last executing test programs: 3.867958021s ago: executing program 4 (id=2817): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'ipvlan0\x00', {0x2, 0x4e24, @multicast2}}) r0 = socket$inet(0x2, 0x0, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401000022000100000000000000000001010001000200000000000000140003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dbe82fd00"/273], 0x114}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) listen(r3, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@remote, @broadcast, 0x1, 0x2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, 0x18) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f500000200000000000000000000006000000000303a00ff020000000000000000000000000001fc010000000000000000002dc2d447338717539b6926f7351ca9e20000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/122], 0x6a) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="52fff0ff", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf2504000000080001000100000008000200020000000800020002000000080002000200000008000100010000000800010002000000080001000300000008000100000000000800020002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4053) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0xf40, 0x8) socket(0x200000000000011, 0x4000000000080002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x8000}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000004c0)={r10, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x2, 0x8000}, 0x90) 3.137374183s ago: executing program 4 (id=2830): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001040)=@filter={'filter\x00', 0xe, 0x4, 0x90, [], 0x8000000, 0x0, &(0x7f00000001c0)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x108) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0x11, 0x0, &(0x7f0000000080)="8000"/17, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r12, r6, 0x0, r7}, 0x10) sendmmsg$inet(r5, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4f20, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)="bc95791c95746a9440c1", 0xa}], 0x1}}], 0x1, 0x20000800) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080007003b070000"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16=r9, @ANYRES16=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRES64=0x0], 0x30}}, 0x4040840) sendto$inet(r2, &(0x7f0000000040)="b9f5ff839a7fd387f2c09919b096a163b9fbcaae5c7e0f09a09cd4e0f1dfb5b3016e577b9488e348bb8305fe46941a64ed00f3b06f38ec984cb9ed203e", 0x3d, 0x8011, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x4c}}, 0x2) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.827810382s ago: executing program 4 (id=2836): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="316f825a3d29f96a392ea917017b4cd300000000be3067fd40cdd4f16742e94b000000005d0200b7f302f205ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5ee7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac5d46a92db9fda99af4429dc253b6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a00000000b5eeeff43281d192bb13275060fe807ab73ddbab72fe7a42bdfd25e83e5fb0b295e47687e5", 0xe7}, {&(0x7f00000004c0)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c", 0x67}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000180)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b810648f9ceb270e506af84050329123d5c61507d00561b8f1a15e64fa2779be424fdeff46058854f7acfc80b2ae98431c52ed23e73185dc18671b8439f0e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d58b", 0x87}, {&(0x7f00000002c0)="74585184786b8d507fbe8904d67726bd26eb7524f823a85cd2f36b3d5323f9b107000000dedf57ce30514c12ac0900000000000000e5dde36e58000000", 0x3d}, {&(0x7f0000000300)="7ada661b9bb92c9709cc4ca60b292c39499077a20ccd455f4ddd90bb9ffe71eb4bba0aca080b51f46cfac4b6a890205fe377abc2781cdc21c4a4f02b00493da39905212197186ced4b96c143d5ade63c337c33e361f17ffb267a72be57f86b0ff7a38e0017572f04c9fdde8109f2d0f91d77c352420543e3028fe5e102d3d1a402b0248b70", 0x85}, {&(0x7f0000000980)="7449ed0bdf9ed395ea4623dd4dc0734433855485e931db749829da53159c843de28a33d67f020936ef5db5028f9c57c5940cf882c802bd1ef31cf6834d9751830c3d9aa739f302319f8c0c63ae7982c5909f37dd105725e5974b8bb2c2a8d66de427a8da59be9714cd58e43fd98941456eb56cb33222e0bfca630973612222f558ddb6f821940f421f8bfc9bb4536056a748ae91dcca231ae1", 0x99}], 0x4}}], 0x2, 0x4000050) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x2) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000003c0)=@xdp={0x2c, 0x2, 0x0, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000840)="a561612f82557063140be8152ea7241f581832450248b65b6e25c96f4f07566fef9ef31dd455b4a67559520571b8c1a42a11d6047c27251c908da3c53b0ab4e06b53ae72c2ce1822c208496d4d1685888ca126bbad6f0cb025a2060f3c76e7cc95a1786e8a656937631af757dacc4adfe0b63d8301fd7c0444907c87f00482e1cad537a47e96d221e8090170cef81614ded07bd4b7a1a3149ba64c9eff5267d6b77804afe1ea52", 0xa7}, {&(0x7f0000000480)="a40bda3cb0d081cc", 0x8}], 0x2, &(0x7f0000001500)=[{0x1010, 0x108, 0xc, "606c2d1326fe8cdd36d164ce0bfda3a47a5acfd053a7d0f9fec1a8040b113f6f8ed2fc9538947a3b751afa98d1305102bdd38d97f1f33d8a91e5130af3b2da89a227c05316d2946d0f650d12475f7300bb3c0866e7be5fb5071d2fcef21b1174c8c49c38637fdf17c3d8f485b07480c0d99904f3a34c7e9ae3d411c76dc2db0d3836d2dabfbd83d854aa5d60c0ed1151e05e0a9b28539a45011ce79ccfaccabd600581fd06a6e018c13e911413420a3537f47bd5c2642170e1c5b94e4e74f05859c561c1b2a56ae2538abb15caaf71b5973c987fa4ef4a47760cdae90c13af1cfb4c0858132b47052c57ceb61cf072544dcf5d14e6cb956b7137db4a016bb02c59d70b06c947ad37dbb211e62e36f5f84c53f53b9d69b9b2f3fb6ff27cfcd57556ff3dc1965b17f957d3901e350efbc5bc08ccd7fc071e0a11ede0bd897404232660a0c16a3187a013fcecf4ccc86a02ad88a3d0b2725f127263783b53e74ee4a4d854615d1a0015bcce3fb67caa0267eb3ccd4a9f7891a533248595426cbf8f92fb8e88ca5a1ef4730a796219be5c76ec7f3df78bd9f2739c8a33a8ce689272b210e05f0c8c68a62d174b8fc1ee05e3f0a508cab4621405e2318d996a8232a82955c9d08a68d97ac2e7377110f39f012f5d4289e7cf35f78518c5c5caaa1ac4630afe6697c7b25290e459f06e95a05143b7fa7765c351e90c3c93449de98613ccbb59c37e1d2eaf62c811a794e14b6769dcd80883cd8b3eb362a215680f01cb2ff0d28b0dbf51c2b363ca670890dba6f12bb6de64aaf6bd46f5d3e2860bc674c96ce9b62a843127af1cc71d6e59f6d0cc4255be691f24e85de51f4a864ae0ca6edb9bc9ce3f5095e3d7328439f68cc93f73a8a7092e14fed665d34bc8bb1a903ae7d106de19b407c02dbc56c5936f7d6320937f7c08e5afd986156d14f448ff9eacd253c9204702d9a99d7b0841684eafba76c71d6b416fc35de63eaad262cea78cdd6c499379d8ded7b63e0eea430c422e496d1d0803bd4fd4afa434ec00d738023801466aa78aa2e37986b3dbfbfa226ea627ba320cb46f7781299d39520057c5b4001e45dc13289d50a687a81ebe0848911c279f8e10751b17601c843aa42dcb9e8baeedb0dec86f786cc5d9c59907c770777b5806c8ce8e4cd67bb8add6f2f983ca0aacb0221414abefd3f86013432680d082bff0a25f8a66c9891f8550a8d8481e061657ff9a6fcc4e807c422d1e6416393387f1439153caae810e6ce3c87c343e0320276bd26784085ac381d69906bfce0dfd24c5f5a1eb45cbc9b795dd04e1feb103a9f9acc67be2357ef6f587417d85c62833ba6651e5f06256260d26041cd4e21e81fe3e021462e8ad3a4e0a75d67ce4db39acfc636cf9abcd7ad508d0b614c73cfd77c8c837c8629163ed5675fac3db39de4414d58c47ef454eae0b03ceb2b322d83acbbb064217a21c42a55f906962324bbe45b637ba29b9514713d1191b85011a50f7ad8d2853bb8669026f54865be4e536f78e354217df9e29a3062e083e2eaa97ac277fbb6c1c0af18eec71e88d5c96bc5ea85949d8590b2dcf9deaffeeb06f536b7032fbabd587ef2d81e1ccec92550b623d85355d8247721df1ef24f98449a5a65bbad23f5db55d0e7e5b99e9f9dd6e61a6490a1420374a4383bde9523f25d3e2bdbe599fc29a83d732c34a1dd5eb06dfcc10022c164964d0230a4bc416be179199d61ee6ef206580cfac2602f61c5863114edc1e023d7436dc7bb59699e3fadab9ba318d1a4bddf59b50321cadecd6fedd364bbcaa90019a29c9c3e4223cb7edb25194895893fe6981cbec1ef5929b97b2f9b1157a70c4cf83ccd9fddc0a2996fbf545a56dc593755c3f372489be6925a651c2155493bf6b3a719bf0026e87197015e81e13dac1974a2de83a4ae21a0e2e511cf5bf1c61b642ec8f2e6a6fbe5aaf4ee0f2f717147560b9119e7cc0e56f83d04f80e57ab4bacc0d8fba9d701d7adaaa4a0e231b4e3a8e686b7c004d1733f332368bed34a75692486645991cf2820d951c0275337b71c4543fa943e2845e498748792513425b2051c96175d58675ab1a907e6e4368c8e65c3dd2b6594f6a5b48582c52d3e8e1b40daf462a62efbfe71aa8a09fd9d77bf6aa89b2bb5ed89bc5ff86fb44b028e1d79a0136c5a6989c7abf6ccab3a0174317af8fec17dca209d2a2b4ebaf65ba028655ad0a9ff3d09eab14e25e50c97b39a600b0b53788078d02f5a0131f43cd632c710673210086325c6fb4537841ea3566fe4cd4cf47835da5b8052e6dc2e6c465fce10a1284add6157069bf1102c2c146ac4fc27928b4749169789a433e2be68f7b3f13b9cdb892fcac240b074e7c240f5268749fd368acb01dc12aad4cbf546896a6992797f93fb3af9f5295dec293c87ad6c2db557b9adc576e760ea203185cc342f019964df49144321d001440c33cec3e5bb68037c3fae07712c6e16159b80a56c21c5c00ab252e87b5e2b0e2673d4df7a82498c39508f12fc9d8ea1c5a39e0fdc8d88e40955a1f9e4895c8885ba421b8d722cc8564ac7ceb821417703b4d6273a5ab2f6e3cdff089a30b14e589aeac58a326f756e2ec8832e59cc40058b45b9749983162c0473482bb5ffd3969b35f8db35ff7ff6468a82c5fe37adb13fe2ae36e11863435ae39415dc26b2b678f511ad69dad1c60d0c686e32fd5d1458d20aa2bcda3beb069d70fe660d6b48825c69fc8d123f25fe4bec1789fc6bab795aa436be227ecd9c1993bd5056fe3098251d0f17c41a62891cfa45e6ff795058058a9403199af2ae9bd49658e221863d16d62bfb0fe05d1c5e0c51797b4cf0cd0cca7dbccd4fb116d44ef9a2e141befc12487560f348ff4de5bba75e9890774b0a39390c5161bd12b25f4a4fc535ce1ae798941aa5cec891ca298c35bd723a8ad6e832dada841307f3dfb5ac67ce057978b352afffb99ca84381ddc77f4f69a975df3830516b63dfc9528d2bf7340f6033d0e52a871cc28bfcd2fc76b87df1004b595535af8947923d472dffffbbdf2c28e17fa4ab38f07d86225f1c27c6db2bd3d5bb9c96d4cc874b225d6adab0f77463ed6e1b4d530c1a50aeb2f292d3ae0f92b39c1c958554fce991239ba89fc20b5e17f12b266859291c6c7a897eb334905635ce3762a18bb98fa8fb66031b8dcb1d01b2269e60e419462588da4ba08a7df10811b8d6891027eeaeccc6614d9de5f384046af3580ab2f2f6e9de7ed69838668beaeed097343a37dae5054ac1dcfef87666ee640b1f829999c0246006bb8a4f169a3d7f8517dce4ebf99d89c9b6095ebca39ade46c3c11f650c23b28d59861ed4e5186ffa6bef90cedff8c595c34e88e06181bc9abbf2f2c5e00bcdbcd7ad60106e6e0e80626475d16c48ff3e38432bc8db820df5d41f60f5787f770360b553634c22ab9ef6ff861063006a8051c5f16e082b11f4f3950a798c19bad03c3d3dd886e13179578f528c54a2c6297ee3f87df99b9c8bcbef7fbf8f5b4959cfb4a98509098e79c33ccd3248913c352c39a1f3af991928ae8821fdebe8c317746fd5cfce8c528967819a448b86358432d6d7fd9523e80c775c13f628b9320cb6e89a2a4236d9c0e42446a04730ccaf6ecd457593af09431041247db1d47e9b19e2898c89708966b9ab672ff2b255e633d2606b01aa2dcc9175e9366564ea7a96b2d3cc7970da8f6da8000917ed7571797bde9445e8516f3851ab381d78993ce0dd77b1ecb2f379ad6e523d05b5418bd7cf36042b043cd7223c8e021729bb39b91f2b5ea3a606110dc7ff26a1e03d7c7ce978a6133bdc38374a7163d7e25fc439d7a5299e698685d4cce78795734dba30601e13030dfdf3f554624f031d20b739ca3d5db3a924d42e09369dbf8f071885f8961939b4428ee7496f1c5e60681751001f6d90366dd5afe9ba7f58b6a9ba9bd84d33db0bdf6ea3c8204d371e69e383c59a740a2ab94cf960fd3791d149041814f08b45689f22ea0080c139c5f3f14fc50313acf64084fcaffa1fe3b4e00c6636e43bb327e16d700fc0effa3e52d06434ea7223d8333df48014a60cc6a278609a46d8376cc8e542509ef9d786c40db9eff7b973268f9599702c804d583a763be943dea050ce030c3708126175bbfd0616d5d0319a8954a40728879f90f3614317cbdef971fcd9d22d3d0b4a646d97029bbe5dbe73364827c809516c9d881302b2b806bb5af44278d782d79353302567a0707c81019e60687b35ce87f24b58fa558318dfb1af08f38efeaf1d369267cdd96bd24bd543497e7d59d21cb8f0c9dd526e1798a23b616aba6336890386d5f7c9b0d4251c8536edf65484effd37d8c78c43941f96b6852c69208c82db2b18b8c1a9f994d3d2626fa742c96275fb103af1c8a2acb62eef0d2e9dd608a6dc646c4bf6b2b815b158ef0a444c663fb285b74c227fa60be4ba9a08764d6f4ed369510ab4991f012dbd099900d63a943632db0f559b687c69afe6cdfdee64cbf34458b575dd5f29b787ae63670ac4b76bffdf6681e77a5f672aca9d4d8dfc8a1b8a2416d4454fd4016a71e23654e8bfd5d712e12004461fe26e99c30016c9f5da68e08a74a4c9aed4a1b0cb04989cd4ef07e4ada4ab80cde8c09cf67d4cf8432c046825b426bee5d2acd0e2a5908f4aa31f41368f7f0e181d8a83ffd131b46c8d2a91728c0c812f38102e5241f8a9d6cdc74605ecb3d223107a8b4045579200b461a304da073d447ad48e5306e01b99e3b1114eeae3add752c9abdec39139ca9d5c204a5f68e90a9bded8b79df68ca251783cb97fd1ce977455211f477b5ac013465b41b02caa5f48de2b8730181eb842eb7e519609f1ae3417bd9a5a4a9c2e9575f7de12f291a901665fd0edd1a344c8698b4ce12905408727877f4361392797c024b9d8a5cfbd9d5baaef335a44aef27c147aff0ba208b943cb00ec0debbccd8fc70a9aa32ac5a57beec6534d7f046c0652346914f597b1d0e8c8ed660e58d1e52eca7de6360a129cc7b58e1cedebb47f1c33f4bda8bbbfb4da1dedeff4ece1b5ab0f944df2346045428d413dcf3c8f9fdd598937577561a0e7a139e55bd9fc2567c6826dc5708378f5b11edd59ed69bec7261db9b8dc4d6e638d021416adf1b19a7d2136c8f110d14705b0e04a2a846aae9e61f81b247bf6894bfe16fa13884931fd8da4ee43de625b85a4376892a8eac2aed5dfc350d465374c13b2f349c0fbbd185b2aedd400a3cf0063bcb0974ed067c080bfb8b0980e84eda6f6787fa934a581ffa94eb6997631dbbbb9a0fbad4f0c57297ea1a4683754212c92a928085376d9040e1cdfb5c2dccbe726a221ef988f1ca6031f94659c49dca4b8196258c4bbc811b83ebd1f60445fc3b22d6a58a15ba0b1f845ad34ed2a15337aa6f975e885f0894481aa1631a70062d69fdac3f496db13da5dd4a2fa1852a41b3399a5601a51fe52e62c27127bfc39c6ba3ae1e0c31c62032bae31207f730e071085e1d1d47b5ccc9f8b892e51092d816ec9cd42e819fc3f4ed67b94c11837655cd75515ed2a9ae31743349a58db3497fdc7dade5f2ea16fc7fece59b290dd46482d044befaca613143e3562c84e3c2f4ce6fae24aa7fc08f230adbc8282919d774de37f2ac72969ca449f70c612e433a8d9f7e5fe1553ce30c30bba9589471689c4320890cc83d3ddfa7283ce94493b5aec0376a50ce305bc50f7735d3706835547a7e776921f37ac10fab56d37ae480cd1cbd4119cf116f8c5d4a6df87b0fcd9b53a8d5"}, {0x1010, 0x112, 0x6, "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"}, {0x40, 0x118, 0xe000, "67f7e20da4fc443a23f3b2fe4b4a6faada03a64ef0fb7183e16c36ce69e0649a6f402aff33adafb14d00789fcdaa"}, {0x60, 0x108, 0x6317ad24, "a1eb15251b51a8c7e480e90150b51be4830d65faaf793fd81c08c26ca7155c8c6a7f83a6c197da0f85497daedb4b0c06e031a33a39792190bf185508b4fb1bcc467aee8750e7c917407e221e3e498b88"}, {0x48, 0x10b, 0x9, "3c1fc99323cab3f698169c49328a47c8f33ff4e88463cf03fe6ecaeb855adce8653ac7feeccafcca69c58884bfc4acee1a10aeea"}, {0x88, 0x0, 0x8, "83b1685d6def63e92b74f803cbc0d791d15fdbfa3a2a68edbfa1d6d2a91e5fcb3ded236f00f34fa33fd3441ee02520044c24bb9db305dce8b403ddc9ae358f44ab9983b66080caf1195c047e5a6f75b3c07e3e422fae07cc90c3cc483025b1ba5716d869d06628fe5e79564ab47b0af61655a8b6f7515f51"}, {0xa0, 0x118, 0x7, "788d08487bd6784a7a7ad52723165b5c60269d1dc9c3459627414bc18747006e20e567832879935f8cc0e1dc5b58ff104bc4a29e8921424aadb1b6c218fa546dc7ffe3023f360c4cd947134fea56fb15e38d39ea3542714b9fbd3c9b6e29baa5f0148da39b83112dac62940f22ae9ac454c350fd51f2ef9cadabbe6daea44be3b6e7062f25e70d8abc73c748f9c7"}, {0xe8, 0x109, 0x9, "3dff64a570de92158a3ad887f96841c4d32dd110a998e7495bfe40c5fa31a72572bba58714e3a849d9b4b008bf36d24d1b2735aa8b3bfad9fbb972f2089ba6aeeb19044264d9a20d69556b72f9a2bf47d47365e727a24d948b49f193e5ac2afc0296f0aadb38ea4f9054c76053d9ff17668d3dfce3c46676c99c80ba46c621e8f5557d7b751312cce04192d3eb32a4aa31978176c1baf4b0206de5e023f524c04ae147c68bcbc23e897fc765ef2a0d576fc9035f89fd7a3d6e17b5fee6c243724688c05327075ebd818ba29576a0c2f5f2615416aaf47238"}, {0xf8, 0x88, 0x8, "dcb6a0e1c7f0cd09bf6cc9976cde24fd938884ef226d02f53191b8acb6abfb6799bb997473c5783e81bc075482b6ced61601efa269dadd7d79cc707dcc10c8d19c9cfc2ef3c431c13808c4e7fba4efdb802d0cd3a75538f3c55ef2d1f2d883b298a8220fed623769a8d6db340f9fb1b7dadbd436387d08a37fd360b84495197d92c4b2659071048b3c4037257f6f1ae3bb10ae275da6ed4359a44807dddce114c3cd408e5dea2c291c4bac5f2325664fc4f22f3592500f10ef99a07cf571f262bd333018d0cc19f0d40edf826f7b0aff5c51bca1216bf481d026b7eb62329d899f22c9bb8b"}, {0x100, 0x118, 0x1, "1cb0e46a8364bfe31ea96c58bb36ea373e22db5eaa63921dbc4f88123ddb427449c1370e9ff212b46fa8488d0be11a8fdac0ab83d95ce96de6f770c7c4f890f30eb6841294895752b228b6ff79a021730b71852aa94759ee6a21155082ab78735ce0be4a96f3478782be89fab384a94fad492fd157b75e3d3e22ea46005caf4c4afb91703153efc42adcd98ddf0c4c9f165c4aba664bc3b8e12b783ca27d18c3eb8e3b5c9aaeeb6f45513772de4af12bc06ad0f35771365a9e4c19da1a55f80417bf4e093a6859a39f1c25e6530d0e3f6b9229ccd143fba57a82e93c60c3cae45849e4d67ead5b160a83baba"}], 0x2510}, 0x2400c000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, &(0x7f00000002c0), 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @usr_ip4_spec={@private, @multicast2}, {0x0, @local}, @ether_spec={@link_local, @random}, {0x0, @broadcast}}}}) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r6}, 0x10) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r8, r7, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000740)={{{@in6, @in6=@local}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xe8) 2.683843019s ago: executing program 3 (id=2840): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f00000001c0)=0x80000000) bind$ax25(r3, &(0x7f0000000080)={{0x3, @default, 0x21}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$bt_hci(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f00000001c0)=0x80000000) (async) bind$ax25(r3, &(0x7f0000000080)={{0x3, @default, 0x21}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) write$bt_hci(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) (async) 2.559872384s ago: executing program 3 (id=2843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000038000480140001800c0001006e6f747261636b000400028020000180070001006374000014000280080001400000000a080002400000009c"], 0x8c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000038000480140001800c0001006e6f747261636b000400028020000180070001006374000014000280080001400000000a080002400000009c"], 0x8c}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) (async) 2.554572101s ago: executing program 2 (id=2844): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x60, 0x0, &(0x7f0000000f00)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x5452, &(0x7f0000000000)) (async) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x5452, &(0x7f0000000000)) 2.341204401s ago: executing program 2 (id=2847): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r2, &(0x7f0000000a80), 0x0}, 0x20) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x54}}, 0x4090) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000040), 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) getsockname$ax25(r5, 0x0, &(0x7f00000001c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000180)={0x1}) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1a4, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x63da0b0a}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff26}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd446}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2702}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe9b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2b1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 2.270113344s ago: executing program 3 (id=2848): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0xc8, 0x130, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf40f06f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, 0x34, 0x400, 0x0, 0x25dfdbfc, {0x20, 0x0, 0x2c00}, [@typed={0x14, 0x145, 0x0, 0x0, @ipv6=@private1}]}, 0x28}, 0x1, 0x3000000, 0x0, 0x800}, 0x28000) 2.175751553s ago: executing program 2 (id=2850): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x800) r1 = accept$inet6(r0, 0x0, &(0x7f0000000080)) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = epoll_create(0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}, {}], 0x2, 0x8, &(0x7f0000000100)={[0x6]}, 0x8) (async) shutdown(r2, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000001380)=[{&(0x7f0000000140)="0dcebc58614bac082cc46eebf297029d3be58750e04e07bb4c420d5abd871d473cc664dfe32635de21e8025105e5ed0d92dcc62d49e17047ee0013e3d7e8bb77d9bf7c71173cbfda52861b0e9b665e9af12a5fdff722ac5aeadbdeace0a3ccef0f099b5d683cb0da7145212aba6d460f453a2cf8b978a86f5abe84aae0888859bea2c310a68894e3b79f3d718b90ab3c478794f737f92344c3740dbd996749fabfecb6f735db6ce2a704d51ede546593ff3100de9e24aa0ff3662eb423925f9d32df", 0xc2}, {&(0x7f0000000240)="87e1201cbff36026a648b998bce8c0516375d24a8b1cfed4808774f47856320781f2111f3777464794d8bce1b5b841050f9b6d8db28650e2109fdaba8e01755315290c78337328667b07fccc6084aff0db07ac016c97b96bc46c7c244d90386b62ac28dbd90088951f1098612bf6a394ac65563fdafde13658bbef4d2cad638ccd7c375e4cefafba7f0ad4a71191440df0668f06cc34c8e650e8421b24751447d94955c9bebd", 0xa6}, {&(0x7f0000000300)="79d11597cbd51440f1052c8f84f56cfea06e9089bd74e223ef3dc823f512c2453866ed8e44e8eb87300b4de93a3681a2ab2654cf4e569180b033cf40272a53b42825c8e3229cff8b327e48ef35631ab67767a266", 0x54}, {&(0x7f0000000380)="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", 0x1000}], 0x4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000013c0), 0xffffffffffffffff) (rerun: 32) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001440), r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000014c0)=[0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000001540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001840)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x64, r6, 0x500, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000001880), &(0x7f00000018c0)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff}) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001940)={0x0, 0xa}, &(0x7f0000001980)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001a00)={r11, 0x1c, &(0x7f00000019c0)=[@in6={0xa, 0x4e20, 0xfff, @loopback, 0x7}]}, &(0x7f0000001a40)=0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000001a80), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001ac0)={'vxcan0\x00', 0x0}) (async, rerun: 32) r13 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000001b00)=[@in6={0xa, 0x4e20, 0x6, @mcast1, 0x3b}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e24, 0x3ff, @mcast1, 0x5}, @in6={0xa, 0x4e21, 0x1020000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x80000001}, @in6={0xa, 0x4e22, 0x4bfc36cd, @mcast2, 0x672f6c2b}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x10}, @in6={0xa, 0x4e22, 0xffffffff, @private1}], 0xd4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r13, 0x84, 0x76, &(0x7f0000001c00)={r11, 0x1000}, &(0x7f0000001c40)=0x8) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000001c80)={0x2, 'wlan0\x00', {0x4}, 0xdc5}) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x68, r5, 0x8, 0x70bd28, 0x400, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r14, 0x29, 0x35, &(0x7f0000001e00)=0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0x90, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x16, 0xd, &(0x7f0000002000)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}], &(0x7f0000002080)='GPL\x00', 0x0, 0x1000, &(0x7f00000020c0)=""/4096, 0x41000, 0x59, '\x00', r12, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000030c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000003100)={0x3, 0x8, 0xd6, 0x146}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000003140), &(0x7f0000003180)=[{0x5, 0x2, 0xd, 0x2}, {0x0, 0x2, 0x4, 0xc}], 0x10, 0x7, @void, @value}, 0x94) 2.073193989s ago: executing program 3 (id=2853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$sock_proto_private(r1, 0x8b01, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="06000000000000000101124c8972de5fb100002e00000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001540)}, 0xacd2}], 0x1, 0x10000, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) getpeername(r3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80) 2.011918853s ago: executing program 0 (id=2854): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0x39, 0x400, 0x70bd29, 0x25dfdbfe, {0xa}, [@typed={0x8, 0x82, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0xa5, 0xc7, 0x0, 0x1, [@generic="1b4e380a0a4172546f1889f712b052e8d65f1860994e3056711347d654b35421edeb18ee3fc8a460ea99de71b8966904e29658402d159424f3501cb4041521c9d57145eebb169410ff2b2f5897091e25d84eda71458e9969966ca1beefc691f57dbce8ce6e77af8dbf85945f2e4f30cc070f92125366f13bd2d2d3046b7c461a31e91ed7e0989cb07fe35a0fb3137732f76eea840b0ca4438f7bd5b047b31561a9"]}, @typed={0xd, 0x102, 0x0, 0x0, @str='-}]}\x05$:\xd0\x00'}, @typed={0x4, 0x137}, @typed={0x8, 0x129, 0x0, 0x0, @ipv4=@multicast2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x5) shutdown(r0, 0x1) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r1, 0x101}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x21, 0x800, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendto$inet(r2, &(0x7f0000000380)="848159ac449a", 0x6, 0x4000, &(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000400), 0x4) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x604402, 0x0) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000480)=0x8) (async, rerun: 32) setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000004c0)="29e6cda74b00516a9f886204eefa292f7bed1e61969026c759643a", 0x1b) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) read(r0, &(0x7f0000000500)=""/106, 0x6a) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000580)={r1, 0x3}, 0x8) (async, rerun: 32) connect$netrom(r2, &(0x7f00000005c0)={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8841}, 0x20000000) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r7, &(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000840)=0x80, 0x0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r8, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000a00)={'nr0\x00', 0x200}) 2.010902424s ago: executing program 2 (id=2855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xfff2, 0x3, 0x9, 0x4}]}) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x2000006, 0x4000010, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000497000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r0, 0x0) 1.983270323s ago: executing program 0 (id=2857): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000440)=""/227, &(0x7f0000000180)=0xe3) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={r0, 0x9, 0x7fdffffffffffdff, 0x2000000000000005}) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3]}}}}]}, 0x88}}, 0x0) sendmsg$inet(r5, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYRES16=r10, @ANYBLOB="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"], 0x114}}, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r11}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r11}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=@framed={{}, [@map_fd={0x18, 0x4, 0x1, 0x0, r12}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r15, @ANYBLOB="500061ff"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.915174569s ago: executing program 2 (id=2858): r0 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0xc020400) (async, rerun: 64) r1 = epoll_create1(0x0) (rerun: 64) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async, rerun: 64) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f0000000000)) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1453f46ba8afd9d75630e1acd1fcc0a6b7e75619a3dafff4959c1160e035fa49bf889a4d5638327c9b9bd660", 0x2c}], 0x1}], 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e21, 0x80000000, @loopback, 0x4}, 0x1c) (async) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xf}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x2c, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r9, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x7) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) (async, rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv4_getnexthop={0x28, 0x6a, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x834638070a0667b1}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.851051777s ago: executing program 4 (id=2859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x49, &(0x7f0000000040), 0x4) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x884, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PEERS={0x6bc, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff76}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x5c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x274, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8386d5c48e32605c15dd854c75ff5fe95d6d9afafc604383a20d933d8bb8e8a0"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x14c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "48229755a77663537d3eb9f126ad285f711b1f0db765d5c390277714f080d845"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d6816b6c2d8da7aede36af62a1b2136d57aab7e6353aa2dd390b1b241cdcc5bf"}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8279faa7a9e68138bed884c2b1077f9c8d45e8cb54f4b0b7aedfc5606b953c38"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc2fe}, @WGDEVICE_A_FLAGS={0x8}]}, 0x884}, 0x1, 0x0, 0x0, 0x8}, 0x20040010) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r5, @ANYRESHEX=r5, @ANYBLOB="e41b0a2fb804def5013e93d9b51c489e08788ff9ef35b085df1513ea2e33c57611249b51cb113b1b8a38382d305a1b4d4a971375afcd7fd6411556e38d6f377c82c3fdba126085dd77f9e277226514e4fd0ce7d5551f50dffae35f4dfdde0c3b23393f79b8c12f31772b753fd42db00decd75499d418618e58de81511a5fec760f930fd53e9d3a6dbb7ca3a7416b6eee784c82dc2f664c8c61ed0f3a1af6843de6af82eff521222c8ca320ca3b250fec96a71c"], 0xfdef) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000040), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket(0x5, 0x800, 0x80) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x49, &(0x7f0000000040), 0x4) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x884, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PEERS={0x6bc, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff76}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x5c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x274, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8386d5c48e32605c15dd854c75ff5fe95d6d9afafc604383a20d933d8bb8e8a0"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x14c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "48229755a77663537d3eb9f126ad285f711b1f0db765d5c390277714f080d845"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d6816b6c2d8da7aede36af62a1b2136d57aab7e6353aa2dd390b1b241cdcc5bf"}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8279faa7a9e68138bed884c2b1077f9c8d45e8cb54f4b0b7aedfc5606b953c38"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc2fe}, @WGDEVICE_A_FLAGS={0x8}]}, 0x884}, 0x1, 0x0, 0x0, 0x8}, 0x20040010) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r5, @ANYRESHEX=r5, @ANYBLOB="e41b0a2fb804def5013e93d9b51c489e08788ff9ef35b085df1513ea2e33c57611249b51cb113b1b8a38382d305a1b4d4a971375afcd7fd6411556e38d6f377c82c3fdba126085dd77f9e277226514e4fd0ce7d5551f50dffae35f4dfdde0c3b23393f79b8c12f31772b753fd42db00decd75499d418618e58de81511a5fec760f930fd53e9d3a6dbb7ca3a7416b6eee784c82dc2f664c8c61ed0f3a1af6843de6af82eff521222c8ca320ca3b250fec96a71c"], 0xfdef) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) (async) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000040), 0x4) (async) 1.687970952s ago: executing program 2 (id=2861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x143) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="c8f14a04070e54bec55711ae98726bebee", 0x11}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114008cdc18"], 0xdd12}], 0x1}, 0x20040051) 1.379837788s ago: executing program 4 (id=2863): unshare(0x68040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x103, @empty, 0x7}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed6c39cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa6b0600fdffffff00b4f5d80eb4881a5b98cb9fb16d225d602392e816d09dc409b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[], 0x4c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @empty, 0x4}, 0x1c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0xa1, 0xe000, 0x7, 0x2e, 0xff]}, &(0x7f0000000000)=0x54) 1.057724836s ago: executing program 1 (id=2867): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @rose, @rose, @remote, @remote, @rose, @null, @rose]}, &(0x7f0000000080)=0x48, 0x80000) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e0, &(0x7f0000000100)="93852e2bf9cef3d0d4c6eb33aa") setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) 1.0281279s ago: executing program 3 (id=2868): r0 = socket$kcm(0x2, 0x1, 0x84) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xa0}}, 0x0) (async) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000004800)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x40, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="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", 0x13b}, {&(0x7f0000001d00)="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", 0x3a4}], 0x4}, 0x0) 940.00251ms ago: executing program 0 (id=2869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async, rerun: 64) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async, rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0080008ce7344581", @ANYRES32=0x0, @ANYBLOB="efff00000000000000000000000000000000000023a137be773a22a57dcc85bf37b53c0397d00f41fedd3a149d439a63b22178c965b52f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000003c0)='%pI4 \x00'}, 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 926.540439ms ago: executing program 1 (id=2870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063012f00000005000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000001780)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) 864.401782ms ago: executing program 1 (id=2871): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TXQLEN={0x8, 0xd, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x9}, {0x0, 0x800f}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r5, 0x713, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x24}}, 0x20) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@gettaction={0x80, 0x32, 0x2a84b6e408a3d175, 0x70bd25, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4090}, 0x11) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 629.155815ms ago: executing program 0 (id=2873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) 628.745315ms ago: executing program 1 (id=2874): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3096], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r4, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 500.178107ms ago: executing program 1 (id=2875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003006f56053021e3db5e31a40955c600d35da9e6ac400166db480a0001"], 0xc8}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) write$ppp(r1, &(0x7f0000000180)="72e41cda7cfa1c6f36e111895160f23fa17e05baa64f9ea909141e5ee714a23a826e597b3c8f09e90eb7547e42b45c76952208b00b9ab2601802edb601fd55a9157ed8a84069b9c7a933e57974fea6bf73a8466f9b0bbe8671e4ea96022830296a0f42157dff1789b001f1ebd1b065653f209441f496a90412a0e67c26a5f22bfe0379f615f3e5e5aa8a1328da8fd1e230474e04bdd2816fb213cfd9dd532ab364b38b4f7751107a2037e613a13f7f9609afa6e0d32affbccd4caf26c239afb185997969df29f4057c4a3474e0e88be3b5", 0xd1) (async) write$ppp(r1, &(0x7f0000000180)="72e41cda7cfa1c6f36e111895160f23fa17e05baa64f9ea909141e5ee714a23a826e597b3c8f09e90eb7547e42b45c76952208b00b9ab2601802edb601fd55a9157ed8a84069b9c7a933e57974fea6bf73a8466f9b0bbe8671e4ea96022830296a0f42157dff1789b001f1ebd1b065653f209441f496a90412a0e67c26a5f22bfe0379f615f3e5e5aa8a1328da8fd1e230474e04bdd2816fb213cfd9dd532ab364b38b4f7751107a2037e613a13f7f9609afa6e0d32affbccd4caf26c239afb185997969df29f4057c4a3474e0e88be3b5", 0xd1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0x4010744d, 0x20000000) syz_emit_ethernet(0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa013b7d0906905a2833dc80c200000008004580004c0867000000069078ac1414bbac", @ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0xaaaaaaaaaaaa0102}}}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) (async) writev(r4, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) 417.717289ms ago: executing program 0 (id=2876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbf9, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000000)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) close(0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x22, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1000000008) 203.887773ms ago: executing program 4 (id=2877): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x90}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) syz_emit_ethernet(0x83, &(0x7f00000003c0)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x4d, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x4d, 0x0, @opaque="8c9c0b2c31828155d4aba6b7c478e3c6764e864bfa9e756f7dcfbcc58d3b17d0fa078fcdaa45cb12b6b0dc150530caa4e74412dd869c19aa7f3f0e9705f2abd3befb520856"}}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000040)={0xf49, 0x5, 0x6, 0x9}, 0x10) 191.900069ms ago: executing program 1 (id=2878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000000)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x44804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x800000b}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1ff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x800) 48.623622ms ago: executing program 3 (id=2879): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x0, 0x40}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1}}}], 0x20}, 0x40100) 0s ago: executing program 0 (id=2880): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r1, 0x10}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): l80211 [ 77.120751][ T6550] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000 [ 77.150831][ T6551] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000 [ 77.173039][ T6554] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 77.454232][ T6565] netlink: 'syz.0.210': attribute type 21 has an invalid length. [ 77.474930][ T6565] netlink: 'syz.0.210': attribute type 6 has an invalid length. [ 77.855166][ T6585] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 77.876361][ T6585] netlink: 'syz.0.217': attribute type 4 has an invalid length. [ 78.557714][ T6616] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 78.644180][ T6619] syzkaller0: entered allmulticast mode [ 78.890717][ T6626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.998887][ T6643] netlink: 'syz.4.234': attribute type 2 has an invalid length. [ 79.006958][ T6643] netlink: 'syz.4.234': attribute type 9 has an invalid length. [ 79.022955][ T6643] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 79.034993][ T6643] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 79.043818][ T6643] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 79.402688][ T6659] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 79.424199][ T6661] Bluetooth: MGMT ver 1.23 [ 79.553363][ T6667] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 79.682082][ T6679] netlink: 'syz.2.248': attribute type 12 has an invalid length. [ 79.767601][ T55] Bluetooth: hci4: command tx timeout [ 80.185007][ T6723] __nla_validate_parse: 20 callbacks suppressed [ 80.185027][ T6723] netlink: 72 bytes leftover after parsing attributes in process `syz.0.258'. [ 80.226648][ T6716] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.258'. [ 80.255611][ T6717] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.258'. [ 80.402380][ T6739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.264'. [ 80.444793][ T6743] xt_hashlimit: max too large, truncated to 1048576 [ 80.612678][ T6747] macvlan2: entered promiscuous mode [ 80.645571][ T6747] macvlan2: entered allmulticast mode [ 80.887323][ T6760] syzkaller0: entered promiscuous mode [ 80.928385][ T6760] syzkaller0: entered allmulticast mode [ 80.989352][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 81.155850][ T6785] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 81.849276][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 81.858744][ T59] cfg80211: failed to load regulatory.db [ 82.161083][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 82.171355][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 82.300622][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 82.977982][ T6790] batman_adv: batadv0: Adding interface: wlan0 [ 82.999872][ T6790] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.039519][ T6790] batman_adv: batadv0: Interface activated: wlan0 [ 83.155372][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 83.213702][ T6814] siw: device registration error -23 [ 83.239598][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 83.461666][ T6839] validate_nla: 2 callbacks suppressed [ 83.461685][ T6839] netlink: 'syz.3.292': attribute type 30 has an invalid length. [ 84.307419][ T6897] netlink: 'syz.4.309': attribute type 11 has an invalid length. [ 84.673454][ T6916] netlink: 'syz.3.314': attribute type 2 has an invalid length. [ 85.180601][ T6962] xt_l2tp: missing protocol rule (udp|l2tpip) [ 85.219641][ T6963] xt_l2tp: missing protocol rule (udp|l2tpip) [ 85.329651][ T6968] __nla_validate_parse: 12 callbacks suppressed [ 85.329671][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 85.800725][ T7006] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 85.820556][ T7006] netlink: 224 bytes leftover after parsing attributes in process `syz.4.335'. [ 85.951977][ T7014] netlink: 'syz.1.338': attribute type 9 has an invalid length. [ 85.964332][ T7014] netlink: 244 bytes leftover after parsing attributes in process `syz.1.338'. [ 86.052084][ T7019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.340'. [ 86.054114][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.341'. [ 86.062806][ T7022] netlink: 'syz.3.342': attribute type 21 has an invalid length. [ 86.182584][ T7030] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 86.195721][ T7032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 86.215268][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 86.473001][ T7040] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.523977][ T7047] tipc: Enabling of bearer rejected, failed to enable media [ 86.748848][ T7040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.830409][ T7071] raw_sendmsg: syz.0.355 forgot to set AF_INET. Fix it! [ 86.909926][ T7040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.051072][ T7040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.088380][ T7076] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.357'. [ 87.125816][ T7076] netlink: zone id is out of range [ 87.155758][ T7076] netlink: zone id is out of range [ 87.184089][ T7076] netlink: zone id is out of range [ 87.203011][ T7086] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 87.216526][ T7076] netlink: zone id is out of range [ 87.227329][ T7076] netlink: get zone limit has 8 unknown bytes [ 87.245313][ T7086] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 87.280863][ T7040] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.325236][ T7086] team0: Port device netdevsim0 removed [ 87.338794][ T7093] netlink: 'syz.0.364': attribute type 21 has an invalid length. [ 87.354480][ T7040] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.375887][ T7040] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.468458][ T7040] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.675939][ T7117] netlink: 'syz.2.370': attribute type 12 has an invalid length. [ 87.854995][ T7127] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 87.899129][ T7127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.931965][ T7123] netlink: 112 bytes leftover after parsing attributes in process `syz.4.374'. [ 87.980758][ T7132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.016872][ T7132] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 88.042307][ T7132] bond2: (slave vcan1): Error -95 calling set_mac_address [ 88.120284][ T7137] bridge0: port 3(ipvlan2) entered blocking state [ 88.159031][ T7137] bridge0: port 3(ipvlan2) entered disabled state [ 88.176107][ T7137] ipvlan2: entered allmulticast mode [ 88.181506][ T7137] bridge0: entered allmulticast mode [ 88.214173][ T7137] ipvlan2: left allmulticast mode [ 88.246486][ T7137] bridge0: left allmulticast mode [ 88.591601][ T7160] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.609654][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.388'. [ 88.632122][ T7160] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 88.852733][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 89.067390][ T7201] lo: entered promiscuous mode [ 89.072681][ T7201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.135369][ T7205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.285322][ T7214] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 89.598777][ T7233] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20001 [ 89.921074][ T7250] netlink: 'syz.4.421': attribute type 4 has an invalid length. [ 89.996066][ T7252] tipc: Started in network mode [ 90.017763][ T7252] tipc: Node identity 722f3599c357, cluster identity 4711 [ 90.035332][ T7252] tipc: Enabled bearer , priority 0 [ 90.146533][ T7252] syzkaller0: entered promiscuous mode [ 90.176501][ T7252] syzkaller0: entered allmulticast mode [ 90.186950][ T7252] tipc: Resetting bearer [ 90.210449][ T7251] tipc: Resetting bearer [ 91.071596][ T5909] tipc: Node number set to 2977445273 [ 91.716340][ T7251] tipc: Disabling bearer [ 91.809581][ T7280] tipc: Started in network mode [ 91.856127][ T7280] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 91.880743][ T7280] tipc: Enabling of bearer rejected, failed to enable media [ 92.089473][ T1333] wlan1: Trigger new scan to find an IBSS to join [ 92.383679][ T7319] netlink: 'syz.1.444': attribute type 21 has an invalid length. [ 92.404590][ T7319] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.414204][ T7319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.421868][ T7319] IPv6: NLM_F_CREATE should be set when creating new route [ 92.429202][ T7319] IPv6: NLM_F_CREATE should be set when creating new route [ 92.436510][ T7319] IPv6: NLM_F_CREATE should be set when creating new route [ 92.455590][ T7326] __nla_validate_parse: 5 callbacks suppressed [ 92.455608][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 92.470766][ T7330] nftables ruleset with unbound chain [ 92.523976][ T7321] tipc: Enabled bearer , priority 0 [ 92.609064][ T7321] syzkaller0: entered promiscuous mode [ 92.614607][ T7321] syzkaller0: entered allmulticast mode [ 92.631508][ T7321] tipc: Resetting bearer [ 92.702303][ T7320] tipc: Resetting bearer [ 93.566332][ T5909] tipc: Node number set to 3682581195 [ 94.368320][ T7320] tipc: Disabling bearer [ 94.385906][ T7365] IPv6: Can't replace route, no match found [ 94.694956][ T7377] netlink: 68 bytes leftover after parsing attributes in process `syz.3.463'. [ 94.836239][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.466'. [ 94.859301][ T7382] netlink: 'syz.3.466': attribute type 15 has an invalid length. [ 94.873766][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.466'. [ 95.069718][ T1333] wlan1: Trigger new scan to find an IBSS to join [ 95.258847][ T7404] sctp: [Deprecated]: syz.0.471 (pid 7404) Use of int in max_burst socket option. [ 95.258847][ T7404] Use struct sctp_assoc_value instead [ 95.274253][ T7400] sctp: [Deprecated]: syz.0.471 (pid 7400) Use of int in max_burst socket option. [ 95.274253][ T7400] Use struct sctp_assoc_value instead [ 95.275425][ T7405] FAULT_INJECTION: forcing a failure. [ 95.275425][ T7405] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.316398][ T7405] CPU: 0 UID: 0 PID: 7405 Comm: syz.1.473 Not tainted 6.13.0-syzkaller-04101-gb2aec4efe834 #0 [ 95.316425][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 95.316439][ T7405] Call Trace: [ 95.316446][ T7405] [ 95.316453][ T7405] dump_stack_lvl+0x241/0x360 [ 95.316492][ T7405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.316514][ T7405] ? __pfx__printk+0x10/0x10 [ 95.316544][ T7405] ? __pfx_lock_release+0x10/0x10 [ 95.316565][ T7405] ? __lock_acquire+0x1397/0x2100 [ 95.316591][ T7405] should_fail_ex+0x3b0/0x4e0 [ 95.316613][ T7405] _copy_from_user+0x2d/0xb0 [ 95.316636][ T7405] kstrtouint_from_user+0xc6/0x190 [ 95.316658][ T7405] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 95.316681][ T7405] ? __pfx_lock_acquire+0x10/0x10 [ 95.316711][ T7405] proc_fail_nth_write+0xaa/0x2d0 [ 95.316732][ T7405] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 95.316750][ T7405] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.316776][ T7405] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.316798][ T7405] vfs_write+0x2a3/0xd30 [ 95.316822][ T7405] ? fdget_pos+0x254/0x320 [ 95.316842][ T7405] ? __mutex_unlock_slowpath+0x227/0x800 [ 95.316863][ T7405] ? __pfx_vfs_write+0x10/0x10 [ 95.316884][ T7405] ? __fget_files+0x2a/0x410 [ 95.316907][ T7405] ? __fget_files+0x395/0x410 [ 95.316926][ T7405] ? __fget_files+0x2a/0x410 [ 95.316957][ T7405] ksys_write+0x18f/0x2b0 [ 95.316977][ T7405] ? __pfx_ksys_write+0x10/0x10 [ 95.316995][ T7405] ? do_syscall_64+0x100/0x230 [ 95.317015][ T7405] ? do_syscall_64+0xb6/0x230 [ 95.317034][ T7405] do_syscall_64+0xf3/0x230 [ 95.317049][ T7405] ? clear_bhb_loop+0x35/0x90 [ 95.317071][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.317092][ T7405] RIP: 0033:0x7f9d06f8b85f [ 95.317111][ T7405] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 95.317124][ T7405] RSP: 002b:00007f9d07d6d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 95.317142][ T7405] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9d06f8b85f [ 95.317154][ T7405] RDX: 0000000000000001 RSI: 00007f9d07d6d0a0 RDI: 0000000000000006 [ 95.317164][ T7405] RBP: 00007f9d07d6d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.317174][ T7405] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 95.317183][ T7405] R13: 0000000000000000 R14: 00007f9d071a6080 R15: 00007ffc13962e98 [ 95.317211][ T7405] [ 95.526076][ T7371] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 95.720494][ T7418] Unsupported ieee802154 address type: 0 [ 95.777595][ T7419] netlink: 71 bytes leftover after parsing attributes in process `syz.0.476'. [ 96.092421][ T7449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.489'. [ 96.124027][ T7447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.134396][ T7447] bond0: (slave bond2): Enslaving as an active interface with an up link [ 96.199649][ T7454] netlink: 830 bytes leftover after parsing attributes in process `syz.4.491'. [ 96.340024][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 96.363447][ T7462] xt_ecn: cannot match TCP bits for non-tcp packets [ 96.417139][ T7466] IPVS: set_ctl: invalid protocol: 0 172.20.20.58:20000 [ 96.456521][ T7471] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 1, id = 0 [ 96.742293][ T7486] xt_hashlimit: overflow, rate too high: 0 [ 96.742789][ T7484] geneve2: entered promiscuous mode [ 96.781679][ T7484] geneve2: entered allmulticast mode [ 96.891709][ T7493] netlink: 188 bytes leftover after parsing attributes in process `syz.1.506'. [ 96.901431][ T7493] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 96.913651][ T7492] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 96.940515][ T7492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.505'. [ 97.307959][ T7518] ieee802154 phy1 wpan1: encryption failed: -22 [ 97.335321][ T7515] bridge_slave_0: left allmulticast mode [ 97.346620][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.383862][ T7515] bridge_slave_1: left allmulticast mode [ 97.389856][ T7515] bridge_slave_1: left promiscuous mode [ 97.400168][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.451478][ T7515] team0: Port device team_slave_0 removed [ 97.487941][ T7515] team0: Port device team_slave_1 removed [ 97.508556][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.518599][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.528147][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.535613][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.549378][ T7522] __nla_validate_parse: 1 callbacks suppressed [ 97.549395][ T7522] netlink: 108 bytes leftover after parsing attributes in process `syz.2.517'. [ 97.581563][ T7522] netlink: 108 bytes leftover after parsing attributes in process `syz.2.517'. [ 97.623026][ T7522] netlink: 84 bytes leftover after parsing attributes in process `syz.2.517'. [ 97.694718][ T7534] delete_channel: no stack [ 97.827859][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 98.063128][ T7564] netlink: 'syz.4.530': attribute type 12 has an invalid length. [ 98.087414][ T64] wlan1: Creating new IBSS network, BSSID e2:b3:ac:7c:71:0f [ 98.115142][ T7564] netlink: 'syz.4.530': attribute type 29 has an invalid length. [ 98.154843][ T7564] netlink: 148 bytes leftover after parsing attributes in process `syz.4.530'. [ 98.164993][ T7564] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 98.181359][ T7564] netlink: 'syz.4.530': attribute type 2 has an invalid length. [ 98.191519][ T7564] netlink: 39 bytes leftover after parsing attributes in process `syz.4.530'. [ 98.398279][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 98.496692][ T7582] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 98.564550][ T7582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.653040][ T7596] netlink: 'syz.0.539': attribute type 2 has an invalid length. [ 98.815939][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.542'. [ 98.831900][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 99.527856][ T7642] sctp: [Deprecated]: syz.1.553 (pid 7642) Use of int in max_burst socket option deprecated. [ 99.527856][ T7642] Use struct sctp_assoc_value instead [ 99.630721][ T7650] xt_CT: No such helper "pptp" [ 99.675063][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.557'. [ 99.833531][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.272376][ T7695] pim6reg: entered allmulticast mode [ 100.278700][ T7695] pim6reg: left allmulticast mode [ 100.570418][ T7713] geneve2: entered promiscuous mode [ 100.581069][ T7713] geneve2: entered allmulticast mode [ 101.000513][ T7743] tc_dump_action: action bad kind [ 101.572157][ T7757] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 101.590196][ T7757] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.605219][ T7764] team0: No ports can be present during mode change [ 101.613511][ T7763] team0: No ports can be present during mode change [ 101.651819][ T7766] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 101.853690][ T7776] ipvlan2: entered allmulticast mode [ 101.863052][ T7776] veth0_vlan: entered allmulticast mode [ 101.874608][ T7776] netlink: 'syz.2.595': attribute type 5 has an invalid length. [ 101.997542][ T7784] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 102.023192][ T7788] netlink: 'syz.0.601': attribute type 3 has an invalid length. [ 102.031218][ T7789] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 102.058450][ T7784] macvlan0: entered promiscuous mode [ 102.070497][ T7784] macvlan0: entered allmulticast mode [ 102.091483][ T7784] veth1_vlan: entered allmulticast mode [ 102.110621][ T7784] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 102.120195][ T7789] veth1_vlan: left allmulticast mode [ 102.625302][ T7830] __nla_validate_parse: 14 callbacks suppressed [ 102.625321][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.735480][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.774156][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.800721][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.824147][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.848589][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.895953][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.931511][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.960784][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.986915][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 103.601757][ T7889] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 103.986272][ T7909] Cannot find add_set index 0 as target [ 104.003534][ T7909] x_tables: duplicate underflow at hook 2 [ 104.419800][ T7926] bridge0: port 1(bridge_slave_0) entered listening state [ 105.218802][ T7982] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 105.510577][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.540942][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.552099][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.562838][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.576899][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.587303][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.597798][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.608080][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.619617][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.629516][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.639541][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.649013][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.667776][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.677679][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.688462][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.705623][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.733644][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.758887][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.792305][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.813423][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.845053][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.870828][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.880895][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.892640][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.928832][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.938596][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.953015][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.965393][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.982752][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 105.992569][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 106.003123][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 106.023368][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 106.037732][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 106.064757][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 106.123241][ T8035] netem: change failed [ 106.149738][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 106.185652][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 106.198715][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 106.251720][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 106.272463][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 106.309144][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 106.322191][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 106.344332][ T7999] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 106.400899][ T8046] batadv0: entered promiscuous mode [ 106.415872][ T8046] macsec1: entered promiscuous mode [ 106.431908][ T8046] macsec1: entered allmulticast mode [ 106.442519][ T8046] batadv0: entered allmulticast mode [ 106.728000][ T8063] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 106.746787][ T8063] 0ªÃøÂFNð¡: entered allmulticast mode [ 106.772351][ T8077] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 106.858843][ T8087] netlink: 'syz.0.688': attribute type 13 has an invalid length. [ 106.917613][ T8087] veth0_macvtap: left promiscuous mode [ 106.933446][ T8087] macvtap0: entered allmulticast mode [ 106.943286][ T8094] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 106.944696][ T8087] macvtap0: refused to change device tx_queue_len [ 107.024420][ T8103] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.123160][ T8108] FAULT_INJECTION: forcing a failure. [ 107.123160][ T8108] name failslab, interval 1, probability 0, space 0, times 1 [ 107.154988][ T8108] CPU: 1 UID: 0 PID: 8108 Comm: syz.2.694 Not tainted 6.13.0-syzkaller-04101-gb2aec4efe834 #0 [ 107.155015][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.155025][ T8108] Call Trace: [ 107.155031][ T8108] [ 107.155038][ T8108] dump_stack_lvl+0x241/0x360 [ 107.155068][ T8108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.155090][ T8108] ? __pfx__printk+0x10/0x10 [ 107.155110][ T8108] ? fs_reclaim_acquire+0x93/0x130 [ 107.155129][ T8108] ? __pfx___might_resched+0x10/0x10 [ 107.155151][ T8108] should_fail_ex+0x3b0/0x4e0 [ 107.155172][ T8108] should_failslab+0xac/0x100 [ 107.155196][ T8108] __kmalloc_noprof+0xdd/0x4c0 [ 107.155216][ T8108] ? kstrtouint_from_user+0x128/0x190 [ 107.155234][ T8108] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 107.155258][ T8108] tomoyo_realpath_from_path+0xcf/0x5e0 [ 107.155289][ T8108] tomoyo_path_number_perm+0x236/0x860 [ 107.155303][ T8108] ? __lock_acquire+0x1397/0x2100 [ 107.155322][ T8108] ? tomoyo_path_number_perm+0x206/0x860 [ 107.155339][ T8108] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.155412][ T8108] ? __fget_files+0x2a/0x410 [ 107.155435][ T8108] ? __fget_files+0x2a/0x410 [ 107.155462][ T8108] security_file_ioctl+0xc6/0x2a0 [ 107.155486][ T8108] __se_sys_ioctl+0x46/0x170 [ 107.155507][ T8108] do_syscall_64+0xf3/0x230 [ 107.155523][ T8108] ? clear_bhb_loop+0x35/0x90 [ 107.155544][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.155560][ T8108] RIP: 0033:0x7faabd58cda9 [ 107.155575][ T8108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.155587][ T8108] RSP: 002b:00007faabe389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.155605][ T8108] RAX: ffffffffffffffda RBX: 00007faabd7a5fa0 RCX: 00007faabd58cda9 [ 107.155617][ T8108] RDX: 0000000020001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 107.155627][ T8108] RBP: 00007faabe389090 R08: 0000000000000000 R09: 0000000000000000 [ 107.155636][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.155646][ T8108] R13: 0000000000000000 R14: 00007faabd7a5fa0 R15: 00007ffc5c5a5a88 [ 107.155673][ T8108] [ 107.155690][ T8108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.373956][ T8116] SET target dimension over the limit! [ 108.151482][ T8126] __nla_validate_parse: 80 callbacks suppressed [ 108.151500][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 108.263393][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 108.390446][ T8140] netlink: 3520 bytes leftover after parsing attributes in process `syz.1.702'. [ 108.616880][ T8154] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 108.640290][ T8155] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 108.674868][ T8160] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 108.712959][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 108.735812][ T8155] netlink: 240 bytes leftover after parsing attributes in process `syz.4.708'. [ 108.784584][ T8167] netlink: 'syz.3.711': attribute type 2 has an invalid length. [ 108.954151][ T8176] syzkaller0: entered promiscuous mode [ 108.964953][ T8176] syzkaller0: entered allmulticast mode [ 108.983249][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 108.995386][ T8176] netlink: 'syz.4.714': attribute type 3 has an invalid length. [ 109.024179][ T8180] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 109.159375][ T8190] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 109.214034][ T8191] netlink: 264 bytes leftover after parsing attributes in process `syz.2.719'. [ 109.527289][ T8219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.725'. [ 109.590019][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 109.599224][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 109.916819][ T8243] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 110.244083][ T8262] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 110.689719][ T25] IPVS: starting estimator thread 0... [ 110.798936][ T8289] IPVS: using max 19 ests per chain, 45600 per kthread [ 110.963267][ T8306] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 111.035406][ T8304] vlan2: entered promiscuous mode [ 111.057586][ T8304] bridge0: entered promiscuous mode [ 111.062989][ T8304] vlan2: entered allmulticast mode [ 111.090312][ T8304] bridge0: entered allmulticast mode [ 111.304235][ T8322] netlink: 'syz.2.756': attribute type 4 has an invalid length. [ 111.337417][ T8321] netlink: 'syz.3.757': attribute type 5 has an invalid length. [ 111.432731][ T8325] bond0: entered promiscuous mode [ 111.438006][ T8325] bond_slave_0: entered promiscuous mode [ 111.443832][ T8325] bond_slave_1: entered promiscuous mode [ 111.455062][ T8325] bond2: entered promiscuous mode [ 112.083450][ T8361] bridge_slave_0: left allmulticast mode [ 112.099067][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.114024][ T8361] bridge_slave_1: left allmulticast mode [ 112.122964][ T8361] bridge_slave_1: left promiscuous mode [ 112.129652][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.143072][ T8361] bond0: (slave bond_slave_0): Releasing backup interface [ 112.152063][ T8361] bond_slave_0: left promiscuous mode [ 112.164481][ T8361] bond0: (slave bond_slave_1): Releasing backup interface [ 112.175714][ T8361] bond_slave_1: left promiscuous mode [ 112.182116][ T8373] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 112.211461][ T8361] team0: Port device team_slave_0 removed [ 112.234185][ T8361] team0: Port device team_slave_1 removed [ 112.241848][ T8361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.250142][ T8361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.260992][ T8361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.268948][ T8361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.281864][ T8361] batman_adv: batadv0: Interface deactivated: wlan0 [ 112.289106][ T8361] batman_adv: batadv0: Removing interface: wlan0 [ 112.300712][ T8361] bond0: (slave bond2): Releasing backup interface [ 112.312085][ T8361] bond2: left promiscuous mode [ 112.328340][ T8366] netlink: 'syz.0.775': attribute type 29 has an invalid length. [ 112.376071][ T8372] netlink: 'syz.0.775': attribute type 29 has an invalid length. [ 112.394876][ T8375] netlink: 'syz.0.775': attribute type 29 has an invalid length. [ 112.407323][ T8375] netlink: 'syz.0.775': attribute type 29 has an invalid length. [ 112.420533][ T8375] netlink: 'syz.0.775': attribute type 29 has an invalid length. [ 112.435158][ T8375] netlink: 'syz.0.775': attribute type 29 has an invalid length. [ 112.463388][ T8375] netlink: 'syz.0.775': attribute type 29 has an invalid length. [ 113.076957][ T8421] bridge0: entered allmulticast mode [ 113.183691][ T8426] __nla_validate_parse: 15 callbacks suppressed [ 113.183711][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.792'. [ 113.199716][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.792'. [ 113.244434][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 113.490210][ T8445] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 113.512532][ T8444] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 113.538240][ T8447] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 113.559044][ T8447] netlink: 17 bytes leftover after parsing attributes in process `syz.3.799'. [ 113.590402][ T8444] vlan3: entered allmulticast mode [ 113.632006][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.800'. [ 113.693423][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 113.935711][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.806'. [ 114.175828][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 114.285356][ T8486] syzkaller0: entered promiscuous mode [ 114.291454][ T8486] syzkaller0: entered allmulticast mode [ 114.958969][ T8534] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 116.122865][ T8525] tipc: Enabling of bearer rejected, failed to enable media [ 116.147880][ T8534] syz_tun: entered promiscuous mode [ 116.174282][ T8534] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 116.556412][ T8561] netlink: 666 bytes leftover after parsing attributes in process `syz.4.824'. [ 116.711375][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 116.799926][ T8570] syzkaller0: entered promiscuous mode [ 116.813353][ T8570] syzkaller0: entered allmulticast mode [ 117.431073][ T8600] IPVS: length: 93 != 24 [ 118.749282][ T8604] __nla_validate_parse: 1 callbacks suppressed [ 118.749300][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 118.800323][ T8604] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 118.812548][ T5839] Bluetooth: hci4: link tx timeout [ 118.812984][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'. [ 118.818127][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.840377][ T8604] netlink: 224 bytes leftover after parsing attributes in process `syz.4.841'. [ 119.051257][ T8625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.849'. [ 119.210768][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.218350][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.237409][ T8639] xt_hashlimit: invalid interval [ 119.240545][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.853'. [ 119.253048][ T8620] bridge0: left allmulticast mode [ 119.258030][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 119.264394][ T8620] bridge0: left promiscuous mode [ 119.334210][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 119.351175][ T8647] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 119.382048][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.395238][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.444189][ T8620] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.453748][ T8620] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.463901][ T8620] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.478200][ T8620] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.521978][ T8620] vlan2: left promiscuous mode [ 119.532035][ T8620] vlan2: left allmulticast mode [ 119.565106][ T8620] vlan3: left allmulticast mode [ 119.573812][ T8635] netlink: 'syz.4.850': attribute type 5 has an invalid length. [ 119.713745][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'. [ 119.781509][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 119.928068][ T8657] netlink: 7 bytes leftover after parsing attributes in process `syz.3.857'. [ 120.550978][ T8709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.612766][ T8715] netlink: 'syz.2.873': attribute type 3 has an invalid length. [ 120.795954][ T8729] net veth1_virt_wifi : renamed from virt_wifi0 [ 120.811854][ T8727] vlan3: entered allmulticast mode [ 120.888713][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 121.019687][ T8742] netlink: 'syz.3.882': attribute type 8 has an invalid length. [ 121.165976][ T8750] xt_CT: No such helper "pptp" [ 121.399131][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.417173][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.424320][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.553929][ T8773] openvswitch: netlink: Flow key attr not present in new flow. [ 121.706874][ T8785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.787962][ T8788] IPv6: Can't replace route, no match found [ 122.106056][ T8814] sctp: [Deprecated]: syz.3.902 (pid 8814) Use of int in max_burst socket option. [ 122.106056][ T8814] Use struct sctp_assoc_value instead [ 122.962420][ T8870] netlink: 'syz.3.916': attribute type 33 has an invalid length. [ 123.974156][ T8926] __nla_validate_parse: 59 callbacks suppressed [ 123.974174][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 124.116696][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 124.136391][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 124.310106][ T8931] syzkaller0: entered promiscuous mode [ 124.315768][ T8931] syzkaller0: entered allmulticast mode [ 124.437697][ T8941] netlink: 668 bytes leftover after parsing attributes in process `syz.2.939'. [ 124.446904][ T8941] netlink: 668 bytes leftover after parsing attributes in process `syz.2.939'. [ 124.557519][ T8943] syz.2.940[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.557631][ T8943] syz.2.940[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.557927][ T8945] syz.2.940[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.630498][ T8945] syz.2.940[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.830243][ T8952] netlink: 9 bytes leftover after parsing attributes in process `syz.2.943'. [ 126.264456][ T8952] 0·: renamed from hsr_slave_1 (while UP) [ 126.281816][ T8952] 0·: entered allmulticast mode [ 126.298525][ T8952] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 126.459320][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 126.490866][ T8960] pim6reg: entered allmulticast mode [ 126.516361][ T8960] pim6reg: left allmulticast mode [ 126.596205][ T8974] tipc: Started in network mode [ 126.602153][ T8974] tipc: Node identity ac14140f, cluster identity 4711 [ 126.621100][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 126.622318][ T8974] tipc: New replicast peer: 255.255.255.255 [ 126.638789][ T8974] tipc: Enabled bearer , priority 10 [ 126.667582][ T8981] netem: incorrect ge model size [ 126.673018][ T8981] netem: change failed [ 127.211962][ T9016] netlink: 72 bytes leftover after parsing attributes in process `syz.2.964'. [ 127.419377][ T9031] gtp0: entered promiscuous mode [ 127.424390][ T9031] gtp0: entered allmulticast mode [ 127.674328][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.973'. [ 127.757153][ T8] tipc: Node number set to 2886997007 [ 127.872628][ T9063] openvswitch: netlink: Key 18 has unexpected len 54 expected 2 [ 127.896064][ T8] hid-generic 0005:0C45:100D.0001: item fetching failed at offset 0/1 [ 127.908434][ T9066] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 127.949467][ T8] hid-generic 0005:0C45:100D.0001: probe with driver hid-generic failed with error -22 [ 128.182118][ T9090] syz.0.985[9090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.186572][ T9090] syz.0.985[9090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.820454][ T9128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.014589][ T9142] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 129.070444][ T9149] __nla_validate_parse: 7 callbacks suppressed [ 129.070464][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.086451][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.095834][ T9147] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.113089][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.122623][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.139253][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.151852][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.162193][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.171788][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.181419][ T9149] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1004'. [ 129.189276][ T9153] nbd: illegal input index -2046820352 [ 129.200118][ T9153] block nbd1: not configured, cannot reconfigure [ 129.312563][ T9157] syzkaller0: entered promiscuous mode [ 129.318230][ T9157] syzkaller0: entered allmulticast mode [ 129.660490][ T9174] netlink: 'syz.4.1012': attribute type 3 has an invalid length. [ 129.675109][ T8] IPVS: starting estimator thread 0... [ 129.787167][ T9175] IPVS: using max 26 ests per chain, 62400 per kthread [ 131.153402][ T9203] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 131.172961][ T9203] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 131.180895][ T9203] netlink: 'syz.0.1018': attribute type 2 has an invalid length. [ 131.548436][ T9161] IPv6: sit3: Disabled Multicast RS [ 131.554349][ T9161] sit3: entered allmulticast mode [ 131.588071][ T9194] netlink: 'syz.4.1015': attribute type 2 has an invalid length. [ 131.726011][ T9214] Cannot find add_set index 0 as target [ 131.753678][ T9214] IPVS: Unknown mcast interface: vcan0 [ 132.231854][ T9236] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 132.245844][ T9236] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 132.254319][ T9236] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 132.262551][ T9236] netlink: 'syz.1.1029': attribute type 2 has an invalid length. [ 132.359981][ T9244] syzkaller0: entered promiscuous mode [ 132.365684][ T9244] syzkaller0: entered allmulticast mode [ 132.541636][ T29] audit: type=1107 audit(1738096747.056:2): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 134.615893][ T9305] __nla_validate_parse: 67 callbacks suppressed [ 134.615913][ T9305] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1048'. [ 134.712034][ T9310] rdma_rxe: rxe_newlink: failed to add lo [ 134.948542][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 134.977317][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 135.029348][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 135.032155][ T9328] syzkaller0: entered promiscuous mode [ 135.076323][ T9328] syzkaller0: entered allmulticast mode [ 135.095981][ T9336] geneve2: entered promiscuous mode [ 135.128837][ T9337] tipc: Enabled bearer , priority 10 [ 135.140124][ T9341] validate_nla: 1 callbacks suppressed [ 135.140142][ T9341] netlink: 'syz.4.1059': attribute type 4 has an invalid length. [ 135.147715][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1058'. [ 136.782282][ T9334] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 136.965253][ T9360] IPv6: sit1: Disabled Multicast RS [ 137.195159][ T9354] infiniband syz2: set down [ 137.203858][ T9354] infiniband syz2: added ipvlan1 [ 137.318652][ T9354] RDS/IB: syz2: added [ 137.321689][ T9372] sctp: [Deprecated]: syz.1.1067 (pid 9372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.321689][ T9372] Use struct sctp_sack_info instead [ 137.346663][ T9354] smc: adding ib device syz2 with port count 1 [ 137.353040][ T9354] smc: ib device syz2 port 1 has pnetid [ 137.400572][ T5909] IPVS: starting estimator thread 0... [ 137.502710][ T9380] IPVS: using max 21 ests per chain, 50400 per kthread [ 137.557943][ T9385] netlink: 'syz.2.1072': attribute type 21 has an invalid length. [ 137.574944][ T9385] netlink: 'syz.2.1072': attribute type 11 has an invalid length. [ 138.253073][ T9424] netlink: 'syz.3.1083': attribute type 15 has an invalid length. [ 138.280175][ T9424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 138.615717][ T9444] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1089'. [ 138.951469][ T9452] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1094'. [ 139.010975][ T9455] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1095'. [ 139.048280][ T9460] netlink: 'syz.2.1093': attribute type 2 has an invalid length. [ 139.110756][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 139.181038][ T9462] x_tables: duplicate underflow at hook 1 [ 139.639092][ T9489] xt_SECMARK: invalid mode: 0 [ 139.745421][ T9485] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 139.974115][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'. [ 140.076292][ T9506] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 140.108600][ T9508] openvswitch: netlink: Missing key (keys=40, expected=80) [ 140.229357][ T9510] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1114'. [ 140.320702][ C0] Unknown status report in ack skb [ 140.456570][ T9522] siw: device registration error -23 [ 140.502129][ T9524] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1120'. [ 140.603549][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 140.619138][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 140.947210][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 141.011851][ T9546] Bluetooth: MGMT ver 1.23 [ 141.237197][ T9555] netlink: 'syz.2.1129': attribute type 5 has an invalid length. [ 141.321633][ T9561] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1130'. [ 141.377579][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 141.456905][ T9566] syzkaller0: entered promiscuous mode [ 141.463095][ T9566] syzkaller0: entered allmulticast mode [ 141.475429][ T9565] tipc: Enabled bearer , priority 0 [ 143.414665][ T9586] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1139'. [ 143.481411][ T9563] syzkaller0: entered promiscuous mode [ 143.487677][ T9563] syzkaller0: entered allmulticast mode [ 143.497646][ T9563] tipc: Resetting bearer [ 143.590973][ T3502] tipc: Resetting bearer [ 143.606292][ T9593] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 143.635474][ T9562] tipc: Resetting bearer [ 145.875680][ T9562] tipc: Disabling bearer [ 145.888719][ T9597] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 145.902867][ T9597] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 146.154760][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 146.230842][ T9641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1151'. [ 146.292699][ T9638] syzkaller0: entered promiscuous mode [ 146.308191][ T9638] syzkaller0: entered allmulticast mode [ 146.377986][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 146.654085][ T9674] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 146.664816][ T9674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.226983][ T9669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.358352][ T9679] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 148.375743][ T9684] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 148.434155][ T9691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1165'. [ 148.444389][ T9679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.466110][ T9687] bond3: (slave veth5): Enslaving as an active interface with a down link [ 148.487389][ T5839] Bluetooth: hci2: command tx timeout [ 148.641806][ T9701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.025647][ T9719] syzkaller1: entered promiscuous mode [ 149.032134][ T9719] syzkaller1: entered allmulticast mode [ 149.189138][ T9729] Bluetooth: MGMT ver 1.23 [ 149.209273][ T9730] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1179'. [ 149.261262][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 149.269906][ T9735] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 149.314978][ T9737] netlink: 1100 bytes leftover after parsing attributes in process `syz.3.1180'. [ 149.333847][ T9737] openvswitch: netlink: Flow key attr not present in new flow. [ 149.416974][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 149.431967][ T9743] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 149.444218][ T9744] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 149.747983][ T9758] Unknown options in mask 1f4 [ 149.796957][ T9758] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1186'. [ 149.902321][ T9766] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 149.940134][ T9766] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1189'. [ 150.315003][ T9789] openvswitch: netlink: Duplicate key (type 32). [ 150.392176][ T9795] nbd: must specify an index to disconnect [ 151.015277][ T9839] veth2: entered promiscuous mode [ 151.022182][ T9839] veth2: entered allmulticast mode [ 151.154989][ T9851] ipt_ECN: cannot use operation on non-tcp rule [ 151.190217][ T9851] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 151.348841][ T9860] bond0: (slave 00ªÃøÂFNð¡): Error -28 calling ndo_bpf [ 151.362412][ T9860] xt_addrtype: ipv6 does not support BROADCAST matching [ 151.533859][ T9870] wg2: entered promiscuous mode [ 151.555764][ T9870] wg2: entered allmulticast mode [ 151.578191][ T9875] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.669822][ T25] IPVS: starting estimator thread 0... [ 151.749019][ T9884] __nla_validate_parse: 1 callbacks suppressed [ 151.749036][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 151.786554][ T9880] IPVS: using max 27 ests per chain, 64800 per kthread [ 151.847792][ T9889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.891509][ T64] smc: removing ib device syz2 [ 152.161443][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 152.260783][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 152.292391][ T9905] syzkaller0: entered promiscuous mode [ 152.305683][ T9905] syzkaller0: entered allmulticast mode [ 152.323546][ T9908] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 154.554435][ T9933] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 154.725915][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 154.780916][ T9945] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 154.930961][ T9958] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.959553][ T9957] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1252'. [ 154.980613][ T9957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1252'. [ 154.997431][ T9962] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1252'. [ 155.028896][ T9967] netlink: 'syz.2.1255': attribute type 10 has an invalid length. [ 155.063666][ T9969] vlan2: entered promiscuous mode [ 155.070396][ T9969] vlan2: entered allmulticast mode [ 155.075570][ T9969] hsr_slave_1: entered allmulticast mode [ 155.088534][ T9967] geneve0: entered promiscuous mode [ 155.117206][ T9969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1257'. [ 155.206450][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1258'. [ 155.316278][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1262'. [ 155.352093][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1262'. [ 155.416622][ T9992] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 155.549748][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.602179][ T7985] bond0: (slave bridge0): link status definitely down, disabling slave [ 155.781315][T10022] bond1: entered promiscuous mode [ 155.786550][T10022] bond1: entered allmulticast mode [ 155.792036][T10022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.023112][T10034] gre0: entered promiscuous mode [ 156.028781][T10034] vlan3: entered promiscuous mode [ 156.054475][T10034] gre0: left promiscuous mode [ 156.349609][T10058] netlink: 'syz.4.1284': attribute type 30 has an invalid length. [ 156.398413][T10070] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 156.878257][T10101] veth1_macvtap: left promiscuous mode [ 156.919046][T10101] macsec0: entered allmulticast mode [ 156.931827][T10101] veth1_macvtap: entered promiscuous mode [ 156.945427][T10101] veth1_macvtap: entered allmulticast mode [ 156.969916][T10101] macsec0: left allmulticast mode [ 156.981849][T10101] veth1_macvtap: left allmulticast mode [ 156.990324][T10113] __nla_validate_parse: 6 callbacks suppressed [ 156.990341][T10113] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1297'. [ 157.006627][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 157.044640][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'. [ 157.139427][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1303'. [ 157.169709][T10127] xt_bpf: check failed: parse error [ 157.234686][T10133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'. [ 157.267408][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 157.277375][T10132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.341415][T10140] netlink: 'syz.2.1306': attribute type 1 has an invalid length. [ 157.350236][T10140] netlink: 'syz.2.1306': attribute type 3 has an invalid length. [ 157.362019][T10132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.370440][T10140] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1306'. [ 157.421807][T10142] syzkaller1: entered promiscuous mode [ 157.440492][T10142] syzkaller1: entered allmulticast mode [ 157.457991][T10142] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 157.575350][T10156] xt_hashlimit: overflow, rate too high: 0 [ 157.694852][T10161] sctp: [Deprecated]: syz.0.1315 (pid 10161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.694852][T10161] Use struct sctp_sack_info instead [ 157.735214][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 157.749319][T10161] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1315'. [ 158.024733][T10187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1324'. [ 158.147680][T10195] sctp: [Deprecated]: syz.3.1324 (pid 10195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.147680][T10195] Use struct sctp_sack_info instead [ 158.239102][T10196] openvswitch: netlink: Key type 34 is out of range max 32 [ 158.541197][T10212] netlink: 'syz.2.1331': attribute type 29 has an invalid length. [ 158.965651][T10238] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 158.984769][T10238] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 159.027111][T10237] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 159.061619][T10247] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 159.152917][T10248] Cannot find add_set index 1 as target [ 159.713764][T10277] tap0: tun_chr_ioctl cmd 1074025677 [ 159.724536][T10277] tap0: linktype set to 778 [ 160.141160][T10298] netlink: 'syz.4.1361': attribute type 15 has an invalid length. [ 160.241831][T10300] ip6tnl2: entered promiscuous mode [ 160.262809][T10300] ip6tnl2: entered allmulticast mode [ 160.382103][T10310] netlink: 'syz.0.1366': attribute type 7 has an invalid length. [ 160.505771][T10315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.790449][T10338] pim6reg: entered allmulticast mode [ 160.822347][T10338] pim6reg: left allmulticast mode [ 161.314968][T10373] veth1_macvtap: left promiscuous mode [ 161.336377][T10373] macsec0: entered allmulticast mode [ 161.343029][T10373] veth1_macvtap: entered promiscuous mode [ 161.362398][T10373] veth1_macvtap: entered allmulticast mode [ 161.376370][T10373] macsec0: left allmulticast mode [ 161.396948][T10373] veth1_macvtap: left allmulticast mode [ 161.635327][T10386] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 161.667931][T10381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.751010][T10386] bond5: entered promiscuous mode [ 161.776557][T10386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.798917][T10387] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 161.958059][T10402] netlink: 'syz.4.1395': attribute type 4 has an invalid length. [ 161.991259][T10381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.043873][T10408] batman_adv: batadv0: Adding interface: dummy0 [ 162.053856][T10408] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.091776][T10408] batman_adv: batadv0: Interface activated: dummy0 [ 162.219927][T10381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.274698][T10419] __nla_validate_parse: 21 callbacks suppressed [ 162.274717][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'. [ 162.322093][T10381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.448312][T10424] IPv6: syztnl0: Disabled Multicast RS [ 162.554339][T10434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'. [ 162.646600][T10441] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1409'. [ 162.652910][T10381] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.737777][T10381] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.761162][T10381] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.801900][T10381] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.819688][T10448] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.1413'. [ 162.846542][T10448] openvswitch: netlink: Flow actions attr not present in new flow. [ 163.017174][T10459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.074966][T10465] tipc: Enabled bearer , priority 0 [ 163.154719][T10465] tipc: Disabling bearer [ 163.525769][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 163.526299][T10501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1431'. [ 163.696056][T10501] bridge_slave_0 (unregistering): left allmulticast mode [ 163.706802][T10501] bridge_slave_0 (unregistering): left promiscuous mode [ 163.717999][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.754906][T10515] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 4, id = 0 [ 163.764583][T10513] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 163.990495][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 164.213335][T10542] netlink: 'syz.0.1442': attribute type 11 has an invalid length. [ 164.229666][T10542] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1442'. [ 164.256421][T10549] IPv6: sit3: Disabled Multicast RS [ 164.271679][T10549] netlink: 'syz.1.1445': attribute type 33 has an invalid length. [ 164.290733][T10549] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1445'. [ 164.310509][T10550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.321719][T10549] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1445'. [ 164.649269][T10576] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 164.655262][T10573] sctp: [Deprecated]: syz.1.1452 (pid 10573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.655262][T10573] Use struct sctp_sack_info instead [ 164.900297][T10591] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 165.296025][T10618] IPVS: Error connecting to the multicast addr [ 165.765337][T10649] netlink: 'syz.4.1475': attribute type 10 has an invalid length. [ 165.800221][T10649] bridge0: port 1(team0) entered blocking state [ 165.835207][T10649] bridge0: port 1(team0) entered disabled state [ 165.846761][T10649] team0: entered allmulticast mode [ 165.854583][T10649] team0: entered promiscuous mode [ 165.874337][T10659] netlink: 'syz.4.1475': attribute type 10 has an invalid length. [ 166.066857][T10671] netlink: 'syz.4.1484': attribute type 7 has an invalid length. [ 166.087614][ T11] wlan1: Trigger new scan to find an IBSS to join [ 166.106097][T10671] netlink: 'syz.4.1484': attribute type 8 has an invalid length. [ 166.203437][T10677] tc_dump_action: action bad kind [ 166.232190][T10679] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 166.240209][T10677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.265311][T10679] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 166.287429][T10679] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 166.486584][T10696] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 166.680123][T10713] IPVS: set_ctl: invalid protocol: 46 10.1.1.0:20002 [ 166.724860][T10713] xt_l2tp: missing protocol rule (udp|l2tpip) [ 166.896547][T10726] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 167.092801][T10741] netlink: 'syz.0.1509': attribute type 8 has an invalid length. [ 169.128126][ T7985] wlan1: Trigger new scan to find an IBSS to join [ 170.038687][ T11] wlan1: Creating new IBSS network, BSSID ae:67:df:9a:0a:c9 [ 181.214619][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 181.215193][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 181.222064][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 185.525235][T10754] __nla_validate_parse: 10 callbacks suppressed [ 185.525256][T10754] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1512'. [ 185.701466][T10766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.820569][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1520'. [ 185.941035][T10779] netlink: 'syz.4.1522': attribute type 4 has an invalid length. [ 185.962117][T10783] tipc: Enabled bearer , priority 10 [ 186.035632][T10785] bridge_slave_0: left allmulticast mode [ 186.074911][T10785] bridge_slave_0: left promiscuous mode [ 186.081210][T10785] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.092362][T10785] bridge_slave_1: left allmulticast mode [ 186.099373][T10785] bridge_slave_1: left promiscuous mode [ 186.105826][T10785] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.148090][T10785] bond0: (slave 00ªÃøÂFNð¡): Releasing backup interface [ 186.151453][T10795] nbd: must specify a size in bytes for the device [ 186.200362][T10785] bond0: (slave bond_slave_1): Releasing backup interface [ 186.251345][T10785] team0: Port device team_slave_0 removed [ 186.260331][T10802] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1531'. [ 186.290647][T10785] team0: Port device team_slave_1 removed [ 186.305817][T10785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.315499][T10785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.340049][T10785] bond0: (slave macvlan0): Releasing backup interface [ 186.626652][T10818] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 186.668249][T10821] xt_hashlimit: overflow, try lower: 4294967295/0 [ 186.970009][T10834] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1539'. [ 186.979799][T10846] sctp: [Deprecated]: syz.1.1542 (pid 10846) Use of int in maxseg socket option. [ 186.979799][T10846] Use struct sctp_assoc_value instead [ 187.201900][T10859] sctp: [Deprecated]: syz.2.1544 (pid 10859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.201900][T10859] Use struct sctp_sack_info instead [ 189.184765][T10840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.371134][ T6123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 189.555633][T10887] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 189.935483][T10923] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1560'. [ 189.939064][T10924] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 189.952761][T10924] netlink: 'syz.4.1558': attribute type 10 has an invalid length. [ 189.976157][T10924] netlink: 'syz.4.1558': attribute type 4 has an invalid length. [ 189.979591][T10923] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1560'. [ 189.996344][T10924] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1558'. [ 190.043973][T10932] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 190.072151][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 190.084697][T10932] tc_dump_action: action bad kind [ 190.402075][T10943] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 190.418310][T10944] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 190.427393][T10945] netlink: 'syz.1.1565': attribute type 21 has an invalid length. [ 190.435320][T10945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1565'. [ 190.841844][T10965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1574'. [ 191.034719][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1578'. [ 191.187251][T10991] netlink: 'syz.0.1582': attribute type 10 has an invalid length. [ 191.232330][T10991] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 191.309884][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 191.338335][T11000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1583'. [ 191.383540][T11000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1583'. [ 191.602826][T11021] pim6reg: entered allmulticast mode [ 191.619385][T11021] pim6reg: left allmulticast mode [ 192.002331][T11046] batadv_slave_1: entered promiscuous mode [ 192.012720][T11046] batadv_slave_1: entered allmulticast mode [ 192.138153][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 192.164887][T11052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.179155][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 192.326970][T11071] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 192.334757][T11071] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 192.403111][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1605'. [ 192.506785][T11081] x_tables: duplicate underflow at hook 1 [ 192.519224][T11085] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1608'. [ 192.910819][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'. [ 192.930536][T11105] netlink: 'syz.2.1614': attribute type 9 has an invalid length. [ 192.969036][T11103] tipc: Enabling of bearer rejected, failed to enable media [ 193.057237][T11103] syzkaller0: entered promiscuous mode [ 193.062764][T11103] syzkaller0: entered allmulticast mode [ 193.616216][T11138] netlink: 'syz.0.1625': attribute type 10 has an invalid length. [ 195.523037][T11138] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 195.546332][T11144] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 195.555130][T11149] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 195.772378][T11159] netlink: 'syz.4.1631': attribute type 1 has an invalid length. [ 195.918453][T11174] veth5: entered allmulticast mode [ 195.957399][T11172] bond0: option updelay: invalid value (18446744073709551615) [ 195.964949][T11172] bond0: option updelay: allowed values 0 - 2147483647 [ 196.051014][T11182] workqueue: name exceeds WQ_NAME_LEN. Truncating to: þÜå}ÆÓžäءÑV§ìñu«¼.ä [ 196.051014][T11182] Ýdïj! [ 196.084155][T11187] batadv2: entered allmulticast mode [ 196.102871][T11188] batadv2: entered allmulticast mode [ 196.138359][T11190] __nla_validate_parse: 4 callbacks suppressed [ 196.138379][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 196.171019][T11190] tipc: Enabling of bearer rejected, failed to enable media [ 196.235776][T11190] syzkaller0: entered promiscuous mode [ 196.242685][T11190] syzkaller0: entered allmulticast mode [ 196.664608][T11213] netlink: 'syz.0.1646': attribute type 3 has an invalid length. [ 196.673013][T11213] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1646'. [ 198.096464][T11057] wlan1: Trigger new scan to find an IBSS to join [ 198.502251][T11220] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1647'. [ 198.517118][T11212] batadv0: entered promiscuous mode [ 198.522462][T11212] macsec2: entered promiscuous mode [ 198.546532][T11212] macsec2: entered allmulticast mode [ 198.566364][T11212] batadv0: entered allmulticast mode [ 198.572933][T11219] macvlan1: entered promiscuous mode [ 198.626406][T11219] macvlan1: left promiscuous mode [ 199.047506][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1657'. [ 199.076007][T11261] openvswitch: netlink: Message has 8 unknown bytes. [ 199.307646][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 199.350833][T11274] tipc: Enabling of bearer rejected, failed to enable media [ 199.510340][T11274] syzkaller0: entered promiscuous mode [ 199.530355][T11274] syzkaller0: entered allmulticast mode [ 199.768783][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 201.126773][ T6123] wlan1: Trigger new scan to find an IBSS to join [ 202.002536][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1676'. [ 202.027843][T11323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1676'. [ 202.043087][T11329] IPVS: set_ctl: invalid protocol: 3 100.1.1.1:20000 [ 202.071447][T11324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1676'. [ 202.167517][T11057] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.365308][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 202.551296][T11371] netlink: 'syz.1.1688': attribute type 3 has an invalid length. [ 202.592038][T11371] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1688'. [ 202.929065][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 203.032722][T11388] Cannot find add_set index 0 as target [ 203.359942][T11403] IPVS: Scheduler module ip_vs_sip not found [ 203.374114][T11408] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1698'. [ 203.389426][T11408] pimreg: entered allmulticast mode [ 203.405345][T11407] pimreg: left allmulticast mode [ 204.432126][T11462] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1717'. [ 204.771767][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'. [ 204.788159][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1723'. [ 204.956523][T11493] tipc: MTU too low for tipc bearer [ 205.196053][T11501] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 205.208228][T11508] openvswitch: netlink: IP tunnel dst address not specified [ 205.215621][T11501] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 205.226504][T11501] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 205.417456][T11519] netlink: 'syz.1.1739': attribute type 12 has an invalid length. [ 205.651086][T11538] dvmrp0: entered allmulticast mode [ 205.661731][T11538] openvswitch: netlink: Key type 34 is out of range max 32 [ 205.738207][T11546] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 205.870630][T11557] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 206.121097][T11569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.779780][T11608] ip6tnl4: entered promiscuous mode [ 206.785058][T11608] ip6tnl4: entered allmulticast mode [ 207.081065][T11630] __nla_validate_parse: 12 callbacks suppressed [ 207.081087][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 207.171441][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 207.184290][T11639] netlink: 'syz.4.1779': attribute type 8 has an invalid length. [ 207.193099][T11641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1781'. [ 207.237392][T11641] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1781'. [ 207.359996][T11655] netlink: 'syz.0.1783': attribute type 1 has an invalid length. [ 207.375172][T11655] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1783'. [ 207.394487][T11656] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 207.557541][T11666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 208.082511][T11703] tipc: Enabled bearer , priority 0 [ 208.120282][T11703] veth1_to_team: entered promiscuous mode [ 208.126079][T11703] veth1_to_team: entered allmulticast mode [ 208.233732][T11710] tipc: Resetting bearer [ 208.421209][T11701] tipc: Disabling bearer [ 208.508014][T11724] team0: Device vlan4 is already an upper device of the team interface [ 208.753741][T11743] netlink: 'syz.2.1808': attribute type 10 has an invalid length. [ 208.788313][T11743] team0: Cannot enslave team device to itself [ 208.935689][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 208.995362][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 209.026296][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 209.550526][T11810] tipc: Started in network mode [ 209.555582][T11810] tipc: Node identity ac14140f, cluster identity 4711 [ 209.563244][T11815] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1826'. [ 209.563394][T11810] tipc: New replicast peer: 255.255.255.255 [ 209.581776][T11810] tipc: Enabled bearer , priority 10 [ 209.810023][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.817258][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.829195][ T7985] bond0: (slave bridge0): link status up, enabling it in 4 ms [ 209.867685][ T6123] bond0: (slave bridge0): link status up, enabling it in 4 ms [ 209.886557][ T6123] bond0: (slave bridge0): link status up, enabling it in 4 ms [ 209.899971][T11832] netlink: 'syz.2.1829': attribute type 21 has an invalid length. [ 209.916615][ T1333] bond0: (slave bridge0): link status up, enabling it in 4 ms [ 209.926613][ T1333] bond0: (slave bridge0): invalid new link 3 on slave [ 209.942002][T11831] netlink: 1224 bytes leftover after parsing attributes in process `syz.2.1829'. [ 209.951417][T11831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.959577][ T6123] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 210.263964][T11849] 0·: renamed from hsr0 (while UP) [ 210.292255][T11849] 0·: entered promiscuous mode [ 210.298908][T11849] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 210.507472][T11863] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 210.716386][ T25] tipc: Node number set to 2886997007 [ 210.877525][T11890] IPv6: sit1: Disabled Multicast RS [ 211.182338][T11908] infiniband syz1: set active [ 211.311835][T11907] infiniband syz1: set active [ 211.391407][ T6123] bond0: (slave bond_slave_0): interface is now down [ 211.392619][T11927] bridge_slave_1: left allmulticast mode [ 211.412480][ T6123] bond0: (slave bond_slave_1): interface is now down [ 211.436170][T11927] bridge_slave_1: left promiscuous mode [ 211.441986][T11927] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.495202][T11931] netlink: 'syz.1.1853': attribute type 10 has an invalid length. [ 211.541250][T11927] bond0: (slave bond_slave_0): Releasing backup interface [ 211.558388][T11927] bond_slave_0: left promiscuous mode [ 211.565588][T11927] bond0: (slave bond_slave_1): Releasing backup interface [ 211.609477][T11927] bond_slave_1: left promiscuous mode [ 211.642249][T11927] team0: Port device team_slave_0 removed [ 211.668114][T11927] team0: Port device team_slave_1 removed [ 211.687169][T11927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.706984][T11927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.910626][T11947] netlink: 'syz.2.1860': attribute type 21 has an invalid length. [ 212.902142][T12005] sctp: [Deprecated]: syz.3.1876 (pid 12005) Use of int in max_burst socket option. [ 212.902142][T12005] Use struct sctp_assoc_value instead [ 213.049833][T12012] __nla_validate_parse: 7 callbacks suppressed [ 213.049853][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 213.100475][T12015] netlink: 'syz.0.1878': attribute type 4 has an invalid length. [ 213.114311][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 213.159559][T12023] netlink: 'syz.0.1878': attribute type 4 has an invalid length. [ 213.524313][T12040] netlink: 'syz.1.1888': attribute type 2 has an invalid length. [ 213.604515][T12040] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1888'. [ 214.345725][T12089] netlink: 'syz.0.1903': attribute type 12 has an invalid length. [ 214.507690][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 214.541393][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1902'. [ 214.589558][T12099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1905'. [ 214.647628][T12099] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1905'. [ 215.011753][T12111] tap0: tun_chr_ioctl cmd 2148553947 [ 215.330112][T12122] syzkaller1: entered promiscuous mode [ 215.339192][T12122] syzkaller1: entered allmulticast mode [ 215.560593][T12142] bridge_slave_0: default FDB implementation only supports local addresses [ 215.910436][T12156] sctp: [Deprecated]: syz.2.1921 (pid 12156) Use of int in maxseg socket option. [ 215.910436][T12156] Use struct sctp_assoc_value instead [ 216.121770][T12167] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1923'. [ 216.142428][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 216.338162][T12178] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1927'. [ 216.806889][T12213] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 217.024247][T12226] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 217.439419][T12264] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 217.502181][T12264] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.531968][T12270] bond6: (slave gretap2): making interface the new active one [ 217.575414][T12270] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 217.576634][T12266] xt_CT: No such helper "pptp" [ 218.194103][T12314] __nla_validate_parse: 8 callbacks suppressed [ 218.194123][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'. [ 218.306728][T12325] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1974'. [ 218.381091][T12330] pim6reg1: entered promiscuous mode [ 218.396442][T12330] pim6reg1: entered allmulticast mode [ 218.699816][T12342] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1979'. [ 218.747610][T12349] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1981'. [ 219.668007][T12391] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20003 [ 219.675873][T12388] can: request_module (can-proto-5) failed. [ 219.720802][T12391] x_tables: duplicate underflow at hook 1 [ 219.953785][T12356] geneve2: entered promiscuous mode [ 219.960799][T12356] geneve2: entered allmulticast mode [ 220.181292][T12409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1996'. [ 220.602038][T12425] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2003'. [ 220.616377][T12430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'. [ 220.626369][T12431] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 220.634584][T12431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.675626][T12434] netlink: 'syz.1.2006': attribute type 2 has an invalid length. [ 220.684290][T12434] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2006'. [ 220.778196][ T5882] IPVS: starting estimator thread 0... [ 220.844778][T12439] netlink: 'syz.0.2007': attribute type 26 has an invalid length. [ 220.876549][T12435] IPVS: using max 22 ests per chain, 52800 per kthread [ 220.998692][T12453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2011'. [ 221.022962][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2011'. [ 221.454737][T12484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.630227][T12499] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.792926][T12505] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.802641][T12505] bond6: entered promiscuous mode [ 221.809706][T12505] bond0: (slave bond6): Enslaving as an active interface with an up link [ 221.832674][T12505] geneve2: entered promiscuous mode [ 221.839669][T12505] geneve2: entered allmulticast mode [ 222.121643][T12527] tipc: Enabling of bearer rejected, media not registered [ 222.439563][T12547] netlink: 'syz.4.2044': attribute type 10 has an invalid length. [ 222.505758][T12550] sctp: [Deprecated]: syz.1.2045 (pid 12550) Use of int in max_burst socket option deprecated. [ 222.505758][T12550] Use struct sctp_assoc_value instead [ 222.522588][T12547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.546814][T12547] batadv0: entered promiscuous mode [ 222.560387][T12547] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 222.575694][T12552] x_tables: duplicate underflow at hook 1 [ 222.682212][T12560] netlink: 'syz.3.2048': attribute type 1 has an invalid length. [ 222.690440][T12560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.749367][T12563] netlink: 'syz.0.2050': attribute type 1 has an invalid length. [ 222.928994][T12576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.468782][T12615] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 223.640303][T12624] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 223.795289][T12639] __nla_validate_parse: 4 callbacks suppressed [ 223.795309][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 224.186630][T12654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2075'. [ 224.649549][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2086'. [ 224.721143][T12691] netlink: 'syz.0.2087': attribute type 12 has an invalid length. [ 224.843948][T12697] netlink: 'syz.1.2090': attribute type 27 has an invalid length. [ 224.879727][T12697] batadv_slave_1: left promiscuous mode [ 224.885340][T12697] batadv_slave_1: left allmulticast mode [ 224.926730][T12705] netlink: 'syz.4.2093': attribute type 6 has an invalid length. [ 225.330154][T12732] netlink: 'syz.3.2103': attribute type 10 has an invalid length. [ 225.468637][T12741] tipc: Disabling bearer [ 225.807645][T12768] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 226.193354][T12795] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2119'. [ 226.642140][T12824] delete_channel: no stack [ 226.732216][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 226.745721][T12838] openvswitch: netlink: Unknown nsh attribute 0 [ 226.763067][T12838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.828280][T12843] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2134'. [ 226.848096][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 226.857304][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2131'. [ 226.970295][T12849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2137'. [ 226.985974][T12849] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2137'. [ 227.028494][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.064950][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.096394][T11057] bond0: (slave wlan1): link status up, enabling it in 4 ms [ 227.114193][T11057] bond0: (slave wlan1): invalid new link 3 on slave [ 227.157706][T11057] bond0: (slave wlan1): link status definitely up, 0 Mbps full duplex [ 227.287084][T12867] netlink: 'syz.2.2143': attribute type 10 has an invalid length. [ 227.325139][T12867] team0: Cannot enslave team device to itself [ 227.358627][T12873] batman_adv: batadv0: Adding interface: dummy0 [ 227.364907][T12873] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 227.398544][T12873] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 227.654052][T12886] netlink: 'syz.3.2150': attribute type 178 has an invalid length. [ 227.690481][T12891] veth1: entered promiscuous mode [ 227.715887][T12891] veth1: left promiscuous mode [ 227.810562][T12895] bridge0: left allmulticast mode [ 227.840790][T12895] bridge0: left promiscuous mode [ 227.904837][T12902] syz.1.2156 uses old SIOCAX25GETINFO [ 227.941898][T12903] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 227.954521][T12902] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 227.976718][T12906] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 228.016300][T12900] hsr_slave_0: left promiscuous mode [ 228.098767][T12906] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.114191][T12912] bond7: (slave gretap1): making interface the new active one [ 228.137778][T12912] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 228.206796][T12921] openvswitch: netlink: Key type 34 is out of range max 32 [ 228.311605][T12930] bridge_slave_0: default FDB implementation only supports local addresses [ 229.584787][T12996] syzkaller0: refused to change device tx_queue_len [ 229.778869][T13007] __nla_validate_parse: 4 callbacks suppressed [ 229.778888][T13007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2187'. [ 229.873913][T13007] netlink: 'syz.1.2187': attribute type 1 has an invalid length. [ 229.921719][T13012] sctp: [Deprecated]: syz.0.2189 (pid 13012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.921719][T13012] Use struct sctp_sack_info instead [ 229.926527][T13007] netlink: 'syz.1.2187': attribute type 8 has an invalid length. [ 229.955151][T13007] netlink: 134664 bytes leftover after parsing attributes in process `syz.1.2187'. [ 230.173580][T13023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2192'. [ 230.296546][T13031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2192'. [ 230.438779][T13045] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 230.465577][T13045] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.487067][T13045] bond8: (slave bridge4): making interface the new active one [ 230.495261][T13045] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 230.594875][T13045] vlan3: entered promiscuous mode [ 230.641523][T13045] bond8: entered promiscuous mode [ 230.670638][T13045] bridge4: entered promiscuous mode [ 230.693982][T13051] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2201'. [ 230.891201][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 230.927918][T13065] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2205'. [ 231.243353][T13086] netlink: del zone limit has 4 unknown bytes [ 231.296388][T13083] netlink: 'syz.1.2213': attribute type 4 has an invalid length. [ 231.499856][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2216'. [ 231.654999][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2216'. [ 231.728753][T13114] smc: net device bond0 applied user defined pnetid SYZ2 [ 231.749216][T13114] smc: net device bond0 erased user defined pnetid SYZ2 [ 232.032044][T13123] syzkaller0: entered promiscuous mode [ 232.065612][T13123] syzkaller0: entered allmulticast mode [ 232.145949][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'. [ 233.527906][ T263] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.328705][T13150] netlink: 'syz.3.2229': attribute type 5 has an invalid length. [ 234.516012][T13178] netlink: 'syz.1.2237': attribute type 21 has an invalid length. [ 234.544251][T13178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.551581][T13178] IPv6: NLM_F_CREATE should be set when creating new route [ 234.558993][T13178] IPv6: NLM_F_CREATE should be set when creating new route [ 234.566300][T13178] IPv6: NLM_F_CREATE should be set when creating new route [ 234.634997][T13187] tipc: Enabled bearer , priority 4 [ 234.667546][T13190] tipc: Enabling of bearer rejected, already enabled [ 234.906883][T13207] __nla_validate_parse: 2 callbacks suppressed [ 234.906906][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2246'. [ 234.935496][T13211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2247'. [ 235.043518][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 235.068990][T13206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.379491][T13239] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 235.393656][T13239] x_tables: duplicate underflow at hook 3 [ 235.437289][T13244] netlink: 'syz.0.2256': attribute type 2 has an invalid length. [ 235.462275][T13244] netlink: 'syz.0.2256': attribute type 9 has an invalid length. [ 235.484984][T13244] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2256'. [ 235.500278][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2257'. [ 235.501690][T13244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.746294][ T5879] tipc: Node number set to 4269801491 [ 235.862628][T13273] sch_fq: defrate 0 ignored. [ 235.886012][T13273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2265'. [ 235.904364][T13278] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 235.913041][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2267'. [ 235.938932][T13278] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 235.952699][T13278] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 235.983723][T13278] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 236.157998][T13291] openvswitch: netlink: IP tunnel dst address not specified [ 236.187785][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 236.253127][T13293] syzkaller0: entered promiscuous mode [ 236.284381][T13293] syzkaller0: entered allmulticast mode [ 236.291281][T13291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2274'. [ 236.385881][T13307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2278'. [ 238.595146][T13313] pimreg3: entered allmulticast mode [ 239.440196][T13374] syzkaller1: entered promiscuous mode [ 239.446014][T13374] syzkaller1: entered allmulticast mode [ 239.744238][T13383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.784238][T13382] veth0_to_hsr: entered promiscuous mode [ 241.858626][T13382] veth0_to_hsr: left promiscuous mode [ 241.879741][T13401] __nla_validate_parse: 4 callbacks suppressed [ 241.879761][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2309'. [ 241.968203][T13411] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2311'. [ 241.992807][T13410] validate_nla: 3 callbacks suppressed [ 241.992828][T13410] netlink: 'syz.2.2310': attribute type 21 has an invalid length. [ 242.020978][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2311'. [ 242.031017][T13410] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2310'. [ 242.431190][T13437] netlink: 'syz.0.2318': attribute type 12 has an invalid length. [ 242.451360][T13429] veth1_to_hsr: entered promiscuous mode [ 242.457951][T13429] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 242.465656][T13429] Cannot create hsr debugfs directory [ 242.624040][T13452] netlink: 'syz.3.2323': attribute type 21 has an invalid length. [ 242.639481][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2321'. [ 242.657392][T13452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.664677][T13452] IPv6: NLM_F_CREATE should be set when creating new route [ 242.671929][T13452] IPv6: NLM_F_CREATE should be set when creating new route [ 242.679197][T13452] IPv6: NLM_F_CREATE should be set when creating new route [ 242.716677][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2324'. [ 242.754898][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'. [ 242.827168][T13457] syzkaller0: entered promiscuous mode [ 242.833504][T13457] syzkaller0: entered allmulticast mode [ 243.005564][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'. [ 243.037775][T13469] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 245.053673][T13469] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 245.216376][T13489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.223693][T13489] IPv6: NLM_F_CREATE should be set when creating new route [ 245.231009][T13489] IPv6: NLM_F_CREATE should be set when creating new route [ 245.334413][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 245.357093][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'. [ 245.416528][T13491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.590022][T13524] netlink: 'syz.2.2341': attribute type 4 has an invalid length. [ 245.604789][T13524] netlink: 'syz.2.2341': attribute type 11 has an invalid length. [ 245.853294][T13537] syzkaller0: entered promiscuous mode [ 245.868677][T13537] syzkaller0: entered allmulticast mode [ 246.499163][T13565] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 246.587770][T13569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.395818][T13547] __nla_validate_parse: 4 callbacks suppressed [ 248.395832][T13547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2346'. [ 248.436915][T13575] tap1: tun_chr_ioctl cmd 1074025677 [ 248.442434][T13575] tap1: linktype set to 778 [ 248.857237][T13606] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 248.903572][T13606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.915886][T13607] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.972842][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 248.997317][T13606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.007559][T13606] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 249.011825][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 249.019935][T13606] bond3: (slave vcan0): Error -95 calling set_mac_address [ 249.048812][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'. [ 249.114270][T13613] netlink: 'syz.0.2364': attribute type 20 has an invalid length. [ 249.200065][T13610] syzkaller0: entered promiscuous mode [ 249.205908][T13610] syzkaller0: entered allmulticast mode [ 251.608466][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2377'. [ 251.627018][T13654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2377'. [ 251.709545][T13660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2380'. [ 251.720466][T13660] netlink: 'syz.4.2380': attribute type 15 has an invalid length. [ 251.748380][T13660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 251.749841][T13665] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 251.765790][T13665] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2383'. [ 251.775649][T13665] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 251.793880][T13661] netlink: 'syz.2.2381': attribute type 7 has an invalid length. [ 251.824877][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2382'. [ 252.307235][T13688] syzkaller0: entered promiscuous mode [ 252.312772][T13688] syzkaller0: entered allmulticast mode [ 254.761764][T13722] __nla_validate_parse: 4 callbacks suppressed [ 254.761784][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 254.985428][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 255.093216][T13744] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2409'. [ 255.150958][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 255.189398][T13747] syzkaller0: entered promiscuous mode [ 255.194956][T13747] syzkaller0: entered allmulticast mode [ 255.714155][T13751] syz.0.2411 (13751) used greatest stack depth: 17880 bytes left [ 255.764002][T13754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2413'. [ 257.551208][T13767] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 257.679771][T13774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.934617][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 257.947542][T13797] netlink: 'syz.4.2422': attribute type 3 has an invalid length. [ 258.236720][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 258.269886][T13817] tipc: Enabled bearer , priority 0 [ 258.347335][T13815] tipc: Disabling bearer [ 258.591580][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2438'. [ 258.767627][T13861] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2440'. [ 258.789332][T13863] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2443'. [ 261.305010][T13887] tipc: Enabling of bearer rejected, failed to enable media [ 261.316733][T13892] .: renamed from bond0 [ 261.533560][T13904] Unsupported ieee802154 address type: 0 [ 261.754651][T13913] vlan4: entered promiscuous mode [ 261.771042][T13913] vlan4: entered allmulticast mode [ 261.804555][T13918] __nla_validate_parse: 3 callbacks suppressed [ 261.804575][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 261.896518][T13918] team0: left allmulticast mode [ 261.942716][T13918] team0: left promiscuous mode [ 261.955435][T13918] bridge0: port 1(team0) entered disabled state [ 261.977322][T13927] xt_hashlimit: max too large, truncated to 1048576 [ 262.096326][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 262.331186][T13953] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 262.372324][T13953] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2466'. [ 262.511789][T13964] netlink: 'syz.3.2471': attribute type 24 has an invalid length. [ 262.651064][T13976] ebt_among: src integrity fail: 30a [ 262.779335][T13985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 262.829007][T13988] netlink: 'syz.3.2476': attribute type 2 has an invalid length. [ 262.867190][T13988] netlink: 'syz.3.2476': attribute type 2 has an invalid length. [ 263.165107][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 263.264449][T14011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2481'. [ 263.359898][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 263.423463][T14015] tipc: Enabled bearer , priority 0 [ 263.500995][T14015] syzkaller0: entered promiscuous mode [ 263.516946][T14015] syzkaller0: entered allmulticast mode [ 263.533470][T14015] tipc: Resetting bearer [ 263.584931][T14013] tipc: Resetting bearer [ 264.540617][T14064] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2499'. [ 265.526963][ T3502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.645039][T14013] tipc: Disabling bearer [ 267.211474][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2509'. [ 267.236608][T14104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2509'. [ 267.280076][T14112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2512'. [ 267.404090][T14116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2513'. [ 267.509274][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 267.564765][T14125] tipc: Enabled bearer , priority 0 [ 267.635798][T14121] syzkaller0: entered promiscuous mode [ 267.650819][T14121] syzkaller0: entered allmulticast mode [ 267.663850][T14121] tipc: Resetting bearer [ 267.685126][T14117] tipc: Resetting bearer [ 267.730755][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.739295][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.747428][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.763492][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.771920][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.787521][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.800406][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.808626][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.818270][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 267.826553][T14133] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 270.073980][T14117] tipc: Disabling bearer [ 270.085273][T14135] wg2: entered promiscuous mode [ 270.090794][T14135] wg2: entered allmulticast mode [ 270.107536][T14148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2523'. [ 270.280378][T14164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2526'. [ 270.826790][T14209] No such timeout policy "syz0" [ 270.995134][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2539'. [ 271.007159][T14169] syz.0.2525 (14169) used greatest stack depth: 17504 bytes left [ 271.022664][T14217] tipc: Enabled bearer , priority 0 [ 271.161380][T14217] syzkaller0: entered promiscuous mode [ 271.172549][T14217] syzkaller0: entered allmulticast mode [ 271.179149][T14217] tipc: Resetting bearer [ 271.291475][ T7985] tipc: Resetting bearer [ 271.337215][T14216] tipc: Resetting bearer [ 271.410409][T14241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2547'. [ 273.601335][T14216] tipc: Disabling bearer [ 273.611110][T14241] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 273.616937][T14243] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 273.872951][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 273.924423][T14268] validate_nla: 43 callbacks suppressed [ 273.924442][T14268] netlink: 'syz.2.2554': attribute type 1 has an invalid length. [ 273.943387][T14268] netlink: 'syz.2.2554': attribute type 11 has an invalid length. [ 273.957760][T14268] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2554'. [ 274.216589][T14278] xt_CT: No such helper "pptp" [ 274.227288][T14278] sctp: [Deprecated]: syz.2.2558 (pid 14278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.227288][T14278] Use struct sctp_sack_info instead [ 274.266749][T14278] sctp: [Deprecated]: syz.2.2558 (pid 14278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.266749][T14278] Use struct sctp_sack_info instead [ 274.396834][T14285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2563'. [ 274.405992][T14285] netlink: 'syz.4.2563': attribute type 7 has an invalid length. [ 274.430877][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2562'. [ 274.443919][T14288] tipc: Enabled bearer , priority 0 [ 274.476391][T14285] netlink: 'syz.4.2563': attribute type 8 has an invalid length. [ 274.494477][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 274.510403][T14288] syzkaller0: entered promiscuous mode [ 274.529154][T14288] syzkaller0: entered allmulticast mode [ 274.538374][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 274.548642][T14288] tipc: Resetting bearer [ 274.562270][T14285] team_slave_1: entered promiscuous mode [ 274.569353][T14285] team_slave_0: entered promiscuous mode [ 274.577094][T14285] team_slave_1: left promiscuous mode [ 274.586645][T14285] team_slave_0: left promiscuous mode [ 274.638477][T14286] tipc: Resetting bearer [ 274.872234][T14309] netlink: 'syz.3.2567': attribute type 10 has an invalid length. [ 277.043968][T14286] tipc: Disabling bearer [ 277.066762][T14296] pim6reg1: entered promiscuous mode [ 277.072160][T14296] pim6reg1: entered allmulticast mode [ 277.080301][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 277.207900][T14313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2570'. [ 277.247477][T14313] netlink: 'syz.1.2570': attribute type 7 has an invalid length. [ 277.285410][T14313] netlink: 'syz.1.2570': attribute type 8 has an invalid length. [ 277.329341][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 277.559322][T14338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2577'. [ 277.788534][T14345] tipc: Enabled bearer , priority 0 [ 277.906465][T14345] syzkaller0: entered promiscuous mode [ 277.911997][T14345] syzkaller0: entered allmulticast mode [ 277.967247][T14345] tipc: Resetting bearer [ 278.026874][T14355] bond0: (slave bridge0): Releasing backup interface [ 278.037142][T14355] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.056641][T14355] batman_adv: batadv0: Interface deactivated: dummy0 [ 278.080007][T14355] batman_adv: batadv0: Removing interface: dummy0 [ 278.109440][T14355] bridge_slave_0: left allmulticast mode [ 278.115339][T14355] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.136857][T14355] bridge_slave_1: left allmulticast mode [ 278.153092][T14355] bridge_slave_1: left promiscuous mode [ 278.190205][T14355] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.268651][T14355] bond0: (slave bond_slave_0): Releasing backup interface [ 278.299334][T14355] bond0: (slave bond_slave_1): Releasing backup interface [ 278.329700][T14355] infiniband syz1: set down [ 278.337236][T14355] team0: Port device team_slave_0 removed [ 278.355758][T14355] team0: Port device team_slave_1 removed [ 278.362605][T14355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.370532][T14355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.380025][T14355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.388539][T14355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.406973][T14355] bond0: (slave netdevsim0): Releasing backup interface [ 278.420252][T14355] bond0: (slave wlan1): Releasing backup interface [ 278.465156][T14352] team0: Mode "" not found [ 278.471665][T14377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.482333][T14344] tipc: Resetting bearer [ 280.629623][T14344] tipc: Disabling bearer [ 280.959768][T14409] __nla_validate_parse: 1 callbacks suppressed [ 280.959786][T14409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2593'. [ 280.997740][T14409] ipt_ECN: cannot use operation on non-tcp rule [ 281.147972][T14423] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2598'. [ 281.275293][T14437] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.2605'. [ 281.287791][T14433] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 281.471731][T14452] netlink: 'syz.1.2609': attribute type 10 has an invalid length. [ 281.491216][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 282.036461][T14486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.062227][T14484] netlink: 'syz.4.2617': attribute type 1 has an invalid length. [ 282.075649][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2617'. [ 282.132789][T14488] IPv6: sit4: Disabled Multicast RS [ 282.148811][T14488] sit4: entered allmulticast mode [ 282.196962][T14490] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2620'. [ 282.241114][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2622'. [ 282.259172][T14495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2622'. [ 282.558960][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 282.688100][T14524] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2630'. [ 282.872621][T14537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.001684][T14543] netlink: 'syz.0.2637': attribute type 1 has an invalid length. [ 283.002554][T14550] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 283.128187][ T55] block nbd1: Receive control failed (result -32) [ 283.297503][T14566] vlan0: entered allmulticast mode [ 283.433820][T14571] hsr_slave_0: left promiscuous mode [ 283.457518][T14571] hsr_slave_1: left promiscuous mode [ 283.763231][T14595] netlink: 'syz.4.2652': attribute type 4 has an invalid length. [ 283.771790][T14595] netlink: 'syz.4.2652': attribute type 4 has an invalid length. [ 283.811407][T14597] ipvlan0: mtu less than device minimum [ 284.623616][T14637] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 284.858256][T14650] tipc: Enabled bearer , priority 0 [ 284.925458][T14650] syzkaller0: entered promiscuous mode [ 284.932197][T14650] syzkaller0: entered allmulticast mode [ 284.951484][T14650] tipc: Resetting bearer [ 285.019593][T14665] netlink: 'syz.3.2674': attribute type 3 has an invalid length. [ 285.028231][T14649] tipc: Resetting bearer [ 287.453112][T14649] tipc: Disabling bearer [ 287.460981][T14664] netlink: 'syz.3.2674': attribute type 5 has an invalid length. [ 287.469414][T14664] __nla_validate_parse: 12 callbacks suppressed [ 287.469429][T14664] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2674'. [ 287.490853][T14676] vlan0: entered promiscuous mode [ 287.496378][T14676] vlan0: entered allmulticast mode [ 287.501586][T14676] hsr_slave_1: entered allmulticast mode [ 287.661183][T14681] hsr_slave_1 (unregistering): left allmulticast mode [ 287.685902][T14681] hsr_slave_1 (unregistering): left promiscuous mode [ 287.724062][T14698] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 287.844737][T14703] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2685'. [ 288.010969][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2689'. [ 288.094741][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2692'. [ 288.124773][T14717] tipc: Enabled bearer , priority 0 [ 288.226493][T14717] syzkaller0: entered promiscuous mode [ 288.232032][T14717] syzkaller0: entered allmulticast mode [ 288.260701][T14732] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2695'. [ 288.260954][T14717] tipc: Resetting bearer [ 288.306396][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2696'. [ 288.335956][ T5909] hid-generic 0005:16C0:0007.0002: item fetching failed at offset 0/1 [ 288.347625][ T5909] hid-generic 0005:16C0:0007.0002: probe with driver hid-generic failed with error -22 [ 288.371170][T14713] tipc: Resetting bearer [ 290.771976][T14713] tipc: Disabling bearer [ 290.792237][T14761] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.816895][T14761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.970729][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 291.001497][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2707'. [ 291.072356][T14782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.104761][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 291.114266][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2707'. [ 291.223986][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 291.232380][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2707'. [ 291.318729][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 291.333012][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2707'. [ 291.421120][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 291.435584][T14807] tipc: Enabled bearer , priority 0 [ 291.484452][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 291.511059][T14807] syzkaller0: entered promiscuous mode [ 291.520440][T14807] syzkaller0: entered allmulticast mode [ 291.523556][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 291.537293][T14807] tipc: Resetting bearer [ 291.556172][T14806] tipc: Resetting bearer [ 291.571371][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 291.612535][T14774] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 293.814140][T14806] tipc: Disabling bearer [ 293.835563][T14826] validate_nla: 5 callbacks suppressed [ 293.835582][T14826] netlink: 'syz.3.2719': attribute type 1 has an invalid length. [ 293.880872][T14829] __nla_validate_parse: 12 callbacks suppressed [ 293.880889][T14829] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2719'. [ 294.127848][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 294.272599][T14856] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 294.412794][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 294.427284][T14863] tipc: Enabled bearer , priority 0 [ 294.482877][T14863] syzkaller0: entered promiscuous mode [ 294.493903][T14863] syzkaller0: entered allmulticast mode [ 294.503689][T14863] tipc: Resetting bearer [ 294.660061][T14862] tipc: Resetting bearer [ 296.791102][T14862] tipc: Disabling bearer [ 296.947350][T14879] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2735'. [ 297.010479][T14884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2736'. [ 297.527043][T11057] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.559381][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 297.609216][T14926] tipc: Enabled bearer , priority 0 [ 297.698930][T14926] syzkaller0: entered promiscuous mode [ 297.704896][T14926] syzkaller0: entered allmulticast mode [ 297.752471][T14926] tipc: Resetting bearer [ 297.815011][T14925] tipc: Resetting bearer [ 298.007599][T14960] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2756'. [ 298.020191][T14961] netlink: 'syz.2.2755': attribute type 1 has an invalid length. [ 299.946129][T14925] tipc: Disabling bearer [ 299.961162][T14961] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 300.165712][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'. [ 300.502922][T14997] sock: sock_set_timeout: `syz.1.2766' (pid 14997) tries to set negative timeout [ 300.751144][T15011] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.2769'. [ 300.770815][T15011] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 300.780960][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2770'. [ 300.855716][T15024] syzkaller0: entered allmulticast mode [ 300.865557][T15022] openvswitch: netlink: Flow actions attr not present in new flow. [ 300.883861][T15022] netlink: 'syz.1.2770': attribute type 11 has an invalid length. [ 300.894673][T15015] syzkaller0 (unregistering): left allmulticast mode [ 300.992535][T15026] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2773'. [ 301.034905][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2773'. [ 301.341323][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2780'. [ 301.464973][T15054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2782'. [ 301.501866][T15057] netlink: 'syz.2.2783': attribute type 3 has an invalid length. [ 301.520308][T15057] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2783'. [ 301.545220][T15058] tipc: Enabled bearer , priority 0 [ 301.834486][T15071] netlink: 'syz.1.2785': attribute type 3 has an invalid length. [ 301.997852][T15076] batadv_slave_1: default FDB implementation only supports local addresses [ 302.143279][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2789'. [ 302.552323][T15105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.599356][T15105] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 302.623853][T15109] x_tables: duplicate underflow at hook 3 [ 302.894847][T15126] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2804'. [ 303.227588][T15135] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 303.877452][T15159] xt_hashlimit: max too large, truncated to 1048576 [ 304.231864][T15179] netlink: 'syz.4.2817': attribute type 4 has an invalid length. [ 304.295283][T15187] netlink: 'syz.4.2817': attribute type 4 has an invalid length. [ 304.827114][T15221] netlink: 'syz.4.2830': attribute type 10 has an invalid length. [ 304.878384][T15221] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.907291][T15221] team0: entered promiscuous mode [ 304.913006][T15221] .: (slave team0): Enslaving as an active interface with an up link [ 305.080789][T15238] netlink: 'syz.2.2835': attribute type 1 has an invalid length. [ 305.358160][T15262] __nla_validate_parse: 4 callbacks suppressed [ 305.358181][T15262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2841'. [ 305.564550][T15277] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2846'. [ 305.582231][T15280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2847'. [ 305.603443][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2847'. [ 306.665924][T15352] tipc: New replicast peer: 255.255.255.255 [ 306.687649][T15352] tipc: Enabled bearer , priority 10 [ 307.964453][ T5842] ================================================================== [ 307.972651][ T5842] BUG: KASAN: slab-out-of-bounds in sco_conn_put+0xad/0x210 [ 307.979978][ T5842] Write of size 8 at addr ffff88802f21a5a0 by task syz-executor/5842 [ 307.988069][ T5842] [ 307.990452][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.13.0-syzkaller-04101-gb2aec4efe834 #0 [ 307.990477][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 307.990491][ T5842] Call Trace: [ 307.990498][ T5842] [ 307.990505][ T5842] dump_stack_lvl+0x241/0x360 [ 307.990537][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.990557][ T5842] ? __pfx__printk+0x10/0x10 [ 307.990576][ T5842] ? _printk+0xd5/0x120 [ 307.990595][ T5842] ? __virt_addr_valid+0x183/0x530 [ 307.990615][ T5842] ? __virt_addr_valid+0x183/0x530 [ 307.990635][ T5842] print_report+0x169/0x550 [ 307.990656][ T5842] ? __virt_addr_valid+0x183/0x530 [ 307.990674][ T5842] ? __virt_addr_valid+0x183/0x530 [ 307.990692][ T5842] ? __virt_addr_valid+0x45f/0x530 [ 307.990710][ T5842] ? __phys_addr+0xba/0x170 [ 307.990729][ T5842] ? sco_conn_put+0xad/0x210 [ 307.990747][ T5842] kasan_report+0x143/0x180 [ 307.990767][ T5842] ? sco_conn_put+0xad/0x210 [ 307.990787][ T5842] sco_conn_put+0xad/0x210 [ 307.990804][ T5842] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 307.990832][ T5842] hci_conn_hash_flush+0x1be/0x350 [ 307.990852][ T5842] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 307.990867][ T5842] ? drain_workqueue+0x2d3/0x3a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.990885][ T5842] ? hci_discovery_set_state+0x57/0x180 [ 307.990907][ T5842] hci_dev_close_sync+0xa42/0x11c0 [ 307.990930][ T5842] hci_unregister_dev+0x20b/0x510 [ 307.990950][ T5842] vhci_release+0x80/0xd0 [ 307.990970][ T5842] ? __pfx_vhci_release+0x10/0x10 [ 307.990988][ T5842] __fput+0x23c/0xa50 [ 307.991006][ T5842] task_work_run+0x24f/0x310 [ 307.991029][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 307.991049][ T5842] ? do_exit+0xa25/0x28e0 [ 307.991065][ T5842] ? do_exit+0xa25/0x28e0 [ 307.991084][ T5842] do_exit+0xa2a/0x28e0 [ 307.991103][ T5842] ? __pfx_do_exit+0x10/0x10 [ 307.991120][ T5842] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.991138][ T5842] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.991158][ T5842] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.991177][ T5842] ? _raw_spin_lock_irq+0xdf/0x120 [ 307.991198][ T5842] do_group_exit+0x207/0x2c0 [ 307.991215][ T5842] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.991234][ T5842] ? lockdep_hardirqs_on+0x99/0x150 [ 307.991256][ T5842] get_signal+0x16b2/0x1750 [ 307.991285][ T5842] ? __pfx_get_signal+0x10/0x10 [ 307.991311][ T5842] arch_do_signal_or_restart+0x96/0x860 [ 307.991329][ T5842] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 307.991344][ T5842] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.991369][ T5842] ? syscall_exit_to_user_mode+0xa3/0x340 [ 307.991393][ T5842] syscall_exit_to_user_mode+0xce/0x340 [ 307.991417][ T5842] do_syscall_64+0x100/0x230 [ 307.991433][ T5842] ? clear_bhb_loop+0x35/0x90 [ 307.991452][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.991476][ T5842] RIP: 0033:0x7faabd58b7bc [ 307.991494][ T5842] Code: Unable to access opcode bytes at 0x7faabd58b792. [ 307.991502][ T5842] RSP: 002b:00007ffc5c5a5df0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.991521][ T5842] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007faabd58b7bc [ 307.991533][ T5842] RDX: 0000000000000030 RSI: 00007ffc5c5a5eb0 RDI: 00000000000000f9 [ 307.991544][ T5842] RBP: 00007ffc5c5a5e5c R08: 0000000000000000 R09: 0079746972756365 [ 307.991555][ T5842] R10: 00007faabd7797e0 R11: 0000000000000246 R12: 0000000000000258 [ 307.991565][ T5842] R13: 00000000000927c0 R14: 000000000004af86 R15: 00007ffc5c5a5eb0 [ 307.991584][ T5842] [ 307.991590][ T5842] [ 308.047108][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.047217][ T5842] Allocated by task 7699: [ 308.047236][ T5842] kasan_save_track+0x3f/0x80 [ 308.055973][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.057072][ T5842] __kasan_kmalloc+0x98/0xb0 [ 308.057098][ T5842] __kmalloc_cache_noprof+0x243/0x390 [ 308.057118][ T5842] psi_cgroup_alloc+0x56/0x210 [ 308.063908][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.067305][ T5842] cgroup_mkdir+0x4fe/0xd60 [ 308.067328][ T5842] kernfs_iop_mkdir+0x253/0x3f0 [ 308.067345][ T5842] vfs_mkdir+0x2f9/0x4f0 [ 308.067358][ T5842] do_mkdirat+0x264/0x3a0 [ 308.067372][ T5842] __x64_sys_mkdirat+0x87/0xa0 [ 308.067386][ T5842] do_syscall_64+0xf3/0x230 [ 308.067399][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.067414][ T5842] [ 308.067420][ T5842] The buggy address belongs to the object at ffff88802f21a000 [ 308.067420][ T5842] which belongs to the cache kmalloc-2k of size 2048 [ 308.067434][ T5842] The buggy address is located 256 bytes to the right of [ 308.067434][ T5842] allocated 1184-byte region [ffff88802f21a000, ffff88802f21a4a0) [ 308.067450][ T5842] [ 308.067454][ T5842] The buggy address belongs to the physical page: [ 308.067472][ T5842] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f218 [ 308.067488][ T5842] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 308.067502][ T5842] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 308.067527][ T5842] page_type: f5(slab) [ 308.067542][ T5842] raw: 00fff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 308.067556][ T5842] raw: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000 [ 308.067570][ T5842] head: 00fff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 308.067584][ T5842] head: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000 [ 308.067598][ T5842] head: 00fff00000000003 ffffea0000bc8601 ffffffffffffffff 0000000000000000 [ 308.067611][ T5842] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 308.067619][ T5842] page dumped because: kasan: bad access detected [ 308.067636][ T5842] page_owner tracks the page as allocated [ 308.067643][ T5842] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u8:0), ts 62239618803, free_ts 62147003982 [ 308.067670][ T5842] post_alloc_hook+0x1f3/0x230 [ 308.067684][ T5842] get_page_from_freelist+0x365c/0x37a0 [ 308.067699][ T5842] __alloc_pages_noprof+0x292/0x710 [ 308.075738][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.076892][ T5842] alloc_pages_mpol_noprof+0x3e1/0x780 [ 308.076920][ T5842] alloc_slab_page+0x6a/0x110 [ 308.076936][ T5842] allocate_slab+0x5a/0x2b0 [ 308.083539][ T5145] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 308.086002][ T5842] ___slab_alloc+0xc27/0x14a0 [ 308.086026][ T5842] __slab_alloc+0x58/0xa0 [ 308.086039][ T5842] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 308.086059][ T5842] kmalloc_reserve+0x111/0x2a0 [ 308.086074][ T5842] __alloc_skb+0x1f3/0x440 [ 308.093588][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.095741][ T5842] inet6_ifinfo_notify+0x72/0x120 [ 308.189355][T15392] gre1: entered promiscuous mode [ 308.190139][ T5842] addrconf_notify+0xc6b/0x1020 [ 308.194723][T15392] gre1: entered allmulticast mode [ 308.199895][ T5842] notifier_call_chain+0x1a5/0x3f0 [ 308.199921][ T5842] netdev_state_change+0x11f/0x1a0 [ 308.199938][ T5842] linkwatch_do_dev+0x112/0x170 [ 308.199951][ T5842] page last free pid 5845 tgid 5845 stack trace: [ 308.199961][ T5842] free_unref_page+0xd3f/0x1010 [ 308.199974][ T5842] __folio_put+0x2b3/0x360 [ 308.199986][ T5842] skb_release_data+0x483/0x8a0 [ 308.200002][ T5842] napi_consume_skb+0x159/0x1e0 [ 308.200017][ T5842] net_rx_action+0x66d/0x1240 [ 308.200037][ T5842] handle_softirqs+0x2d4/0x9b0 [ 308.200051][ T5842] do_softirq+0x11b/0x1e0 [ 308.200064][ T5842] __local_bh_enable_ip+0x1bb/0x200 [ 308.200079][ T5842] __dev_queue_xmit+0x1775/0x3f50 [ 308.200095][ T5842] ip6_finish_output2+0x1263/0x1780 [ 308.200115][ T5842] ip6_finish_output+0x41e/0x840 [ 308.200131][ T5842] NF_HOOK+0x9e/0x430 [ 308.431507][T15399] xt_CT: No such helper "pptp" [ 308.432374][ T5842] mld_sendpack+0x843/0xdb0 [ 308.432401][ T5842] mld_ifc_work+0x7d9/0xd90 [ 308.432417][ T5842] process_scheduled_works+0xa66/0x1840 [ 308.746516][ T5842] worker_thread+0x870/0xd30 [ 308.751108][ T5842] [ 308.753422][ T5842] Memory state around the buggy address: [ 308.759044][ T5842] ffff88802f21a480: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 308.767099][ T5842] ffff88802f21a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 308.775153][ T5842] >ffff88802f21a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 308.783204][ T5842] ^ [ 308.788305][ T5842] ffff88802f21a600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 308.796366][ T5842] ffff88802f21a680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 308.804417][ T5842] ================================================================== [ 308.936394][ T5842] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 308.943647][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.13.0-syzkaller-04101-gb2aec4efe834 #0 [ 308.954252][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 308.964326][ T5842] Call Trace: [ 308.967619][ T5842] [ 308.970561][ T5842] dump_stack_lvl+0x241/0x360 [ 308.975266][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.980492][ T5842] ? __pfx__printk+0x10/0x10 [ 308.985101][ T5842] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 308.991102][ T5842] ? vscnprintf+0x5d/0x90 [ 308.995459][ T5842] panic+0x349/0x880 [ 308.999375][ T5842] ? check_panic_on_warn+0x21/0xb0 [ 309.004502][ T5842] ? __pfx_panic+0x10/0x10 [ 309.008940][ T5842] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 309.014936][ T5842] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 309.021309][ T5842] check_panic_on_warn+0x86/0xb0 [ 309.026273][ T5842] ? sco_conn_put+0xad/0x210 [ 309.030878][ T5842] end_report+0x77/0x160 [ 309.035131][ T5842] kasan_report+0x154/0x180 [ 309.039651][ T5842] ? sco_conn_put+0xad/0x210 [ 309.044260][ T5842] sco_conn_put+0xad/0x210 [ 309.048698][ T5842] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 309.054006][ T5842] hci_conn_hash_flush+0x1be/0x350 [ 309.059147][ T5842] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 309.064802][ T5842] ? drain_workqueue+0x2d3/0x3a0 [ 309.069763][ T5842] ? hci_discovery_set_state+0x57/0x180 [ 309.075331][ T5842] hci_dev_close_sync+0xa42/0x11c0 [ 309.080468][ T5842] hci_unregister_dev+0x20b/0x510 [ 309.085498][ T5842] vhci_release+0x80/0xd0 [ 309.089830][ T5842] ? __pfx_vhci_release+0x10/0x10 [ 309.094859][ T5842] __fput+0x23c/0xa50 [ 309.098933][ T5842] task_work_run+0x24f/0x310 [ 309.103613][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 309.108728][ T5842] ? do_exit+0xa25/0x28e0 [ 309.113054][ T5842] ? do_exit+0xa25/0x28e0 [ 309.117380][ T5842] do_exit+0xa2a/0x28e0 [ 309.121534][ T5842] ? __pfx_do_exit+0x10/0x10 [ 309.126129][ T5842] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 309.131506][ T5842] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.137491][ T5842] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.143819][ T5842] ? _raw_spin_lock_irq+0xdf/0x120 [ 309.148933][ T5842] do_group_exit+0x207/0x2c0 [ 309.153519][ T5842] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.158716][ T5842] ? lockdep_hardirqs_on+0x99/0x150 [ 309.163914][ T5842] get_signal+0x16b2/0x1750 [ 309.168424][ T5842] ? __pfx_get_signal+0x10/0x10 [ 309.173281][ T5842] arch_do_signal_or_restart+0x96/0x860 [ 309.178824][ T5842] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 309.184970][ T5842] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.190956][ T5842] ? syscall_exit_to_user_mode+0xa3/0x340 [ 309.196677][ T5842] syscall_exit_to_user_mode+0xce/0x340 [ 309.202248][ T5842] do_syscall_64+0x100/0x230 [ 309.206853][ T5842] ? clear_bhb_loop+0x35/0x90 [ 309.211535][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.217424][ T5842] RIP: 0033:0x7faabd58b7bc [ 309.221834][ T5842] Code: Unable to access opcode bytes at 0x7faabd58b792. [ 309.228847][ T5842] RSP: 002b:00007ffc5c5a5df0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.237260][ T5842] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007faabd58b7bc [ 309.245228][ T5842] RDX: 0000000000000030 RSI: 00007ffc5c5a5eb0 RDI: 00000000000000f9 [ 309.253197][ T5842] RBP: 00007ffc5c5a5e5c R08: 0000000000000000 R09: 0079746972756365 [ 309.261172][ T5842] R10: 00007faabd7797e0 R11: 0000000000000246 R12: 0000000000000258 [ 309.269154][ T5842] R13: 00000000000927c0 R14: 000000000004af86 R15: 00007ffc5c5a5eb0 [ 309.277141][ T5842] [ 309.280505][ T5842] Kernel Offset: disabled [ 309.284825][ T5842] Rebooting in 86400 seconds..