after parsing attributes in process `syz.0.2260'. [ 334.892607][T14432] 8021q: adding VLAN 0 to HW filter on device bond13 [ 334.903839][T14432] bond13: (slave vcan0): The slave device specified does not support setting the MAC address [ 334.914344][T14432] bond13: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 334.928523][T14432] bond13: (slave vcan0): making interface the new active one [ 334.937721][T14432] vcan0: entered promiscuous mode [ 334.944247][T14432] bond13: (slave vcan0): Enslaving as an active interface with an up link [ 335.026872][T14444] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2262'. [ 335.045776][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.154313][T14453] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 335.599473][ T7659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.904971][T14502] netlink: 'syz.4.2278': attribute type 21 has an invalid length. [ 336.085388][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.550156][T14518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2281'. [ 337.125190][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.595346][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.165618][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.333923][T14502] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2278'. [ 338.343316][T14502] netlink: 'syz.4.2278': attribute type 1 has an invalid length. [ 338.351851][ T7659] lo speed is unknown, defaulting to 1000 [ 338.359996][ T7659] sqz0: Port: 1 Link DOWN [ 338.372077][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2279'. [ 338.382146][T14512] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 338.388337][T14512] dvmrp1: linktype set to 0 [ 338.403287][ T7659] lo speed is unknown, defaulting to 1000 [ 338.463657][T14524] netlink: 'syz.4.2283': attribute type 6 has an invalid length. [ 338.599364][T14529] erspan0: entered promiscuous mode [ 338.627351][T14529] ip6tnl0: entered promiscuous mode [ 338.741724][T14538] syzkaller1: entered promiscuous mode [ 338.748250][T14538] syzkaller1: entered allmulticast mode [ 338.795224][T14541] ip6tnl2: entered allmulticast mode [ 338.800862][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'. [ 339.137291][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2295'. [ 339.156961][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2295'. [ 339.315156][T14572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2297'. [ 339.346753][T14572] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 339.412711][T14528] ip6tnl0: left promiscuous mode [ 339.431829][T14528] erspan0: left promiscuous mode [ 339.462465][T14578] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2298'. [ 339.525033][T14579] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2298'. [ 340.027565][T14600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2307'. [ 340.391316][T14622] netlink: 'syz.1.2311': attribute type 14 has an invalid length. [ 340.439262][T14624] nbd: must specify at least one socket [ 340.451049][T14625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2312'. [ 340.866068][T14637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.177324][T14607] lo speed is unknown, defaulting to 1000 [ 342.161249][T14680] lo speed is unknown, defaulting to 1000 [ 342.722668][ T30] audit: type=1800 audit(1778429088.261:10): pid=14711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2332" name="memory.events" dev="tmpfs" ino=2284 res=0 errno=0 [ 343.733627][T14761] __nla_validate_parse: 6 callbacks suppressed [ 343.733644][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 343.819788][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 343.846022][T14766] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2342'. [ 343.880911][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 343.904464][T14766] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2342'. [ 343.925884][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 344.248863][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'. [ 344.279203][T14794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.373375][T14794] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 344.704982][T14815] netlink: 'syz.2.2350': attribute type 1 has an invalid length. [ 344.717767][T14813] netem: change failed [ 344.739430][T14814] netlink: 'syz.2.2350': attribute type 1 has an invalid length. [ 344.794813][T14813] bond14: option arp_all_targets: invalid value (129) [ 344.811022][T14813] bond14 (unregistering): Released all slaves [ 344.871986][T14815] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 344.873059][T14814] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 345.032141][T14790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.070343][T14790] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 345.133327][T14790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.156250][T14790] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 345.222510][T14790] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.230732][T14790] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 345.249350][T14790] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.255630][T14790] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 345.377679][T14853] nbd: must specify a device to reconfigure [ 345.550533][T14864] netlink: 'syz.3.2363': attribute type 12 has an invalid length. [ 345.571978][T14866] netlink: 'syz.2.2364': attribute type 8 has an invalid length. [ 345.573815][T14864] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2363'. [ 345.758023][T14874] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 346.219864][T14906] batadv_slave_0: entered promiscuous mode [ 346.237443][T14906] batadv_slave_0: entered allmulticast mode [ 346.399370][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2375'. [ 346.425421][T14924] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 346.456657][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2374'. [ 346.599369][T14937] netlink: 'syz.0.2379': attribute type 1 has an invalid length. [ 346.860622][T14942] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 346.894439][T14942] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 346.901909][T14959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.022923][T14948] bond6: (slave bridge9): Enslaving as an active interface with a down link [ 347.033351][T14937] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.078359][T14958] macvlan2: entered promiscuous mode [ 347.099815][T14958] macvlan2: entered allmulticast mode [ 347.119578][T14958] bond6: entered promiscuous mode [ 347.142134][T14958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 347.183007][T14958] bond6: left promiscuous mode [ 347.575007][T14992] lo speed is unknown, defaulting to 1000 [ 347.953397][T15021] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 347.953880][T15000] bond7 (unregistering): Released all slaves [ 348.006620][T15021] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 348.027543][T15024] netlink: 'syz.2.2392': attribute type 39 has an invalid length. [ 348.194269][T15024] hsr_slave_0 (unregistering): left promiscuous mode [ 348.968585][T15068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.997654][T15072] __nla_validate_parse: 5 callbacks suppressed [ 348.997671][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 349.529165][T15095] netlink: 'syz.3.2412': attribute type 3 has an invalid length. [ 349.554269][T15095] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2412'. [ 349.633325][T15115] netlink: 'syz.4.2416': attribute type 1 has an invalid length. [ 349.708976][T15121] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 349.710711][T15115] 8021q: adding VLAN 0 to HW filter on device bond7 [ 349.773111][T15121] 8021q: adding VLAN 0 to HW filter on device bond14 [ 349.781176][T15106] lo speed is unknown, defaulting to 1000 [ 349.799620][T15124] vlan1: entered allmulticast mode [ 349.814764][T15124] bond14: entered allmulticast mode [ 349.909892][T15124] bond14: (slave geneve4): making interface the new active one [ 349.926220][T15124] geneve4: entered allmulticast mode [ 349.949140][T15124] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 349.979164][ T6676] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.997396][ T6676] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.016252][T15128] tipc: Invalid UDP bearer configuration [ 350.016301][T15128] tipc: Enabling of bearer rejected, failed to enable media [ 350.032070][ T6676] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.040874][ T6676] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.113819][T15134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2421'. [ 350.476855][T15148] bridge_slave_0 (unregistering): left allmulticast mode [ 350.483945][T15148] bridge_slave_0 (unregistering): left promiscuous mode [ 350.493370][T15148] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.642736][T15151] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2425'. [ 350.808080][T15159] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 350.972373][T15166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2428'. [ 351.052198][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2429'. [ 351.388402][T15193] ieee802154 phy1 wpan1: encryption failed: -22 [ 351.538935][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 351.563680][T15200] xt_TCPMSS: Only works on TCP SYN packets [ 351.748795][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 351.794525][T15217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2440'. [ 352.264514][T15250] bond8: option arp_validate: invalid value (18446744073709551613) [ 352.288845][T15250] bond8 (unregistering): Released all slaves [ 352.525240][T15272] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2451'. [ 352.534512][T15272] openvswitch: netlink: Missing key (keys=40, expected=100) [ 352.588874][T15276] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 352.598328][T15277] netlink: 'syz.4.2451': attribute type 7 has an invalid length. [ 352.632165][T15276] bond9: entered promiscuous mode [ 352.638055][T15276] 8021q: adding VLAN 0 to HW filter on device bond9 [ 352.701488][T15282] xt_TCPMSS: Only works on TCP SYN packets [ 353.310526][T15276] bond9: left promiscuous mode [ 353.325725][T15276] bond9: entered allmulticast mode [ 353.372030][T15280] bond9: (slave bridge7): making interface the new active one [ 353.379843][T15280] bridge7: entered allmulticast mode [ 353.393839][T15280] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 353.585739][T15302] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 353.675365][T15304] team0 (unregistering): Port device team_slave_0 removed [ 353.719839][T15304] team0 (unregistering): Port device team_slave_1 removed [ 353.811581][T15308] lo speed is unknown, defaulting to 1000 [ 353.840090][T15316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.929813][T15324] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 354.119490][T15318] veth1_vlan: left allmulticast mode [ 354.341494][T15325] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 354.358043][ T154] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.383791][ T154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.410454][ T154] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 354.446659][ T154] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.469806][ T154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.491035][ T154] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 354.509188][ T154] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.518620][ T154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.527644][ T154] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 354.552842][ T154] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.563303][ T154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.573270][T15337] netlink: 'syz.1.2465': attribute type 7 has an invalid length. [ 354.581739][T15337] netlink: 'syz.1.2465': attribute type 7 has an invalid length. [ 354.590368][ T154] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 354.779923][T15345] syzkaller0: entered promiscuous mode [ 354.793612][T15345] syzkaller0: entered allmulticast mode [ 355.140051][T15350] netlink: 'syz.2.2471': attribute type 10 has an invalid length. [ 355.186852][T15350] team0: Port device dummy0 added [ 355.200333][T15354] netlink: 'syz.4.2472': attribute type 13 has an invalid length. [ 355.222645][T15350] veth0: entered promiscuous mode [ 355.241316][T15350] bond0: entered promiscuous mode [ 355.348789][T15349] bond0: left promiscuous mode [ 355.376845][T15349] veth0: left promiscuous mode [ 355.504186][ T7659] IPVS: starting estimator thread 0... [ 355.556833][T15364] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 355.581117][T15364] netlink: 'syz.2.2475': attribute type 2 has an invalid length. [ 355.604729][T15362] IPVS: using max 31 ests per chain, 74400 per kthread [ 355.613991][T15367] __nla_validate_parse: 5 callbacks suppressed [ 355.614007][T15367] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2477'. [ 355.813835][T15377] bond10: entered promiscuous mode [ 355.819680][T15377] 8021q: adding VLAN 0 to HW filter on device bond10 [ 355.897170][T15380] bond8: entered promiscuous mode [ 355.903861][T15380] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.970831][T15377] vlan4: entered allmulticast mode [ 355.985582][T15377] bond10: entered allmulticast mode [ 356.035320][T15402] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 356.049976][T15392] bond10: (slave bridge8): making interface the new active one [ 356.074565][T15392] bridge8: entered promiscuous mode [ 356.084415][T15392] bridge8: entered allmulticast mode [ 356.096012][T15392] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 356.392204][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'. [ 356.421863][T15424] validate_nla: 2 callbacks suppressed [ 356.421881][T15424] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 356.440860][T15424] netlink: 'syz.0.2491': attribute type 2 has an invalid length. [ 356.512996][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 356.584020][T15427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'. [ 356.633464][T15439] netlink: 'syz.4.2496': attribute type 10 has an invalid length. [ 356.724448][T15441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2497'. [ 356.752935][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2498'. [ 356.908217][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'. [ 356.933179][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'. [ 357.003451][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 357.142696][ T30] audit: type=1804 audit(1778429102.681:11): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2506" name="/newroot/518/memory.events" dev="tmpfs" ino=2663 res=1 errno=0 [ 357.190769][ T30] audit: type=1800 audit(1778429102.681:12): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2506" name="memory.events" dev="tmpfs" ino=2663 res=0 errno=0 [ 357.326216][T15476] lo speed is unknown, defaulting to 1000 [ 357.337192][T15472] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 357.364027][T15478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2510'. [ 357.723902][T15497] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 357.803964][T15503] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 357.806779][T15504] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 357.823382][T15503] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 357.874385][T15504] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 357.898765][T15507] erspan0: entered promiscuous mode [ 358.287360][T15518] veth1_virt_wifi: entered allmulticast mode [ 358.940038][T15536] atomic_op ffff88804f3a4998 conn xmit_atomic 0000000000000000 [ 359.121076][T15547] xt_hashlimit: max too large, truncated to 1048576 [ 359.141483][T15547] xt_bpf: check failed: parse error [ 359.326700][T15564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.354042][T15565] bridge_slave_1: left allmulticast mode [ 359.373434][T15565] bridge_slave_1: left promiscuous mode [ 359.394992][T15565] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.427158][T15565] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 359.752548][T15585] netlink: 'syz.1.2541': attribute type 9 has an invalid length. [ 359.940050][T15594] gtp3: entered promiscuous mode [ 359.950889][T15594] gtp3: entered allmulticast mode [ 360.408152][T15618] lo speed is unknown, defaulting to 1000 [ 360.530232][T15623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.569862][T15625] netlink: 'syz.4.2554': attribute type 1 has an invalid length. [ 360.589064][T15625] netlink: 'syz.4.2554': attribute type 1 has an invalid length. [ 360.702096][T15632] __nla_validate_parse: 14 callbacks suppressed [ 360.702114][T15632] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2556'. [ 360.746843][T15632] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2556'. [ 360.770404][T15632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2556'. [ 360.833777][T15634] tipc: Enabled bearer , priority 0 [ 361.346852][T15659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2565'. [ 361.365636][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 361.401202][T15659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 361.433056][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 361.459847][T15659] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2565'. [ 361.494383][T15659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 361.525291][T15664] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2566'. [ 362.148975][T15698] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:52768 [ 362.506562][T15713] vlan3: entered promiscuous mode [ 362.511724][T15713] bridge0: entered promiscuous mode [ 362.729125][T15728] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 362.748201][T15729] veth0: entered promiscuous mode [ 363.110612][T15727] veth0: left promiscuous mode [ 363.153132][T15746] syzkaller1: entered promiscuous mode [ 363.159219][T15746] syzkaller1: entered allmulticast mode [ 364.026677][ T9212] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.044944][ T9212] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.088842][ T9212] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.098225][ T9212] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.895256][T15816] lo speed is unknown, defaulting to 1000 [ 365.034850][T15826] xt_hashlimit: size too large, truncated to 1048576 [ 365.620782][T15860] netlink: 'syz.3.2612': attribute type 1 has an invalid length. [ 365.729763][T15870] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 365.740908][T15870] __nla_validate_parse: 10 callbacks suppressed [ 365.740934][T15870] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2615'. [ 365.765401][T15870] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2615'. [ 365.815125][T15870] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 365.823036][T15870] netlink: 'syz.4.2615': attribute type 8 has an invalid length. [ 365.829193][T15875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2616'. [ 365.841946][T15870] netlink: 606 bytes leftover after parsing attributes in process `syz.4.2615'. [ 366.155677][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 366.529586][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'. [ 366.611425][T15901] lo speed is unknown, defaulting to 1000 [ 366.725876][T15916] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 366.795551][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'. [ 366.894508][T15924] bridge0: port 1(erspan0) entered blocking state [ 366.924830][T15924] bridge0: port 1(erspan0) entered disabled state [ 366.954077][T15924] erspan0: entered allmulticast mode [ 366.986642][T15924] erspan0: entered promiscuous mode [ 367.056177][T15925] erspan0: left allmulticast mode [ 367.061339][T15925] erspan0: left promiscuous mode [ 367.069799][T15925] bridge0: port 1(erspan0) entered disabled state [ 367.116862][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2630'. [ 367.135899][T15938] netlink: 'syz.0.2631': attribute type 30 has an invalid length. [ 367.168402][T15940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.371542][T15949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2634'. [ 367.553614][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2635'. [ 367.990133][T15976] netlink: 'syz.2.2641': attribute type 30 has an invalid length. [ 368.028150][T15976] netlink: 'syz.2.2641': attribute type 30 has an invalid length. [ 368.154438][T15983] Bluetooth: MGMT ver 1.23 [ 368.357582][T15999] netlink: 'syz.1.2648': attribute type 13 has an invalid length. [ 368.386680][T15998] netlink: 'syz.1.2648': attribute type 13 has an invalid length. [ 368.412615][T15998] netlink: 'syz.1.2648': attribute type 17 has an invalid length. [ 368.428143][T15999] netlink: 'syz.1.2648': attribute type 17 has an invalid length. [ 368.563059][T16012] netlink: 'syz.4.2650': attribute type 27 has an invalid length. [ 369.123432][T16038] netlink: 'syz.3.2660': attribute type 10 has an invalid length. [ 369.243391][T16042] syzkaller0: entered promiscuous mode [ 369.257265][T16042] syzkaller0: entered allmulticast mode [ 369.354305][T16042] gtp4: entered promiscuous mode [ 369.374159][T16042] gtp4: entered allmulticast mode [ 369.380562][T16061] sctp: [Deprecated]: syz.3.2666 (pid 16061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.380562][T16061] Use struct sctp_sack_info instead [ 369.830876][T16096] netlink: 'syz.3.2676': attribute type 11 has an invalid length. [ 369.848219][T16096] netlink: 'syz.3.2676': attribute type 23 has an invalid length. [ 369.864571][T16089] IPVS: ip_vs_add_dest(): server weight less than zero [ 370.176649][T16109] syzkaller0: entered promiscuous mode [ 370.187217][T16109] syzkaller0: entered allmulticast mode [ 370.776780][T16125] __nla_validate_parse: 19 callbacks suppressed [ 370.776802][T16125] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2685'. [ 370.826204][T16125] gretap0: entered promiscuous mode [ 370.863653][T16125] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2685'. [ 370.895787][T16125] 0{X: renamed from gretap0 [ 370.913640][T16125] 0{X: left promiscuous mode [ 370.921448][T16125] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 370.939419][T16139] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 371.062011][T16139] bond7: entered promiscuous mode [ 371.089516][T16139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 371.100064][T16146] netlink: 165160 bytes leftover after parsing attributes in process `syz.3.2690'. [ 371.219584][T16143] bond15: (slave bond_slave_1): Device is not bonding slave [ 371.256407][T16143] bond15: option active_slave: invalid value (bond_slave_1) [ 371.312414][T16143] bond15 (unregistering): Released all slaves [ 371.333364][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2694'. [ 371.362377][T16165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2694'. [ 371.408998][T16165] vlan4: entered promiscuous mode [ 371.414487][T16165] erspan0: entered promiscuous mode [ 371.419939][T16165] vlan4: entered allmulticast mode [ 371.425296][T16165] erspan0: entered allmulticast mode [ 371.449361][T16167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2695'. [ 372.016238][T16204] syzkaller0: entered promiscuous mode [ 372.021839][T16204] syzkaller0: entered allmulticast mode [ 372.063471][T16207] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2709'. [ 372.130521][T16208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 372.855023][T16227] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2714'. [ 377.107484][T16261] netlink: 'syz.4.2717': attribute type 1 has an invalid length. [ 377.157229][T16261] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 377.172983][T16261] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 377.204315][T16270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2717'. [ 377.250033][T16270] bond9: (slave bridge7): Enslaving as an active interface with a down link [ 377.277483][T16261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2717'. [ 377.340623][T16261] 8021q: adding VLAN 0 to HW filter on device bond9 [ 377.375789][T16270] macvlan2: entered promiscuous mode [ 377.376999][T16283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2722'. [ 377.385489][T16270] macvlan2: entered allmulticast mode [ 377.399859][T16270] bond9: entered promiscuous mode [ 377.407755][T16270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 377.432521][T16270] bond9: left promiscuous mode [ 377.440886][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2724'. [ 377.506320][T16296] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 378.011611][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 378.014265][T16326] sctp: [Deprecated]: syz.1.2735 (pid 16326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.014265][T16326] Use struct sctp_sack_info instead [ 378.115529][T16329] tunl0: left promiscuous mode [ 378.191118][T16343] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2737'. [ 378.192176][T16329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.242999][T16347] xt_hashlimit: size too large, truncated to 1048576 [ 378.248966][T16329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.290523][T16329] wireguard: wg0: Could not create IPv4 socket [ 378.318001][T16329] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 378.477453][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.481180][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 378.509495][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 378.752924][T16356] veth1_to_bond: entered allmulticast mode [ 378.768102][T16357] veth1_to_bond (unregistering): left allmulticast mode [ 379.157142][T16378] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2747'. [ 379.191291][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2747'. [ 379.863437][T16414] veth1_to_team: entered promiscuous mode [ 379.884994][T16414] veth1_to_team: left promiscuous mode [ 380.197170][T16431] bond15 (unregistering): Released all slaves [ 380.313407][T16439] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 380.503394][T16443] netlink: 'syz.3.2767': attribute type 26 has an invalid length. [ 380.545421][T16443] netlink: 'syz.3.2767': attribute type 26 has an invalid length. [ 380.571863][T16443] netlink: 'syz.3.2767': attribute type 1 has an invalid length. [ 380.912374][T16458] bond15: option packets_per_slave: invalid value (1048582) [ 380.982661][T16458] bond15: option packets_per_slave: allowed values 0 - 65535 [ 381.038147][T16458] bond15 (unregistering): Released all slaves [ 381.600901][T16500] netlink: 'syz.1.2782': attribute type 2 has an invalid length. [ 381.610724][T16498] xt_bpf: check failed: parse error [ 381.634310][T16500] netlink: 'syz.1.2782': attribute type 2 has an invalid length. [ 381.681633][T16500] netlink: 'syz.1.2782': attribute type 2 has an invalid length. [ 381.766920][T16514] tipc: New replicast peer: 172.20.20.170 [ 381.773138][T16514] tipc: Enabled bearer , priority 10 [ 382.003718][T16527] netlink: 'syz.0.2790': attribute type 22 has an invalid length. [ 382.081923][T16531] netem: change failed [ 382.160519][T16534] syzkaller0: entered promiscuous mode [ 382.169588][T16534] syzkaller0: entered allmulticast mode [ 382.177558][T16536] syzkaller0: entered promiscuous mode [ 382.188380][T16536] syzkaller0: entered allmulticast mode [ 382.212830][T16539] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 382.226424][T16543] __nla_validate_parse: 20 callbacks suppressed [ 382.226442][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 382.255807][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 382.272212][T16543] netlink: 58 bytes leftover after parsing attributes in process `syz.4.2796'. [ 382.281887][T16536] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2791'. [ 382.298158][T16531] tipc: Enabled bearer , priority 0 [ 382.355611][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2794'. [ 382.384007][T16544] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2794'. [ 382.450682][T16556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2798'. [ 382.483022][T16556] netlink: 508 bytes leftover after parsing attributes in process `syz.4.2798'. [ 382.494056][T16556] netlink: 5504 bytes leftover after parsing attributes in process `syz.4.2798'. [ 382.575695][T16561] netlink: 'syz.4.2802': attribute type 30 has an invalid length. [ 382.834886][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'. [ 383.595060][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 384.950374][T16529] tipc: Resetting bearer [ 384.969420][T16529] tipc: Disabling bearer [ 384.991311][T16569] syzkaller0: entered promiscuous mode [ 384.997080][T16569] syzkaller0: entered allmulticast mode [ 385.010423][T16570] bond0: entered promiscuous mode [ 385.017543][ T4943] block nbd3: Receive control failed (result -32) [ 385.027827][T16570] bond_slave_0: entered promiscuous mode [ 385.033781][T16570] bond_slave_1: entered promiscuous mode [ 385.041611][T16570] batadv_slave_0: entered promiscuous mode [ 385.049236][ T5641] tipc: Node number set to 3854068102 [ 385.475601][T16596] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 385.483556][T16601] netlink: 'syz.0.2813': attribute type 5 has an invalid length. [ 385.510747][T16601] syzkaller1: entered promiscuous mode [ 385.522957][T16601] syzkaller1: entered allmulticast mode [ 385.537816][T16596] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 385.929315][ T30] audit: type=1804 audit(1778429131.471:13): pid=16623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2817" name="/newroot/531/memory.events" dev="tmpfs" ino=2735 res=1 errno=0 [ 386.246659][T16639] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 386.259539][T16639] syzkaller1: linktype set to 780 [ 386.392526][T16647] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 386.650270][T16658] lo: entered allmulticast mode [ 386.670040][T16658] lo: left allmulticast mode [ 387.082508][T16675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.282615][T16732] __nla_validate_parse: 9 callbacks suppressed [ 388.282635][T16732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2846'. [ 388.310160][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2847'. [ 388.324985][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2847'. [ 388.530479][T16748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2853'. [ 388.549224][T16751] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2855'. [ 388.559428][T16751] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2855'. [ 388.570131][T16750] netlink: 'syz.2.2851': attribute type 1 has an invalid length. [ 388.583442][T16750] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2851'. [ 388.613901][T16744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2851'. [ 388.753805][T16756] syz.1.2856 (16756) used obsolete PPPIOCDETACH ioctl [ 388.790629][T16756] netlink: 'syz.1.2856': attribute type 2 has an invalid length. [ 388.881736][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.908627][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.918467][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.937777][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.947237][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.010646][ T4943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.019700][ T4943] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.031479][ T4943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.046123][ T4943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.053764][ T4943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.367501][T16797] ip6gre2: entered allmulticast mode [ 389.413222][T16797] team0: Port device ip6gre2 added [ 389.603242][T16814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2868'. [ 389.664427][T16823] netlink: 'syz.1.2871': attribute type 1 has an invalid length. [ 389.729594][T16817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.740493][T16824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.801151][T16815] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 389.942489][T16823] 8021q: adding VLAN 0 to HW filter on device bond13 [ 389.975917][T16840] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2872'. [ 390.006824][ T9210] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.027338][ T9210] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 390.041464][ T9210] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 390.052423][ T9210] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.087510][T16825] vlan3: entered promiscuous mode [ 390.099927][T16825] bond13: entered promiscuous mode [ 390.122516][T16825] vlan3: entered allmulticast mode [ 390.135361][T16825] bond13: entered allmulticast mode [ 390.213420][ T9210] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.234235][ T9210] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 390.244084][ T9210] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 390.252895][ T9210] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.271599][ T9210] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.286603][ T9210] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 390.308377][ T9210] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 390.344085][ T9210] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.371182][T16766] lo speed is unknown, defaulting to 1000 [ 390.378633][ T9210] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.403388][ T9210] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 390.422289][ T9210] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 390.440504][ T9210] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.735535][T16870] syzkaller0: entered promiscuous mode [ 390.749415][T16870] syzkaller0: entered allmulticast mode [ 391.114754][ T5624] Bluetooth: hci5: command tx timeout [ 393.195439][ T5624] Bluetooth: hci5: command tx timeout [ 395.278804][ T5624] Bluetooth: hci5: command tx timeout [ 395.478261][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 395.519314][T16899] netlink: 'syz.2.2888': attribute type 11 has an invalid length. [ 395.530975][T16899] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.2888'. [ 395.646381][T16891] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 395.839592][T16925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2892'. [ 395.873215][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 395.909518][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 395.977874][T16925] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 396.131231][ T6689] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.148015][ T6689] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.190339][ T6689] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.205635][ T6689] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.251702][T16950] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.311105][T16954] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 396.334023][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.360204][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.377201][T16766] bridge_slave_0: entered allmulticast mode [ 396.403297][T16766] bridge_slave_0: entered promiscuous mode [ 396.407933][T16961] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 396.418793][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.436665][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.448508][T16961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.459690][T16766] bridge_slave_1: entered allmulticast mode [ 396.480328][T16964] netlink: 'syz.1.2902': attribute type 21 has an invalid length. [ 396.482532][T16766] bridge_slave_1: entered promiscuous mode [ 396.513795][T16964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2902'. [ 396.537492][T16964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'. [ 396.624330][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.686143][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.775529][T16766] team0: Port device team_slave_0 added [ 396.803594][T16766] team0: Port device team_slave_1 added [ 396.902549][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.922849][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.984711][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.016841][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.023883][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.050714][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.122344][T16980] lo speed is unknown, defaulting to 1000 [ 397.122372][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 397.212835][T16766] hsr_slave_0: entered promiscuous mode [ 397.224157][T16766] hsr_slave_1: entered promiscuous mode [ 397.238467][T16766] debugfs: 'hsr0' already exists in 'hsr' [ 397.245339][T16766] Cannot create hsr debugfs directory [ 397.363590][ T5624] Bluetooth: hci5: command tx timeout [ 397.559001][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 400.583773][T16766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.619467][T16766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.652898][T16766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.698094][T16766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.722451][T16766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.754153][T16766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.772468][T16766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.781510][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 400.802459][T17070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2926'. [ 400.803207][T16766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.065123][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.112354][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.142766][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.149958][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.190072][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.197323][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.458595][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 401.490480][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 401.509618][T17103] netlink: 'syz.2.2932': attribute type 15 has an invalid length. [ 402.164144][ T9211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.195510][ T9211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.269676][T16766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.293755][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2943'. [ 402.326958][T17162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2947'. [ 402.337187][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2943'. [ 402.411784][T17166] syzkaller0: entered promiscuous mode [ 402.443718][T17166] syzkaller0: entered allmulticast mode [ 402.573653][T17173] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2949'. [ 402.595095][T16766] veth0_vlan: entered promiscuous mode [ 402.612808][T16766] veth1_vlan: entered promiscuous mode [ 402.675835][T16766] veth0_macvtap: entered promiscuous mode [ 402.689588][T16766] veth1_macvtap: entered promiscuous mode [ 402.732591][T16766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.770136][T16766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.795064][ T9211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.817466][ T9211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.846812][ T9211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.863770][ T9211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.964424][T17182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2952'. [ 403.020296][ T9211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.033841][ T9211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.123727][ T9211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.157805][ T9211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.215964][T17195] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 403.503867][T17209] netlink: 'syz.0.2854': attribute type 4 has an invalid length. [ 403.569590][T17209] sctp: [Deprecated]: syz.0.2854 (pid 17209) Use of int in maxseg socket option. [ 403.569590][T17209] Use struct sctp_assoc_value instead [ 403.876701][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 403.890667][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 403.908072][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 403.924053][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 403.932732][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.110746][T17233] lo speed is unknown, defaulting to 1000 [ 404.730444][T17226] lo speed is unknown, defaulting to 1000 [ 404.908350][T17257] ip6tnl5: entered allmulticast mode [ 404.922934][ T9212] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 404.942911][ T9212] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 404.952294][ T7668] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 405.045586][ T5641] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 405.080640][T17263] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 405.104704][T17263] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2972'. [ 405.127860][T17263] dummy0: entered allmulticast mode [ 405.834976][ T5641] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 405.838763][T17226] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.850058][T17226] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.854048][T17285] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2976'. [ 405.857411][T17226] bridge_slave_0: entered allmulticast mode [ 405.874089][T17226] bridge_slave_0: entered promiscuous mode [ 405.883126][T17226] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.890536][T17226] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.898030][T17226] bridge_slave_1: entered allmulticast mode [ 405.906004][T17226] bridge_slave_1: entered promiscuous mode [ 405.992948][T17285]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.007647][ T5624] Bluetooth: hci0: command tx timeout [ 406.018600][T17285]  (unregistering): Released all slaves [ 406.127381][T17226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.141814][T17226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.271622][T17226] team0: Port device team_slave_0 added [ 406.283618][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 406.299296][T17293] openvswitch: netlink: Message has 4 unknown bytes. [ 406.301984][T17226] team0: Port device team_slave_1 added [ 406.449881][T17226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.482361][T17226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.570904][T17315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.580789][T17226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.634442][T17226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.663376][T17226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.720018][T17226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.810425][T17318] xt_TPROXY: Can be used only with -p tcp or -p udp [ 406.896990][T17226] hsr_slave_0: entered promiscuous mode [ 406.923512][T17226] hsr_slave_1: entered promiscuous mode [ 406.950610][T17226] debugfs: 'hsr0' already exists in 'hsr' [ 406.962880][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2987'. [ 406.976372][T17226] Cannot create hsr debugfs directory [ 407.046798][T17337] netlink: 'syz.1.2988': attribute type 3 has an invalid length. [ 407.063233][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 407.086985][T17337] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2988'. [ 407.129749][T17337] netlink: 'syz.1.2988': attribute type 3 has an invalid length. [ 407.162105][T17337] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2988'. [ 407.203251][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2987'. [ 407.228933][T17344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2989'. [ 407.273379][T17337] netlink: 'syz.1.2988': attribute type 2 has an invalid length. [ 407.306019][T17337] netlink: 'syz.1.2988': attribute type 1 has an invalid length. [ 407.329967][T17337] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2988'. [ 407.422105][T17348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2990'. [ 407.572420][T17352] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 407.588914][T17352] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 407.597141][T17352] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 407.607622][T17348] 8021q: VLANs not supported on wg2 [ 407.707594][T17365] netlink: 'syz.3.2994': attribute type 58 has an invalid length. [ 407.931067][T17381] xt_hashlimit: size too large, truncated to 1048576 [ 408.079310][ T5624] Bluetooth: hci0: command tx timeout [ 408.258084][T17396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 408.527604][T17407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.534939][T17407] IPv6: NLM_F_CREATE should be set when creating new route [ 408.542176][T17407] IPv6: NLM_F_CREATE should be set when creating new route [ 408.570763][T17226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.620065][T17226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.631023][T17226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.650623][T17226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.666908][T17226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.687035][T17226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.698211][T17226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.727465][T17226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.816257][T17435] netlink: 'syz.2.3011': attribute type 39 has an invalid length. [ 409.010996][T17226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.034775][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 409.086043][T17226] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.127906][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.135131][ T6676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.173447][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.180635][ T6676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.354523][T17447] syzkaller0: entered promiscuous mode [ 409.381765][T17447] syzkaller0: entered allmulticast mode [ 409.695196][T17458] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 410.154921][ T5624] Bluetooth: hci0: command tx timeout [ 410.168172][T17492] netlink: 'syz.0.3024': attribute type 13 has an invalid length. [ 410.183590][T17492] netlink: 'syz.0.3024': attribute type 17 has an invalid length. [ 410.269373][T17482] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.277064][T17482] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.330843][T17482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.349473][T17482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.492486][T17492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.501090][T17492] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.513129][T17492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.544387][T17492] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.551548][T17492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.567121][T17492] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.574334][T17492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.595875][T17492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.605732][T17492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.631117][T17492] veth1_vlan: left promiscuous mode [ 410.637908][T17492] veth0_vlan: left promiscuous mode [ 410.644179][T17492] veth0_vlan: entered promiscuous mode [ 410.653819][T17492] veth1_vlan: entered promiscuous mode [ 410.665419][T17492] veth1_macvtap: left promiscuous mode [ 410.671907][T17492] veth0_macvtap: left promiscuous mode [ 410.679196][T17492] veth0_macvtap: entered promiscuous mode [ 410.693844][T17492] veth1_macvtap: entered promiscuous mode [ 410.706770][T17492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.721965][T17492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.735006][T17492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.748162][T17492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.818400][T17226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.009361][T17513] __nla_validate_parse: 8 callbacks suppressed [ 411.009381][T17513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3031'. [ 411.202158][T17517] ipip0: entered promiscuous mode [ 411.350903][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'. [ 411.442073][T17500] infiniband syz0: set active [ 411.455457][T17500] infiniband syz0: added bridge_slave_1 [ 411.501399][T17500] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 411.519807][T17500] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 411.537870][T17500] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 411.539005][T17226] veth0_vlan: entered promiscuous mode [ 411.605089][T17500] RDS/IB: syz0: added [ 411.612608][T17500] smc: adding ib device syz0 with port count 1 [ 411.649660][T17500] smc: ib device syz0 port 1 has no pnetid [ 411.659193][T17226] veth1_vlan: entered promiscuous mode [ 411.735490][T17226] veth0_macvtap: entered promiscuous mode [ 411.779312][T17226] veth1_macvtap: entered promiscuous mode [ 411.811275][T17226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.857221][T17226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.893546][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.914180][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.928934][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.978846][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.136587][T17558] lo speed is unknown, defaulting to 1000 [ 412.234866][ T5624] Bluetooth: hci0: command tx timeout [ 412.266657][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.290549][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.422155][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.445765][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.121233][T17559] lo speed is unknown, defaulting to 1000 [ 413.293644][T17590] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 413.539216][T17595] syzkaller0: entered promiscuous mode [ 413.565614][T17595] syzkaller0: entered allmulticast mode [ 413.604278][T17598] xt_hl: Unknown Hop Limit match mode: 206 [ 413.606387][T17597] xt_hl: Unknown Hop Limit match mode: 206 [ 413.748278][ T4943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.761944][ T4943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.770976][ T4943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.782518][ T4943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.796411][ T4943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.939903][T17608] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20000 [ 413.970198][T17608] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 414.097673][T17610] netlink: 'syz.4.3053': attribute type 39 has an invalid length. [ 414.370196][T17600] lo speed is unknown, defaulting to 1000 [ 415.016228][T17633] bond1: option lp_interval: invalid value (0) [ 415.022553][T17633] bond1: option lp_interval: allowed values 1 - 2147483647 [ 415.153520][T17633] bond1 (unregistering): Released all slaves [ 415.485164][T17643] syzkaller0: entered promiscuous mode [ 415.490745][T17643] syzkaller0: entered allmulticast mode [ 415.528908][T17643] hmac(sha2: entered promiscuous mode [ 415.837445][ T4943] Bluetooth: hci3: command tx timeout [ 417.514761][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 417.529816][T17657] IPVS: length: 29 != 24 [ 417.737827][T17665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3066'. [ 417.766264][T17665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3066'. [ 417.916001][ T4943] Bluetooth: hci3: command tx timeout [ 418.760109][T17691] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 418.975227][T17600] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.982644][T17600] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.990044][T17600] bridge_slave_0: entered allmulticast mode [ 419.000217][T17600] bridge_slave_0: entered promiscuous mode [ 419.012299][T17600] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.019920][T17600] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.027250][T17600] bridge_slave_1: entered allmulticast mode [ 419.035376][T17600] bridge_slave_1: entered promiscuous mode [ 419.087877][T17600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.101042][T17600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.182788][T17600] team0: Port device team_slave_0 added [ 419.196112][T17600] team0: Port device team_slave_1 added [ 419.229614][T17600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.236801][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.263758][T17600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.276696][T17600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.283780][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.340055][T17600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.561630][T17600] hsr_slave_0: entered promiscuous mode [ 419.575866][T17600] hsr_slave_1: entered promiscuous mode [ 419.593948][T17600] debugfs: 'hsr0' already exists in 'hsr' [ 419.609177][T17600] Cannot create hsr debugfs directory [ 419.806284][T17718] netlink: 'syz.4.3078': attribute type 21 has an invalid length. [ 419.836833][T17718] netlink: 'syz.4.3078': attribute type 22 has an invalid length. [ 419.865412][T17718] netlink: 'syz.4.3078': attribute type 23 has an invalid length. [ 419.899054][T17718] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3078'. [ 419.933761][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 420.008056][T17721] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 420.008408][ T4943] Bluetooth: hci3: command tx timeout [ 420.283417][T17600] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.445985][T17600] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.523918][T17600] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.626314][T17600] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.794506][T17744] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 420.866414][T17744] bond15: entered promiscuous mode [ 420.873890][T17744] 8021q: adding VLAN 0 to HW filter on device bond15 [ 420.887255][T17749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3088'. [ 420.929756][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3087'. [ 421.073866][T17600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.102699][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.121472][T17600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.146680][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.164840][T17600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.209833][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.220069][T17600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.249582][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.450384][T17769] x_tables: duplicate underflow at hook 3 [ 421.691109][T17600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.740712][T17600] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.790989][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.798189][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.888888][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.896096][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.021782][T17790] netlink: 'syz.3.3097': attribute type 13 has an invalid length. [ 422.075908][ T4943] Bluetooth: hci3: command tx timeout [ 422.202547][T17792] sch_tbf: burst 6 is lower than device gretap0 mtu (32783) ! [ 422.215397][ T5918] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 422.359487][T17794] lo speed is unknown, defaulting to 1000 [ 422.369166][T17802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'. [ 422.536295][T17809] netlink: 'syz.1.3103': attribute type 11 has an invalid length. [ 422.933483][T17600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.972699][T17826] netlink: 'syz.3.3108': attribute type 1 has an invalid length. [ 422.995307][T17826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3108'. [ 423.008317][T17600] veth0_vlan: entered promiscuous mode [ 423.035173][ T5918] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 423.043217][T17600] veth1_vlan: entered promiscuous mode [ 423.054254][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 423.092582][T17826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3108'. [ 423.163257][T17826] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3108'. [ 423.219930][T17600] veth0_macvtap: entered promiscuous mode [ 423.248652][T17600] veth1_macvtap: entered promiscuous mode [ 423.320545][T17600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.358184][T17600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.496614][ T9209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.508191][ T9209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.602460][ T9209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.622090][ T9209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.752123][T17851] sctp: [Deprecated]: syz.1.3113 (pid 17851) Use of int in max_burst socket option. [ 423.752123][T17851] Use struct sctp_assoc_value instead [ 423.889490][ T9209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.927424][ T9209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.170165][ T9209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.188379][ T9209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.683151][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.697731][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.708738][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.717717][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.725935][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.055482][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 425.095022][T17891] bond0: Unable to set up delay as MII monitoring is disabled [ 425.227834][T17895] netlink: 'syz.4.3124': attribute type 11 has an invalid length. [ 425.269170][T17900] netlink: 4122 bytes leftover after parsing attributes in process `syz.2.3126'. [ 425.390274][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'. [ 425.410537][T17908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3128'. [ 425.420719][T17908] netem: change failed [ 425.446364][T17877] lo speed is unknown, defaulting to 1000 [ 425.708347][T17922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3130'. [ 425.749604][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3131'. [ 425.786732][T17927] netlink: 'syz.0.3132': attribute type 1 has an invalid length. [ 426.030369][T17936] lo speed is unknown, defaulting to 1000 [ 426.209817][T17941] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 426.303542][T17942] 5: entered promiscuous mode [ 426.796494][ T4943] Bluetooth: hci2: command tx timeout [ 426.822168][T17939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.028689][T17976] ip6gre1: entered allmulticast mode [ 427.036985][T17976] team0: Device ip6gre1 is of different type [ 427.076857][T17877] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.084327][T17877] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.093263][T17877] bridge_slave_0: entered allmulticast mode [ 427.107547][T17877] bridge_slave_0: entered promiscuous mode [ 427.141884][T17877] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.152662][T17877] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.165071][T17877] bridge_slave_1: entered allmulticast mode [ 427.175061][T17877] bridge_slave_1: entered promiscuous mode [ 427.190342][T17985] : entered promiscuous mode [ 427.272633][T17877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.296819][T17877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.336219][T17992] netlink: 'syz.4.3149': attribute type 1 has an invalid length. [ 427.552011][T17877] team0: Port device team_slave_0 added [ 427.564023][T17996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.582960][T17877] team0: Port device team_slave_1 added [ 427.593869][T17963] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 427.623830][T17996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.766291][T17877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.777856][T17877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.844617][T17877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.875107][T17877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.897161][T17877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.972378][T17877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.054474][T17877] hsr_slave_0: entered promiscuous mode [ 428.061377][T18013] __nla_validate_parse: 5 callbacks suppressed [ 428.061393][T18013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3157'. [ 428.061573][T17877] hsr_slave_1: entered promiscuous mode [ 428.085361][T17877] debugfs: 'hsr0' already exists in 'hsr' [ 428.091130][T17877] Cannot create hsr debugfs directory [ 428.278423][T18021] Bluetooth: MGMT ver 1.23 [ 428.449185][T18027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3161'. [ 428.542330][T18027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.577784][T18027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.806424][T18051] xt_TCPMSS: Only works on TCP SYN packets [ 428.807768][ T4943] Bluetooth: hci0: command 0x080f tx timeout [ 428.875144][ T4943] Bluetooth: hci2: command tx timeout [ 428.953579][T18051] bridge_slave_1: left allmulticast mode [ 428.988621][T18051] bridge_slave_1: left promiscuous mode [ 428.999370][T18051] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.020061][T18051] bridge_slave_0: left allmulticast mode [ 429.035028][T18051] bridge_slave_0: left promiscuous mode [ 429.040942][T18051] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.138839][T18063] netlink: 'syz.0.3172': attribute type 12 has an invalid length. [ 429.314734][T17877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.337253][T17877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.364473][T17877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.396094][T17877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.411970][T17877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.428065][T17877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.437828][T18072] block nbd4: server does not support multiple connections per device. [ 429.439355][T17877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.455953][T18072] block nbd4: shutting down sockets [ 429.481088][T17877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.488999][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3174'. [ 429.524068][T18073] syzkaller0: entered promiscuous mode [ 429.530905][T18073] syzkaller0: entered allmulticast mode [ 429.634395][T17877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.661274][T17877] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.673619][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.680775][ T9209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.697740][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.704937][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.819170][ T6676] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc [ 429.979083][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3178'. [ 430.064094][T18110] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3180'. [ 430.346152][T17877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.424224][T17877] veth0_vlan: entered promiscuous mode [ 430.449700][T17877] veth1_vlan: entered promiscuous mode [ 430.515640][T17877] veth0_macvtap: entered promiscuous mode [ 430.542712][T17877] veth1_macvtap: entered promiscuous mode [ 430.596717][T17877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.637319][T17877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.671489][ T6676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.697414][ T6676] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.717811][ T6676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.747712][ T6676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.954905][ T4943] Bluetooth: hci2: command tx timeout [ 432.663928][T18083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.870335][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.904821][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.003318][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.015735][T18143] netlink: 'syz.2.3188': attribute type 3 has an invalid length. [ 433.028543][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.037696][ T4943] Bluetooth: hci2: command tx timeout [ 433.156918][T18148] syzkaller0: entered promiscuous mode [ 433.185007][T18148] syzkaller0: entered allmulticast mode [ 433.241990][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'. [ 433.316998][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 433.662741][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.671278][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.687114][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.696750][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.707340][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.811973][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 434.282969][T18197] netlink: 'syz.0.3198': attribute type 8 has an invalid length. [ 434.468890][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3201'. [ 434.521152][T18209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3201'. [ 434.561720][T18209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3201'. [ 434.795540][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 434.812418][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3203'. [ 434.850609][T18174] lo speed is unknown, defaulting to 1000 [ 435.008701][T18228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.102038][T18235] team0: No ports can be present during mode change [ 435.190225][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 435.289180][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 435.367789][T18242] : entered promiscuous mode [ 435.376983][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 435.427355][T18246] openvswitch: : Dropping previously announced user features [ 435.474480][T18250] netlink: 'syz.0.3212': attribute type 21 has an invalid length. [ 435.497950][T18250] netlink: 'syz.0.3212': attribute type 21 has an invalid length. [ 435.756694][ T4943] Bluetooth: hci1: command tx timeout [ 436.990593][T18337] netlink: 'syz.3.3233': attribute type 61 has an invalid length. [ 437.015419][T18337] netlink: 'syz.3.3233': attribute type 62 has an invalid length. [ 437.104148][T18346] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 437.216673][T18174] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.253608][T18174] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.276868][T18174] bridge_slave_0: entered allmulticast mode [ 437.283636][T18350] netlink: 'syz.2.3236': attribute type 1 has an invalid length. [ 437.293205][T18350] nbd: error processing sock list [ 437.300635][T18174] bridge_slave_0: entered promiscuous mode [ 437.325912][T18174] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.351247][T18174] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.383417][T18174] bridge_slave_1: entered allmulticast mode [ 437.412595][T18174] bridge_slave_1: entered promiscuous mode [ 437.514307][T18174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.557121][T18174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.630334][T18174] team0: Port device team_slave_0 added [ 437.639256][T18174] team0: Port device team_slave_1 added [ 437.681139][T18174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.697057][T18174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.746159][T18174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.772060][T18174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.782745][T18174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.834826][ T4943] Bluetooth: hci1: command tx timeout [ 437.835670][T18174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.988842][T18380] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 438.012367][T18174] hsr_slave_0: entered promiscuous mode [ 438.026337][T18174] hsr_slave_1: entered promiscuous mode [ 438.048025][T18174] debugfs: 'hsr0' already exists in 'hsr' [ 438.053984][T18174] Cannot create hsr debugfs directory [ 438.148631][T18382] syzkaller0: entered promiscuous mode [ 438.165193][T18382] syzkaller0: entered allmulticast mode [ 438.581890][T18403] __nla_validate_parse: 10 callbacks suppressed [ 438.581907][T18403] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3248'. [ 439.053464][T18423] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 439.068965][T18423] bond1 (unregistering): Released all slaves [ 439.296866][T18441] bond1: option all_slaves_active: invalid value (6) [ 439.308253][T18441] bond1 (unregistering): Released all slaves [ 439.857061][T18174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.877463][T18174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.900422][T18174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.920014][ T4943] Bluetooth: hci1: command tx timeout [ 439.942211][T18174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.973735][T18174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.003030][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 440.017082][T18174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.019743][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 440.033555][T18174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.041466][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 440.051110][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 440.062296][T18174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.387029][T18174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.452175][T18174] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.467475][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.474668][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.502713][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.509918][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.744152][T18505] bond1: option arp_interval: invalid value (18446744073709551615) [ 440.791013][T18505] bond1: option arp_interval: allowed values 0 - 2147483647 [ 440.832486][T18505] bond1 (unregistering): Released all slaves [ 440.906792][T18496] lo speed is unknown, defaulting to 1000 [ 441.044426][T18527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'. [ 441.066329][T18530] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3278'. [ 441.181126][T18533] 8021q: VLANs not supported on wg0 [ 441.486447][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 441.694324][T18561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.792759][T18566] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3287'. [ 441.861507][T18174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.991272][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 442.005554][ T4943] Bluetooth: hci1: command tx timeout [ 442.016211][T18174] veth0_vlan: entered promiscuous mode [ 442.044074][T18576] netlink: 'syz.0.3290': attribute type 13 has an invalid length. [ 442.051880][T18174] veth1_vlan: entered promiscuous mode [ 442.072133][T18576] netlink: 'syz.0.3290': attribute type 17 has an invalid length. [ 442.132602][T18174] veth0_macvtap: entered promiscuous mode [ 442.299267][T18581] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.346582][ T9] syz0: Port: 1 Link DOWN [ 442.350377][T18174] veth1_macvtap: entered promiscuous mode [ 442.454247][T18174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.490940][T18174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.510804][ T9212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.556573][ T9212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.582880][ T9212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.612178][ T9212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.838866][ T9212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.877271][ T9212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.990190][ T9209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.003965][ T9209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.236513][T18616] netlink: 'syz.1.3195': attribute type 15 has an invalid length. [ 443.475606][T18631] lo speed is unknown, defaulting to 1000 [ 444.134257][T18657] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20000 [ 444.141429][ T5918] IPVS: starting estimator thread 0... [ 444.187373][T18657] __nla_validate_parse: 4 callbacks suppressed [ 444.187389][T18657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'. [ 444.243992][T18657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'. [ 444.254880][T18659] IPVS: using max 33 ests per chain, 79200 per kthread [ 444.278339][T18657] ip6t_REJECT: ECHOREPLY is not supported [ 444.590605][T18675] netlink: 'syz.2.3315': attribute type 1 has an invalid length. [ 444.617708][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 444.650630][T18675] netlink: 'syz.2.3315': attribute type 1 has an invalid length. [ 444.710419][T18675] syzkaller1: entered promiscuous mode [ 444.722133][T18675] syzkaller1: entered allmulticast mode [ 445.084152][T18679] macvtap1: entered promiscuous mode [ 445.103343][T18679] macvtap1: entered allmulticast mode [ 445.124698][T18679] veth1_vlan: entered allmulticast mode [ 445.338225][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3319'. [ 445.354252][T18686] macvtap2: entered promiscuous mode [ 445.361819][T18690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3319'. [ 445.374854][T18686] macvtap2: entered allmulticast mode [ 445.798113][ T7662] IPVS: starting estimator thread 0... [ 445.906966][T18706] IPVS: using max 31 ests per chain, 74400 per kthread [ 446.247011][T18718] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 446.465234][T18726] IPVS: length: 92 != 24 [ 446.483933][T18726] IPVS: length: 92 != 24 [ 446.503693][T18726] IPVS: length: 92 != 24 [ 446.516868][T18726] IPVS: length: 92 != 24 [ 446.536471][T18726] IPVS: length: 92 != 24 [ 446.756493][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3337'. [ 446.791541][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3337'. [ 446.801800][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'. [ 446.897252][T18752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.915385][T18744] team0: Port device team_slave_0 removed [ 447.004005][T18745] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 447.034475][T18745] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 447.081528][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'. [ 447.092976][T18762] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3340'. [ 447.161223][T18765] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 447.194874][T18765] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 447.211972][T18765] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 447.443189][T18777] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 447.461218][T18777] syzkaller1: linktype set to 780 [ 447.480991][T18778] lo speed is unknown, defaulting to 1000 [ 447.560793][T18787] netlink: 'syz.2.3347': attribute type 6 has an invalid length. [ 447.585605][T18787] netlink: 'syz.2.3347': attribute type 23 has an invalid length. [ 447.608897][T18787] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.741007][T18861] Bluetooth: MGMT ver 1.23 [ 449.928920][T18869] netlink: 'syz.2.3359': attribute type 1 has an invalid length. [ 449.997824][T18864] lo speed is unknown, defaulting to 1000 [ 450.678093][T18881] netlink: 'syz.0.3361': attribute type 10 has an invalid length. [ 450.711214][T18881] __nla_validate_parse: 4 callbacks suppressed [ 450.711233][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 450.787248][T18882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3361'. [ 450.934851][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3362'. [ 451.097561][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3363'. [ 451.153203][T18895] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3363'. [ 452.600622][T18857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.715794][ T4943] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 452.716980][ T5624] Bluetooth: hci0: command 0x080f tx timeout [ 452.884215][T18922] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 452.960882][T18926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3372'. [ 453.004028][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3374'. [ 453.016696][T18930] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 453.030688][T18930] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 453.105741][T18938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3371'. [ 453.175288][T18942] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3371'. [ 453.314780][T18936] netlink: 'syz.4.3376': attribute type 29 has an invalid length. [ 453.324648][T18927] lo speed is unknown, defaulting to 1000 [ 453.521969][T18959] sctp: [Deprecated]: syz.4.3381 (pid 18959) Use of int in maxseg socket option. [ 453.521969][T18959] Use struct sctp_assoc_value instead [ 456.303826][T18947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.633649][T19000] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 456.641811][T18998] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 456.678106][T19000] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 456.678565][T18998] bond1 (unregistering): Released all slaves [ 456.733512][T19000] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 456.758086][T19000] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 456.766679][T19000] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 456.787979][T19000] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 456.894008][T19009] syzkaller0: entered promiscuous mode [ 456.908349][T19009] syzkaller0: entered allmulticast mode [ 457.409862][T19041] : renamed from virt_wifi0 [ 457.570619][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3405'. [ 457.596684][T19047] hsr_slave_0: left promiscuous mode [ 457.611780][T19047] hsr_slave_1: left promiscuous mode [ 457.828800][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 457.878839][T19052] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3407'. [ 457.887169][T19060] openvswitch: netlink: Key type 319 is out of range max 32 [ 458.125270][T19074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3412'. [ 458.217245][T19080] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3415'. [ 458.271530][T19078] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3416'. [ 458.316761][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3416'. [ 458.364194][T19078] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 458.503300][T19096] netlink: 'syz.2.3421': attribute type 13 has an invalid length. [ 458.548243][T19091] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.555979][T19091] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.743320][T19091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.792518][T19091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.939443][T19112] bridge0: port 3(erspan0) entered blocking state [ 458.960494][T19112] bridge0: port 3(erspan0) entered disabled state [ 458.983980][T19112] erspan0: entered allmulticast mode [ 458.994233][T19112] erspan0: entered promiscuous mode [ 458.995717][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'. [ 459.000213][T19112] bridge0: port 3(erspan0) entered blocking state [ 459.014856][T19112] bridge0: port 3(erspan0) entered forwarding state [ 459.031522][ T9209] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.041038][ T9209] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.050183][T19112] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3425'. [ 459.051791][ T9209] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.081293][T19112] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3425'. [ 459.124689][T19118] erspan0: left allmulticast mode [ 459.130344][T19118] erspan0: left promiscuous mode [ 459.140674][T19118] bridge0: port 3(erspan0) entered disabled state [ 459.151596][ T9209] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.257452][T19123] syzkaller0: entered promiscuous mode [ 459.281316][T19123] syzkaller0: entered allmulticast mode [ 459.344204][T19134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.066203][T19149] netlink: 'syz.3.3433': attribute type 1 has an invalid length. [ 460.073987][T19149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.457268][T19155] netlink: 'syz.3.3436': attribute type 163 has an invalid length. [ 461.527209][T19160] bond1: Removing last arp target with arp_interval on [ 461.831163][T19195] netlink: Conntrack attr has 3 unknown bytes [ 462.170536][T19202] syzkaller0: entered promiscuous mode [ 462.183250][T19202] syzkaller0: entered allmulticast mode [ 462.208731][T19222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.321768][T19257] __nla_validate_parse: 4 callbacks suppressed [ 463.321786][T19257] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3457'. [ 463.341943][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3458'. [ 463.364732][T19257] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3457'. [ 463.421140][T19257] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3457'. [ 463.495598][T19271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3459'. [ 463.680725][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3459'. [ 463.931462][T19282] batman_adv: batadv0: Adding interface: veth3 [ 463.972235][T19282] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.026532][T19282] batman_adv: batadv0: Interface activated: veth3 [ 464.163016][T19303] netlink: 'syz.3.3464': attribute type 2 has an invalid length. [ 464.191017][T19306] erspan1: entered promiscuous mode [ 464.197328][T19306] erspan1: entered allmulticast mode [ 464.223229][T19303] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3464'. [ 464.530497][T19321] openvswitch: netlink: EtherType 50a is less than min 600 [ 464.763706][T19326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3469'. [ 464.784262][T19326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3469'. [ 465.539193][T19345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3473'. [ 465.573216][T19347] syzkaller0: entered promiscuous mode [ 465.594678][T19347] syzkaller0: entered allmulticast mode [ 466.418329][T19363] xt_bpf: check failed: parse error [ 466.437975][T19365] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 466.456075][T19365] syzkaller0: entered promiscuous mode [ 466.462596][T19365] syzkaller0: entered allmulticast mode [ 467.247863][T19313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.429378][T19380] Bluetooth: MGMT ver 1.23 [ 467.798263][T19405] netlink: 'syz.0.3486': attribute type 1 has an invalid length. [ 467.948787][T19408] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 467.960240][T19408] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 468.259498][T19433] x_tables: unsorted underflow at hook 2 [ 468.319723][T19433] lo speed is unknown, defaulting to 1000 [ 468.703334][T19456] netlink: 'syz.3.3501': attribute type 4 has an invalid length. [ 468.715666][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 468.800189][T19459] __nla_validate_parse: 4 callbacks suppressed [ 468.800208][T19459] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3501'. [ 468.833807][T19459] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3501'. [ 468.837245][T19461] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 468.892605][T19461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.207038][T19474] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3504'. [ 469.527936][T19484] can: request_module (can-proto-0) failed. [ 469.807079][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3513'. [ 470.038950][T19513] IPv6: addrconf: prefix option has invalid lifetime [ 470.056618][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'. [ 470.059535][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'. [ 470.192256][T19515] lo speed is unknown, defaulting to 1000 [ 470.577891][T19535] sctp: [Deprecated]: syz.3.3522 (pid 19535) Use of int in max_burst socket option deprecated. [ 470.577891][T19535] Use struct sctp_assoc_value instead [ 470.919099][ T30] audit: type=1800 audit(1778429216.461:14): pid=19540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3525" name="memory.events" dev="tmpfs" ino=523 res=0 errno=0 [ 470.977914][ T30] audit: type=1804 audit(1778429216.501:15): pid=19540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3525" name="/newroot/98/memory.events" dev="tmpfs" ino=523 res=1 errno=0 [ 471.349718][T19548] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3528'. [ 471.517339][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3529'. [ 471.605706][T19550] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3527'. [ 472.019406][T19560] syzkaller0: entered promiscuous mode [ 472.034371][T19560] syzkaller0: entered allmulticast mode [ 472.486276][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3535'. [ 472.499360][T19573] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 472.843341][T19589] unsupported nla_type 216 [ 472.898634][T19586] lo speed is unknown, defaulting to 1000 [ 473.009664][T19601] netlink: 'syz.4.3541': attribute type 1 has an invalid length. [ 473.472827][T19617] sctp: [Deprecated]: syz.4.3547 (pid 19617) Use of int in max_burst socket option. [ 473.472827][T19617] Use struct sctp_assoc_value instead [ 474.219675][T19637] __nla_validate_parse: 69 callbacks suppressed [ 474.219694][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3554'. [ 474.683069][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'. [ 474.777330][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3558'. [ 474.902009][T19657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3560'. [ 475.264421][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3562'. [ 475.328242][T19668] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 475.997119][T19696] netlink: 'syz.1.3567': attribute type 10 has an invalid length. [ 476.057365][T19701] netlink: 'syz.1.3567': attribute type 10 has an invalid length. [ 476.101970][T19696] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 476.136358][T19696] team0: Failed to send options change via netlink (err -105) [ 476.164298][T19696] team0: Port device dummy0 added [ 476.202530][T19701] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 476.276371][T19701] team0: Failed to send options change via netlink (err -105) [ 476.298953][T19701] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 476.318675][T19701] team0: Port device dummy0 removed [ 476.350636][T19701] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 476.569024][T19720] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 476.591695][T19720] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 476.620000][T19720] netlink: 'syz.2.3570': attribute type 1 has an invalid length. [ 476.674332][T19728] netlink: 'syz.1.3572': attribute type 2 has an invalid length. [ 476.696962][T19728] tipc: Started in network mode [ 476.718397][T19728] tipc: Node identity 1340008, cluster identity 4711 [ 476.756187][T19728] tipc: Node number set to 20185096 [ 476.795758][T19732] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3574'. [ 476.937811][T19744] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3576'. [ 477.119644][T19760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3579'. [ 477.137155][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3579'. [ 477.146492][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3579'. [ 479.264289][T19787] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 479.802885][T19743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.444147][T19826] __nla_validate_parse: 2 callbacks suppressed [ 480.444165][T19826] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3595'. [ 480.538514][T19831] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 480.557056][T19831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.564337][T19831] IPv6: NLM_F_CREATE should be set when creating new route [ 480.594047][T19833] Bluetooth: MGMT ver 1.23 [ 480.602817][T19831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3598'. [ 480.773861][T19847] netem: change failed [ 480.917735][T19855] bridge_slave_0: left allmulticast mode [ 480.923805][T19855] bridge_slave_0: left promiscuous mode [ 480.934590][T19855] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.950136][T19855] bridge_slave_1: left allmulticast mode [ 480.959693][T19855] bridge_slave_1: left promiscuous mode [ 480.966350][T19855] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.984908][T19855] bond0: (slave bond_slave_0): Releasing backup interface [ 480.998270][T19855] bond0: (slave bond_slave_1): Releasing backup interface [ 481.008940][T19855] team0: Port device team_slave_0 removed [ 481.017249][T19855] team0: Port device team_slave_1 removed [ 481.023431][T19855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.041495][T19855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.068072][T19855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 481.121771][T19863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3609'. [ 481.154372][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3610'. [ 481.536907][T19888] lo speed is unknown, defaulting to 1000 [ 481.702218][T19906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3622'. [ 481.707637][T19905] syzkaller0: entered promiscuous mode [ 481.730166][T19905] syzkaller0: entered allmulticast mode [ 482.110555][T19915] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3623'. [ 482.130016][T19915] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3623'. [ 482.173410][T19915] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3623'. [ 482.613792][T19933] netlink: 'syz.1.3630': attribute type 11 has an invalid length. [ 482.633715][T19933] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3630'. [ 482.704834][T19929] lo speed is unknown, defaulting to 1000 [ 482.719174][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 483.456328][T19968] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 483.469229][T19968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.516963][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.526082][ T7668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.833629][T19978] A link change request failed with some changes committed already. Interface ifb1 may have been left with an inconsistent configuration, please check. [ 483.881016][T19980] lo speed is unknown, defaulting to 1000 [ 484.557641][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.741567][T19996] netlink: 'syz.3.3645': attribute type 1 has an invalid length. [ 484.750598][T19996] netlink: 'syz.3.3645': attribute type 2 has an invalid length. [ 484.768828][T19996] netlink: 'syz.3.3645': attribute type 3 has an invalid length. [ 484.885014][T19998] netlink: 'syz.3.3646': attribute type 1 has an invalid length. [ 484.893031][T19998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.598661][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.104888][T20040] __nla_validate_parse: 4 callbacks suppressed [ 486.104906][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'. [ 486.162613][T20040] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 486.556222][ T7668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.634090][T20056] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 486.666549][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.689364][T20056] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 487.018447][T20074] --map-set only usable from mangle table [ 487.057976][T20077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3666'. [ 487.194386][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'. [ 487.216159][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3670'. [ 487.276829][ T7668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.283426][ T6676] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.303770][ T6676] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.324954][ T6676] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.339273][ T6676] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.353436][T20096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3671'. [ 487.371452][T20096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3671'. [ 487.403862][T20097] bond1: (slave bond_slave_1): Device is not our slave [ 487.411062][T20097] bond1: option active_slave: invalid value (bond_slave_1) [ 487.460183][T20097] bond1 (unregistering): Released all slaves [ 487.675094][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.914836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.924697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.715151][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.595196][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.755148][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.957050][T20069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.983085][T20079] debugfs: '1^!Y [ 489.983085][T20079] 3UH5rBn\' already exists in 'ieee80211' [ 490.270766][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 490.361465][ T30] audit: type=1800 audit(1778429235.901:16): pid=20122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3673" name="r" dev="tmpfs" ino=717 res=0 errno=0 [ 490.424039][T20127] batadv_slave_0: entered promiscuous mode [ 490.448336][T20127] netlink: 'syz.4.3678': attribute type 1 has an invalid length. [ 490.457949][T20128] IPv6: addrconf: prefix option has invalid lifetime [ 490.469577][T20129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3679'. [ 490.478842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.479001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.484794][T20127] netlink: 'syz.4.3678': attribute type 1 has an invalid length. [ 490.505243][T20129] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 490.506243][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3680'. [ 490.797737][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.818580][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3685'. [ 490.889747][T20163] xt_hashlimit: size too large, truncated to 1048576 [ 491.292427][T20125] batadv_slave_0: left promiscuous mode [ 491.336769][T20180] veth0_macvtap: left promiscuous mode [ 491.511541][T20195] netlink: 'syz.4.3691': attribute type 1 has an invalid length. [ 491.540320][T20180] veth0_macvtap: entered promiscuous mode [ 491.616931][T20203] __nla_validate_parse: 1 callbacks suppressed [ 491.616948][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'. [ 491.628355][T20204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3691'. [ 491.662975][T20192] lo speed is unknown, defaulting to 1000 [ 491.753967][T20199] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 491.795498][T20199] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 491.836912][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.888833][T20203] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 491.901903][T20203] bond2 (unregistering): Released all slaves [ 491.946187][T20204] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 491.973465][T20195] ip6gretap1: entered promiscuous mode [ 491.979043][T20195] ip6gretap1: entered allmulticast mode [ 491.990866][T20195] bond2: (slave ip6gretap1): making interface the new active one [ 492.019641][T20195] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 492.075982][T20221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3697'. [ 492.318322][T20235] netlink: 'syz.1.3698': attribute type 1 has an invalid length. [ 492.380188][T20236] pimreg: entered allmulticast mode [ 492.432393][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3701'. [ 492.461273][T20235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.482287][T20235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3698'. [ 492.537413][T20239] syz_tun: entered allmulticast mode [ 492.591579][T20227] pimreg: left allmulticast mode [ 492.638604][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.803143][T20254] ipvlan2: entered promiscuous mode [ 492.876628][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.892480][T20267] netlink: 'syz.1.3703': attribute type 3 has an invalid length. [ 492.929657][T20267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3703'. [ 493.031686][T20268] tun0: tun_chr_ioctl cmd 1074025675 [ 493.051475][T20268] tun0: persist enabled [ 493.064013][T20277] tun0: tun_chr_ioctl cmd 1074025675 [ 493.085170][T20277] tun0: persist disabled [ 493.183110][T20282] bond2: option updelay: invalid value (18446744073709518847) [ 493.204779][T20282] bond2: option updelay: allowed values 0 - 2147483647 [ 493.226492][T20282] bond2 (unregistering): Released all slaves [ 493.818369][T20311] bridge_slave_0: left allmulticast mode [ 493.861529][T20311] bridge_slave_0: left promiscuous mode [ 493.877752][T20311] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.912015][T20311] bridge_slave_1: left promiscuous mode [ 493.931143][T20311] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.019915][T20311] bond0: (slave bond_slave_0): Releasing backup interface [ 494.092923][T20311] bond0: (slave bond_slave_1): Releasing backup interface [ 494.169699][T20311] team0: Port device team_slave_0 removed [ 494.211977][T20311] team0: Port device team_slave_1 removed [ 494.244397][T20311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.267408][T20311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.304454][T20311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.336358][T20311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.514381][T20331] lo speed is unknown, defaulting to 1000 [ 494.629060][T20342] SET target dimension over the limit! [ 494.665013][T20342] SET target dimension over the limit! [ 494.933449][T20357] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3726'. [ 494.957548][ T7662] net_ratelimit: 50 callbacks suppressed [ 494.957564][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.972847][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 495.161175][T20369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3725'. [ 495.236693][T20330] lo speed is unknown, defaulting to 1000 [ 495.534500][ T30] audit: type=1800 audit(1778429241.071:17): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3734" name="blkio.bfq.time_recursive" dev="tmpfs" ino=730 res=0 errno=0 [ 495.610820][T20384] syzkaller0: entered promiscuous mode [ 495.631353][T20384] syzkaller0: entered allmulticast mode [ 495.677641][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.741966][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'. [ 495.992215][T20399] lo speed is unknown, defaulting to 1000 [ 495.998540][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.200367][T20411] pimreg: entered allmulticast mode [ 496.213071][T20411] pimreg: left allmulticast mode [ 496.423335][T20414] netem: change failed [ 496.878287][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.889150][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.038294][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.348134][T20446] __nla_validate_parse: 3 callbacks suppressed [ 497.348152][T20446] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3748'. [ 497.419319][T20451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3750'. [ 497.428669][T20451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3750'. [ 497.431240][T20446] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3748'. [ 497.530375][T20451] gretap0: entered promiscuous mode [ 497.551867][T20451] gretap0: left promiscuous mode [ 498.077904][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.191875][T20478] netlink: 'syz.0.3757': attribute type 64 has an invalid length. [ 498.422730][T20472] syzkaller0: entered promiscuous mode [ 498.475906][T20472] syzkaller0: entered allmulticast mode [ 498.716807][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.081577][T20500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3758'. [ 499.115952][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.384012][T20506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3759'. [ 499.386268][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3759'. [ 499.525175][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3760'. [ 499.545006][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3760'. [ 500.154944][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.366569][T20528] netlink: 'syz.1.3765': attribute type 1 has an invalid length. [ 500.399197][T20528] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 500.412181][T20528] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 500.452955][T20531] bond2: (slave gretap1): making interface the new active one [ 500.464360][T20531] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 500.507189][T20528] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 501.070785][T20473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.265810][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.289799][T20538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.485502][T20549] macsec1: entered promiscuous mode [ 501.596530][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3771'. [ 501.755440][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.317319][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.521314][T20581] __nla_validate_parse: 1 callbacks suppressed [ 502.521332][T20581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3776'. [ 503.355041][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.004236][T20561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3772'. [ 504.220527][T20580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.262752][T20580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.297659][T20572] lo speed is unknown, defaulting to 1000 [ 504.397677][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.435741][T20605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3783'. [ 504.439529][T20599] --map-set only usable from mangle table [ 504.482338][T20580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.504711][T20580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.651581][T20609] netlink: 'syz.1.3784': attribute type 2 has an invalid length. [ 504.671026][T20609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3784'. [ 504.682018][T20580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.692613][T20580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.794875][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.851590][T20580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.874918][T20580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.056434][T20615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.074781][T20615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.085597][T20615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3785'. [ 505.436740][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.573904][T20623] macvtap1: entered promiscuous mode [ 505.580666][T20623] macvtap1: entered allmulticast mode [ 505.591157][T20623] veth1_vlan: entered allmulticast mode [ 505.906885][ T9212] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.924790][ T9212] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.009797][ T9209] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.028307][ T9209] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.262678][ T76] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.293356][ T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.410703][ T9212] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.431641][T20649] smc: removing ib device syz0 [ 506.436573][ T9212] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.456524][T20650] ================================================================== [ 506.464617][T20650] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x36/0x50 [ 506.472352][T20650] Read of size 1 at addr ffff8880780bf6e8 by task syz.4.3795/20650 [ 506.480252][T20650] [ 506.482592][T20650] CPU: 0 UID: 0 PID: 20650 Comm: syz.4.3795 Not tainted syzkaller #0 PREEMPT(full) [ 506.482614][T20650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.482632][T20650] Call Trace: [ 506.482643][T20650] [ 506.482650][T20650] dump_stack_lvl+0xe8/0x150 [ 506.482674][T20650] print_address_description+0x55/0x1e0 [ 506.482693][T20650] ? _raw_spin_lock_bh+0x36/0x50 [ 506.482716][T20650] print_report+0x58/0x70 [ 506.482731][T20650] kasan_report+0x117/0x150 [ 506.482758][T20650] ? _raw_spin_lock_bh+0x36/0x50 [ 506.482784][T20650] ? lock_sock_nested+0x6a/0x100 [ 506.482803][T20650] __kasan_check_byte+0x2a/0x40 [ 506.482826][T20650] lock_acquire+0x84/0x350 [ 506.482849][T20650] ? lock_sock_nested+0x6a/0x100 [ 506.482874][T20650] _raw_spin_lock_bh+0x36/0x50 [ 506.482895][T20650] ? lock_sock_nested+0x6a/0x100 [ 506.482914][T20650] lock_sock_nested+0x6a/0x100 [ 506.482935][T20650] inet_shutdown+0x6a/0x390 [ 506.482955][T20650] udp_tunnel_sock_release+0x6d/0x80 [ 506.482974][T20650] rxe_net_del+0x198/0x280 [ 506.482997][T20650] rxe_dellink+0x15/0x20 [ 506.483015][T20650] nldev_dellink+0x304/0x3d0 [ 506.483037][T20650] ? __pfx_nldev_dellink+0x10/0x10 [ 506.483104][T20650] ? apparmor_capable+0x126/0x170 [ 506.483123][T20650] ? bpf_lsm_capable+0x9/0x20 [ 506.483140][T20650] ? security_capable+0x7e/0x2c0 [ 506.483162][T20650] ? __pfx_nldev_dellink+0x10/0x10 [ 506.483182][T20650] rdma_nl_rcv+0x6d1/0xa10 [ 506.483208][T20650] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 506.483236][T20650] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.483258][T20650] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.483281][T20650] netlink_unicast+0x75c/0x8e0 [ 506.483306][T20650] netlink_sendmsg+0x813/0xb40 [ 506.483332][T20650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.483352][T20650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 506.483370][T20650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.483389][T20650] ____sys_sendmsg+0x972/0x9f0 [ 506.483408][T20650] ? __might_fault+0xaf/0x130 [ 506.483427][T20650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.483449][T20650] ? import_iovec+0x73/0xa0 [ 506.483470][T20650] ___sys_sendmsg+0x2a5/0x360 [ 506.483488][T20650] ? __lock_acquire+0x6b5/0x2cf0 [ 506.483503][T20650] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.483524][T20650] ? futex_wait+0x2a2/0x390 [ 506.483551][T20650] ? __fget_files+0x2a/0x420 [ 506.483568][T20650] ? __fget_files+0x3a0/0x420 [ 506.483592][T20650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 506.483616][T20650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.483649][T20650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.483667][T20650] do_syscall_64+0x15f/0xf80 [ 506.483682][T20650] ? trace_irq_disable+0x3b/0x140 [ 506.483705][T20650] ? clear_bhb_loop+0x40/0x90 [ 506.483724][T20650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.483739][T20650] RIP: 0033:0x7f3c7d59cdd9 [ 506.483753][T20650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.483765][T20650] RSP: 002b:00007f3c7e4e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.483781][T20650] RAX: ffffffffffffffda RBX: 00007f3c7d816180 RCX: 00007f3c7d59cdd9 [ 506.483792][T20650] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000007 [ 506.483801][T20650] RBP: 00007f3c7d632d69 R08: 0000000000000000 R09: 0000000000000000 [ 506.483811][T20650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.483820][T20650] R13: 00007f3c7d816218 R14: 00007f3c7d816180 R15: 00007ffd88e26728 [ 506.483840][T20650] [ 506.483845][T20650] [ 506.824918][T20650] Allocated by task 17500: [ 506.829312][T20650] kasan_save_track+0x3e/0x80 [ 506.833979][T20650] __kasan_slab_alloc+0x6c/0x80 [ 506.838814][T20650] kmem_cache_alloc_noprof+0x2bc/0x650 [ 506.844266][T20650] sk_prot_alloc+0x57/0x210 [ 506.848756][T20650] sk_alloc+0x3a/0x390 [ 506.852809][T20650] inet6_create+0x7f0/0x1260 [ 506.857385][T20650] __sock_create+0x4b2/0x9d0 [ 506.861956][T20650] udp_sock_create6+0xd6/0x6b0 [ 506.866701][T20650] rxe_setup_udp_tunnel+0x129/0x7b0 [ 506.871886][T20650] rxe_net_init+0x157/0x300 [ 506.876371][T20650] rxe_newlink+0xd3/0x1c0 [ 506.880688][T20650] nldev_newlink+0x5bc/0x650 [ 506.885263][T20650] rdma_nl_rcv+0x6d1/0xa10 [ 506.889662][T20650] netlink_unicast+0x75c/0x8e0 [ 506.894413][T20650] netlink_sendmsg+0x813/0xb40 [ 506.899161][T20650] ____sys_sendmsg+0x972/0x9f0 [ 506.903909][T20650] ___sys_sendmsg+0x2a5/0x360 [ 506.908569][T20650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 506.913496][T20650] do_syscall_64+0x15f/0xf80 [ 506.918068][T20650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.923945][T20650] [ 506.926255][T20650] Freed by task 20649: [ 506.930302][T20650] kasan_save_track+0x3e/0x80 [ 506.934970][T20650] kasan_save_free_info+0x46/0x50 [ 506.939980][T20650] __kasan_slab_free+0x5c/0x80 [ 506.944730][T20650] kmem_cache_free+0x182/0x650 [ 506.949481][T20650] __sk_destruct+0x739/0x9d0 [ 506.954060][T20650] rcu_core+0x7cd/0x1070 [ 506.958289][T20650] handle_softirqs+0x22a/0x840 [ 506.963034][T20650] __irq_exit_rcu+0xca/0x220 [ 506.967612][T20650] irq_exit_rcu+0x9/0x30 [ 506.971839][T20650] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 506.977462][T20650] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 506.983426][T20650] [ 506.985731][T20650] Last potentially related work creation: [ 506.991423][T20650] kasan_save_stack+0x3e/0x60 [ 506.996088][T20650] kasan_record_aux_stack+0xbd/0xd0 [ 507.001271][T20650] call_rcu+0xee/0x890 [ 507.005324][T20650] inet_release+0x143/0x190 [ 507.009810][T20650] sock_release+0x85/0x150 [ 507.014208][T20650] rxe_net_del+0x198/0x280 [ 507.018617][T20650] rxe_dellink+0x15/0x20 [ 507.022843][T20650] nldev_dellink+0x304/0x3d0 [ 507.027418][T20650] rdma_nl_rcv+0x6d1/0xa10 [ 507.031818][T20650] netlink_unicast+0x75c/0x8e0 [ 507.036566][T20650] netlink_sendmsg+0x813/0xb40 [ 507.041319][T20650] ____sys_sendmsg+0x972/0x9f0 [ 507.046068][T20650] ___sys_sendmsg+0x2a5/0x360 [ 507.050730][T20650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 507.055653][T20650] do_syscall_64+0x15f/0xf80 [ 507.060224][T20650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.066099][T20650] [ 507.068408][T20650] The buggy address belongs to the object at ffff8880780bf500 [ 507.068408][T20650] which belongs to the cache UDPv6 of size 2176 [ 507.082005][T20650] The buggy address is located 488 bytes inside of [ 507.082005][T20650] freed 2176-byte region [ffff8880780bf500, ffff8880780bfd80) [ 507.095867][T20650] [ 507.098172][T20650] The buggy address belongs to the physical page: [ 507.104576][T20650] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880780bad00 pfn:0x780b8 [ 507.114631][T20650] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 507.123117][T20650] memcg:ffff8880780bfe01 [ 507.127342][T20650] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 507.135838][T20650] page_type: f5(slab) [ 507.139803][T20650] raw: 00fff00000000240 ffff888020bcd140 ffffea0001d8e010 ffffea0000af3a10 [ 507.148369][T20650] raw: ffff8880780bad00 00000008000e0009 00000000f5000000 ffff8880780bfe01 [ 507.156944][T20650] head: 00fff00000000240 ffff888020bcd140 ffffea0001d8e010 ffffea0000af3a10 [ 507.165599][T20650] head: ffff8880780bad00 00000008000e0009 00000000f5000000 ffff8880780bfe01 [ 507.174256][T20650] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 507.182909][T20650] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 507.191555][T20650] page dumped because: kasan: bad access detected [ 507.197958][T20650] page_owner tracks the page as allocated [ 507.203650][T20650] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6335, tgid 6333 (syz.4.116), ts 105749217807, free_ts 105732106785 [ 507.224903][T20650] post_alloc_hook+0x231/0x280 [ 507.229660][T20650] get_page_from_freelist+0x24ba/0x2540 [ 507.235195][T20650] __alloc_frozen_pages_noprof+0x18d/0x380 [ 507.240987][T20650] allocate_slab+0x77/0x660 [ 507.245475][T20650] refill_objects+0x339/0x3d0 [ 507.250137][T20650] __pcs_replace_empty_main+0x321/0x720 [ 507.255665][T20650] kmem_cache_alloc_noprof+0x37d/0x650 [ 507.261113][T20650] sk_prot_alloc+0x57/0x210 [ 507.265616][T20650] sk_alloc+0x3a/0x390 [ 507.269693][T20650] inet6_create+0x7f0/0x1260 [ 507.274269][T20650] __sock_create+0x4b2/0x9d0 [ 507.278843][T20650] __sys_socket+0xd6/0x1b0 [ 507.283244][T20650] __x64_sys_socket+0x7a/0x90 [ 507.287903][T20650] do_syscall_64+0x15f/0xf80 [ 507.292477][T20650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.298351][T20650] page last free pid 6321 tgid 6319 stack trace: [ 507.304654][T20650] __free_frozen_pages+0xbc7/0xd30 [ 507.309751][T20650] __slab_free+0x274/0x2c0 [ 507.314151][T20650] qlist_free_all+0x99/0x100 [ 507.318726][T20650] kasan_quarantine_reduce+0x148/0x160 [ 507.324174][T20650] __kasan_slab_alloc+0x22/0x80 [ 507.329021][T20650] kmem_cache_alloc_node_noprof+0x384/0x690 [ 507.334902][T20650] __alloc_skb+0x1d0/0x7d0 [ 507.339305][T20650] inet_netconf_notify_devconf+0x173/0x240 [ 507.345097][T20650] inetdev_event+0x79e/0x1610 [ 507.349761][T20650] notifier_call_chain+0x1ad/0x3d0 [ 507.354859][T20650] unregister_netdevice_many_notify+0x17a5/0x22c0 [ 507.361258][T20650] ops_undo_list+0x3d3/0x940 [ 507.365838][T20650] setup_net+0x2f0/0x340 [ 507.370066][T20650] copy_net_ns+0x50e/0x730 [ 507.374466][T20650] create_new_namespaces+0x3e7/0x6a0 [ 507.379739][T20650] unshare_nsproxy_namespaces+0x149/0x190 [ 507.385444][T20650] [ 507.387751][T20650] Memory state around the buggy address: [ 507.393360][T20650] ffff8880780bf580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.401400][T20650] ffff8880780bf600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.409439][T20650] >ffff8880780bf680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.417479][T20650] ^ [ 507.424912][T20650] ffff8880780bf700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.432954][T20650] ffff8880780bf780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.440999][T20650] ================================================================== [ 507.449203][T20650] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 507.456404][T20650] CPU: 0 UID: 0 PID: 20650 Comm: syz.4.3795 Not tainted syzkaller #0 PREEMPT(full) [ 507.465777][T20650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.475825][T20650] Call Trace: [ 507.479087][T20650] [ 507.482000][T20650] vpanic+0x56c/0xa60 [ 507.485975][T20650] ? __pfx_vpanic+0x10/0x10 [ 507.490486][T20650] panic+0xc5/0xd0 [ 507.494213][T20650] ? __pfx_panic+0x10/0x10 [ 507.498617][T20650] ? _raw_spin_lock_bh+0x36/0x50 [ 507.503549][T20650] ? _raw_spin_lock_bh+0x36/0x50 [ 507.508479][T20650] check_panic_on_warn+0x89/0xb0 [ 507.513407][T20650] ? _raw_spin_lock_bh+0x36/0x50 [ 507.518338][T20650] end_report+0x73/0x170 [ 507.522573][T20650] ? _raw_spin_lock_bh+0x36/0x50 [ 507.527499][T20650] kasan_report+0x128/0x150 [ 507.532000][T20650] ? _raw_spin_lock_bh+0x36/0x50 [ 507.536934][T20650] ? lock_sock_nested+0x6a/0x100 [ 507.541859][T20650] __kasan_check_byte+0x2a/0x40 [ 507.546701][T20650] lock_acquire+0x84/0x350 [ 507.551107][T20650] ? lock_sock_nested+0x6a/0x100 [ 507.556034][T20650] _raw_spin_lock_bh+0x36/0x50 [ 507.560790][T20650] ? lock_sock_nested+0x6a/0x100 [ 507.565714][T20650] lock_sock_nested+0x6a/0x100 [ 507.570466][T20650] inet_shutdown+0x6a/0x390 [ 507.574966][T20650] udp_tunnel_sock_release+0x6d/0x80 [ 507.580235][T20650] rxe_net_del+0x198/0x280 [ 507.584643][T20650] rxe_dellink+0x15/0x20 [ 507.588872][T20650] nldev_dellink+0x304/0x3d0 [ 507.593451][T20650] ? __pfx_nldev_dellink+0x10/0x10 [ 507.598588][T20650] ? apparmor_capable+0x126/0x170 [ 507.603596][T20650] ? bpf_lsm_capable+0x9/0x20 [ 507.608256][T20650] ? security_capable+0x7e/0x2c0 [ 507.613182][T20650] ? __pfx_nldev_dellink+0x10/0x10 [ 507.618277][T20650] rdma_nl_rcv+0x6d1/0xa10 [ 507.622686][T20650] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 507.627620][T20650] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.632807][T20650] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.637995][T20650] netlink_unicast+0x75c/0x8e0 [ 507.642752][T20650] netlink_sendmsg+0x813/0xb40 [ 507.647507][T20650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.652789][T20650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 507.657716][T20650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.662994][T20650] ____sys_sendmsg+0x972/0x9f0 [ 507.667748][T20650] ? __might_fault+0xaf/0x130 [ 507.672416][T20650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.677693][T20650] ? import_iovec+0x73/0xa0 [ 507.682188][T20650] ___sys_sendmsg+0x2a5/0x360 [ 507.686854][T20650] ? __lock_acquire+0x6b5/0x2cf0 [ 507.691781][T20650] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.696973][T20650] ? futex_wait+0x2a2/0x390 [ 507.701475][T20650] ? __fget_files+0x2a/0x420 [ 507.706056][T20650] ? __fget_files+0x3a0/0x420 [ 507.710728][T20650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 507.715658][T20650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.721118][T20650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.727170][T20650] do_syscall_64+0x15f/0xf80 [ 507.731743][T20650] ? trace_irq_disable+0x3b/0x140 [ 507.736760][T20650] ? clear_bhb_loop+0x40/0x90 [ 507.741427][T20650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.747303][T20650] RIP: 0033:0x7f3c7d59cdd9 [ 507.751702][T20650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.771303][T20650] RSP: 002b:00007f3c7e4e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.779717][T20650] RAX: ffffffffffffffda RBX: 00007f3c7d816180 RCX: 00007f3c7d59cdd9 [ 507.787678][T20650] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000007 [ 507.795631][T20650] RBP: 00007f3c7d632d69 R08: 0000000000000000 R09: 0000000000000000 [ 507.803589][T20650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.811541][T20650] R13: 00007f3c7d816218 R14: 00007f3c7d816180 R15: 00007ffd88e26728 [ 507.819509][T20650] [ 507.823155][T20650] Kernel Offset: disabled [ 507.827463][T20650] Rebooting in 86400 seconds..