last executing test programs: 2.720894763s ago: executing program 2 (id=3781): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001f0001000000000000000000040100800c00010004000000000000000926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf08009600", @ANYRES32=r2, @ANYBLOB="59007a8008006400", @ANYRES32, @ANYBLOB="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c18116d51211a8c40bf30dcd91e7d481e5a467f1ef9da08000800000018000000000800c300", @ANYRES32, @ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f0000000280)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608204c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.238248216s ago: executing program 2 (id=3789): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x80000000, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="700712888cd8ece400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) (async, rerun: 64) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000140)={0x8, 0x18, [0x9, 0x5, 0x40, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0]}) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000000000050070bb9596d5a5900496000a28000000000a030000000900000000000000000708000240000000020900010073797a31000000002c000000030a010100000100000000000a0000070900010173797a31000000000900030073797a320000000014000000110001297fa1982032682bbf0e681155d93f6924a87e14a033a243dff830"], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0xffffffd4, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="149fb69d040000e60900"/19, @ANYRES16=r4, @ANYBLOB='M~\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00\x00'], 0x14}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000103bdb0a555871659e7e4bfdf9b8ccac4d777fd6a3f4b8bffb9a1c8dd1f4398ca542ab07e91c48f796b9e314e4f9bc6a047cc8fbe1eaa2c787426affd1c80b87685d7fa2b7fcb1", @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf25270000000c0005000202aaaaaaaaaaaa0c002d000200aaaaaaaaaaaa05002e0009000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4014) (async, rerun: 64) r5 = socket$kcm(0xa, 0x922000000003, 0x11) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048800) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080088845abb22a813cd7b0290780a010102ac00800000ff90780000000089818e6747952ca4350f8fb6c243c9d1cdf49929486e40a9fbe7ebfc8725e9a686ad658dfd1408f5b44201917651d2e472b7673e4d1a554e3eac66ebd88c33590ba11d2d517440b819993cf97f22b7b4c229a9e1ff85a9d743a1ec641936e0a62ec132f142289b822402f5f2f03d5592d580638e28c3a9d3c92ebf2cbbae1080deec9bcc255b4f2c0393351d692db6a230e96539900c676c28b47a303467", @ANYRESDEC=r5, @ANYRES16=r6, @ANYRES8=r5, @ANYBLOB="00ee8f5b65a68fa10a033b8059de66e55d4e2b341fd3463f90c8f6d92860190bc107e32160a4359fca5642f4b2"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x11, r6, 0x9b4e3000) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) 2.216657695s ago: executing program 1 (id=3790): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.055391578s ago: executing program 0 (id=3793): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016) connect(r0, &(0x7f0000000000)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x601c5fd09ad4f6b5}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 1.971986467s ago: executing program 1 (id=3794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1, 0xfffe}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x4000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x2a, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb3010000000000000007"], 0x20}}, 0x4000) 1.971601676s ago: executing program 3 (id=3795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) shutdown(r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) poll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x4) sendto$inet6(r0, &(0x7f0000000200)="c89fc39376831d22e33b5ab03da3d9ef3af87f4c75b6ec66c88008b3015038aba784eb23a852118222d8eac3c25e4b9a06f1cf84997b4240fcd4a1ff105239349e77b2ea30edda7dfae39bf0c6f57676f73325273a3cf87c5950a128dbd3d684c7cc3241016142f940e7f56eccc87b387bd9cf0a493be10a65f5a151c6840d7655fc08c9bf1b4e1b3b54ed9b", 0x8c, 0x400c8c0, 0x0, 0x0) 1.914356053s ago: executing program 0 (id=3796): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000001640)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) listen(r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x21, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r7}, &(0x7f0000000500), &(0x7f0000000800)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r7}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) 1.853403194s ago: executing program 1 (id=3797): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000a0000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000ca000000950000000000000039ab0e774910e8"], &(0x7f0000000140)='GPL\x00', 0x1, 0x100, &(0x7f0000000440)=""/216}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x1, 0x18}, 0xc) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000f12801392dc1608cd759b9d522e14e1ef369b96040a6ed2a2ccf0af8c6a206c5b232d1ca72f6ce27d166a535d666bc074f34aba3be81f49c1e359d12936d858af17f577b64118b4fb0150f0a29c8188476b5f4e80af25867761bd97f749ae00893301d8b450f947e512669c347a4ce4aca", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r2, 0x4b9b6000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000001280)=0x8, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140000000000000016000058b1810b36"], 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001e00210025bd7000000000012000000005002a0000000000421b3e8e8e2dd4b5af4fc6eaa044fcdc63903cb88b12c5ad2f63"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) (async) sendmmsg(r7, &(0x7f0000000300), 0x0, 0x0) (async) close(r7) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtclass={0x2c, 0x28, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0xb, 0x8}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x2c}}, 0x24040084) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002300)={{0x0, 0x2, 0x5, 0x9, 0x8, 0x2, 0x9, 0x3, 0x9, 0x8, 0x800, 0x800000, 0x3, 0x5, 0x1ff}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtclass={0x64, 0x28, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x4, 0xc}, {0xd, 0xffe0}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x4c}}, @TCA_RATE={0x6, 0x5, {0x54, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x6, 0xde}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004805d}, 0x40041c5) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x11, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="c9060000000000000000cd000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50) 1.743213447s ago: executing program 3 (id=3798): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x37c, @remote, 0x6}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x1ff, 0x1ff}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0xe11}, &(0x7f00000001c0)=0x8) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40851}, 0x400c1) (async) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20040810}, 0x411) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r0) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x2, 0x70bd2a, 0x4b6, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x24040090) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x40000) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/time\x00') (async) sendmsg$sock(r7, &(0x7f0000000c40)={&(0x7f0000000840)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="4a9d3073546759995c68770b71cfa2061809", 0x12}, {&(0x7f0000000900)="513f2fb34e1370f192795a4c41c07d4b687e1c88a7fe40b87da00badc61a890d6a0a16e9d19c723ecd19ec750e3f47ecbb9107ad9f5ea7b834ba627b380ba7b0c3178b6dd2813a495c41ab13ca6d0e8763e7fd297ee5302d9585f8ba784114ecfe349c39a112535fdb33350b33d4e24d7d9a24beda67f9217ebcfe932739a0d9dd19ed8e5b054dac05173804c43fb3cabc0d66dc7eab3f6157fa", 0x9a}, {&(0x7f00000009c0)="04a32e4385e6ed8bdd1af5f3b44a5f3caf1d34eeda6f84e64052bdd6b27c7c327ec2cf8744e2a0576c0fcf8f95050a7128134882c94b42534fc21df6fb023ac7e13d82ea3c66623fe4b8d1e344e84e132dcd384ba1b999adbb1e00ff0586305f61b4b604373d30d25658f0ddaf11babb55cb00144b6295ec73b49c6b883ad69c3bfa57026bf1860cb511a7d9bb8c381c3d", 0x91}, {&(0x7f0000000a80)="1b107b3224d4fd44921ef9f0dd0e0e6cb4e885", 0x13}, {&(0x7f0000000ac0)="07c659d8414436343cf18505e40cc1f4fca7a32a084de26a94c366f030ddfc07b75cb502b847c313f421c1defcafc3065aeb39d79caab878224c684c0362c855880db1940bc30a0561886fb260e0bcec791167eb7430f63f91cfe18a3635503b1a55477bfc7039a6", 0x68}], 0x5, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1d4b}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x78}, 0x200040c0) (async) ioctl$XFS_IOC_AG_GEOMETRY(r7, 0xc080583d, &(0x7f0000000c80)={0x196, 0x1, 0x7fff, 0x0, 0xdf, 0x100, 0xe3e, 0x10001}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000d40)={'veth1_virt_wifi\x00', @multicast}) ioctl$NILFS_IOCTL_GET_VINFO(r8, 0xc0186e86, &(0x7f0000000e80)={&(0x7f0000000d80)=[{0xfffffffffffffff1, 0x5, 0x3, 0x7}, {0x10, 0x7, 0xfffffffffffffff8, 0x7fffffff}, {0x5, 0x4, 0x1000, 0x1}, {0x5, 0x5e, 0x30000000}, {0x2, 0x5, 0xae1e, 0x8}, {0x2, 0xfffffffffffffff7, 0xf, 0x80000001}, {0x93, 0x400, 0x6, 0x8f}], 0x7, 0x20, 0x4, 0x3}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x58, &(0x7f0000000ec0)}, 0x10) (async) r10 = accept4(r4, &(0x7f0000000f80), &(0x7f0000001000)=0x80, 0x800) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000001080)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000001180)=0xe8) sendmsg$nl_generic(r7, &(0x7f0000002480)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f00000011c0)={0x125c, 0x25, 0x400, 0x70bd2d, 0x25dfdbfe, {0xf}, [@nested={0x10b, 0x117, 0x0, 0x1, [@nested={0x4, 0xff}, @typed={0x8, 0xa8, 0x0, 0x0, @uid=r11}, @generic="4d40c58e40e4a17f06f635e4990fb2ded46d1f476792d09ec3eaff12e89dd9dc64cb1147e31ab170024ba7ac4e7df8e946d617acece5c6c8974cd3400969fde806231eda86a30649b752794665ddb4ea019ee1633f49bf7f159ae031fc87eb5755eb73e5858ea7b062d7fe8583e5db47d2a85c18d01d28807d1ca5c2b56f31f2e86b2a7add22e32430a93f58ffd82f87f551e6c94c88efe1c0b19dea41030c0b03853858ac837375fb3325af9c585671afaaca2b159dace403a678cd3ef4e79781fbbe5ef6cd3134c97ade1390fd0b0722b4651c76858b0ef336f7f09b27e99f0fed1daea7c39ed0905a37d671ac7fd7c4e299cb425122131d121a"]}, @typed={0x8, 0x4e, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0xff, 0x0, 0x1, [@typed={0x7, 0x130, 0x0, 0x0, @str=']^\x00'}]}, @nested={0x55, 0xa3, 0x0, 0x1, [@generic="9093c51fe521f8012d06bba87643e96cd91a88d0787e108c4d0d0372553bee2f9b71bbce958512734d60d775b555b25abe1b1da17699606abd63d7f117d54bd30abffabe1e90c0794d58673bcac8de1521"]}, @nested={0x10cc, 0x4d, 0x0, 0x1, [@generic="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", @generic="582bf5e9c07cc5398c4914063708d975db59836cbd1eb7a17ee2ef5ee072926e75fd1112454383b44491ab2dc301b87371d5681580012248dc8ebec96397b2830b5c5b3bae2b16abdd954d3255f10842f8a3f566c25ba661695e8a63e9a90b2be237154e85264b69557cd7e03ea6467204260241448a33f946fa55f35241aef94deaf40de66eb66eac6e3ccec50cb9aca5f26d6838f53a3e025a62a37edf765f3a65fc7d15009a022b074496306212fd7b1d1b5029fd6622c965104f", @nested={0x4, 0x50}, @typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @typed={0x4, 0x4}]}, 0x125c}, 0x1, 0x0, 0x0, 0x14001}, 0x4004) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r12, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x28, r13, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x75}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2cae759ea38e0015}, 0x0) (async) ioctl$SIOCX25SCAUSEDIAG(r10, 0x89ec, &(0x7f0000002640)={0x4, 0x1}) 1.742685715s ago: executing program 0 (id=3799): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=@newtfilter={0x44c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x420, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x2}}, @TCA_U32_SEL={0x414, 0x5, {0x3, 0xbf, 0x40, 0xfff, 0x8000, 0x3, 0x8, 0x9c19, [{0x5b5, 0x0, 0xa, 0x10001}, {0x1, 0x7fffffff, 0xa6b7, 0x9}, {0xf16, 0x1ff, 0x5, 0x40}, {0x59c, 0x4, 0x7, 0x9}, {0x7ff, 0x2, 0x0, 0x10000}, {0x2, 0x2, 0xffff, 0x7}, {0x5, 0x6, 0x9, 0x23903cef}, {0x2, 0x9, 0x7, 0x6}, {0xfffffff7, 0x8, 0x80000000, 0x2}, {0x40, 0x80000001, 0x2, 0x2}, {0xa, 0x5, 0x545, 0xd}, {0x9, 0x3, 0xa52, 0x8}, {0x1, 0x3, 0x4, 0x5a8}, {0xa, 0x8008b5, 0xff, 0x3}, {0x7ff, 0x0, 0x6, 0x1}, {0x4, 0x8, 0xffff, 0x4}, {0xffffffff, 0x2, 0x1, 0xe}, {0x126c, 0x2ba70bc3, 0x7, 0x7}, {0x4c, 0x8, 0x3, 0xb}, {0x8, 0x7, 0x7, 0x7}, {0x4, 0x1, 0x1, 0x56}, {0x0, 0x4, 0x0, 0x1}, {0xfffffffd, 0x8001, 0x200, 0x7}, {0x0, 0xa, 0x800, 0x5}, {0x5, 0x9, 0x3, 0x2db}, {0x13318b36, 0xffff, 0x9, 0x6}, {0x6, 0x3, 0x8, 0x7}, {0x80000001, 0x9b5d, 0x4c6e, 0x4}, {0x6, 0x5, 0x4d2, 0x292b}, {0x2, 0x1ff, 0x5, 0x4}, {0x80, 0x5, 0xff, 0x1}, {0x4, 0x9b0, 0x2, 0x3}, {0x2000, 0x3, 0x2c, 0x8}, {0x793dd766, 0x3f, 0x7, 0x1ff}, {0x6, 0x2, 0x48b, 0x4}, {0xd, 0xfffffffc, 0x8, 0x57}, {0x687, 0x1, 0x4, 0x1}, {0x4, 0x1bc, 0x1000, 0x9}, {0x6, 0xfffffff9, 0xfffffff9, 0x5}, {0x5, 0x4, 0x4, 0x5}, {0x4, 0x9, 0x1, 0x3}, {0x1, 0x416a, 0xe0000000, 0x40}, {0x2, 0x1, 0x7fff, 0x1}, {0x7, 0x7fff, 0x800, 0x8000}, {0x3, 0x9, 0xfff, 0x7}, {0xbd7, 0xd0c, 0xf, 0x8}, {0x7, 0x2, 0x5, 0x3}, {0x80, 0xe, 0xc09c}, {0xd, 0x9, 0x0, 0x9}, {0x4, 0x4, 0x0, 0x3}, {0x1, 0x8, 0x8, 0x7}, {0x3, 0x2, 0x9, 0x6}, {0x1, 0xd6a1, 0xe9a3, 0xb07}, {0x3, 0xfff, 0x0, 0x1}, {0x48000000, 0x8, 0x4, 0x3fd}, {0x8, 0xfb, 0x800, 0x1}, {0x62, 0x3, 0x5, 0x5}, {0xd5a, 0xffffe007, 0xfffffffb, 0x1000}, {0x81, 0x7, 0x66, 0x1ff}, {0x5, 0xffff8001, 0x1, 0x401}, {0xf, 0x4, 0xffffff09, 0x3bfd}, {0x5, 0x3, 0x5, 0x5}, {0x9c8c, 0x6, 0x9, 0x8}, {0x990, 0x40, 0x2, 0xb}]}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) close(0x4) 1.699917506s ago: executing program 3 (id=3800): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004dc0)={0x6, 0x5, &(0x7f0000004a80)=ANY=[@ANYBLOB="6835c735", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000004b80)='syzkaller\x00', 0x0, 0xed, &(0x7f0000004bc0)=""/237, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x1c, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @nested={0x4, 0x15b}]}, 0x1c}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205d81f4a7f71c192698e1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)=',8', 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f000100"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 1.615226761s ago: executing program 3 (id=3801): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a0000000000000000000000000000000000640101000000000000000000000000002c003000"], 0x38}}, 0x40408c0) setsockopt$sock_int(r1, 0x1, 0xd, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x0, 0x4040) 1.455964382s ago: executing program 0 (id=3802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xe, 0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r5, &(0x7f00000000c0), 0x0, 0x20000841, &(0x7f0000000140)={0x1a, 0x0, 0x8, 0x4b, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10001, 0x5e70, 0x60, 0x4, 0x3, 0x0, 0x6, 0x8, 0x9, 0x1, 0x4, 0x16, 0x20, 0xff, 0x4a9, 0x9}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.437670956s ago: executing program 2 (id=3803): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r14 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01"], 0x3c}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000002c0), 0x10) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000002c0), 0x10) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r15}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r15}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.073755143s ago: executing program 2 (id=3805): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f00000001c0)='\x00!', 0x2}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r3, 0x1569}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x10, 0x1, 0x51, 0xfffffffb}}], 0x10}, 0xcc840) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000000)=0xfffffffb, 0x4) r5 = socket(0x28, 0x5, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) recvfrom(r6, &(0x7f00000000c0)=""/58, 0x3a, 0x2041, &(0x7f0000000100)=@llc={0x1a, 0x133, 0x4, 0x7f, 0x4c, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000180)=0xd, 0x4) connect$netlink(r7, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'dummy0\x00', @ifru_addrs=@ax25={0x3, @bcast, 0x7}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) 1.072664067s ago: executing program 0 (id=3806): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000300)={&(0x7f0000000040)=0xffffffff, 0x800, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000002c0)}) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/240, 0xf0}], 0x2}, 0x4}], 0x1, 0x12102, &(0x7f0000000600)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x143441, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000680)={'vlan0\x00', @broadcast}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x430, 0x3f3, 0x100, 0x70bd2d, 0x25dfdbff, {0x5, 0x1, 0x30, [0x9, 0x9, 0x0, 0x4, 0x8, 0xffb3, 0x9, 0x7fffffff, 0xfff, 0xfff, 0x8, 0x0, 0x40ea414b, 0x1, 0x6, 0x8, 0x5, 0x1, 0x1, 0x7, 0x5, 0x7, 0x7f, 0xfffffffc, 0x9, 0x1, 0x8, 0x4, 0x3, 0x8000, 0x3ff, 0x5, 0x9, 0x6, 0x1, 0x2, 0x1000, 0x8, 0x0, 0x6, 0x5, 0xfffffffe, 0x0, 0x649, 0x3, 0x6, 0x8, 0x5, 0x6, 0xc86, 0x1, 0x6, 0x5, 0xfefd, 0xfffffffd, 0x2, 0xfffffffd, 0x7fff, 0x9, 0x1, 0x80000000, 0x6, 0xb3f, 0x5], [0xfffffffe, 0xc1, 0x5, 0xfffffff9, 0xf, 0x1ff, 0x3, 0x0, 0x8, 0x1, 0x6, 0x100, 0x7ff, 0x80, 0xffffff50, 0x1, 0x2, 0x1ff, 0x2, 0x7, 0xffff, 0x73, 0x7, 0x7b, 0x2, 0x6, 0xff, 0x63, 0x9, 0x6, 0xf, 0x600, 0x53, 0xcbd, 0xfaa, 0x9aee, 0x200, 0x4, 0x1, 0xe, 0x4, 0x10, 0x8, 0x29, 0xeb9, 0x2, 0xc, 0x3, 0x8, 0x7fffffff, 0x3, 0x4, 0x9, 0xcb, 0xfe, 0x4, 0x6, 0xffa7, 0x4, 0x5, 0x1ff, 0xffff, 0x8001, 0x4ea], [0x80000000, 0x1, 0x1ff, 0x1a9, 0x6, 0x0, 0x6, 0x3ff, 0x8, 0x3, 0x80, 0xea92, 0xa, 0x4, 0x7, 0x927, 0x1, 0x2, 0x8, 0x55d2, 0x2, 0x1, 0x900, 0xfffffff7, 0x9b8, 0x7, 0x9, 0xf8b7, 0xab3, 0x400, 0xfffffff9, 0x3, 0x400, 0x8000, 0x1, 0x0, 0x2, 0x0, 0x1, 0xe9f, 0x7, 0x3, 0x2, 0x4, 0x3, 0x80000001, 0x400, 0x6, 0xcf, 0x96b, 0x9, 0x1, 0x7fff, 0x3, 0x3, 0xe, 0x100, 0x31e62ffe, 0x8001, 0x80000001, 0x2, 0x0, 0x9, 0x9], [0x8, 0x6, 0x7fc, 0xc41, 0xb, 0x2, 0x8, 0x5, 0x401, 0x2, 0xfd, 0x6, 0x0, 0x100, 0x1ff, 0xfff, 0xae2, 0x6, 0x7f, 0x8, 0x5, 0xcc, 0x6, 0xffff6c8c, 0x100, 0xfb3, 0x7, 0x0, 0x4, 0x5, 0x4, 0x7fff, 0x3, 0x5, 0x101, 0x8, 0x4, 0x9, 0x8, 0x4, 0x8, 0x1, 0xfffffffb, 0x5, 0x90, 0xf69, 0xacb, 0x8, 0x4, 0xe4, 0xf, 0x10000, 0x400, 0x6, 0x3, 0x8001, 0xfffffffd, 0x3, 0x0, 0x6, 0x5, 0x7, 0x800, 0x8001], 0xd, ['/dev/net/tun\x00']}, ["", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x4080}, 0x801) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000bc0)={'veth1_to_bond\x00', 0x400}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r4, 0x800, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x14) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000d40)={{0x0, 0x280, 0x6, 0x1, 0xc00000, 0x40, 0x0, 0x6, 0x1ff, 0xb3, 0x1000, 0x4, 0x6, 0xb592, 0x1ffe000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000dc0)={0x0, r6, "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", "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"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x30, r10, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x35}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f00)='pids.events\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002000)={'ip6gre0\x00', &(0x7f0000001f80)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8, 0x6a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x1, 0x8000, 0x1, 0x2}}) sendmsg$nl_route_sched(r11, &(0x7f00000020c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x9, 0x2}, {0x4, 0xfff1}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xa2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002100)={r7, r8, "7509171722f81f6723267c06020bd9f96c0ee63626aa63cebda9c42190517efa024ae72753b07614eff73de59ac9d05bb8bf429c64927854fe519257abf8aba320f8edd1f9ae4eb8e1318be6813a556e6af91da99bbbe4aa882260782692d38edadfd7065f52f9255611aeb242bd6a31a768d52e293b01dd57cdc7bde125b9575f10988218fb86227ee013fdf106de7952432a501040ff8f72249795aa5ce3602abe96c94b3d2687abd6916e594b02f29eb0615f039aaed37fe048394fb4b234eb49e881abb9ac79489ee8eeea76cd55b33c42f532cba2b1abd446b28f1dbf7b9befdc7d1dfe7309d90bf331ef6edf1912752c49c95f328ab812d328344b7603", "acb329e8a165501d5e8f898208f2a5317a474846dd3fed22fdf3fba54a233ef01227b2443763df435a22c0f332e6bc0d86c9f8e800dc21ade23673f65fb126541525a5a3db831298a9c6f1090ca8f13dfce905055412c491d5c6d182254889ddcf566beb50d027074cd30c4c4ea134ce61de0ebd76a1b6b93a09b750a1e7e736772f1001051a2a7c8d5ffadd65478ca84a32f2996e983d317a1e3a8c367f26da14a6d7b79ca6f4a5c079e81339fcbef0f3fef73deafd032d431cf5c858bd58208272909e4f8893b31bb6d7012917a31a8c06f4d9e8387f5b08bc44a0b6e80e1e37d0bfa46c502236eccbf2a9e6be890704ede49f5c9879698d75aec9cfffa63c8950ccd3c50068889ec4c578d5a46d270951e19d13fda8965b4cdb006467e934968a6c5a20d50b3030adb936b1973e4e826c8745c5c4bcf2cbe272b6e903b164307b7fbaf2068c43aff5d27fa91509b42708cf02a9dba4fe2c22fda27f15bf0860f5096d287a8fcb93e09fcaee332fc0037aba3aa8fa9448989d51064e98885c22115423ad6edf9c5303da12086129839a09a864ff56ac8128860a9efe5d345da2f881ab7a9f2324b2b573a8f6309ccf75d08a813fbe066ccb524d77ed19d3c55045f71d93fbabb57000872670c1928649be736ef61d4f519541702f6039af2632878d1657c84c7c4d0f9bbdf3fa125e2e78d04e1790e7b8e049af53d3a455535241146b4a3329e8c2d977a1678061053f23ffa052a549a1d85377f9631f8deed2c2fe5be5b1e69680d11931b3a0aadf66612d1d06f51cbebf4d6c34d2a073bb6c80df911fd0b7eee139c28cc95f30fb2d90ad097305d9b478fb6cd6462616b56851f17167f9f9038db5a4059524473950a83ce7ac169c8cbe8f85eaee2d2442e7b6bef29e873dee6b589183ed0ba60f251bf955ffce1bc2d2c7fa3ac42fb53ea840ad83e812ef5647198f1746ef9b3147a8fdd6bd3f31f8eb843799f1800d6c26e1bbdb5166c6523fd89f9b1821e734a35f036dbe4ab5e5bf2750280e57f809b659bf78882099ddb0901fd677ece1f9582421fcaf95f9c79b879bd13d1ad42704062f6cf50b35a832c95ce84f929548514a7ffe684d606c04b8a2d05ebfa0e377d0c24f28e6596558b054a011073919f5c69be694650dee53c572d01ac2bfe1af2606996d292b0889b2f753f35ba778a8501f3b29983a44639003928b6f9bba4cf9647309db8d78793d73417ab34d20074aee056f0f90555069b5086d7e59ddc4bc025dbcb846cd3977c537812c7ba6ae6ffb84b65a7a09d1dd0f7b879e6fd78ba4d6ec5c8b12cab8a446a44fcde4dd477843565f8d101b7845bc0e2c06f7fb27511525504c0ac5d88b4f26cd204011e7e01c63d5e6af5ef091deee34a17d0946f882b1dc9ee609e9993a588938da93135ebebfcf35a1c263bb2e1d34ab4984f2dacf9c9cd3baac7c0f309201daea4af78f886f2bfb7701fa7f4049012257e68e496713fa1402d06c8cdf1292f046eaa1eb3eb86c7837efa6c9dfb4d9c02d6ca183ddf3afe1e25bfeee8266cb2c20ee5a7f751e2a55e10c513905caf849affababcbb696e5280fc1edb316a12ed75dbdd4b9ab719527d65cbf037d76008a21fe206a6d3b755a611266a9b69a9175ebf3ff2da0952d876051aa6ac97d7f5e8e8268d001a546d485b439369d9dab8999c6738ae49f136408bc6247a8dca66834c2e39eaab5059909ed01d4b5133744048a36338c23cedd8c9555e753d53f16227c7a5d2baeb13d41ab78215ccf9dbb0a325404e817ff760b9d0e3d3fe873f7783d4c0e2a7d1be8be9dcf3d2750ccfdd912cefb08ddbcecba530b4a821120e46102bb26bdad6f24eb7d99a1b586be957fb4591b7265db0fac2f8bdb5ed6a8afafc446164c7d80656e77fc69f56a1bbba8690c37f8d89a8a87de399bfbf809f5425f489ec6a2960fd13d6ad21545d8e92014439bb24b6cfbe85b4c0ac8f2ab3d0edaba09bc29d72b8d515209148df992298e67eec3b39c444f9d6993ab52b68f90de5458b47327ee100b712fa9ff37e6d913846c929b28eb2acec4625f5487672e596cbabb7247fafbac83965f54118868b971c3e59bbe0aee0078526b9d08c520504a6c1f57a82ba12411a95f76acf981196c22a8915651ca6f8c7fd9c6a68b23b48fb2caa0d92c2185e178723cb6c1dbffc17174235e2d9042f9802ff7c04ca04e2421501d9e693a43080da7642521f2ef1471640c085503f48b8884ff9e9f39df3c84293c544b9e35b32163f26451d0d5a022033fc7ac8baa3aee3d302eb3fac61605f1b604355258c132bc19a6aea4bb57cf81766a161f79316f72377b475204aac4cb638b9a02b1193d33e80709e72d8e958073bd4625f9ff5d56b090c06c31bc4729b1c1b2042e858ff06e24c57538d5b64b69c148b3239bdddf3e9a279284df4af387c338bd0881db138e2be514f313083c40aa1e47aabff10c6fee33769913df0f5ae61f1d54ba2efcfd02e4c91f7deaf13cef188d5b9edb26dec53b7bf9f97dd7ff65ec1603a61a0d85504051a74f6441ee04e1d883dd9a452894fb84bf8e6c2679bc580a9217bea3573bd4c6e681a0451eeb2b0e803a6bd2d67a579e7d3c402025495a008c15d84812baa8c18de4149c28b25fe8ac72f319e7e9dc9f2ce3daaf2f18864a4ad7524f0a3df7c6c9c11ee3ae92be886d935343dd0e07b15fe2056ce09b4593a92ae6e620dceafbab201d3aa67327b98e8c6813dc97a6de2d33db1310d92bce1253e4b7626c49397869b51fb44c49803dba71880a536714cdc79c58d16992861e05b113a817ba4bd61091866083ab8409034addbecb3abfdf0ccf32037c277fa9b3c48f05f207c1ee77e7829baf25bc86e86571a38ca3c32d78326e192aff140e8b38da6ec5ae4ef0568c1900ea80aaea65f57e94fc7ea9be620ae689d8f09e5c2a3cfe66a10da5068373f7d484aa6882f4734bbc2c5c25114290f7ed4a9c5f103999d28fc00b610a9fe4d1768713b98cfbffaefe9dee6d5130aeb57554e3e5ca14f52fd0a9b5cc509e57fdfd5cb8d933daf75a0f46ee45eaeb112c8217dd01906b3ab778ff00e6d5d146117545af4a1f21afe684b016ca283f59598ef2016d7cafe05a783e788c7e5f470adacd64c608f08124e616671f4f7e6b6b13e9aea25160669b2ea8f8127c8d5912c2f7791bb77d77f88eef69bee6aaec05020a865cad464732e4c8a2584e649d42ff59a2116ef70a851fd66e497e259199544da3443206e8c3a668f1dc98d3b39c3f51de12afdc5a77649658232e3b4a13dc3997893cb589839a7a0171ccc69e5b90a820ab5e5d369cdcaa2796b8d582deddf3a20f22a1f1705ea0e57b930c33ddd6f5c7f7edfb606897bb3bf55a7877d43752ad175fa709750f3eef95acc5829cca672d77c3646a1dc4cc2e754abcc4d1ba55575ae0f27e5e85e40dc4d79b203017ad166d3bfc4e1131c09d7e2316017b5acf463b5ff779b2913d8194ae4cdb820beedaadd06fb9c84454cd957048fe76236107af9d6b4f8b62dded30d06e621a0dd2720c35a4b44399366a57f471fa39be188b22469e6398c579eb14ef03e5827839c404e9155a13da9b96cf9c1987ae2c1b27b47553be7ce1590fd6a3233555e5adddd0feb39ee3170d8dbfa4353c94f5d1d7fc2860fff28f1ed23e43bfb1ba9777cda09c7793384ed539d07e8c08a1d7c817da5f22dc3c9ed46c061e90682e7e03b028f7882394fcf27412e3c57a4d08d619d67326c5cf3e45fa3c4be68178bec80d878d55159e717de8adf7b7ac1c65caf58991f052c0ced26124f8ceb4a96654cdea5f643e3a7ae2092f0778831d8ab3fc3696d5cecdd13d31a81e17f777f26e88c3374fa668508faae2d55d0240d6efd4a4b2c59f8a720a111e33d846fbc2ec3a4b8a94b55ed24123c81bf19ae421ead40277706c2d429a2d30394a837f7f6d52aa53e684f858dc341344386d6484799740b4c96fd2524318152ed324626b80d120b50678949358685f551e9e594f94402f41654ecd9c1f1ffa4cfd47ff9c7efd9f7990597ed1f8ddb8e92fc4c3c52dd46ae6d3ba77f0f12d88450bdf07fb79e976d169a7ec02fd1dea3bb039cc7c2147e23fd04bca0deedf0ce6a761a9aed6f8c9a2cd9e2a5586791867960a5db256413a4d06e8b01882efa56496034cb4966653e6d88d2f6ae6692a0a8b9d929d0863e08c40e49ceb506d9c2b3b466a1342bbea22073e66891d229c2085ec3ecaaf85e86a30c4a5a7401547a857e9ccb7f46798092ce36456908f6bdaf8a9f1512a372b3e08e33b32e005fb534c31b2814848100eb5819dfde01850563ac5ee3eb598a2a1cda91635da70e2501fca69536f2767a07e91b4271fe8986e2d5957c373307e8bf481eb72708948bdb728ac2bb19085d3f5b8e7f3f677147c4726f60827a1342ded391ee8cd1dccccceb23cfd8922bd7040f7851397c0b9a1ccb9fb13132e5eda8fd6894512c3c10d61062f6a4a0246a5cec362d79bae7332133c677b76d3112a92b02d4927c4bcd82950a1d57ff6eda1d04f378552636e317d37db04cc60c576b3051bf3c6fc77ca72ba1b964d215b68bfd5d19f5f63416195784f402d192f10e7c66cbc83497e82b20eaaf6c827033d8fdf36238fee1d0f54645f87bd8df9986bedb236c7c5782a8f9200461f04869f7c335e2d3c0f0d73e659bc668d7eeee5dd8362cb3f8826685db2b85cc788cfe25825f9a5d0cd463f526091593803ea3d400903ce482e1c60a5191c340dbebb133143642ca638a53a489b4a86ffc417f63022fb822136b06f0fb6a6535ac1f51aa2e581fb2cd061f52a3336b684c9d786e02349d83bacef9cc62f158bf443e355532469e1bd6218dfabba45b3aa7953bbf49c5f71f785eb708a12c8d669064ca17411921626e0adec9ced15cfa9eaddc16c583028b2eab86a00753354ee43323f1eaf180911a12828043f263cde3f512ba489e3c06e5c59f8c34f172638e6cbfcaf122bf325abb1048d1fb0f147f2641a163fe7b9133552a3029118e5fe0164c2158b48a8afe1d003b8123f18aa0f90c774091ebe8ad83a48ba506d0f127790e624341c8ffdcba8ac548c7d67d2aff2f0b6fdcd39bb2865ae292f1895b0c01d0710b45fa44db3f9150a967a466b28ecb3f67c864422a19be17bfb2c82df1fc2dd87ce20db9a718cfb24edf56bfbfd73c2b3c91b6c6c0f3081bf938695edec7a5618a45a59b0c40b1ce62df298bc72cfe7e73e96ea7af62fcff847e60754204d4964dc8055f90c023297701af0879d3429da930a5f33e3ad6c9ed9ea9ee2676b1ec8e16bc7f97c8c75240b9856833d1dc215a7f42adcd2be993e33a9704f24d52fef07517f6ee19e7d252aba9e094a016eaccc5b43c7e283e"}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000003100)={{r9}, "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"}) ioctl$VFAT_IOCTL_READDIR_SHORT(r11, 0x82307202, &(0x7f0000004100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000004380), r11) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000004440)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x14, r13, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x4044084) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000044c0), r9) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f00000045c0)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004580)={&(0x7f0000004500)={0x5c, r14, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x39}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendto(r3, &(0x7f0000004600)="0519ab704af4f43115f9f1967c2f39d8d8e598d8006d09adedac3d6a3452ab4ed1fa9b04bb05f1a9a87cdd467402fb1194e3e8", 0x33, 0x0, &(0x7f0000004640)=@caif=@dbg={0x25, 0x1, 0x9}, 0x80) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000004700)={0x1, &(0x7f00000046c0)=[{0x4, 0x80, 0x2}]}, 0x10) 871.347157ms ago: executing program 4 (id=3808): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800af0bf2bb0000000000000200"], 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 846.185842ms ago: executing program 1 (id=3809): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000bfe000025a729bd7000fddbdf250a0000cdfe0000010200011508000600fe7f0000080010000001000014000100fc020000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x2000c805}, 0x440d4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x2a040400) r2 = socket(0x8, 0x0, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1ab642, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x4, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0xe, 0x10}, {0x10, 0xfff1}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYBLOB="879ecac21f21f4a531b40bb6dfdee39f94eeedf3292c18d063d4cac28b05ab0f8867c1d938ee56ad77445a4fe6789630a40e24e5bcc146a963236bee9a76037d93b7257881847475e84a04a23d6161b017ce4bd84830237a1d86e03b84baa49176281de587349f4043b03e795085ad7d81eee428da1ba9a0075f7b3740dabc9ec7a6dd", @ANYRES8=r10, @ANYRES64=r9, @ANYRES8=r5, @ANYRESOCT=r3], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb8449484afb5}, 0x1891) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'lo\x00'}) socket$inet(0x2, 0x1, 0x11) 764.365847ms ago: executing program 2 (id=3810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x3400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x6d548fb47536fb1c, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0x2}, {0xd, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 654.761509ms ago: executing program 0 (id=3811): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000008000010002000000fcffff7f000000200000010000000400000075a984bc8d2bd0a7ed06aa2142000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20002400}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 654.365251ms ago: executing program 4 (id=3812): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x63fa, &(0x7f00000001c0)="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") 515.607323ms ago: executing program 1 (id=3813): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x2}, 0x10) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0)=0x5, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180)) close(r2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r3, 0x5, 0x5, 0xa}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x0) unshare(0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000002380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x93c63b0b03fb1f52, 0x0, 0x0, {0x2}}, @NFT_MSG_DELSET={0xac, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x64, 0xd, 0x1, 0x0, "37c33ea2e643a79ecedd31279372071c9d840382928afb847ae32d43043129a28db0220001206cde21ea106129d95a33758dc2c8f164e186f939df14b09661ac798c5ec0a974d913dde039d658c735180f602efc289f1ac1d0d403f895ed3355"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELCHAIN={0x48, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x1c6c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c2c, 0x3, 0x0, 0x1, [{0x1790, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x330, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "8ccc51d00f20da07197245df3a3960c59ef49fd7e00308135296a97894dedd5bc6677c7ae360824678a9bec1660537ad466522800b6dbbaa6003b01bb037c84e054c8a05987cc624901010bb8905db3360cf09c9140197367cbcc2b1abd8bf99ccf661f317f8341578de0f45ff6bd2ef712a4e685a2f9a522aaaa5c82585cffe4460a837fbb15df8299854cf98fdb1033a3689e42e3377fb4272d8c814d58971f15664e57b577edc343c7e9692e29c54ff0c255b19fc40f0e3ddc35f6eedab81c35923d9192552b42de96315f3ebf3bd03799815b01a52f93472519b547e6b48340f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x66, 0x1, "f35ad612e12e59a726dc4e14691e048b3e305b8238f711fd298bb32738e873ed6c0f8a500ae51f8082d27fc0d430e49cba36c4fab86b54d81e02ad1136952be02aecae8d4e1c92a004ad6967901e357e4c94e92cb360bc1bc9a0996c4f03d2b93358"}, @NFTA_DATA_VALUE={0x8e, 0x1, "ea61437c36136489844eb209178518e7b6f1846e391f0c3b97f758f121cc3fd82b263969ebdba474396c176cd91f3961099ca35617be0398fec9a7f77f6d1f7fc22703d4c2fde0826129f5a11941fa530af6f92902858e3499e747ec41655ef600b4d1be28dc949696440d71820c5af18a137ad77eea024ee7a0e712ee25928931b111cc54a5a2a1760f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x95, 0x1, "9be70a8c08f5e517286bb63a08fbf20c2d11b6aaca20eca63f311d89654b1fd05075b80ef1ad21e81a03ca37c664dc8c1f3d3a531d7eaae40ce8f32409c3417e264cce95db3a364e95c39630c1bf6cb24088e92d0d20057ee8a682aeee70d795fa1540b38af6869f953353546d62111177053199aa10145e885f72c069805b6de50dbffcdca5be4f19062d9da8abbdb2c0"}]}, @NFTA_SET_ELEM_USERDATA={0xe1, 0x6, 0x1, 0x0, "42a1a5cb8dbbca4d1f1e6b8aca7b95bf434348febc41f13e2e1c0211f75d014e742b771592019b91850523c9a28e6c304379b179186150d767a43be245cc24b1812fb8fa6db2a0eeed608086aef59e80e5f34f6e3c35e93c820491fa458b7665336d65465b39e3de3cbb6a99268a80dbaffc854c3f8bc7d229670893cc116300c078a25639c15b7d003f1b9131c69a2f83c880b7df3850e2aa6942f95a60d75b3ee425840f170cb46d33e8d88cfb1c4ae67fe0d523ac7ff4f572294ea06d994fd5611c41a5a9518513b8c0473e675b93efbe78c0e17b1995c38609b65b"}, @NFTA_SET_ELEM_KEY_END={0x1378, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x9f, 0x1, "57214bf4b33f9cad180da98a77adc4aa450c4f6d4f847a3292d770127c7454222f85886f7183019ba00dfe311a55388061e8c0dedf1e4392f651164159d8f41fa1714a17693de66c8368375f4174bdac3f8db57d32e169af901e53379ab1e1044891fa04d0bcaf4bd7b07adad120b015645548acd520e20ee8f1877d303d4779febbfccb1aabfe1ab55288c198d9def08d28c2021e1772f40af7ce"}, @NFTA_DATA_VALUE={0xe6, 0x1, "df11b714b2e76160b4445e53e5afb251e7e5d7693ca593c65c8aa5d8fe9603e7135102953e14b6429f547a6c4830ed9db8caead8503deaea71710ab60cfcea5740770b23d457d153286fb760fc5033a566866f84e5f93bdd48105633288770a7f1d15e9ab2957368be7b07b81ffbcd453c2e33e7d8495fee9633f5590d88ffe094a112048045399e4418f9fcaa827427ae6d2ff22071717235071372cedf2e07017ef331348ca5a308c91c72f3830433fff9a9892aa766c7f14d441f3e50626b8ea7bbabd08a156d43dfacc21b47fa3db330c4d3125e5516646b4428f13f1ba02fd1"}, @NFTA_DATA_VALUE={0x11, 0x1, "a53279bb5e59498af519fd1a8e"}, @NFTA_DATA_VALUE={0x28, 0x1, "531ddf02ba2fb72e336291246d22591f244d5d982028ab366995e2a05bce66e54c414630"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x41, 0x1, "f490e65737ee55d8b392bf35bb9a6d825379747f5162f07712286ce6cba967f8ade709633a2b837f8b42e1412ed5ffc626142f2419c1b501dd8d2abc22"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "d83baf74f54de5cb36797e6790ae86e9d7dc81a3b8f35ba0aad3d3b1f1e463f53fac958f7316de1a406e54a69546bab6c26d47174068424f3aec9a306d5d7c4495a559d533b40586cef2bcddb3357a3870c5774e65771bdeedb691c4cbc490f2c985dd3cfe589d344cd4a26c1ea8e017a226c77069cf3881ebe97d34ae58c7ab314d2223c76d25d456ded7af603852823cc9663500dfcf1943247ac064375e48565355c5d91ec108f5b0c31b561c3eae28ad03ab0d36545074f1999f1615933648010f01df30b006571d8b0e10"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x498, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x318, 0xb, 0x0, 0x1, [{0x180, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x170, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x15c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "e81a10ba59ee081bf82b88f0f14c0f60290e3a3addce0dee094e0331d6c793a1f018d01f4dc44e77c1ca569e7c2fda4359b595e2e4ededce3a4bfb3d6fea1df9d26480516bcc58914f65643deb54e45966601c4adc0a7cac08d93f8946ea8152d9d2a2f20fffabfaf5b5bc41b87c9a79216a67c4fa38d70ad8e328406e658f94911d7541cadf932325024c9e066a0670b899dec6cc5d5577f353aad02dc0cc7585508797edf6e6f7fdf697204e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x47, 0x1, "596a1a1327889fa5b4aa97ef7d53d5e94bdcc3fa98735dab17a4d4e753cb582eeeba5c2546237cf32ce9a1b7ae709ba79d9534e626eff75d743cafa21fc521d8f720a3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xeb}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x5b}]}}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfd}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x5c}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7}]}}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x1e54}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x8010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002700)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002500)={0x1b4, 0x22, 0x800, 0x70bd2d, 0x25dfdbfc, {0x9}, [@nested={0x19e, 0xde, 0x0, 0x1, [@nested={0x4, 0x8e}, @generic="537db8596259015d22b3a4edc95200eaa65eaf65d27de08102811ea32e37fd03a46f4a8bb8e498c7437152a1d12d8cd0e87c37f2f230fa71431c96dfdcabdc4439bd3d259b3a25714fc4dc0b716a93f359536c80ee3009a93b99d54b20def58a8633fc8d346da7d5819b09261db8cb1676e4f4ce56e58756f5de472870f780a758405793f213e0afcb0269facd65eb37b7", @nested={0x4, 0xe4}, @typed={0x8, 0x11b, 0x0, 0x0, @fd}, @typed={0x8, 0xce, 0x0, 0x0, @u32=0x6}, @generic="1cd150705c05b668efbae7596ed5c6099f0785bcb73560ef6e92d65d11d388de1c8bc0ebc61da309ec8e63b97a4fc0ef36c11b8e38c9b392836ccda8e3d377a08f0923d6d90071429b9c22961e99f95819badd7a8ef9bca0aef6bf3b1ba5e106159ff51e771bc17bfba09c3eec97bd178e27979c761d5c77624dc24559101308b52275fffa4e78554ecaac98f833a65b646cc26f667695bd875bb5d1dcf8acfc23c6adc413bae3e86a5eb626abc8d97fdddd1c4b2b4e93956fb62a8da7f1834858c4fc2edab7fba63b20c93470e9e292189d1d81fe58d4619fe02d1b6b7ad23726763d1b39", @nested={0x4, 0xdf}, @typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@local}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r9, 0x80809440, &(0x7f0000002d40)={&(0x7f0000002cc0)=[{&(0x7f0000002780)="f1b16f94defa44bcf9d679c332bc4a1317b93f61deb9ceba441a9855dc8a17acd600d3ad5e35aaffd2c33bdbe9922de5b2b55ff8f67da758eb98d54b9cb8c51123175c766def8626f991a5edff6d822e4536d4a1bd13d3eb445cef398f8ee770908048f72ff478b7f85651a3019f9e6abf7353e6058b077c9db8c4f9d91d", 0x7e}, {&(0x7f0000002800)="68d3b7712b487f23dce3535bd22c7f41f43be6698901e55da8cc7def2869d430c315d607c157fcbb34c16bc490b7ef5ed5293fc2d2ffa6df4c2d1c4f55c3b8bc24c924257bec9f86fe6d2b8a92f72c4c42c622cecce2c81ad50be00bb7ecdb6811e879d7028a9778a8e1a674dd845c783cf2905aa706e219f366bdaa2172307d7d27de077cc7511512ad516b79b510a2b02d6505f5b5124b0cc17de82174e8e63b551a6a71db603173b66ef15d0b62ea3adfcfdbd633c84a68a958ad3a0289eb681d4fb3ded6152db1", 0xc9}, {&(0x7f0000002900)="21747d468406ca09444d97f98170c279bf58484ce840c13021cc4e3a044c25fbab1d20394412cb64fd9d5b8b70f7e0ac2475786a31b6ee82282225169710deb3b697531e850882ae3067642505e3f8f351f1", 0x52}, {&(0x7f0000002980)='o7', 0x2}, {&(0x7f00000029c0)="ee7c1ac05ba587c5dff18d3b7824ca07b10cce3c778d3a8fb13ed62a77096f6af7d986a7928911c52a2f52e15080db4cc89832fb91f237570ae6302a318085f28e90f355e9bd27021829fba7572f02903289fcf0396b710b5e1474e22eb024dc77cbfc857e5ac8a2708852dec7be359832cce849d3c8a895ee2c89e524fbad319493a5e47bdd8f1cdefbde774e7ee431b92b61039f25f7f0c0fe85b63fae4df9a687aed27336eaa49f02fd6d311c388efd8cc7a26e2b2e9f662eb618e5c54d00466d7344a37ec3d3", 0xc8}, {&(0x7f0000002ac0)="4a1f7bfedb1069d25a28af1258f3200cf270010efc6f1fc64ce073da0a272dca2aad6c29810dbdece2ac9679c7bb6a7afc7671345760f6caf2e266758036da6fa42d4a5af10c4b6b5450e98df756603a846b6d9c8100075d723d172ca44f2591bc300311ec08b09e8080af4e368e92020a527bc95b70a47b8556641eb798ff211694bb826a50375c714412", 0x8b}, {&(0x7f0000002b80)="dc3fd2af1986fe4b674b67b5c922616a343eb4a501afcbbcc3f919d5d41e805f9552760443aad51f313a13d466bfd5e131f2ab", 0x33}, {&(0x7f0000002bc0)="754c699e85ef32ca6b84f0e3574e51097ca9610c08787ca95368fdf01511e7b5301299ee6b7c94a81b211d2adc75ade38aa31039190de8e13e41175c1b1eda7a5f4c532ef12dc4f3acb9ac57a5b590565f0d8420414b85bb74422dffdcce4735d746d8c81ef91a7564f5904b19de8b423eaebe5f6135ce0bf60e3f714505babecb51e1678c6ba2bfbdcc1f1a31d44e16a82b1197904ffb06ad319a7205e8680af80d70fe3e1f628ca50f80db7f3f582536029fc07c333747a254149b84b883e22e8075887478a856c1529b6e589d9a8370e66bf7b717ccd706eec017b7f6", 0xde}], 0x8, 0x39c495a4, 0x0, 0x3, 0xb, 0x3}) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0xc0420008}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040080}, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003180)={r4, 0xe0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002ec0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000002f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0], 0x0, 0x92, &(0x7f0000002f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002fc0), &(0x7f0000003000), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000003040)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000031c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r10, r4, 0x3, 0x5, 0x1}, 0x50) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = accept4$rose(r4, &(0x7f00000032c0)=@short={0xb, @dev, @null, 0x1, @default}, &(0x7f0000003300)=0x1c, 0x100000) sendmsg$netlink(r11, &(0x7f0000003380)={&(0x7f0000003240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f0000003280), 0x0, &(0x7f0000003340)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r12, r1, r2, r3, r13, r9, r2, r3]}}], 0x40, 0x8000}, 0xc0008d4) 509.514218ms ago: executing program 4 (id=3814): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x6b2b, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=""/4113, 0x1011}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 373.876241ms ago: executing program 3 (id=3815): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x7f) (async) r1 = socket(0x10, 0x803, 0x7f) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010030bd7000fedbdf350a00000020000380"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1f1c000002060101000000000000000000000001000000000a000000090002008d001f106f194eb3050001"], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000040), 0x8) connect$bt_sco(r7, &(0x7f0000000080)={0x1f, @none}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000001060103000000000000000001000003050001000700000005000100070000000500010007000000050001000700000005000100070000000500010007002000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000380)={@local}, &(0x7f0000000400)=0x14) 368.341137ms ago: executing program 1 (id=3816): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000840)="a6e077", 0x3, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendto$inet6(r1, &(0x7f00000002c0)="3ae0edca1041f7a01e9483d025651d603e5e38402302c34a2399389ee61d98b6d04bfb8e4552507aa13ec22e830f9388a212751e5f22854753534c3cd674f0e82ca52804b4313bc39c0f5cf910a07c264568721b50df6e83c3e06c9e342a75b8f75de050eaae2b81cc8fbbf324f47d22cc49c18745a5bb92", 0x78, 0x0, &(0x7f0000000380)={0xa, 0x4e21, 0x6, @local, 0x3}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000"], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 319.904823ms ago: executing program 2 (id=3817): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) socket$kcm(0x29, 0x7, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0xa0, 0x1405, 0x0, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 319.503329ms ago: executing program 4 (id=3818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000c10870b80000000000efffffffffffffff0000100000"], 0x50) (async) close(0x3) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200ea0012f0ffff050000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x7, 0xfff}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3, r0}, 0xc) 210.682654ms ago: executing program 4 (id=3819): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="5c00000011006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 74.875468ms ago: executing program 3 (id=3820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x17c, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)='bridge_slave_0\x00', 0x3, 0x0, 0x9}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) 0s ago: executing program 4 (id=3821): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): set [0, 0] type 1 family 0 port 8472 - 0 [ 302.615254][T12634] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.637546][T12634] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.658628][T12634] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.680163][T12634] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.691056][T12634] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.697157][T14402] netlink: 'syz.3.2147': attribute type 7 has an invalid length. [ 302.715371][T12634] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.724738][T12634] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.727773][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 302.733724][T12634] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.768563][T12634] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.796474][T12634] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.809260][T12634] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.828989][T14404] veth0_to_bridge: left allmulticast mode [ 302.844493][T14404] veth0_to_bridge: left promiscuous mode [ 302.860884][T14404] bridge0: port 2(veth0_to_bridge) entered disabled state [ 302.919036][T14404] bridge_slave_0: left allmulticast mode [ 302.944655][T14404] bridge_slave_0: left promiscuous mode [ 302.965141][T14404] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.019668][T14404] bond0: (slave bond_slave_0): Releasing backup interface [ 303.051429][T14404] bond_slave_0: left allmulticast mode [ 303.067955][T14404] bond0: (slave bond_slave_1): Releasing backup interface [ 303.078263][T14404] bond_slave_1: left allmulticast mode [ 303.085087][T14404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.093310][T14404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.162579][T14410] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 303.178887][T14410] bond12 (unregistering): Released all slaves [ 303.516981][T14447] FAULT_INJECTION: forcing a failure. [ 303.516981][T14447] name failslab, interval 1, probability 0, space 0, times 1 [ 303.575637][T14447] CPU: 1 UID: 0 PID: 14447 Comm: syz.1.2158 Not tainted syzkaller #0 PREEMPT(full) [ 303.575662][T14447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.575682][T14447] Call Trace: [ 303.575690][T14447] [ 303.575697][T14447] dump_stack_lvl+0xe8/0x150 [ 303.575730][T14447] should_fail_ex+0x412/0x560 [ 303.575763][T14447] should_failslab+0xa8/0x100 [ 303.575794][T14447] ? skb_clone+0x212/0x3a0 [ 303.575815][T14447] kmem_cache_alloc_noprof+0x87/0x650 [ 303.575837][T14447] ? __netlink_lookup+0xc6/0x8b0 [ 303.575863][T14447] skb_clone+0x212/0x3a0 [ 303.575887][T14447] __netlink_deliver_tap+0x404/0x850 [ 303.575918][T14447] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.575938][T14447] netlink_deliver_tap+0x19c/0x1b0 [ 303.575957][T14447] netlink_unicast+0x730/0x8e0 [ 303.575997][T14447] netlink_sendmsg+0x813/0xb40 [ 303.576025][T14447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.576048][T14447] ? aa_sock_msg_perm+0xf1/0x1b0 [ 303.576068][T14447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.576093][T14447] ____sys_sendmsg+0x972/0x9f0 [ 303.576112][T14447] ? __might_fault+0xaf/0x130 [ 303.576139][T14447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.576168][T14447] ? import_iovec+0x73/0xa0 [ 303.576192][T14447] ___sys_sendmsg+0x2a5/0x360 [ 303.576211][T14447] ? __lock_acquire+0x6b5/0x2cf0 [ 303.576246][T14447] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.576303][T14447] ? __fget_files+0x2a/0x420 [ 303.576321][T14447] ? __fget_files+0x3a0/0x420 [ 303.576350][T14447] __x64_sys_sendmsg+0x1bd/0x2a0 [ 303.576373][T14447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.576403][T14447] ? __pfx_ksys_write+0x10/0x10 [ 303.576435][T14447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.576455][T14447] do_syscall_64+0x15f/0xf80 [ 303.576479][T14447] ? trace_irq_disable+0x3b/0x140 [ 303.576502][T14447] ? clear_bhb_loop+0x40/0x90 [ 303.576523][T14447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.576540][T14447] RIP: 0033:0x7f1b92b9cdd9 [ 303.576562][T14447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.576578][T14447] RSP: 002b:00007f1b93aa9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.576604][T14447] RAX: ffffffffffffffda RBX: 00007f1b92e15fa0 RCX: 00007f1b92b9cdd9 [ 303.576617][T14447] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 303.576628][T14447] RBP: 00007f1b93aa9090 R08: 0000000000000000 R09: 0000000000000000 [ 303.576639][T14447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.576650][T14447] R13: 00007f1b92e16038 R14: 00007f1b92e15fa0 R15: 00007ffe67320e88 [ 303.576681][T14447] [ 305.336393][T14502] netlink: 'syz.3.2171': attribute type 13 has an invalid length. [ 305.344392][T14502] __nla_validate_parse: 11 callbacks suppressed [ 305.344407][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'. [ 306.491364][T14448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.571558][T14464] delete_channel: no stack [ 306.772964][T14512] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 306.807307][T14512] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 306.853782][T14512] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 306.948210][T14512] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 306.972386][T14512] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 307.214019][T14539] xt_CT: No such helper "snmp_trap" [ 307.486867][ T6958] hid-generic 0005:16BE:5505.0001: item fetching failed at offset 0/2 [ 307.527271][ T6958] hid-generic 0005:16BE:5505.0001: probe with driver hid-generic failed with error -22 [ 307.586454][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'. [ 307.744244][T14565] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.902306][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 307.916526][T14581] bond9: entered allmulticast mode [ 308.028493][T14581] vxcan3: entered promiscuous mode [ 308.076032][T14581] vxcan3: entered allmulticast mode [ 308.096711][T14581] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 308.115358][T14581] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 308.138074][ T30] audit: type=1107 audit(1777240578.957:6): pid=14593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 308.229789][T14596] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 308.499321][T14618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2203'. [ 308.757555][T14634] netlink: 'syz.1.2206': attribute type 1 has an invalid length. [ 308.854306][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 308.933642][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 308.959332][T14646] net_ratelimit: 1110 callbacks suppressed [ 308.959350][T14646] openvswitch: netlink: Message has 2 unknown bytes. [ 309.161320][T14659] ipvlan1: entered allmulticast mode [ 309.174969][T14659] veth0_vlan: entered allmulticast mode [ 309.281462][T14666] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 309.459559][T14684] netlink: 'syz.3.2217': attribute type 12 has an invalid length. [ 309.787857][T14701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2223'. [ 309.797319][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2223'. [ 309.850044][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 309.859277][T14705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2222'. [ 311.174378][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 312.337162][T14675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.966557][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'. [ 313.034142][T14726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2228'. [ 313.080832][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'. [ 313.097268][T14726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2228'. [ 313.125226][T14726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2228'. [ 313.142003][T14726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2228'. [ 313.418076][T14741] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 313.429595][T14744] bridge5: entered promiscuous mode [ 313.442090][T14744] bridge5: entered allmulticast mode [ 313.536917][T14741] bond6: entered promiscuous mode [ 313.581999][T14741] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.647724][T14756] sctp: [Deprecated]: syz.2.2236 (pid 14756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.647724][T14756] Use struct sctp_sack_info instead [ 313.691419][T14752] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.717225][T14757] sctp: [Deprecated]: syz.2.2236 (pid 14757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.717225][T14757] Use struct sctp_sack_info instead [ 313.740104][T14752] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 313.775397][T14752] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 313.799233][T14752] bond6: (slave ip6gre2): making interface the new active one [ 313.815154][T14752] ip6gre2: entered promiscuous mode [ 313.817537][T14764] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2238'. [ 313.829403][T14752] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 313.872336][T14764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2238'. [ 314.163313][T14780] openvswitch: netlink: Message has 8 unknown bytes. [ 314.218401][T14780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.396670][T14788] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 314.407059][T14794] openvswitch: netlink: IP tunnel dst address not specified [ 314.417611][T14788] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 314.447496][T14788] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2246'. [ 314.479756][T14795] netlink: 'syz.0.2248': attribute type 13 has an invalid length. [ 314.507003][T14795] netlink: 'syz.0.2248': attribute type 17 has an invalid length. [ 314.850443][T14815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2252'. [ 315.040146][T14795] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.051531][T14795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.091274][T14780] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 315.108123][T14780] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 315.156360][T14780] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 315.267735][T14828] bridge: RTM_NEWNEIGH with invalid ether address [ 315.428664][ T6947] IPVS: starting estimator thread 0... [ 315.485747][T14836] geneve2: entered promiscuous mode [ 315.511003][ T200] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.538796][ T200] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.554310][T14835] IPVS: using max 29 ests per chain, 69600 per kthread [ 315.577227][ T200] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.602206][ T200] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.679477][T14847] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 315.841504][T14852] bridge6: entered promiscuous mode [ 315.854561][T14852] bridge6: entered allmulticast mode [ 315.924011][T14858] netlink: 'syz.1.2264': attribute type 13 has an invalid length. [ 317.018508][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.029071][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.576647][T14884] tipc: Enabling of bearer rejected, failed to enable media [ 317.609037][T14884] sctp: [Deprecated]: syz.4.2269 (pid 14884) Use of int in max_burst socket option. [ 317.609037][T14884] Use struct sctp_assoc_value instead [ 318.015068][T14916] __nla_validate_parse: 7 callbacks suppressed [ 318.015085][T14916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2278'. [ 318.160474][T14925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 318.266204][T14927] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2283'. [ 318.372622][T14933] bond8: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 318.413876][T14933] bond8: entered promiscuous mode [ 318.433719][T14933] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.601485][T14956] x_tables: duplicate underflow at hook 1 [ 319.218970][T14991] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2300'. [ 319.307543][T14997] netlink: 1084 bytes leftover after parsing attributes in process `syz.0.2301'. [ 319.798651][T15025] netlink: 'syz.4.2307': attribute type 1 has an invalid length. [ 319.943021][T15025] bond7: entered promiscuous mode [ 319.948637][T15025] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.966434][T15028] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.973583][T15028] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 319.985061][T15028] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 320.001181][T15028] bond7: (slave wireguard0): making interface the new active one [ 320.009412][T15028] wireguard0: entered promiscuous mode [ 320.018588][T15028] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 320.075949][T15031] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 320.092855][T15031] bond7: (slave wireguard1): Enslaving as a backup interface with an up link [ 320.443897][T15048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2312'. [ 320.485888][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 320.860124][T15048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2312'. [ 320.957344][T15070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2317'. [ 321.175783][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 321.497207][T15100] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 321.525682][T15100] bond10 (unregistering): Released all slaves [ 322.069021][T15134] team0: Caught tx_queue_len zero misconfig [ 322.111867][T15127] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 322.356612][T15148] can: request_module (can-proto-5) failed. [ 322.722846][T15177] pim6reg: entered allmulticast mode [ 322.973158][T15186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.251068][T15204] tipc: Enabling of bearer rejected, already enabled [ 323.290386][T15208] xt_bpf: check failed: parse error [ 323.365166][T15212] sit1: entered allmulticast mode [ 323.371737][T15219] netlink: 'syz.2.2358': attribute type 1 has an invalid length. [ 323.449163][T15219] 8021q: adding VLAN 0 to HW filter on device bond12 [ 323.465505][T15229] 8021q: adding VLAN 0 to HW filter on device bond12 [ 323.472483][T15229] bond12: (slave vcan2): The slave device specified does not support setting the MAC address [ 323.486755][T15229] bond12: (slave vcan2): Error -95 calling set_mac_address [ 326.159021][T15198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.436922][T15267] syzkaller0: entered promiscuous mode [ 326.454615][T15267] syzkaller0: entered allmulticast mode [ 326.467728][T15262] lo: Caught tx_queue_len zero misconfig [ 326.484505][ T6958] IPVS: starting estimator thread 0... [ 326.545887][T15279] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003 [ 326.624695][T15274] IPVS: using max 31 ests per chain, 74400 per kthread [ 326.837225][T15295] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 326.960309][T15294] __nla_validate_parse: 4 callbacks suppressed [ 326.960326][T15294] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2376'. [ 326.976963][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 326.985899][T15294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2376'. [ 326.995093][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 327.004008][T15294] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2376'. [ 327.013145][T15294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2376'. [ 327.022878][T15294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2376'. [ 327.052630][T15295] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 327.320386][T15319] vxcan2: entered allmulticast mode [ 327.361838][T15322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2382'. [ 327.877192][T15322] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2382'. [ 327.899233][T15328] syzkaller1: entered promiscuous mode [ 327.904800][T15328] syzkaller1: entered allmulticast mode [ 328.142912][T15352] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2388'. [ 328.184704][T15352] netlink: 'syz.4.2388': attribute type 9 has an invalid length. [ 328.200787][T15357] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 328.236533][T15360] xt_connbytes: Forcing CT accounting to be enabled [ 328.753360][T15383] bridge_slave_1: left promiscuous mode [ 328.774775][T15383] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.825422][T15383] bond0: (slave bond_slave_0): Releasing backup interface [ 328.851011][T15383] team0: Port device team_slave_0 removed [ 328.862736][T15383] team0: Port device team_slave_1 removed [ 328.884577][T15383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.908569][T15383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.927281][T15383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.956844][T15384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.973419][T15389] netlink: 'syz.2.2396': attribute type 29 has an invalid length. [ 329.101989][T15400] netlink: 'syz.2.2396': attribute type 29 has an invalid length. [ 329.128733][T15405] openvswitch: netlink: IP tunnel TTL not specified. [ 329.165110][T15401] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 329.781007][T15432] netlink: 'syz.3.2406': attribute type 2 has an invalid length. [ 329.828534][T15437] netlink: 'syz.3.2406': attribute type 2 has an invalid length. [ 329.866041][T15432] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 329.926373][T15432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.636915][T15432] bond7: (slave veth9): Enslaving as an active interface with a down link [ 330.650302][T15452] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 330.686426][T15437] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 330.702744][T15437] bond7: (slave batadv1): making interface the new active one [ 330.724429][T15437] batadv1: entered promiscuous mode [ 330.739060][T15437] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 330.892672][T15469] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 330.923306][T15473] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 331.005863][T15477] bond10: (slave gretap1): making interface the new active one [ 331.016654][T15477] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 331.070032][T15473] macvlan2: entered promiscuous mode [ 331.087330][T15473] macvlan2: entered allmulticast mode [ 331.110162][T15473] bond10: entered promiscuous mode [ 331.126934][T15473] gretap1: entered promiscuous mode [ 331.144955][T15473] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 331.179933][T15473] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 331.219108][T15473] bond10: left promiscuous mode [ 331.234719][T15473] gretap1: left promiscuous mode [ 331.646129][T15506] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 331.822102][T15512] openvswitch: netlink: Flow key attr not present in new flow. [ 332.052398][T15529] tipc: Enabling of bearer rejected, failed to enable media [ 332.269841][T15537] netlink: 'syz.3.2430': attribute type 7 has an invalid length. [ 332.324079][T15537] netlink: 'syz.3.2430': attribute type 7 has an invalid length. [ 332.381653][T15542] __nla_validate_parse: 14 callbacks suppressed [ 332.381671][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 332.401412][T15537] netlink: 'syz.3.2430': attribute type 7 has an invalid length. [ 332.447227][T15549] xt_TCPMSS: Only works on TCP SYN packets [ 332.654847][T15556] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 332.761317][T15563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2436'. [ 332.839241][T15566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2436'. [ 332.997297][T15560] bond8: (slave vxcan2): The slave device specified does not support setting the MAC address [ 333.018512][T15560] bond8: (slave vxcan2): Error -95 calling set_mac_address [ 333.138538][T15563] bond8: (slave bridge8): Enslaving as an active interface with a down link [ 333.152796][T15579] netlink: 'syz.2.2441': attribute type 22 has an invalid length. [ 333.153715][T15566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.164670][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 333.177057][ T6943] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 333.206471][T15570] macvlan6: entered promiscuous mode [ 333.211926][T15570] macvlan6: entered allmulticast mode [ 333.218516][T15570] bond8: entered promiscuous mode [ 333.224151][T15570] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 333.232138][T15570] bond8: left promiscuous mode [ 333.258787][T15579] netlink: 'syz.2.2441': attribute type 22 has an invalid length. [ 333.266780][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 333.303806][ T8159] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.323208][ T8159] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.383585][ T8159] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.410955][T15585] delete_channel: no stack [ 333.417273][ T8159] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.518161][ T5899] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 333.565445][T15595] netlink: 'syz.1.2446': attribute type 1 has an invalid length. [ 333.680097][T15599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2447'. [ 333.958261][T15614] netlink: 'syz.4.2451': attribute type 2 has an invalid length. [ 333.975796][T15620] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 333.993356][ T12] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 334.018345][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 334.027403][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 334.099191][T15614] No such timeout policy "syz1" [ 334.521814][T15664] netlink: 'syz.1.2464': attribute type 6 has an invalid length. [ 334.578454][T15666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'. [ 335.085101][T12634] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 335.125865][T12634] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 335.188230][T15680] syzkaller0: entered promiscuous mode [ 335.208214][T15680] syzkaller0: entered allmulticast mode [ 335.228203][T15689] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 335.340555][T15688] vxcan2: entered allmulticast mode [ 335.355565][ T6958] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 335.412700][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 335.915146][T15720] netlink: 'syz.1.2480': attribute type 22 has an invalid length. [ 336.115723][T15722] geneve4: entered promiscuous mode [ 336.121101][T15722] geneve4: entered allmulticast mode [ 336.951282][T15757] ip6erspan0: entered allmulticast mode [ 336.960077][T15753] bond8: entered promiscuous mode [ 336.980487][T15753] bond8: entered allmulticast mode [ 337.533231][T15779] __nla_validate_parse: 6 callbacks suppressed [ 337.533251][T15779] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2497'. [ 337.682380][T15794] xt_HMARK: spi-set and port-set can't be combined [ 337.704674][T12634] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22 [ 337.799673][T15799] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 338.182805][T15816] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2506'. [ 338.587676][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 338.772625][T15840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2511'. [ 338.778041][T15844] team0: entered allmulticast mode [ 338.835936][T15844] xt_nat: multiple ranges no longer supported [ 339.101801][T15860] tipc: Enabled bearer , priority 0 [ 339.127503][T15860] syzkaller0: entered promiscuous mode [ 339.153273][T15860] syzkaller0: entered allmulticast mode [ 339.188439][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 339.219050][T15866] IPVS: Unknown mcast interface: dummy0 [ 339.254433][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 339.297661][T15855] tipc: Resetting bearer [ 339.360125][T15855] tipc: Disabling bearer [ 339.507097][T15882] validate_nla: 3 callbacks suppressed [ 339.507114][T15882] netlink: 'syz.3.2525': attribute type 1 has an invalid length. [ 339.525876][T15882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.528875][T15877] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 339.575358][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'. [ 339.956175][T15902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.015046][T15910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.110189][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2532'. [ 340.162745][T15924] netlink: 'syz.4.2533': attribute type 1 has an invalid length. [ 340.192100][T15924] netlink: 'syz.4.2533': attribute type 1 has an invalid length. [ 340.420920][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 340.483201][T15938] openvswitch: netlink: Flow actions attr not present in new flow. [ 341.038812][T15966] xt_cgroup: path and classid specified [ 341.110873][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2544'. [ 341.130794][T15976] ip6gre3: entered promiscuous mode [ 341.139809][T15976] ip6gre3: entered allmulticast mode [ 341.160616][ T200] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 341.193941][ T6959] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 341.204473][ T200] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 342.054503][ T6958] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 342.155585][T16023] syzkaller0: entered promiscuous mode [ 342.168225][T16023] syzkaller0: entered allmulticast mode [ 342.190791][T16006] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 342.215966][ T6958] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 342.271985][T16006] bond9: entered promiscuous mode [ 342.300024][T16006] bond9: entered allmulticast mode [ 342.323638][T16006] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.534682][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2556'. [ 342.574448][ T200] batadv1: left promiscuous mode [ 342.616766][T16050] netlink: 'syz.3.2556': attribute type 11 has an invalid length. [ 342.687897][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.696884][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2556'. [ 342.717808][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.726576][T16050] netlink: 'syz.3.2556': attribute type 11 has an invalid length. [ 342.740593][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.749493][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.803876][T16063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2561'. [ 342.834827][T16065] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 342.838531][T16063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2561'. [ 342.851642][T16064] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 342.896371][T16065] netlink: 'syz.2.2562': attribute type 2 has an invalid length. [ 342.914990][T16064] netlink: 'syz.2.2562': attribute type 2 has an invalid length. [ 343.110768][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2564'. [ 343.181893][T16078] bond10: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 343.292979][T16100] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2570'. [ 343.305964][T16080] veth11: entered promiscuous mode [ 343.312138][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 343.324481][ T12] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.340654][T16073] 8021q: adding VLAN 0 to HW filter on device bond10 [ 343.494901][ T200] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.623919][T16111] bond11: option resend_igmp: invalid value (2878) [ 343.636566][T16111] bond11: option resend_igmp: allowed values 0 - 255 [ 343.653813][T16111] bond11 (unregistering): Released all slaves [ 343.789993][T16118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 344.304868][T16144] tipc: Enabled bearer , priority 0 [ 344.328913][T16144] syzkaller0: entered promiscuous mode [ 344.347298][T16144] syzkaller0: entered allmulticast mode [ 344.433860][T16146] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 344.580401][T16153] tipc: Resetting bearer [ 344.631090][T16143] tipc: Resetting bearer [ 344.706695][T16143] tipc: Disabling bearer [ 344.731118][T16159] validate_nla: 5 callbacks suppressed [ 344.731133][T16159] netlink: 'syz.0.2584': attribute type 12 has an invalid length. [ 344.777306][T16142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2579'. [ 344.946700][T16168] netlink: 'syz.4.2586': attribute type 3 has an invalid length. [ 344.990964][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 345.017637][T16168] netlink: 'syz.4.2586': attribute type 3 has an invalid length. [ 345.054097][T16172] netlink: 'syz.2.2587': attribute type 9 has an invalid length. [ 345.094327][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 345.582777][T16211] netlink: zone id is out of range [ 345.588431][T16211] netlink: zone id is out of range [ 345.593624][T16211] netlink: zone id is out of range [ 345.599816][T16211] netlink: zone id is out of range [ 345.605196][T16211] netlink: zone id is out of range [ 345.610341][T16211] netlink: zone id is out of range [ 345.615889][T16211] netlink: zone id is out of range [ 345.621041][T16211] netlink: zone id is out of range [ 345.627056][T16211] netlink: zone id is out of range [ 345.632576][T16211] netlink: zone id is out of range [ 346.105912][T16233] vlan4: entered allmulticast mode [ 346.117979][T16233] macvtap0: entered allmulticast mode [ 346.641165][T16259] syzkaller1: entered promiscuous mode [ 346.661728][T16259] syzkaller1: entered allmulticast mode [ 347.643181][T16311] bridge5: entered promiscuous mode [ 347.661597][T16311] bridge5: entered allmulticast mode [ 347.700299][T16311] team0: Port device bridge5 added [ 347.718306][T16316] __nla_validate_parse: 11 callbacks suppressed [ 347.718325][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 347.747448][T16314] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2621'. [ 347.763432][T16321] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2623'. [ 347.773088][T16314] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2621'. [ 347.783929][T16321] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2623'. [ 347.795740][T16321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2623'. [ 347.812920][T16315] bridge0: port 1(team0) entered blocking state [ 347.820348][T16315] bridge0: port 1(team0) entered disabled state [ 347.832316][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 347.834477][T16315] team0: entered allmulticast mode [ 347.887028][T16315] team0: entered promiscuous mode [ 347.936933][T16321] : entered promiscuous mode [ 348.181922][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2627'. [ 348.230233][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 348.326413][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 348.374348][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 349.143776][T16373] batadv_slave_1: entered promiscuous mode [ 349.406862][T16368] batadv_slave_1: left promiscuous mode [ 350.808162][T16442] net_ratelimit: 337 callbacks suppressed [ 350.808179][T16442] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 351.097216][T16460] pimreg: entered allmulticast mode [ 351.323791][T16475] lo: left allmulticast mode [ 351.476723][T16475] veth5: left promiscuous mode [ 351.482013][T16475] ip6gre1: left promiscuous mode [ 351.494570][T16475] ip6gre1: left allmulticast mode [ 351.590385][T16475] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 351.634898][T16475] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 351.712586][T16475] vlan2: left allmulticast mode [ 351.723324][T16475] bond5: left allmulticast mode [ 351.729189][T16475] geneve2: left allmulticast mode [ 351.770221][T16475] macsec1: left promiscuous mode [ 351.776453][T16475] macsec1: left allmulticast mode [ 351.785712][T16475] bond6: left promiscuous mode [ 351.794445][T16475] ip6gre2: left promiscuous mode [ 351.853415][T16475] ip6erspan0: left allmulticast mode [ 351.874611][T16475] ip6gre3: left promiscuous mode [ 351.879713][T16475] ip6gre3: left allmulticast mode [ 351.913720][T16475] veth11: left promiscuous mode [ 351.930466][T16481] macsec1: entered promiscuous mode [ 351.942171][T16481] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 351.979170][ T1159] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.001491][ T1159] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.020205][ T1159] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.046677][ T1159] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.062468][ T1159] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.072865][ T1159] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.107086][T16510] netlink: 'syz.0.2661': attribute type 2 has an invalid length. [ 352.116812][T16508] IPv6: sit2: Disabled Multicast RS [ 352.139798][ T1159] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.153033][ T1159] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.377550][T16526] netlink: 'syz.1.2665': attribute type 1 has an invalid length. [ 352.866011][T16554] __nla_validate_parse: 33 callbacks suppressed [ 352.866029][T16554] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2674'. [ 352.899389][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'. [ 352.941654][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2674'. [ 352.981503][T16554] netlink: 'syz.3.2674': attribute type 15 has an invalid length. [ 353.048832][T16559] netlink: 492 bytes leftover after parsing attributes in process `syz.0.2676'. [ 353.254548][T16576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2679'. [ 353.601260][T16589] netlink: 'syz.0.2682': attribute type 1 has an invalid length. [ 353.762988][T16589] bond10: entered promiscuous mode [ 353.772345][T16589] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.849878][T16595] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.875971][T16595] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 353.905040][T16595] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 353.932739][T16595] bond10: (slave ip6gre2): making interface the new active one [ 353.940755][T16595] ip6gre2: entered promiscuous mode [ 353.948855][T16595] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 353.959440][T16597] ªªªªªª: renamed from bond_slave_0 [ 354.132839][T16612] bond11: option ad_select: invalid value (34) [ 354.176379][T16612] bond11 (unregistering): Released all slaves [ 354.176662][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a47c400: rx timeout, send abort [ 354.297582][T16632] syzkaller0: entered promiscuous mode [ 354.303304][T16632] syzkaller0: entered allmulticast mode [ 354.561687][T16646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2695'. [ 354.657041][ T6947] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 354.692940][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a47c400: abort rx timeout. Force session deactivation [ 354.773269][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2695'. [ 354.984699][ T6947] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 355.242417][T16681] vxlan2: entered promiscuous mode [ 355.254071][T16681] vxlan2: entered allmulticast mode [ 355.278400][ T1159] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.302529][ T1159] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.336506][T16683] tap0: tun_chr_ioctl cmd 21731 [ 355.338394][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2705'. [ 355.352275][ T1159] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.352397][T16690] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2705'. [ 355.371497][ T1159] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.605377][T16699] tipc: Enabling of bearer rejected, already enabled [ 355.614077][T16694] syzkaller0: entered promiscuous mode [ 355.619891][T16694] syzkaller0: entered allmulticast mode [ 355.627191][T16699] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 355.636165][T16699] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 355.757967][T16702] IPv6: sit3: Disabled Multicast RS [ 355.810666][T16707] tipc: Enabling of bearer rejected, already enabled [ 356.006611][T16719] netlink: 'syz.4.2713': attribute type 3 has an invalid length. [ 356.336818][T16728] bridge0: port 1(bridge_slave_1.) entered blocking state [ 356.348143][T16728] bridge0: port 1(bridge_slave_1.) entered disabled state [ 356.358320][T16728] bridge_slave_1.: entered allmulticast mode [ 356.368479][T16728] bridge_slave_1.: entered promiscuous mode [ 356.376893][T16728] bridge_slave_1: entered promiscuous mode [ 356.516434][T16737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.702738][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 356.966437][T16765] veth15: entered promiscuous mode [ 357.367510][T16794] syzkaller0: entered promiscuous mode [ 357.376304][T16794] syzkaller1: entered promiscuous mode [ 357.383566][T16794] syzkaller1: entered allmulticast mode [ 357.892800][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.903210][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.911333][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.920110][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.927976][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.057179][T16823] ip6tnl0: Caught tx_queue_len zero misconfig [ 358.140815][T16826] __nla_validate_parse: 36 callbacks suppressed [ 358.140830][T16826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2738'. [ 358.143020][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.262157][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.337272][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.381874][T16815] chnl_net:caif_netlink_parms(): no params data found [ 358.429116][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.473653][T16815] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.481972][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.489414][T16815] bridge_slave_0: entered allmulticast mode [ 358.496513][T16815] bridge_slave_0: entered promiscuous mode [ 358.504599][T16815] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.511782][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.519195][T16815] bridge_slave_1: entered allmulticast mode [ 358.526181][T16815] bridge_slave_1: entered promiscuous mode [ 358.559304][T16815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.590867][ T200] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.601060][T16815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.635713][T16815] team0: Port device team_slave_0 added [ 358.643703][T16815] team0: Port device team_slave_1 added [ 358.676848][ T200] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.703380][ T1159] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.723761][T16815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.731120][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.757580][T16815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.777156][ T200] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.788045][T16815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.797576][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.823838][T16815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.082286][ T12] bond9 (unregistering): (slave geneve3): Releasing active interface [ 359.153662][ T12] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 359.162036][ T12] bridge2 (unregistering): left promiscuous mode [ 359.168496][ T12] bridge2 (unregistering): left allmulticast mode [ 359.365165][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 359.375039][ T12] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 359.382233][ T12] bond0 (unregistering): Released all slaves [ 359.394087][ T12] bond1 (unregistering): (slave batadv1): Releasing active interface [ 359.403706][ T12] bond1 (unregistering): Released all slaves [ 359.418915][ T12] bond2 (unregistering): Released all slaves [ 359.433220][ T12] bond3 (unregistering): Released all slaves [ 359.448143][ T12] bond4 (unregistering): Released all slaves [ 359.476571][ T12] bond5 (unregistering): Released all slaves [ 359.493202][ T12] bond6 (unregistering): Released all slaves [ 359.509663][ T12] bond7 (unregistering): (slave vcan1): Releasing backup interface [ 359.517632][ T12] vcan1: left promiscuous mode [ 359.522931][ T12] bond7 (unregistering): Released all slaves [ 359.543223][ T12] bond8 (unregistering): Released all slaves [ 359.560906][ T12] bond9 (unregistering): Released all slaves [ 359.575572][ T12] bond10 (unregistering): Released all slaves [ 359.590391][ T12] bond11 (unregistering): Released all slaves [ 359.611837][ T12] bond12 (unregistering): Released all slaves [ 359.626513][ T12] bond13 (unregistering): Released all slaves [ 359.663227][T16815] hsr_slave_0: entered promiscuous mode [ 359.669566][T16815] hsr_slave_1: entered promiscuous mode [ 359.778429][ T12] : left promiscuous mode [ 359.900862][T16815] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.950752][ T12] tipc: Left network mode [ 359.977330][ T5858] Bluetooth: hci5: command tx timeout [ 360.021788][T16815] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.076691][T16815] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.143108][T16815] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.144066][T16787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.485302][T16845] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2742'. [ 360.733631][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2744'. [ 360.929085][T16815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.953465][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.963143][T16815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.984855][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.056854][T16815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 361.086702][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.122856][T16815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.150361][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.246721][T16887] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2747'. [ 361.297193][ T12] hsr_slave_0: left promiscuous mode [ 361.326599][ T12] hsr_slave_1: left promiscuous mode [ 361.632926][ T8159] smbdirect: ib_dev[syz0] removed [ 362.054609][ T5858] Bluetooth: hci5: command tx timeout [ 362.189736][T16916] syzkaller0: entered promiscuous mode [ 362.197203][T16916] syzkaller0: entered allmulticast mode [ 362.205641][T16922] netlink: 'syz.0.2756': attribute type 11 has an invalid length. [ 362.229822][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2756'. [ 362.426581][T16815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.516894][ T12] IPVS: stop unused estimator thread 0... [ 362.532052][T16815] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.625240][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.632444][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.714044][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.721235][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.200316][T16815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.245773][T16815] veth0_vlan: entered promiscuous mode [ 363.258578][T16815] veth1_vlan: entered promiscuous mode [ 363.286439][T16815] veth0_macvtap: entered promiscuous mode [ 363.296245][T16815] veth1_macvtap: entered promiscuous mode [ 363.311768][T16815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.327617][T16815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.340633][ T8160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.350721][ T8160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.363151][ T8160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.372774][ T8160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.144606][ T5858] Bluetooth: hci5: command tx timeout [ 365.257907][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 365.293207][T16979] 8021q: adding VLAN 0 to HW filter on device bond11 [ 365.369082][T16983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2766'. [ 365.622262][T16942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.748767][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.769559][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.921066][ T8159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.945122][ T8159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.014015][ T30] audit: type=1804 audit(1777240636.827:7): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2771" name="/newroot/548/memory.events" dev="tmpfs" ino=2833 res=1 errno=0 [ 366.106197][ T30] audit: type=1800 audit(1777240636.827:8): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2771" name="memory.events" dev="tmpfs" ino=2833 res=0 errno=0 [ 366.164945][T17011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2772'. [ 366.171725][T17005] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 366.195452][T17005] bond12 (unregistering): Released all slaves [ 366.216064][ T5858] Bluetooth: hci5: command tx timeout [ 366.599157][T17028] tipc: Enabled bearer , priority 0 [ 366.622031][T17028] syzkaller0: entered promiscuous mode [ 366.644460][T17028] syzkaller0: entered allmulticast mode [ 366.770740][T17028] tipc: Resetting bearer [ 366.791287][T17038] openvswitch: netlink: IP tunnel dst address not specified [ 366.820980][T17026] tipc: Resetting bearer [ 366.927067][T17026] tipc: Disabling bearer [ 367.112757][T17049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2779'. [ 367.179493][T17052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.247567][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'. [ 367.354618][T17062] netlink: 'syz.1.2784': attribute type 4 has an invalid length. [ 367.373788][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 367.383588][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 367.393114][T17062] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2784'. [ 367.563068][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'. [ 367.679276][T17087] Unknown options in mask 6 [ 367.998870][T17103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2795'. [ 368.269916][T17106] delete_channel: no stack [ 369.869858][T17211] netlink: 'syz.4.2819': attribute type 1 has an invalid length. [ 370.040774][T17213] bond10: entered allmulticast mode [ 370.048146][T17213] ip6gre2: entered allmulticast mode [ 370.055496][T17218] syzkaller1: entered promiscuous mode [ 370.061405][T17218] syzkaller1: entered allmulticast mode [ 370.393172][T17240] __nla_validate_parse: 13 callbacks suppressed [ 370.393188][T17240] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2827'. [ 370.639973][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 370.673211][T17256] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2833'. [ 370.715651][T17256] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2833'. [ 370.744411][T17256] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2833'. [ 370.937219][T17271] pim6reg: entered allmulticast mode [ 370.946117][T17273] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2837'. [ 370.963435][T17271] pim6reg: left allmulticast mode [ 371.012481][T17251] pim6reg99999991: entered allmulticast mode [ 371.581561][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2846'. [ 371.747934][T17333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2851'. [ 371.768703][T17333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2851'. [ 372.131890][T17347] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2857'. [ 372.226864][T17354] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 372.350615][T17358] netlink: 'syz.3.2861': attribute type 21 has an invalid length. [ 372.385929][T17358] netlink: 'syz.3.2861': attribute type 4 has an invalid length. [ 372.829043][T17377] netlink: 'syz.3.2867': attribute type 11 has an invalid length. [ 373.005697][T17387] gre1: entered promiscuous mode [ 374.061345][T17449] delete_channel: no stack [ 374.287837][T17467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.295137][T17467] IPv6: NLM_F_CREATE should be set when creating new route [ 374.302387][T17467] IPv6: NLM_F_CREATE should be set when creating new route [ 374.309640][T17467] IPv6: NLM_F_CREATE should be set when creating new route [ 374.608866][T17478] openvswitch: netlink: Duplicate or invalid key (type 0). [ 374.630378][T17478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.806283][T17495] ip6tnl8: entered promiscuous mode [ 375.448638][T17528] __nla_validate_parse: 14 callbacks suppressed [ 375.448656][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 375.527140][T17543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2915'. [ 375.685700][T17548] netlink: 'syz.1.2918': attribute type 1 has an invalid length. [ 375.726414][T17556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2920'. [ 375.759133][T17556] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2920'. [ 376.360559][T17594] : entered promiscuous mode [ 376.380303][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 376.443896][T17602] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2931'. [ 376.484340][T17602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2931'. [ 376.494040][T17602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2931'. [ 376.662750][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 376.731093][T17611] netlink: 400 bytes leftover after parsing attributes in process `syz.2.2936'. [ 376.877364][T17624] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 376.912429][T17624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.930304][T17623] bond1: up delay (94) is not a multiple of miimon (100), value rounded to 0 ms [ 376.943172][T17623] bond1: entered allmulticast mode [ 376.988746][T17631] netlink: 'syz.1.2940': attribute type 12 has an invalid length. [ 377.093560][T17633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 377.709993][T17654] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 377.741906][T17655] IPVS: length: 220 != 24 [ 377.742128][T17654] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 377.750940][T17657] xt_hashlimit: size too large, truncated to 1048576 [ 378.208859][T17680] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 378.221438][T17677] syzkaller0: entered promiscuous mode [ 378.229205][T17677] syzkaller0: entered allmulticast mode [ 378.250394][T17677] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.299547][T17687] tipc: Enabled bearer , priority 0 [ 378.361469][T17677] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.403099][T17690] sctp: [Deprecated]: syz.4.2958 (pid 17690) Use of int in maxseg socket option. [ 378.403099][T17690] Use struct sctp_assoc_value instead [ 378.433106][T17693] netlink: 'syz.2.2957': attribute type 1 has an invalid length. [ 378.460479][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.473521][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.488356][T17677] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.505383][T17693] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 378.552466][T17677] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.906470][ T1174] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.944804][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.020372][ T1174] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.060285][T17676] tipc: Resetting bearer [ 379.146434][T17676] tipc: Disabling bearer [ 379.242298][ T1159] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.669114][T17757] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 379.677974][ T8160] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 379.687322][ T8160] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 379.699758][T17757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.707689][T12634] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 379.717218][T12634] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 380.563740][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.581013][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.590237][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.602699][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.610513][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.071068][T17776] chnl_net:caif_netlink_parms(): no params data found [ 381.199175][T17791] __nla_validate_parse: 10 callbacks suppressed [ 381.199207][T17791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2985'. [ 381.219635][T17776] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.227167][T17776] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.235035][T17776] bridge_slave_0: entered allmulticast mode [ 381.242942][T17776] bridge_slave_0: entered promiscuous mode [ 381.252552][T17776] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.260872][T17776] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.269007][T17776] bridge_slave_1: entered allmulticast mode [ 381.279998][T17776] bridge_slave_1: entered promiscuous mode [ 381.386191][T17776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.411523][T17776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.547516][T17776] team0: Port device team_slave_0 added [ 381.556776][T17805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2988'. [ 381.568015][T17776] team0: Port device team_slave_1 added [ 381.581491][T17805] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2988'. [ 381.625355][T17776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.643538][T17776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.708604][T17776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.732475][T17776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.740215][T17776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.786443][T17776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.856889][T17812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.918449][T17776] hsr_slave_0: entered promiscuous mode [ 381.935867][T17776] hsr_slave_1: entered promiscuous mode [ 381.943510][T17776] debugfs: 'hsr0' already exists in 'hsr' [ 381.971749][T17776] Cannot create hsr debugfs directory [ 382.023753][T17815] netlink: 'syz.0.2991': attribute type 13 has an invalid length. [ 382.034096][T17815] netlink: 'syz.0.2991': attribute type 12 has an invalid length. [ 382.290048][T17830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2995'. [ 382.297812][T17776] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.330839][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 382.402107][T17776] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.421063][T17833] IPv6: NLM_F_CREATE should be specified when creating new route [ 382.440014][T17833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.447297][T17833] IPv6: NLM_F_CREATE should be set when creating new route [ 382.454662][T17833] IPv6: NLM_F_CREATE should be set when creating new route [ 382.461924][T17833] IPv6: NLM_F_CREATE should be set when creating new route [ 382.476626][T17834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.549775][T17776] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.667431][T17776] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.695577][ T5858] Bluetooth: hci0: command tx timeout [ 382.709545][T17846] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3000'. [ 382.769180][T17849] tipc: Started in network mode [ 382.781688][T17849] tipc: Node identity ac14140f, cluster identity 4711 [ 382.789756][T17849] tipc: New replicast peer: 255.255.255.255 [ 382.797954][T17849] tipc: Enabled bearer , priority 10 [ 383.138660][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3002'. [ 383.374913][T17856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3002'. [ 383.408040][T17776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.491810][T17776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.522866][T17776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.554993][T17776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.608030][T17776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.633679][T17776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.643585][T17776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.652870][T17776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.675932][ T5892] IPVS: starting estimator thread 0... [ 383.775686][T17873] IPVS: using max 29 ests per chain, 69600 per kthread [ 383.838047][T17883] IPv6: NLM_F_REPLACE set, but no existing node found! [ 383.914464][ T30] audit: type=1804 audit(1777240654.727:9): pid=17888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3009" name="/newroot/52/memory.events" dev="tmpfs" ino=283 res=1 errno=0 [ 383.943732][ T30] audit: type=1800 audit(1777240654.727:10): pid=17888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3009" name="memory.events" dev="tmpfs" ino=283 res=0 errno=0 [ 383.982782][ T6947] tipc: Node number set to 2886997007 [ 384.082282][T17892] x_tables: unsorted underflow at hook 2 [ 384.107306][T17894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.153422][T17776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.191624][T17776] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.191952][T17898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3013'. [ 384.214049][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.221303][ T8160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.269725][T17902] netlink: 'syz.2.3015': attribute type 1 has an invalid length. [ 384.318958][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.326157][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.354125][T17902] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 384.533689][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 384.542411][T17922] netlink: 'syz.1.3019': attribute type 1 has an invalid length. [ 384.587451][T17925] netlink: 'syz.2.3020': attribute type 16 has an invalid length. [ 384.637820][T17922] bond12: entered promiscuous mode [ 384.643500][T17922] 8021q: adding VLAN 0 to HW filter on device bond12 [ 384.737410][T17931] netlink: 'syz.1.3019': attribute type 12 has an invalid length. [ 384.774686][ T5858] Bluetooth: hci0: command tx timeout [ 384.847438][T17931] IPv6: Can't replace route, no match found [ 384.877712][T17931] IPv6: Can't replace route, no match found [ 385.180153][T17938] bond12: (slave veth13): making interface the new active one [ 385.187854][T17938] veth13: entered promiscuous mode [ 385.194870][T17938] bond12: (slave veth13): Enslaving as an active interface with an up link [ 385.260017][T17776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.397488][T17955] netlink: 'syz.1.3024': attribute type 4 has an invalid length. [ 385.422711][T17956] openvswitch: netlink: IP tunnel dst address not specified [ 385.439647][T17952] netlink: 'syz.1.3024': attribute type 4 has an invalid length. [ 385.481658][T17952] netlink: 'syz.1.3024': attribute type 4 has an invalid length. [ 385.789921][T17971] netlink: 'syz.3.3029': attribute type 1 has an invalid length. [ 385.904762][T17776] veth0_vlan: entered promiscuous mode [ 386.016731][T17776] veth1_vlan: entered promiscuous mode [ 386.149462][T17776] veth0_macvtap: entered promiscuous mode [ 386.181585][T17776] veth1_macvtap: entered promiscuous mode [ 386.238635][T17776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.288056][T17776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.321861][T17992] __nla_validate_parse: 5 callbacks suppressed [ 386.321877][T17992] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3032'. [ 386.346143][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.376446][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 386.419828][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.439329][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.532089][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.854921][ T5858] Bluetooth: hci0: command tx timeout [ 387.043996][ T8160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.063988][ T8160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.079222][T18018] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 387.329693][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.356765][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.493070][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'. [ 387.595446][T18038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3044'. [ 387.955875][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.970188][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.982329][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.990529][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.998240][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.062878][T18045] tipc: Resetting bearer [ 388.089280][T18050] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 388.470345][T18063] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3051'. [ 388.533591][T18063] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 388.550222][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 388.608277][T18063] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 388.704815][T18063] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 388.826600][T18063] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 388.944798][ T5845] Bluetooth: hci0: command tx timeout [ 389.071551][T18045] chnl_net:caif_netlink_parms(): no params data found [ 389.090157][T18087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3057'. [ 389.441407][T18045] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.449944][T18045] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.457302][T18045] bridge_slave_0: entered allmulticast mode [ 389.465392][T18045] bridge_slave_0: entered promiscuous mode [ 389.473986][T18045] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.481255][T18045] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.488847][T18045] bridge_slave_1: entered allmulticast mode [ 389.498358][T18045] bridge_slave_1: entered promiscuous mode [ 389.527792][T18102] netlink: 'syz.2.3060': attribute type 3 has an invalid length. [ 389.539681][T18101] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3061'. [ 389.565900][T18102] block nbd2: NBD_DISCONNECT [ 389.635987][T18045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.662435][T18102] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 389.670507][T18045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.694988][T18102] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 389.721212][T18111] dvmrp0: entered allmulticast mode [ 389.748031][T18102] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 389.826827][T18102] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 389.845002][T18045] team0: Port device team_slave_0 added [ 389.859664][T18045] team0: Port device team_slave_1 added [ 389.944970][T18045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.954947][T18045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.003274][T18045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.037731][T18045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.056487][ T5845] Bluetooth: hci2: command tx timeout [ 390.061556][T18045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.105811][T18045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.247685][T18045] hsr_slave_0: entered promiscuous mode [ 390.272527][T18045] hsr_slave_1: entered promiscuous mode [ 390.307252][T18045] debugfs: 'hsr0' already exists in 'hsr' [ 390.337827][T18045] Cannot create hsr debugfs directory [ 390.740893][T18160] Cannot find set identified by id 3 to match [ 391.077753][T18045] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.207875][T18045] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.417740][T18192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3088'. [ 391.433919][T18194] netlink: 'syz.2.3088': attribute type 1 has an invalid length. [ 391.459298][T18045] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.627080][T18194] bond3: entered promiscuous mode [ 391.632659][T18194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.711402][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3093'. [ 391.718178][T18198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.732020][T18211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.739589][T18198] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 391.752159][T18198] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 391.767575][T18198] bond3: (slave ip6gre1): making interface the new active one [ 391.775617][T18198] ip6gre1: entered promiscuous mode [ 391.781811][T18198] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 391.793128][T18045] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.814506][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3093'. [ 391.936625][T18217] bond14: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 391.962039][T18217] bond14: entered promiscuous mode [ 391.968792][T18217] 8021q: adding VLAN 0 to HW filter on device bond14 [ 392.136069][ T5845] Bluetooth: hci2: command tx timeout [ 394.215383][ T5845] Bluetooth: hci2: command tx timeout [ 394.908607][T18220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.943320][T18045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.008455][T18045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.026961][T18045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.050049][T18045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.065864][T18242] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3098'. [ 395.203803][T18045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.238309][T18045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.260703][T18045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.286372][T18045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.306247][T18252] netlink: 'syz.1.3099': attribute type 12 has an invalid length. [ 395.455985][T18254] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 395.505852][T18254] vlan2: entered allmulticast mode [ 395.511100][T18254] batadv_slave_1: entered allmulticast mode [ 395.577357][T18272] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 395.656772][T18271] syzkaller0: entered promiscuous mode [ 395.675278][T18271] syzkaller0: entered allmulticast mode [ 395.688332][T18276] SET target dimension over the limit! [ 395.913359][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3106'. [ 396.225340][T18045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.297868][T18045] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.305881][ T5845] Bluetooth: hci2: command tx timeout [ 396.348121][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.355249][ T8159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.400880][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.408075][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.422767][T18307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3115'. [ 396.468105][T18314] IPVS: fo: FWM 3 0x00000003 - no destination available [ 396.569791][T18319] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3118'. [ 396.708397][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'. [ 396.923109][T18341] netlink: 'syz.1.3122': attribute type 1 has an invalid length. [ 397.097524][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 397.135338][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3121'. [ 397.189258][T18341] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 397.224632][T18362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3124'. [ 397.428305][T18335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.699255][T18335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.750981][T18045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.837632][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 397.878225][T18335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.930483][T18398] sctp: [Deprecated]: syz.1.3132 (pid 18398) Use of int in max_burst socket option. [ 397.930483][T18398] Use struct sctp_assoc_value instead [ 398.021708][T18335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.089387][T18405] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.3134'. [ 398.099829][T18405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3134'. [ 398.110198][T18405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3134'. [ 398.120401][T18405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3134'. [ 398.259379][T18045] veth0_vlan: entered promiscuous mode [ 398.302433][T18413] xt_hashlimit: size too large, truncated to 1048576 [ 398.366807][T18045] veth1_vlan: entered promiscuous mode [ 398.387612][ T1159] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.453032][ T8160] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.526208][ T200] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.622567][ T200] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.683433][T18045] veth0_macvtap: entered promiscuous mode [ 398.782698][T18045] veth1_macvtap: entered promiscuous mode [ 398.840411][T18045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.892951][T18045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.033611][ T200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.058943][ T200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.088154][ T200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.126460][ T200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.365862][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.401437][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.459739][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.490357][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.581351][T18477] raw_sendmsg: syz.2.3147 forgot to set AF_INET. Fix it! [ 399.608096][T18478] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 399.628997][T18478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.678111][T18481] netlink: 'syz.3.3148': attribute type 4 has an invalid length. [ 400.131505][T18493] syzkaller0: entered promiscuous mode [ 400.149221][T18493] syzkaller0: entered allmulticast mode [ 400.222761][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.238756][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.247257][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.260723][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.270345][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.832540][T18505] openvswitch: netlink: Key type 144 is out of range max 32 [ 402.378505][ T5845] Bluetooth: hci3: command tx timeout [ 402.811247][T18550] __nla_validate_parse: 16 callbacks suppressed [ 402.811265][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'. [ 402.881773][T18559] nbd: nbd0 already in use [ 402.884620][T18550] 8021q: adding VLAN 0 to HW filter on device bond11 [ 402.912791][T18552] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3165'. [ 402.941321][T18557] batadv2: entered allmulticast mode [ 402.956757][T18557] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 402.972687][T18557] bond11: (slave batadv2): Enslaving as an active interface with an up link [ 403.009941][T18558] batadv3: entered allmulticast mode [ 403.018374][T18558] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 403.028150][T18558] bond11: (slave batadv3): Enslaving as an active interface with an up link [ 403.164521][T18575] tipc: Enabling of bearer rejected, already enabled [ 403.262993][T18498] chnl_net:caif_netlink_parms(): no params data found [ 403.343732][T18578] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3171'. [ 403.380509][T18578] x_tables: duplicate underflow at hook 2 [ 403.397767][T18578] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3171'. [ 403.419407][T18498] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.427929][T18498] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.435402][T18498] bridge_slave_0: entered allmulticast mode [ 403.444571][T18498] bridge_slave_0: entered promiscuous mode [ 403.461949][T18498] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.470826][T18498] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.479156][T18498] bridge_slave_1: entered allmulticast mode [ 403.488638][T18498] bridge_slave_1: entered promiscuous mode [ 403.563956][T18595] ip6t_rpfilter: unknown options [ 403.582404][T18498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.609524][T18498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.719469][T18498] team0: Port device team_slave_0 added [ 403.732133][T18498] team0: Port device team_slave_1 added [ 403.799704][T18498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.812353][T18498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.864233][T18498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.895773][T18498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.897053][T18604] sctp: [Deprecated]: syz.4.3177 (pid 18604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.897053][T18604] Use struct sctp_sack_info instead [ 403.903034][T18498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.947798][T18498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.018302][T18498] hsr_slave_0: entered promiscuous mode [ 404.025846][T18498] hsr_slave_1: entered promiscuous mode [ 404.032386][T18498] debugfs: 'hsr0' already exists in 'hsr' [ 404.038835][T18498] Cannot create hsr debugfs directory [ 404.268193][T18616] syzkaller1: entered promiscuous mode [ 404.276149][T18616] syzkaller1: entered allmulticast mode [ 404.285688][T12634] syzkaller1: tun_net_xmit 70 [ 404.303506][T18616] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 404.309619][T18616] syzkaller1: Linktype set failed because interface is up [ 404.333163][T18617] syzkaller1: entered promiscuous mode [ 404.341580][T18617] syzkaller1: entered allmulticast mode [ 404.455226][ T5845] Bluetooth: hci3: command tx timeout [ 404.522407][T18619] syzkaller1: entered promiscuous mode [ 404.528201][T18619] syzkaller1: entered allmulticast mode [ 404.792556][T18636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3187'. [ 404.900854][T18641] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3189'. [ 405.006653][T18641] netlink: 'syz.2.3189': attribute type 11 has an invalid length. [ 405.013117][T18645] syzkaller0: entered promiscuous mode [ 405.026851][T18645] syzkaller0: entered allmulticast mode [ 405.033491][T18641] netlink: 'syz.2.3189': attribute type 23 has an invalid length. [ 405.049628][T18645] tc action pedit offset must be on 32 bit boundaries [ 405.066747][T18641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3189'. [ 405.100817][T18498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.119999][T18498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.128069][T18498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.140018][T18498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.150387][T18498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.166716][T18498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.175547][T18498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.192061][T18498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.316859][T18498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.340145][T18498] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.351520][T12634] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.358722][T12634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.374072][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.381238][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.565794][T18498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.620536][T18498] veth0_vlan: entered promiscuous mode [ 405.652678][T18498] veth1_vlan: entered promiscuous mode [ 405.771660][T18665] tipc: Started in network mode [ 405.785934][T18665] tipc: Node identity ac14140f, cluster identity 4711 [ 405.811066][T18665] tipc: New replicast peer: 255.255.255.255 [ 405.820012][T18665] tipc: Enabled bearer , priority 10 [ 405.899441][T18498] veth0_macvtap: entered promiscuous mode [ 405.970428][T18498] veth1_macvtap: entered promiscuous mode [ 406.007643][T18679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3195'. [ 406.037871][T18498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.118182][T18498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.163395][ T8160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.182892][ T8160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.219809][ T8160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.241754][T18688] netlink: 'syz.3.3198': attribute type 4 has an invalid length. [ 406.244055][ T8160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.273005][T18688] netlink: 'syz.3.3198': attribute type 4 has an invalid length. [ 406.368615][T18688] netlink: 'syz.3.3198': attribute type 4 has an invalid length. [ 406.396725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.499992][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.536106][ T5845] Bluetooth: hci3: command tx timeout [ 406.540542][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.770758][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.814379][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.824510][ T6941] tipc: Node number set to 2886997007 [ 407.170742][T18721] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3207'. [ 407.574100][T18742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3212'. [ 407.742571][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.757067][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.769644][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.780049][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.791255][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.994803][T18754] Cannot find add_set index 0 as target [ 408.023813][T18756] Cannot find add_set index 0 as target [ 408.411306][T18773] __nla_validate_parse: 1 callbacks suppressed [ 408.411325][T18773] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3217'. [ 408.461013][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'. [ 408.549996][T18774] bond4: entered promiscuous mode [ 408.555985][T18774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.622590][ T5858] Bluetooth: hci3: command tx timeout [ 408.672256][T18745] chnl_net:caif_netlink_parms(): no params data found [ 408.706652][T18789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3222'. [ 408.719225][T18788] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3221'. [ 408.728869][T18789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3222'. [ 408.926916][T18745] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.947889][T18745] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.957891][T18745] bridge_slave_0: entered allmulticast mode [ 408.970140][T18745] bridge_slave_0: entered promiscuous mode [ 409.041150][T18745] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.050434][T18745] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.058401][T18745] bridge_slave_1: entered allmulticast mode [ 409.086484][T18745] bridge_slave_1: entered promiscuous mode [ 409.238271][T18745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.282099][T18745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.399101][T18745] team0: Port device team_slave_0 added [ 409.431218][T18745] team0: Port device team_slave_1 added [ 409.570361][T18745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.592974][T18745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.640783][T18835] netlink: 'syz.2.3231': attribute type 33 has an invalid length. [ 409.668594][T18745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.671578][T18835] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3231'. [ 409.681762][T18745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.696057][T18745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.747634][T18745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.769856][T18835] `: renamed from team0 (while UP) [ 409.818743][ T5858] Bluetooth: hci4: command tx timeout [ 409.833272][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3233'. [ 409.900352][T18841] netlink: 'syz.0.3233': attribute type 7 has an invalid length. [ 409.954915][T18841] netlink: 'syz.0.3233': attribute type 8 has an invalid length. [ 409.964919][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'. [ 409.986666][T18745] hsr_slave_0: entered promiscuous mode [ 410.007007][T18745] hsr_slave_1: entered promiscuous mode [ 410.021291][T18745] debugfs: 'hsr0' already exists in 'hsr' [ 410.035419][T18745] Cannot create hsr debugfs directory [ 410.164590][T18856] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 410.451503][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'. [ 411.517650][T18905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3249'. [ 411.760120][T18925] netlink: 'syz.1.3249': attribute type 1 has an invalid length. [ 411.894913][ T5858] Bluetooth: hci4: command tx timeout [ 412.268279][T18910] netlink: 'syz.0.3246': attribute type 34 has an invalid length. [ 412.529299][T18745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.598134][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.622923][T18745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.667612][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.701640][T18745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.749126][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.783216][T18745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 412.806483][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.839406][T18961] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 412.857967][T18961] bond1 (unregistering): Released all slaves [ 413.274030][T18745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.347314][T18997] netlink: 'syz.2.3263': attribute type 21 has an invalid length. [ 413.370205][T18745] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.420236][T19000] netlink: 'syz.1.3264': attribute type 10 has an invalid length. [ 413.436874][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.444051][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.474091][T19000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.516672][T19000] team0: Port device bond0 added [ 413.540980][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.548185][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.804020][T19017] __nla_validate_parse: 1 callbacks suppressed [ 413.804039][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'. [ 413.865685][T19023] syz.4.3267 (19023) used obsolete PPPIOCDETACH ioctl [ 413.966185][T19017] netlink: zone id is out of range [ 413.978918][ T5858] Bluetooth: hci4: command tx timeout [ 413.987267][T19017] netlink: zone id is out of range [ 413.997080][T19017] netlink: zone id is out of range [ 414.019627][T19017] netlink: zone id is out of range [ 414.020852][T19023] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3267'. [ 414.059130][T19017] netlink: zone id is out of range [ 414.105318][T19023] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3267'. [ 414.135464][T19017] netlink: zone id is out of range [ 414.578354][T19060] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3271'. [ 414.717614][T18745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.761038][T19065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3272'. [ 414.810185][T19065] syzkaller0: entered promiscuous mode [ 414.840615][T19065] syzkaller0: entered allmulticast mode [ 415.035771][T19083] netlink: 'syz.1.3276': attribute type 1 has an invalid length. [ 415.135714][T19089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3276'. [ 415.399796][T19096] macvlan2: entered promiscuous mode [ 415.415363][T19096] macvlan2: entered allmulticast mode [ 415.481128][T19105] netlink: 'syz.2.3280': attribute type 1 has an invalid length. [ 415.518437][T19105] netlink: 'syz.2.3280': attribute type 2 has an invalid length. [ 415.597214][T18745] veth0_vlan: entered promiscuous mode [ 415.653738][T18745] veth1_vlan: entered promiscuous mode [ 415.703112][T19111] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3281'. [ 415.742085][T19112] openvswitch: netlink: IP tunnel dst address not specified [ 415.792456][T18745] veth0_macvtap: entered promiscuous mode [ 415.827858][T18745] veth1_macvtap: entered promiscuous mode [ 415.899980][T18745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.951790][T18745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.003827][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.031329][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.055668][ T5845] Bluetooth: hci4: command tx timeout [ 416.068261][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.082872][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.129215][T19132] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3288'. [ 416.181464][T19133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3288'. [ 416.396772][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.400884][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 416.440491][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.577901][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.617442][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.251893][T19179] clip:clip_setentry: non-CLIP VCC [ 418.142400][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 418.153205][T19234] netlink: 'syz.3.3309': attribute type 1 has an invalid length. [ 419.171307][T19283] netlink: 'syz.0.3321': attribute type 1 has an invalid length. [ 419.194892][T19283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.330957][T19295] __nla_validate_parse: 3 callbacks suppressed [ 419.330976][T19295] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3323'. [ 419.352830][T19295] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3323'. [ 419.371969][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3324'. [ 419.381117][T19299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3324'. [ 419.613179][T19305] Cannot find set identified by id 0 to match [ 419.638839][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3326'. [ 419.825222][T19319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.952131][T19327] Bluetooth: MGMT ver 1.23 [ 420.202240][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3333'. [ 420.243241][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3333'. [ 420.266463][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3333'. [ 420.283564][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3333'. [ 420.321599][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3333'. [ 420.363851][T19330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.890437][T19341] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 421.203796][T19378] IPv6: Can't replace route, no match found [ 421.216193][T19375] batadv_slave_0: entered promiscuous mode [ 421.414117][T19369] syzkaller0: entered promiscuous mode [ 421.433491][T19369] syzkaller0: entered allmulticast mode [ 421.487046][T19375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.524903][T19375] bond2 (unregistering): Released all slaves [ 421.912428][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.922274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.979475][T14186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.988178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.018429][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.026822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.072170][T14188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.080540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.161340][T19361] batadv_slave_0: left promiscuous mode [ 424.465881][T19425] Bluetooth: MGMT ver 1.23 [ 424.508875][T19429] __nla_validate_parse: 16 callbacks suppressed [ 424.508891][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3355'. [ 425.257768][T19464] syzkaller0: entered promiscuous mode [ 425.294353][T19464] syzkaller0: entered allmulticast mode [ 426.998118][T19534] netlink: 'syz.3.3377': attribute type 8 has an invalid length. [ 427.142733][T19536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3381'. [ 427.613428][ T30] audit: type=1804 audit(1777240698.427:11): pid=19549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3385" name="/newroot/19/memory.events" dev="tmpfs" ino=115 res=1 errno=0 [ 427.737440][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'. [ 428.178983][T19593] netlink: 'syz.2.3394': attribute type 3 has an invalid length. [ 428.228808][T19595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3393'. [ 428.656953][T19616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3398'. [ 428.688111][T19618] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 428.713444][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'. [ 428.735589][T19618] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 428.792563][T19618] syzkaller1: entered promiscuous mode [ 428.808476][T19618] syzkaller1: entered allmulticast mode [ 429.583044][T19666] netlink: 'syz.4.3408': attribute type 1 has an invalid length. [ 429.638003][T19666] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 429.793794][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 429.868658][T19688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'. [ 429.878432][T19684] sctp: [Deprecated]: syz.1.3413 (pid 19684) Use of int in max_burst socket option. [ 429.878432][T19684] Use struct sctp_assoc_value instead [ 429.900239][T19684] netlink: 'syz.1.3413': attribute type 1 has an invalid length. [ 429.945849][T19684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.956640][T19684] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3413'. [ 429.987479][T19684] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 430.018282][T19684] bond2: (slave batadv1): making interface the new active one [ 430.046220][T19684] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 430.301239][T19693] team0 (unregistering): Port device team_slave_0 removed [ 430.362355][T19693] team0 (unregistering): Port device team_slave_1 removed [ 430.394607][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 430.425878][T19698] ip6gre2: entered promiscuous mode [ 430.466943][T19698] ip6gre2: entered allmulticast mode [ 430.723650][T19704] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.731330][T19704] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.960195][T19731] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3421'. [ 431.041956][T19704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.078483][T19704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.181395][ T47] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.207371][ T47] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.246226][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.275685][ T47] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.322247][T19740] netlink: 'syz.4.3424': attribute type 1 has an invalid length. [ 431.453679][T19740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.481401][T19750] netlink: 'syz.2.3427': attribute type 39 has an invalid length. [ 431.659015][T19761] netlink: 'syz.4.3431': attribute type 1 has an invalid length. [ 431.752427][T19761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.876362][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 432.052439][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3437'. [ 432.137828][T19806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3440'. [ 432.240045][T19809] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3441'. [ 432.315004][T19814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3443'. [ 432.850075][T19840] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20002 [ 433.247494][T19857] veth1_to_bridge: entered allmulticast mode [ 433.262252][T19857] net_ratelimit: 10 callbacks suppressed [ 433.262269][T19857] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 433.708902][T19870] netlink: 'syz.0.3461': attribute type 1 has an invalid length. [ 433.713729][T19871] syzkaller1: entered promiscuous mode [ 433.731741][T19871] syzkaller1: entered allmulticast mode [ 433.860091][T19873] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 433.987960][T19873] bond5: entered promiscuous mode [ 434.008795][T19873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.451051][T19902] openvswitch: netlink: Missing key (keys=40, expected=80) [ 434.655980][ T6943] IPVS: starting estimator thread 0... [ 434.717533][T19917] netlink: 'syz.0.3476': attribute type 4 has an invalid length. [ 434.765071][T19915] IPVS: using max 28 ests per chain, 67200 per kthread [ 435.082278][T19929] __nla_validate_parse: 8 callbacks suppressed [ 435.082296][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3481'. [ 435.124440][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3481'. [ 435.137598][T19932] netlink: 'syz.0.3482': attribute type 1 has an invalid length. [ 435.149982][T19932] netlink: 'syz.0.3482': attribute type 2 has an invalid length. [ 435.277619][T19941] xt_hashlimit: invalid rate [ 435.370041][T19946] tipc: Enabled bearer , priority 0 [ 435.381498][T19951] netlink: 'syz.3.3486': attribute type 10 has an invalid length. [ 435.492226][T19957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3484'. [ 435.543373][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 435.552704][T19961] netlink: 'syz.1.3489': attribute type 1 has an invalid length. [ 435.569099][T19951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.586235][T19951] team0: Port device bond0 added [ 435.594913][T19946] syzkaller0: entered promiscuous mode [ 435.603818][T19946] syzkaller0: entered allmulticast mode [ 435.681915][T19965] tipc: Resetting bearer [ 435.719470][T19945] tipc: Resetting bearer [ 435.769989][T19945] tipc: Disabling bearer [ 435.810840][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'. [ 435.858657][T19974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3492'. [ 435.903852][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3491'. [ 435.977800][T19978] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3493'. [ 435.987937][T19976] bond3: entered promiscuous mode [ 436.022954][T19976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.358364][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 436.385313][T20001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3500'. [ 436.389845][T19998] netlink: 'syz.4.3498': attribute type 13 has an invalid length. [ 436.402309][T19998] netlink: 'syz.4.3498': attribute type 17 has an invalid length. [ 436.487046][T19998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.092927][T20039] sctp: [Deprecated]: syz.1.3511 (pid 20039) Use of int in maxseg socket option. [ 437.092927][T20039] Use struct sctp_assoc_value instead [ 437.253573][T20046] nbd: must specify at least one socket [ 438.294973][T20102] netlink: 'syz.2.3525': attribute type 21 has an invalid length. [ 438.751425][T20113] Bluetooth: MGMT ver 1.23 [ 438.856961][T20116] nbd: must specify a size in bytes for the device [ 438.931909][T20124] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 439.117891][T20130] syzkaller0: entered promiscuous mode [ 439.134469][T20130] syzkaller0: entered allmulticast mode [ 439.796067][T20164] bond4: entered promiscuous mode [ 439.815658][T20164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.867129][T20165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.875429][T20165] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 439.896589][T20165] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 439.900890][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.913943][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.949317][T20175] vlan2: entered promiscuous mode [ 439.954805][T20175] syz_tun: entered promiscuous mode [ 439.960465][T20175] vlan2: entered allmulticast mode [ 439.966019][T20175] syz_tun: entered allmulticast mode [ 440.222534][T20195] __nla_validate_parse: 10 callbacks suppressed [ 440.222553][T20195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3549'. [ 440.315792][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3550'. [ 440.384619][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3550'. [ 440.716187][T20215] syzkaller1: entered promiscuous mode [ 440.746237][T20215] syzkaller1: entered allmulticast mode [ 441.086850][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3559'. [ 441.729443][T20269] netlink: 'syz.2.3564': attribute type 15 has an invalid length. [ 442.038398][T20282] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 442.393449][T20304] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3574'. [ 442.413833][T20305] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3574'. [ 442.450215][T20304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3574'. [ 442.575276][T20309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3575'. [ 442.667750][T20313] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 442.726798][T20313] netlink: 'syz.1.3577': attribute type 3 has an invalid length. [ 442.920269][T20321] erspan0: entered promiscuous mode [ 442.933728][T20321] macvlan2: entered promiscuous mode [ 442.939316][T20323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3582'. [ 442.953658][T20321] erspan0: left promiscuous mode [ 442.963531][T20323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3582'. [ 442.981157][T20323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.988448][T20323] IPv6: NLM_F_CREATE should be set when creating new route [ 442.995699][T20323] IPv6: NLM_F_CREATE should be set when creating new route [ 443.219482][T20316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.898405][T20316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.974666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.042592][T20364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.172631][T20316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.207778][T20363] syzkaller0: entered promiscuous mode [ 444.220196][T20363] syzkaller0: entered allmulticast mode [ 444.280622][T20316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.439190][T20385] netlink: 'syz.3.3597': attribute type 1 has an invalid length. [ 444.486702][T20385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.580619][T20387] bond2: (slave veth5): Enslaving as an active interface with a down link [ 444.590879][ T8160] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.693298][ T8160] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.749542][T20141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.778206][T20141] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.018411][ T30] audit: type=1107 audit(1777240715.837:12): pid=20412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 445.120345][T20420] IPVS: stopping backup sync thread 20124 ... [ 445.123054][T20422] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 445.137757][T20420] syzkaller0: entered promiscuous mode [ 445.147088][T20420] syzkaller0: entered allmulticast mode [ 445.165851][T20141] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.231041][T20141] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.262866][T20141] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.300923][T20141] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.557001][T20436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.577849][T20436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.646248][T20441] __nla_validate_parse: 5 callbacks suppressed [ 445.646265][T20441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3611'. [ 445.671193][T20436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.691092][T20436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.807564][T20408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.897183][ T30] audit: type=1107 audit(1777240716.717:13): pid=20447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 446.205300][T20464] ip6tnl1: entered promiscuous mode [ 446.213537][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'. [ 446.223497][T20464] ip6tnl1: entered allmulticast mode [ 446.449209][T20485] sctp: [Deprecated]: syz.0.3624 (pid 20485) Use of int in max_burst socket option deprecated. [ 446.449209][T20485] Use struct sctp_assoc_value instead [ 446.593297][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3623'. [ 446.914771][T20509] sctp: [Deprecated]: syz.2.3629 (pid 20509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.914771][T20509] Use struct sctp_sack_info instead [ 446.976358][T20517] sctp: [Deprecated]: syz.2.3629 (pid 20517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.976358][T20517] Use struct sctp_sack_info instead [ 447.032627][T20509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.068017][T20525] sctp: [Deprecated]: syz.0.3634 (pid 20525) Use of int in maxseg socket option. [ 447.068017][T20525] Use struct sctp_assoc_value instead [ 447.074996][T20508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.242604][T20533] netlink: 'syz.1.3637': attribute type 1 has an invalid length. [ 447.350386][T20538] netlink: 'syz.4.3639': attribute type 10 has an invalid length. [ 447.392416][T20536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3638'. [ 447.481092][T20538] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 447.497332][T20542] netlink: 'syz.1.3640': attribute type 3 has an invalid length. [ 447.567887][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3642'. [ 447.748519][T20561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.986236][T20572] ip6gretap0: entered promiscuous mode [ 448.182545][T20588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3649'. [ 448.378174][T20594] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 448.598679][T20602] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3653'. [ 448.609013][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 448.792808][T20615] tipc: Started in network mode [ 448.803696][T20615] tipc: Node identity , cluster identity 4711 [ 448.816622][T20615] tipc: Failed to obtain node identity [ 448.828894][T20615] tipc: Enabling of bearer rejected, failed to enable media [ 448.927598][T20618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3657'. [ 448.948858][T20620] syzkaller0: entered promiscuous mode [ 448.964952][T20620] syzkaller0: entered allmulticast mode [ 448.979199][T20628] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 449.050973][T20633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3662'. [ 449.110519][T20633] netlink: 'syz.3.3662': attribute type 1 has an invalid length. [ 451.362527][T20669] __nla_validate_parse: 2 callbacks suppressed [ 451.362545][T20669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3667'. [ 451.436086][T20669] 8021q: VLANs not supported on ip_vti0 [ 451.876416][T20692] netlink: 'syz.4.3675': attribute type 10 has an invalid length. [ 452.012105][T20697] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3676'. [ 452.024364][T20697] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3676'. [ 452.033431][T20697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3676'. [ 453.274105][T20752] syzkaller0: entered promiscuous mode [ 453.279833][T20752] syzkaller0: entered allmulticast mode [ 454.862233][T20696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.077872][T20757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3683'. [ 455.118559][T20757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3683'. [ 455.162296][T20757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3683'. [ 455.205880][T20757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3683'. [ 455.219849][T20757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3683'. [ 455.246565][T20757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3683'. [ 455.421885][T20757] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.429354][T20757] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.720354][T20757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.756275][T20757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.251911][T20783] netlink: 'syz.4.3691': attribute type 1 has an invalid length. [ 456.299155][T20139] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.309632][T20139] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.322395][T20139] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.339386][T20139] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.374978][T20139] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.386309][T20139] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.396559][T20139] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.406536][T20139] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.855115][T20813] syzkaller1: entered promiscuous mode [ 456.861798][T20813] syzkaller1: entered allmulticast mode [ 457.159098][T20832] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 457.162231][T20836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.424430][T20846] ip6tnl1: entered allmulticast mode [ 457.573947][T20859] __nla_validate_parse: 158 callbacks suppressed [ 457.573966][T20859] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3706'. [ 457.604369][T20859] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3706'. [ 457.662861][T20859] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3706'. [ 458.123329][T20883] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3710'. [ 458.156125][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3710'. [ 458.633741][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'. [ 459.002589][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3725'. [ 459.026210][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3725'. [ 459.060003][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3725'. [ 459.091650][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3725'. [ 459.454498][T20957] bond0: (slave bond_slave_1): Releasing backup interface [ 459.597589][T20970] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 460.648263][T21026] netlink: 'syz.1.3748': attribute type 10 has an invalid length. [ 460.700222][T21031] netlink: 'syz.1.3748': attribute type 10 has an invalid length. [ 460.703765][T21026] team0: Port device dummy0 added [ 460.782115][T21031] team0: Port device dummy0 removed [ 460.810653][T21031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 462.070125][T21095] netlink: 'syz.2.3766': attribute type 11 has an invalid length. [ 462.801895][T21125] netlink: 'syz.4.3774': attribute type 1 has an invalid length. [ 462.963541][T21125] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.037699][T21127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.084030][T21127] bond5: (slave bond0): making interface the new active one [ 463.116353][T21127] bond5: (slave bond0): Enslaving as an active interface with an up link [ 463.321959][T21147] netlink: 'syz.2.3781': attribute type 1 has an invalid length. [ 463.331377][T21147] __nla_validate_parse: 71 callbacks suppressed [ 463.331392][T21147] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3781'. [ 463.610274][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3785'. [ 463.805292][T21173] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3789'. [ 463.818433][T21174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'. [ 464.031378][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3794'. [ 464.285871][T21205] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3800'. [ 464.441585][T21209] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3801'. [ 464.583428][T21217] smbdirect: ib_dev[syz1] removed [ 464.952647][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3807'. [ 465.143667][T21238] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 465.328281][T21245] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 465.618275][T21256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3815'. [ 465.656247][T21255] netlink: 'syz.3.3815': attribute type 1 has an invalid length. [ 465.735168][T20139] wlan0: Trigger new scan to find an IBSS to join [ 465.971473][ C1] ================================================================== [ 465.979579][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 465.987571][ C1] Read of size 2 at addr ffff88817541b474 by task syz.4.3821/21273 [ 465.995472][ C1] [ 465.997809][ C1] CPU: 1 UID: 0 PID: 21273 Comm: syz.4.3821 Not tainted syzkaller #0 PREEMPT(full) [ 465.997834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.997856][ C1] Call Trace: [ 465.997864][ C1] [ 465.997872][ C1] dump_stack_lvl+0xe8/0x150 [ 465.997907][ C1] print_address_description+0x55/0x1e0 [ 465.997935][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 465.997961][ C1] print_report+0x58/0x70 [ 465.997987][ C1] kasan_report+0x117/0x150 [ 465.998012][ C1] ? __pskb_pull_tail+0x115d/0x17b0 [ 465.998038][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 465.998066][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 465.998098][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 465.998132][ C1] ? lock_acquire+0x106/0x350 [ 465.998166][ C1] ? unwind_next_frame+0xa6/0x2550 [ 465.998191][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 465.998231][ C1] ? kernel_text_address+0xa5/0xe0 [ 465.998257][ C1] ? __kernel_text_address+0xd/0x30 [ 465.998281][ C1] ? unwind_get_return_address+0x4d/0x90 [ 465.998305][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 465.998332][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 465.998368][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 465.998402][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 465.998430][ C1] ? lock_acquire+0x106/0x350 [ 465.998459][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 465.998484][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 465.998511][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 465.998544][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 465.998577][ C1] napi_complete_done+0x299/0x730 [ 465.998607][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 465.998635][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 465.998666][ C1] gro_cell_poll+0x5a9/0x5d0 [ 465.998699][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 465.998734][ C1] __napi_poll+0xae/0x340 [ 465.998760][ C1] ? skb_defer_free_flush+0x233/0x260 [ 465.998789][ C1] net_rx_action+0x627/0xf70 [ 465.998818][ C1] ? lock_acquire+0x106/0x350 [ 465.998854][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 465.998891][ C1] ? sched_clock+0x3f/0x60 [ 465.998924][ C1] handle_softirqs+0x22a/0x840 [ 465.998955][ C1] ? do_softirq+0x76/0xd0 [ 465.998986][ C1] ? tun_rx_batched+0x185/0x790 [ 465.999005][ C1] do_softirq+0x76/0xd0 [ 465.999032][ C1] [ 465.999039][ C1] [ 465.999046][ C1] __local_bh_enable_ip+0xf8/0x130 [ 465.999074][ C1] ? tun_rx_batched+0x185/0x790 [ 465.999091][ C1] tun_rx_batched+0x617/0x790 [ 465.999112][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 465.999129][ C1] ? tun_get_user+0x2787/0x43e0 [ 465.999160][ C1] ? tun_get_user+0x2787/0x43e0 [ 465.999190][ C1] ? tun_get_user+0x2394/0x43e0 [ 465.999221][ C1] ? tun_get_user+0x2394/0x43e0 [ 465.999250][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 465.999281][ C1] tun_get_user+0x2bbc/0x43e0 [ 465.999314][ C1] ? tun_get_user+0x2787/0x43e0 [ 465.999348][ C1] ? aa_file_perm+0x192/0x15e0 [ 465.999372][ C1] ? aa_file_perm+0x50e/0x15e0 [ 465.999393][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 465.999424][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 465.999456][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 465.999481][ C1] ? preempt_schedule_common+0x82/0xd0 [ 465.999510][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 465.999532][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 465.999554][ C1] ? tun_get+0x1c/0x2f0 [ 465.999583][ C1] ? tun_get+0x1c/0x2f0 [ 465.999614][ C1] ? tun_get+0x1c/0x2f0 [ 465.999643][ C1] ? tun_get+0x1c/0x2f0 [ 465.999673][ C1] tun_chr_write_iter+0x113/0x200 [ 465.999704][ C1] vfs_write+0x61d/0xb90 [ 465.999738][ C1] ? __pfx_vfs_write+0x10/0x10 [ 465.999762][ C1] ? __pfx_do_futex+0x10/0x10 [ 465.999790][ C1] ksys_write+0x150/0x270 [ 465.999814][ C1] ? __pfx_ksys_write+0x10/0x10 [ 465.999842][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.999863][ C1] do_syscall_64+0x15f/0xf80 [ 465.999889][ C1] ? trace_irq_disable+0x3b/0x140 [ 465.999915][ C1] ? clear_bhb_loop+0x40/0x90 [ 465.999937][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.999956][ C1] RIP: 0033:0x7efe8059cdd9 [ 465.999974][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.999992][ C1] RSP: 002b:00007efe81451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.000015][ C1] RAX: ffffffffffffffda RBX: 00007efe80815fa0 RCX: 00007efe8059cdd9 [ 466.000030][ C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000006 [ 466.000044][ C1] RBP: 00007efe80632d69 R08: 0000000000000000 R09: 0000000000000000 [ 466.000057][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.000069][ C1] R13: 00007efe80816038 R14: 00007efe80815fa0 R15: 00007ffffe2a0b38 [ 466.000094][ C1] [ 466.000101][ C1] [ 466.473080][ C1] The buggy address belongs to the physical page: [ 466.479483][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17541b [ 466.488316][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 466.495510][ C1] raw: 057ff00000000000 ffffea0005d506c8 ffffea0005d506c8 0000000000000000 [ 466.504075][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 466.512638][ C1] page dumped because: kasan: bad access detected [ 466.519040][ C1] page_owner info is not present (never set?) [ 466.525081][ C1] [ 466.527385][ C1] Memory state around the buggy address: [ 466.532995][ C1] ffff88817541b300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 466.541040][ C1] ffff88817541b380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 466.549082][ C1] >ffff88817541b400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 466.557122][ C1] ^ [ 466.564818][ C1] ffff88817541b480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 466.572859][ C1] ffff88817541b500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 466.580897][ C1] ================================================================== [ 466.589079][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 466.596280][ C1] CPU: 1 UID: 0 PID: 21273 Comm: syz.4.3821 Not tainted syzkaller #0 PREEMPT(full) [ 466.605658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.615732][ C1] Call Trace: [ 466.619017][ C1] [ 466.621865][ C1] vpanic+0x56c/0xa60 [ 466.625860][ C1] ? __pfx_vpanic+0x10/0x10 [ 466.630380][ C1] ? irqentry_exit+0x218/0x730 [ 466.635173][ C1] panic+0xc5/0xd0 [ 466.638904][ C1] ? __pfx_panic+0x10/0x10 [ 466.643333][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 466.648992][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 466.654636][ C1] check_panic_on_warn+0x89/0xb0 [ 466.659588][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 466.665231][ C1] end_report+0x73/0x170 [ 466.669476][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 466.675113][ C1] kasan_report+0x128/0x150 [ 466.679615][ C1] ? __pskb_pull_tail+0x115d/0x17b0 [ 466.684808][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 466.690443][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 466.695901][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 466.701619][ C1] ? lock_acquire+0x106/0x350 [ 466.706296][ C1] ? unwind_next_frame+0xa6/0x2550 [ 466.711399][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 466.717467][ C1] ? kernel_text_address+0xa5/0xe0 [ 466.722582][ C1] ? __kernel_text_address+0xd/0x30 [ 466.727773][ C1] ? unwind_get_return_address+0x4d/0x90 [ 466.733412][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 466.739399][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.744358][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 466.750870][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 466.757027][ C1] ? lock_acquire+0x106/0x350 [ 466.761708][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 466.768039][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 466.774713][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 466.779823][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 466.784938][ C1] napi_complete_done+0x299/0x730 [ 466.789958][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 466.795503][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 466.800287][ C1] gro_cell_poll+0x5a9/0x5d0 [ 466.804904][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 466.809703][ C1] __napi_poll+0xae/0x340 [ 466.814027][ C1] ? skb_defer_free_flush+0x233/0x260 [ 466.819395][ C1] net_rx_action+0x627/0xf70 [ 466.823985][ C1] ? lock_acquire+0x106/0x350 [ 466.828668][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 466.833782][ C1] ? sched_clock+0x3f/0x60 [ 466.838195][ C1] handle_softirqs+0x22a/0x840 [ 466.842959][ C1] ? do_softirq+0x76/0xd0 [ 466.847283][ C1] ? tun_rx_batched+0x185/0x790 [ 466.852122][ C1] do_softirq+0x76/0xd0 [ 466.856279][ C1] [ 466.859198][ C1] [ 466.862121][ C1] __local_bh_enable_ip+0xf8/0x130 [ 466.867237][ C1] ? tun_rx_batched+0x185/0x790 [ 466.872078][ C1] tun_rx_batched+0x617/0x790 [ 466.876750][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 466.881933][ C1] ? tun_get_user+0x2787/0x43e0 [ 466.886781][ C1] ? tun_get_user+0x2787/0x43e0 [ 466.891626][ C1] ? tun_get_user+0x2394/0x43e0 [ 466.896474][ C1] ? tun_get_user+0x2394/0x43e0 [ 466.901319][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 466.906598][ C1] tun_get_user+0x2bbc/0x43e0 [ 466.911277][ C1] ? tun_get_user+0x2787/0x43e0 [ 466.916128][ C1] ? aa_file_perm+0x192/0x15e0 [ 466.920884][ C1] ? aa_file_perm+0x50e/0x15e0 [ 466.925636][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 466.930657][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.935597][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 466.940963][ C1] ? preempt_schedule_common+0x82/0xd0 [ 466.946419][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 466.951524][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 466.956979][ C1] ? tun_get+0x1c/0x2f0 [ 466.961133][ C1] ? tun_get+0x1c/0x2f0 [ 466.965286][ C1] ? tun_get+0x1c/0x2f0 [ 466.969445][ C1] ? tun_get+0x1c/0x2f0 [ 466.974143][ C1] tun_chr_write_iter+0x113/0x200 [ 466.979172][ C1] vfs_write+0x61d/0xb90 [ 466.983409][ C1] ? __pfx_vfs_write+0x10/0x10 [ 466.988163][ C1] ? __pfx_do_futex+0x10/0x10 [ 466.992834][ C1] ksys_write+0x150/0x270 [ 466.997155][ C1] ? __pfx_ksys_write+0x10/0x10 [ 467.002000][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.008053][ C1] do_syscall_64+0x15f/0xf80 [ 467.012641][ C1] ? trace_irq_disable+0x3b/0x140 [ 467.017659][ C1] ? clear_bhb_loop+0x40/0x90 [ 467.022330][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.028209][ C1] RIP: 0033:0x7efe8059cdd9 [ 467.032612][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.052205][ C1] RSP: 002b:00007efe81451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.060607][ C1] RAX: ffffffffffffffda RBX: 00007efe80815fa0 RCX: 00007efe8059cdd9 [ 467.068565][ C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000006 [ 467.076531][ C1] RBP: 00007efe80632d69 R08: 0000000000000000 R09: 0000000000000000 [ 467.084492][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.092456][ C1] R13: 00007efe80816038 R14: 00007efe80815fa0 R15: 00007ffffe2a0b38 [ 467.100430][ C1] [ 467.103598][ C1] Kernel Offset: disabled [ 467.107904][ C1] Rebooting in 86400 seconds..